Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/323830343a3133383a613030303a3a2f34372d3437203d3e203131343332.roa
File: 323830343a3133383a613030303a3a2f34372d3437203d3e203131343332.roa (raw, json)
Hash identifier: b/68bMqHpuJv5zeyCMQAw5lAKJ02KLusxQHRET+26Vc=
Subject key identifier: 12:7D:2F:13:A9:E3:2D:3E:BA:FE:76:94:E3:4B:1B:D1:E1:1E:98:33
Certificate issuer: /CN=D4011B3B71F651F115EC7A23D76BF65D250F0114
Certificate serial: 11FB3EA654ACAC831D88AB783643DA720DF475C4
Authority key identifier: D4:01:1B:3B:71:F6:51:F1:15:EC:7A:23:D7:6B:F6:5D:25:0F:01:14
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4011B3B71F651F115EC7A23D76BF65D250F0114.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/323830343a3133383a613030303a3a2f34372d3437203d3e203131343332.roa
Signing time: Mon 17 Mar 2025 14:47:00 +0000
ROA not before: Mon 17 Mar 2025 14:42:00 +0000
ROA not after: Mon 16 Mar 2026 14:47:00 +0000
asID: 11432
IP address blocks: 2804:138:a000::/47 maxlen: 47
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:fb:3e:a6:54:ac:ac:83:1d:88:ab:78:36:43:da:72:0d:f4:75:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4011B3B71F651F115EC7A23D76BF65D250F0114
Validity
Not Before: Mar 17 14:42:00 2025 GMT
Not After : Mar 16 14:47:00 2026 GMT
Subject: CN=127D2F13A9E32D3EBAFE7694E34B1BD1E11E9833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c7:6f:29:ad:32:64:4f:34:78:e3:08:a6:c0:
b6:98:2c:33:e5:99:c7:41:a7:59:d0:ad:75:5a:18:
68:20:5a:58:21:3c:80:39:0a:f3:53:d4:64:fc:26:
ea:5c:52:2b:07:05:e3:8e:c8:32:13:87:fd:c9:cf:
d6:fe:57:47:96:20:53:f0:dd:fa:b9:76:61:92:ad:
84:18:c8:a3:3f:37:2d:db:d7:c5:ab:da:ea:0f:2b:
3b:18:ce:7a:c3:fc:d6:2b:c2:64:b2:f6:ec:a7:46:
97:dd:fb:00:57:0c:89:46:e3:0c:b2:9c:d4:3e:9c:
67:b4:21:fc:22:4f:5f:67:8f:93:ac:2c:e6:d0:04:
71:1d:1b:3a:40:b2:5e:fa:15:7f:51:00:0a:f0:1d:
85:dd:97:b0:51:90:c7:0f:02:e8:8b:9a:5b:46:5a:
e3:c6:e8:af:89:7e:27:aa:55:4c:de:20:a7:5c:13:
9c:c3:f5:5c:f4:f4:bf:b4:17:92:a9:19:f9:55:df:
d5:f8:5f:36:f8:2d:c7:24:80:83:1c:39:28:6c:64:
14:93:ea:d7:e0:64:08:27:01:de:6b:d0:ed:18:d5:
00:95:41:da:84:5c:ff:02:44:2f:6a:45:4e:ea:b9:
6c:f7:53:01:4e:59:7f:21:f1:77:86:2e:db:8c:7c:
39:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7D:2F:13:A9:E3:2D:3E:BA:FE:76:94:E3:4B:1B:D1:E1:1E:98:33
X509v3 Authority Key Identifier:
keyid:D4:01:1B:3B:71:F6:51:F1:15:EC:7A:23:D7:6B:F6:5D:25:0F:01:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/D4011B3B71F651F115EC7A23D76BF65D250F0114.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4011B3B71F651F115EC7A23D76BF65D250F0114.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/323830343a3133383a613030303a3a2f34372d3437203d3e203131343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:138:a000::/47
Signature Algorithm: sha256WithRSAEncryption
b3:c4:e3:26:8d:ad:c9:af:1f:8a:6d:3e:96:0e:ca:e6:de:b2:
59:61:4d:ed:90:68:66:fe:91:c5:eb:14:9f:34:4e:5a:09:46:
85:cc:21:ac:97:50:d2:b1:98:7a:36:79:42:b7:f9:c7:c2:8d:
2b:75:92:15:cb:14:23:30:76:96:3d:45:ce:f9:0b:a4:d3:16:
56:81:2e:6c:c6:3a:0d:a1:24:66:2d:22:6e:5b:b2:c3:7d:c2:
be:d6:b5:85:13:4e:ba:d5:44:c2:5d:16:09:04:95:6a:6f:69:
34:a6:13:df:7c:6a:d5:c4:8d:55:cd:42:1b:7a:63:68:db:43:
6a:a7:0d:2a:e5:5b:7c:c3:03:cf:be:79:87:cd:98:ce:80:7a:
dd:11:69:49:ac:f8:61:0d:85:d6:7b:de:1d:32:38:a0:f4:bf:
f6:ee:15:af:e4:76:40:d7:d2:1b:97:56:fb:37:e6:84:eb:c9:
1a:d2:31:f8:1c:d5:52:1d:f5:cb:7a:44:80:8e:f6:dc:5f:d1:
bb:89:f8:8d:fc:cb:66:55:95:73:20:03:13:66:00:20:e0:33:
bc:6b:79:9a:b8:3a:55:80:ff:2c:bb:f1:4d:af:b2:47:e4:3c:
b5:fd:c8:24:b7:30:27:a4:3e:41:99:af:dd:d5:85:2e:af:9a:
3c:e5:69:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:41:36 2025 by rpki-client