Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a383030303a3a2f33332d3333203d3e20323730353434.roa
File: 323830343a366439633a383030303a3a2f33332d3333203d3e20323730353434.roa (raw, json)
Hash identifier: Erpolqw8LO8IPO58hGFMH04I8bgQWiN9Yw7oclJ9j+A=
Subject key identifier: 22:37:7D:41:47:DA:BB:A3:F6:33:24:A9:12:4F:74:1F:2E:03:2E:1E
Certificate issuer: /CN=27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76
Certificate serial: 2ADA536C496404D8C445499F735D73A6DAD31153
Authority key identifier: 27:DA:7F:E0:DD:7C:FD:2D:B4:42:1C:E4:84:B9:E9:A0:CD:A1:EE:76
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a383030303a3a2f33332d3333203d3e20323730353434.roa
Signing time: Thu 20 Feb 2025 13:41:55 +0000
ROA not before: Thu 20 Feb 2025 13:36:55 +0000
ROA not after: Thu 19 Feb 2026 13:41:55 +0000
asID: 270544
IP address blocks: 2804:6d9c:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:da:53:6c:49:64:04:d8:c4:45:49:9f:73:5d:73:a6:da:d3:11:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76
Validity
Not Before: Feb 20 13:36:55 2025 GMT
Not After : Feb 19 13:41:55 2026 GMT
Subject: CN=22377D4147DABBA3F63324A9124F741F2E032E1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:78:08:b8:bc:4e:9f:e0:bf:53:94:81:83:e1:
3d:a8:9b:0c:b9:a6:cd:08:21:c0:bf:73:56:69:aa:
96:80:c5:ca:8c:1d:1d:cf:6f:eb:39:36:c6:eb:d0:
e4:71:17:36:77:13:a2:3e:98:d3:8e:4f:bc:4c:c2:
9f:62:b3:11:7c:5b:d6:e3:0b:87:43:92:d8:9c:90:
11:e3:20:5d:87:c4:da:d0:76:57:0e:f4:1c:19:99:
85:df:33:06:ef:e9:94:1e:0c:5b:6d:3b:85:82:fc:
72:d0:0c:fb:38:d4:cf:1d:0c:71:ed:ba:92:c3:b7:
09:fc:bf:36:d5:80:c2:bb:ea:b7:64:bb:2a:dc:f2:
23:82:41:a1:00:2b:e7:ba:d3:02:85:2a:01:98:8e:
46:d8:c8:62:9a:22:49:aa:9b:59:7f:75:b1:8f:79:
ef:e7:c2:72:db:12:94:44:c4:b0:8d:87:f9:88:f0:
1a:e1:b9:db:8b:ae:b9:d0:cf:e9:ce:dc:d3:1d:42:
ca:c7:aa:de:cd:03:58:29:af:3b:c5:76:da:cc:53:
49:57:93:cd:02:90:fd:4c:c1:85:15:02:54:80:88:
49:d3:21:74:fb:63:2c:30:e5:98:2f:be:4f:e3:15:
63:cb:5d:9a:54:11:03:ab:48:34:83:9b:58:42:83:
5e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:37:7D:41:47:DA:BB:A3:F6:33:24:A9:12:4F:74:1F:2E:03:2E:1E
X509v3 Authority Key Identifier:
keyid:27:DA:7F:E0:DD:7C:FD:2D:B4:42:1C:E4:84:B9:E9:A0:CD:A1:EE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a383030303a3a2f33332d3333203d3e20323730353434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6d9c:8000::/33
Signature Algorithm: sha256WithRSAEncryption
9b:70:e2:3c:4d:7f:fb:ae:cc:81:3f:58:cc:6c:9f:8c:7c:e0:
a7:da:b2:67:93:eb:82:20:60:d1:cd:33:c9:de:f9:ae:97:ea:
be:75:33:87:f7:bd:c8:29:82:9b:41:2a:44:98:8d:b6:ee:b9:
2b:b1:68:a0:de:1e:78:db:a7:51:e6:9e:37:35:74:63:a9:14:
ea:7e:79:a5:92:55:1a:0e:68:b5:04:56:1d:ee:13:fe:24:e6:
38:4a:6e:d8:0e:7d:41:5b:a4:61:45:cf:e9:c4:d9:46:e0:eb:
fb:c7:8e:51:6e:72:c2:e0:77:86:10:12:8a:e4:d0:75:3e:bb:
aa:93:84:50:24:15:1d:bd:e5:de:84:ae:48:73:b5:63:43:7b:
4c:5a:2f:f7:40:5f:c2:96:55:aa:76:9a:fa:98:07:6e:1e:b7:
1d:e9:63:14:60:cd:ba:6c:9c:08:53:59:cb:ea:65:06:7b:ef:
de:89:c2:18:77:42:37:3b:bd:76:ea:a5:92:61:35:5b:25:9d:
33:bd:ed:96:62:cd:a0:a4:11:25:ca:62:64:65:a8:c6:2f:c0:
d5:0a:91:35:ac:31:bb:c6:64:e8:c0:10:88:0b:61:53:75:6e:
e5:f8:06:79:5f:f4:62:91:14:c2:e2:90:fe:fa:08:c1:ac:1f:
44:5c:8c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:59:39 2025 by rpki-client