Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CxSuT3Yp7f46T6KGTj3RRygzec7yfXpycu8SPHP1MkjP/0/323830343a393130633a3a2f33322d3438203d3e20323734363135.roa
File: 323830343a393130633a3a2f33322d3438203d3e20323734363135.roa (raw, json)
Hash identifier: x9hIPv7tZOzOcB/WVLlZwt+csDnsuI2mftOsyh0XE9k=
Subject key identifier: EE:E5:04:5F:C1:BD:6E:30:AC:D9:08:D3:F5:72:CA:D8:61:27:B0:D7
Certificate issuer: /CN=D0403F4323AC053D7F7774E45B7604EBFC94DA8D
Certificate serial: 3CD345011AF8EAA7F901B6F96AE143ADFCFC99A6
Authority key identifier: D0:40:3F:43:23:AC:05:3D:7F:77:74:E4:5B:76:04:EB:FC:94:DA:8D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0403F4323AC053D7F7774E45B7604EBFC94DA8D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CxSuT3Yp7f46T6KGTj3RRygzec7yfXpycu8SPHP1MkjP/0/323830343a393130633a3a2f33322d3438203d3e20323734363135.roa
Signing time: Sun 23 Feb 2025 05:43:36 +0000
ROA not before: Sun 23 Feb 2025 05:38:36 +0000
ROA not after: Sun 22 Feb 2026 05:43:36 +0000
asID: 274615
IP address blocks: 2804:910c::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:d3:45:01:1a:f8:ea:a7:f9:01:b6:f9:6a:e1:43:ad:fc:fc:99:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0403F4323AC053D7F7774E45B7604EBFC94DA8D
Validity
Not Before: Feb 23 05:38:36 2025 GMT
Not After : Feb 22 05:43:36 2026 GMT
Subject: CN=EEE5045FC1BD6E30ACD908D3F572CAD86127B0D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8e:68:31:8c:87:e6:ee:f1:c5:1b:a9:70:c2:
91:8a:3a:dc:a3:af:a4:f5:d2:1d:13:ac:d0:85:e0:
c3:a4:05:c6:cd:5a:01:45:56:14:a1:79:fc:ff:2a:
a7:0e:4b:33:29:4e:98:25:e4:f6:27:f3:5c:90:fe:
53:0a:f7:a1:9c:58:a8:9a:ae:a9:4a:ef:81:ac:a6:
6d:24:8e:92:d0:59:e8:87:37:51:b9:4b:ee:21:aa:
70:db:83:a5:3d:c7:48:8e:cb:97:4a:95:2d:15:00:
2c:42:1f:22:cd:15:b6:7f:a2:0e:05:b7:a9:f4:16:
09:0f:04:bb:8a:17:46:1e:13:0c:17:ca:e2:b1:00:
a1:58:63:f7:53:e0:09:be:39:fa:31:11:59:27:7a:
42:14:5c:d7:92:c5:69:a0:02:d7:82:14:e1:0d:79:
3a:92:13:26:7e:d0:4e:80:a5:a1:38:9b:c6:7e:d6:
c1:55:4b:db:43:98:f5:50:28:75:c1:41:35:0b:a2:
12:d6:f1:ab:fa:ce:a6:54:e0:ea:21:65:1b:d5:b8:
c6:1a:7f:57:e9:aa:58:15:50:8e:47:88:71:23:ff:
ef:5d:70:03:93:e5:0a:fd:c4:d0:10:ef:02:04:df:
dd:75:e8:6f:e1:47:9c:cb:75:7a:fb:83:8a:00:fa:
8b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E5:04:5F:C1:BD:6E:30:AC:D9:08:D3:F5:72:CA:D8:61:27:B0:D7
X509v3 Authority Key Identifier:
keyid:D0:40:3F:43:23:AC:05:3D:7F:77:74:E4:5B:76:04:EB:FC:94:DA:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CxSuT3Yp7f46T6KGTj3RRygzec7yfXpycu8SPHP1MkjP/0/D0403F4323AC053D7F7774E45B7604EBFC94DA8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0403F4323AC053D7F7774E45B7604EBFC94DA8D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxSuT3Yp7f46T6KGTj3RRygzec7yfXpycu8SPHP1MkjP/0/323830343a393130633a3a2f33322d3438203d3e20323734363135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:910c::/32
Signature Algorithm: sha256WithRSAEncryption
1a:39:4b:87:7c:a7:1e:39:27:58:38:19:7f:b9:77:00:11:12:
2a:d5:f1:e8:04:cc:d5:ca:d8:bd:75:3f:ac:44:f5:f6:b5:57:
f7:98:a6:09:87:85:cf:2f:cb:5b:73:a5:3d:af:6e:8f:a7:bd:
e8:b9:a4:87:6e:13:40:e6:7d:68:3c:3f:05:cf:e5:5c:95:e2:
99:35:ec:1e:3c:db:ef:4e:a3:9b:f9:d3:89:4c:6e:37:46:63:
cf:99:a8:ba:6b:6f:5c:97:cd:ba:d6:35:71:8c:8c:f4:7f:1d:
10:f3:7d:0c:5d:ac:d8:12:94:df:34:b0:cd:b7:f8:cf:92:12:
b5:a0:2f:ff:14:07:0f:30:df:87:5e:f9:fa:d5:c5:21:d0:44:
27:13:9a:e6:98:ad:46:d4:31:ab:c5:36:a0:da:2c:0d:c3:3d:
8a:8f:f3:85:58:35:64:ac:c0:d6:90:23:29:70:11:10:b3:74:
f7:cd:d2:06:8f:92:85:b1:30:8d:9e:ee:c6:8f:8f:60:98:66:
71:3d:6d:3a:fb:0e:5c:d2:01:d1:35:1d:4a:c2:00:59:3f:6c:
2e:4d:b3:27:e5:f6:10:e2:88:74:87:db:ac:1b:e0:e2:2a:ed:
2b:1a:a3:4b:a1:3e:9f:36:e9:84:9e:95:7f:c1:05:38:78:82:
61:e6:a7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:12:08 2025 by rpki-client