Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8GXGMvaRqfczC3CtFh5w9KHj1iaaXSYiLeHD4qjq3vXQ/1/323830343a343662343a3a2f33322d3430203d3e20323637303036.roa
File: 323830343a343662343a3a2f33322d3430203d3e20323637303036.roa (raw, json)
Hash identifier: WRIrz1WIqlbEnNN4mzdFbRefyHi45hvdURFQRREtXrI=
Subject key identifier: 88:B9:2B:38:7F:A2:A7:59:9D:43:C7:FE:0D:78:77:74:0D:8A:AB:37
Certificate issuer: /CN=12D8BB9048654EB8B6770450FAD878383CB2E373
Certificate serial: 5AA5419014FA4F20DE35782CF6CA522970CE10C9
Authority key identifier: 12:D8:BB:90:48:65:4E:B8:B6:77:04:50:FA:D8:78:38:3C:B2:E3:73
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12D8BB9048654EB8B6770450FAD878383CB2E373.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8GXGMvaRqfczC3CtFh5w9KHj1iaaXSYiLeHD4qjq3vXQ/1/323830343a343662343a3a2f33322d3430203d3e20323637303036.roa
Signing time: Wed 14 May 2025 23:04:07 +0000
ROA not before: Wed 14 May 2025 22:59:07 +0000
ROA not after: Wed 13 May 2026 23:04:07 +0000
asID: 267006
IP address blocks: 2804:46b4::/32 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:a5:41:90:14:fa:4f:20:de:35:78:2c:f6:ca:52:29:70:ce:10:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12D8BB9048654EB8B6770450FAD878383CB2E373
Validity
Not Before: May 14 22:59:07 2025 GMT
Not After : May 13 23:04:07 2026 GMT
Subject: CN=88B92B387FA2A7599D43C7FE0D7877740D8AAB37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:23:b8:5e:be:72:1e:48:ba:69:73:1d:56:e0:
40:d5:8a:67:73:a1:c5:c5:81:7f:c3:4f:fd:8c:02:
87:de:53:66:24:dc:4f:0b:8c:9f:d5:86:15:b1:35:
07:b6:2d:af:74:a3:17:71:4b:bc:90:a7:26:e7:a8:
70:e4:b1:0f:e5:76:8a:63:1f:97:01:70:41:a8:8d:
fb:51:a7:79:aa:3d:10:bf:f7:00:98:6c:af:ab:64:
c2:48:fc:aa:09:07:2d:1a:24:96:54:74:b5:a9:6d:
43:f6:1b:83:1b:c1:94:a7:6a:dd:d4:d6:8e:a2:d3:
d7:7b:18:89:f4:42:5c:c3:c3:4c:22:b8:a2:44:40:
71:c6:23:30:39:74:f8:10:56:cb:e1:19:8b:19:75:
ce:39:31:91:f2:23:36:8a:db:26:6b:f0:3f:28:ee:
0b:97:39:9b:4e:5a:ba:0a:82:50:1c:67:e4:73:69:
a6:60:5c:6e:17:2d:1f:17:4e:be:1c:ef:e8:78:cd:
7e:88:0e:04:e2:ec:f0:a3:18:87:ea:51:fb:57:cf:
b0:66:c7:2a:c8:3f:d3:46:d5:b4:ff:91:ad:18:9f:
f4:e7:1d:44:be:64:95:48:23:93:ae:fe:d8:b1:48:
16:3c:ac:97:b8:c9:83:c6:97:8a:ab:77:10:55:b6:
4c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B9:2B:38:7F:A2:A7:59:9D:43:C7:FE:0D:78:77:74:0D:8A:AB:37
X509v3 Authority Key Identifier:
keyid:12:D8:BB:90:48:65:4E:B8:B6:77:04:50:FA:D8:78:38:3C:B2:E3:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8GXGMvaRqfczC3CtFh5w9KHj1iaaXSYiLeHD4qjq3vXQ/1/12D8BB9048654EB8B6770450FAD878383CB2E373.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12D8BB9048654EB8B6770450FAD878383CB2E373.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8GXGMvaRqfczC3CtFh5w9KHj1iaaXSYiLeHD4qjq3vXQ/1/323830343a343662343a3a2f33322d3430203d3e20323637303036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:46b4::/32
Signature Algorithm: sha256WithRSAEncryption
7a:b5:18:4c:76:24:82:ba:c5:6c:42:eb:51:f7:1c:00:15:eb:
18:74:44:ee:f0:40:6e:8a:90:32:5e:a0:60:b6:ef:ed:e1:8e:
1a:ff:7a:5e:9a:f3:95:4d:87:0e:8f:8d:c4:6c:62:52:70:e9:
e8:92:e7:73:97:1e:ff:9d:4f:28:ff:b6:5f:97:9a:d7:ee:44:
16:3a:65:18:08:e0:73:e1:d1:6e:9e:ba:75:c8:b9:6e:74:f6:
ed:c6:6f:30:c0:5a:f2:55:a7:ce:e6:8e:3d:90:00:b9:75:0a:
df:41:4d:c3:b5:5e:4a:de:08:46:40:4c:a2:dc:54:dc:52:90:
e3:87:a9:44:22:57:0a:f9:43:72:fa:be:cb:a8:0e:b6:7a:42:
3b:6d:7c:58:35:f1:4a:f2:b2:fc:8d:63:18:f9:29:fd:d3:d3:
86:51:86:38:47:70:57:65:64:68:e6:d7:45:73:be:10:c9:db:
58:27:ec:8b:a9:00:79:cc:b2:78:d8:48:43:b0:42:78:1a:6b:
4d:cc:d0:40:82:20:41:ec:36:4c:6c:e5:03:e4:bf:4d:cd:0e:
5e:3b:96:bb:7a:3b:57:1d:79:fa:06:7f:49:0d:0e:88:80:16:
bf:05:12:75:21:48:16:e2:ed:97:c8:b2:12:32:67:ef:bb:8a:
e4:c9:e7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:26:03 2025 by rpki-client