Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CxSuT3Yp7f46T6KGTj3RRygzec7yfXpycu8SPHP1MkjP/0/323830343a393130633a3a2f33322d3333203d3e20323734363135.roa
File: 323830343a393130633a3a2f33322d3333203d3e20323734363135.roa (raw, json)
Hash identifier: EYnSFj4Q3zhTpjDEe/A3g5JypAepq3n16wqR17JRiE4=
Subject key identifier: 87:D4:C7:3D:C1:46:A2:73:97:02:14:36:C7:DB:AA:5D:E1:CE:43:DD
Certificate issuer: /CN=D0403F4323AC053D7F7774E45B7604EBFC94DA8D
Certificate serial: 3AC35ADD6B1F0D098D1F84C707EBBCB74A2EFB30
Authority key identifier: D0:40:3F:43:23:AC:05:3D:7F:77:74:E4:5B:76:04:EB:FC:94:DA:8D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0403F4323AC053D7F7774E45B7604EBFC94DA8D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CxSuT3Yp7f46T6KGTj3RRygzec7yfXpycu8SPHP1MkjP/0/323830343a393130633a3a2f33322d3333203d3e20323734363135.roa
Signing time: Mon 17 Feb 2025 22:44:58 +0000
ROA not before: Mon 17 Feb 2025 22:39:58 +0000
ROA not after: Mon 16 Feb 2026 22:44:58 +0000
asID: 274615
IP address blocks: 2804:910c::/32 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:c3:5a:dd:6b:1f:0d:09:8d:1f:84:c7:07:eb:bc:b7:4a:2e:fb:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0403F4323AC053D7F7774E45B7604EBFC94DA8D
Validity
Not Before: Feb 17 22:39:58 2025 GMT
Not After : Feb 16 22:44:58 2026 GMT
Subject: CN=87D4C73DC146A27397021436C7DBAA5DE1CE43DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5d:ca:50:78:fb:41:8f:db:c6:eb:b4:70:40:
ee:5c:1a:0d:26:90:20:5a:e4:14:66:a1:9d:bb:ad:
d7:00:33:8d:4e:09:6b:c6:06:26:7e:57:11:53:d7:
96:bb:90:f2:d2:36:28:71:e6:eb:5a:19:1b:3a:d1:
12:71:7e:75:28:d4:f8:67:fa:cf:db:c6:a2:fd:0c:
36:1f:85:7b:ab:4d:b7:58:eb:d0:d1:b9:a6:c1:76:
30:f5:ba:14:9d:6a:1c:29:eb:75:8a:7d:d2:9b:b9:
98:10:96:2f:0c:ba:81:01:eb:f0:b9:b2:e0:8b:42:
c8:c1:6c:10:5b:6e:0a:ce:2a:78:cb:1f:53:f4:c8:
b5:14:5c:b7:66:3c:f2:5d:50:a4:3b:7b:50:be:17:
4f:44:da:b4:c9:5f:8f:27:26:38:a8:af:a7:91:1c:
f0:53:72:73:9f:cc:e4:cc:db:4c:13:6f:06:7b:3b:
05:89:2d:0f:de:b1:f7:8e:18:fe:3a:b5:c1:3c:bc:
f9:92:9e:5b:a9:b7:65:96:af:ff:7f:d0:10:6e:72:
d7:96:ff:d0:26:60:c1:f5:39:2f:20:92:42:86:ee:
29:ca:5d:ec:f0:f8:1c:ca:58:5c:7d:79:b6:c1:5c:
61:61:1d:2a:9e:6c:dc:19:e7:06:64:cd:74:c1:77:
38:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D4:C7:3D:C1:46:A2:73:97:02:14:36:C7:DB:AA:5D:E1:CE:43:DD
X509v3 Authority Key Identifier:
keyid:D0:40:3F:43:23:AC:05:3D:7F:77:74:E4:5B:76:04:EB:FC:94:DA:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CxSuT3Yp7f46T6KGTj3RRygzec7yfXpycu8SPHP1MkjP/0/D0403F4323AC053D7F7774E45B7604EBFC94DA8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0403F4323AC053D7F7774E45B7604EBFC94DA8D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxSuT3Yp7f46T6KGTj3RRygzec7yfXpycu8SPHP1MkjP/0/323830343a393130633a3a2f33322d3333203d3e20323734363135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:910c::/32
Signature Algorithm: sha256WithRSAEncryption
93:77:29:91:4a:b0:38:84:75:4f:aa:37:c5:89:f4:df:df:a4:
95:7d:ec:21:18:82:74:a1:5f:ab:13:f5:8d:5b:04:d5:e4:3d:
16:ec:6e:89:50:79:76:7c:37:aa:bc:3a:cb:68:c5:5b:2a:25:
91:fb:90:5d:a7:33:31:27:d3:8e:52:df:89:1e:c9:e2:2f:c4:
72:d4:60:e4:e7:6a:a9:23:1c:a6:29:5b:1f:aa:e7:26:7f:18:
38:13:ef:3e:a1:bd:12:74:60:a9:f3:09:2c:c4:56:7b:69:04:
17:f4:d3:5d:92:a3:17:0e:66:53:b7:5c:ac:1c:6f:7d:0b:ac:
02:95:33:fc:0d:35:05:f1:d2:75:8c:0b:d4:45:f7:31:c3:7a:
f0:48:70:c3:25:dd:9b:83:99:aa:01:03:26:bc:df:5c:4b:57:
f9:93:28:61:59:0e:a1:92:6d:86:8c:4e:f8:e1:f4:54:7d:78:
4d:d7:ea:a2:21:2b:8b:e7:f1:55:a7:5a:13:2f:c4:c8:53:58:
07:6f:3e:31:a2:7d:bb:d9:75:60:66:16:36:8b:09:73:23:97:
d3:5f:3a:bb:f9:f8:5c:76:e6:38:ba:32:b1:ef:04:27:61:e2:
5e:3f:54:42:21:e5:ce:a6:e0:3f:32:57:0e:fd:dd:68:77:b7:
62:56:2c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:14:05 2025 by rpki-client