Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/1/323830343a383136633a383030303a3a2f33332d3333203d3e20323732343533.roa
File: 323830343a383136633a383030303a3a2f33332d3333203d3e20323732343533.roa (raw, json)
Hash identifier: GDo7k273/ACBuqVhNjgL96z8KfJKtKPVjS5OubrLJ9M=
Subject key identifier: 4E:EF:86:75:A8:C9:7C:1D:E8:9E:7F:F7:03:D7:25:77:48:2D:9B:A2
Certificate issuer: /CN=8ABC0347676D4CF73560AAEDBC382C803390BA35
Certificate serial: 0A4F0FB357FF2F203627C97EF12955F6A9FDBC77
Authority key identifier: 8A:BC:03:47:67:6D:4C:F7:35:60:AA:ED:BC:38:2C:80:33:90:BA:35
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC0347676D4CF73560AAEDBC382C803390BA35.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/1/323830343a383136633a383030303a3a2f33332d3333203d3e20323732343533.roa
Signing time: Wed 05 Mar 2025 19:00:00 +0000
ROA not before: Wed 05 Mar 2025 18:55:00 +0000
ROA not after: Wed 04 Mar 2026 19:00:00 +0000
asID: 272453
IP address blocks: 2804:816c:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:4f:0f:b3:57:ff:2f:20:36:27:c9:7e:f1:29:55:f6:a9:fd:bc:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ABC0347676D4CF73560AAEDBC382C803390BA35
Validity
Not Before: Mar 5 18:55:00 2025 GMT
Not After : Mar 4 19:00:00 2026 GMT
Subject: CN=4EEF8675A8C97C1DE89E7FF703D72577482D9BA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e3:ae:dd:fd:bf:d1:e7:c8:00:f6:a7:24:18:
df:30:fc:ec:4a:28:be:12:28:cc:57:a6:93:f3:1f:
e5:bf:c6:f5:80:7d:96:c3:94:77:14:82:65:58:f9:
40:55:f5:07:a7:68:a1:e4:e5:58:a5:de:36:4e:9e:
5b:b0:eb:72:95:54:d1:5a:7d:96:71:09:d2:79:d0:
3e:bc:09:ad:27:20:b0:07:6c:6f:73:96:e5:9d:3d:
e7:a4:f9:96:3e:e9:61:79:55:81:47:5f:80:54:d2:
44:5e:e8:64:e6:8d:73:b9:09:46:92:b9:56:09:92:
22:87:01:81:97:35:da:7c:d2:56:30:d4:52:9a:b6:
9c:f3:27:70:c6:ec:1b:a0:9a:4e:e7:bc:18:80:45:
18:29:8a:62:72:f4:98:11:69:db:f4:90:f2:68:e6:
95:8d:08:dc:82:89:57:95:9f:e8:aa:99:1e:ae:fe:
58:3e:36:02:5d:08:29:ae:92:e9:92:40:c3:01:43:
fb:5f:9f:8f:38:aa:77:6a:ce:96:9b:55:bb:09:44:
2d:ac:15:ce:15:4c:d0:46:45:44:53:eb:ef:c6:1c:
51:ee:1a:f1:9a:7e:e1:22:1e:b9:66:6a:16:a0:df:
49:32:09:76:02:32:65:e2:68:59:52:01:31:e5:d9:
5d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:EF:86:75:A8:C9:7C:1D:E8:9E:7F:F7:03:D7:25:77:48:2D:9B:A2
X509v3 Authority Key Identifier:
keyid:8A:BC:03:47:67:6D:4C:F7:35:60:AA:ED:BC:38:2C:80:33:90:BA:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/1/8ABC0347676D4CF73560AAEDBC382C803390BA35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC0347676D4CF73560AAEDBC382C803390BA35.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/1/323830343a383136633a383030303a3a2f33332d3333203d3e20323732343533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:816c:8000::/33
Signature Algorithm: sha256WithRSAEncryption
dc:81:cb:d4:ad:f6:90:0a:f2:8b:f3:26:ac:2e:95:3f:d6:a5:
aa:bd:f2:01:1c:72:77:73:ff:03:06:21:c7:ae:aa:4a:a5:24:
75:fc:27:2d:0f:31:e7:a8:cb:0c:2e:18:0c:a1:33:19:d1:6f:
66:fa:0b:fd:5c:b0:69:e8:fa:b7:18:ce:e3:8c:b4:7a:e3:42:
5f:03:8e:04:8d:da:57:5b:f7:c2:69:b0:a3:f8:cc:5a:74:3b:
d1:b5:cd:ba:79:58:3d:da:72:4e:e8:9c:31:13:9c:24:94:52:
bf:e1:88:19:d2:f6:d3:b2:37:54:18:0b:a5:c2:a2:32:47:fd:
cd:b2:9e:c2:c2:84:b7:36:96:56:6b:ac:46:94:00:43:98:80:
eb:27:88:cc:cf:cc:cc:d1:d5:1b:5b:aa:a0:97:00:35:c9:ef:
9b:88:f7:d7:af:52:23:22:d0:a7:4d:02:9c:f9:a2:77:5d:9f:
8b:6e:26:d5:f5:fd:89:89:af:b1:be:c1:32:29:d3:92:bb:85:
72:ca:b8:6c:49:87:40:4a:c4:f4:cb:03:10:b2:03:fc:86:79:
90:56:5e:68:47:ae:cb:e8:cf:45:be:4e:a5:4e:f0:e4:36:1e:
1d:0d:38:64:4e:cd:38:d0:00:62:b3:eb:de:67:e6:4b:ed:c4:
4c:3c:52:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:26:53 2025 by rpki-client