Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/323830343a326265303a3a2f33322d3332203d3e20323632353033.roa
File: 323830343a326265303a3a2f33322d3332203d3e20323632353033.roa (raw, json)
Hash identifier: GhYFvVWhOdHhof9EKpEZPMbMMoIMD2S/pa6f8s1E9XI=
Subject key identifier: 8B:12:B8:4B:6C:32:77:04:51:C4:15:22:07:D7:76:79:BF:7E:A8:B7
Certificate issuer: /CN=910C13ACE16F58034FB65130B4A6FFAA2E062704
Certificate serial: 2FC146D2450CAFE3E4C60D4FFE27B3176858F662
Authority key identifier: 91:0C:13:AC:E1:6F:58:03:4F:B6:51:30:B4:A6:FF:AA:2E:06:27:04
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910C13ACE16F58034FB65130B4A6FFAA2E062704.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/323830343a326265303a3a2f33322d3332203d3e20323632353033.roa
Signing time: Tue 01 Apr 2025 15:16:02 +0000
ROA not before: Tue 01 Apr 2025 15:11:02 +0000
ROA not after: Tue 31 Mar 2026 15:16:02 +0000
asID: 262503
IP address blocks: 2804:2be0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:c1:46:d2:45:0c:af:e3:e4:c6:0d:4f:fe:27:b3:17:68:58:f6:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=910C13ACE16F58034FB65130B4A6FFAA2E062704
Validity
Not Before: Apr 1 15:11:02 2025 GMT
Not After : Mar 31 15:16:02 2026 GMT
Subject: CN=8B12B84B6C32770451C4152207D77679BF7EA8B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5b:92:33:62:de:7c:4c:98:59:8f:0d:07:7f:
2b:b2:6d:da:0c:52:be:46:fd:87:25:37:b2:3b:52:
9d:75:85:a7:28:e7:b4:87:3f:39:cd:20:78:ca:23:
ec:f3:d0:ea:10:50:b2:ac:d2:53:77:d2:c0:e0:80:
f2:53:9f:17:1c:4f:8b:e6:ca:20:fa:83:1c:78:ab:
93:6e:25:23:35:d0:de:f8:b7:df:76:28:ca:55:8d:
5a:76:ba:84:86:e3:cc:0e:65:bf:46:ee:85:a7:aa:
63:74:71:de:35:b0:e8:62:27:9e:34:b9:56:37:c0:
1e:5a:77:8f:cd:e4:83:7b:f0:9a:e6:12:fb:97:66:
42:d6:8a:5d:38:b7:06:33:e3:0b:f3:7c:2c:c3:d5:
75:1e:27:49:d3:aa:7c:b0:e7:7b:f9:f3:69:d8:0f:
c6:48:64:db:86:20:5b:85:b2:49:f8:da:96:ca:54:
53:bc:4d:70:c6:42:0d:e3:82:6f:db:9d:3b:ec:1d:
e6:4d:c6:76:96:64:21:d4:9f:fd:03:86:28:fb:28:
cf:2e:07:86:1f:29:88:9c:1a:fd:f2:0e:e2:21:b3:
b6:fa:59:f3:d5:99:08:4b:a8:cb:75:2a:a5:4b:c9:
bf:a7:76:0b:3b:c7:72:52:94:4d:20:05:b4:21:fe:
42:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:12:B8:4B:6C:32:77:04:51:C4:15:22:07:D7:76:79:BF:7E:A8:B7
X509v3 Authority Key Identifier:
keyid:91:0C:13:AC:E1:6F:58:03:4F:B6:51:30:B4:A6:FF:AA:2E:06:27:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/910C13ACE16F58034FB65130B4A6FFAA2E062704.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910C13ACE16F58034FB65130B4A6FFAA2E062704.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/323830343a326265303a3a2f33322d3332203d3e20323632353033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2be0::/32
Signature Algorithm: sha256WithRSAEncryption
82:99:f4:72:e7:db:e1:5b:35:b0:28:f2:ab:b8:f4:2b:57:4e:
f7:db:dd:bc:49:a1:f8:14:25:13:47:0c:a4:38:05:44:f2:c0:
5e:ed:8f:0b:23:0f:de:22:a2:dc:41:45:fc:ba:40:b5:50:91:
e3:4c:88:91:89:e6:de:23:0d:bd:c3:4a:f9:b0:f8:35:c7:e1:
b2:c3:cf:c3:fd:f7:46:b2:ea:00:17:a3:76:f7:a3:15:65:ba:
94:a9:b7:ee:59:69:bd:d6:fa:73:df:b8:31:97:69:a3:c0:54:
6f:ea:d4:b5:dd:ad:9f:d6:b4:bc:cf:33:31:16:4c:34:7d:35:
3d:1f:0f:c1:22:36:93:53:05:ba:bb:8a:63:0b:e1:ac:b4:77:
39:a9:84:b4:f3:37:9f:6e:18:b2:19:1b:96:7c:0f:39:93:71:
96:92:76:8b:1f:91:99:f5:fe:72:0f:57:ba:20:84:13:d0:f6:
3f:10:ab:7f:dc:f8:ab:d0:fd:74:47:16:c2:d9:df:78:ab:7c:
be:51:14:7b:ce:01:ae:4d:1e:0b:10:6d:2a:e8:a1:4f:61:6e:
d6:d2:c0:84:ec:d7:22:ab:27:84:7f:ef:5c:89:e9:0c:64:3d:
c5:00:f9:ce:92:4b:17:79:7b:f2:ca:aa:7d:34:d9:8f:fd:ec:
44:c1:8c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 22:52:08 2025 by rpki-client