Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/323830343a376566343a383030303a3a2f33332d3333203d3e20323731363537.roa
File: 323830343a376566343a383030303a3a2f33332d3333203d3e20323731363537.roa (raw, json)
Hash identifier: q1S2ykZO+DLBq9BpmaiHto7G6DLecprh2FdgxsuvaaE=
Subject key identifier: 30:6E:80:52:FA:5A:06:10:AB:15:08:7E:23:BF:1B:5C:EF:B7:80:90
Certificate issuer: /CN=2114B3B965382FA7393E772A6837B5B8D7173834
Certificate serial: 118D0421D0282470A6E1264D263B7247A97D67EF
Authority key identifier: 21:14:B3:B9:65:38:2F:A7:39:3E:77:2A:68:37:B5:B8:D7:17:38:34
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2114B3B965382FA7393E772A6837B5B8D7173834.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/323830343a376566343a383030303a3a2f33332d3333203d3e20323731363537.roa
Signing time: Tue 22 Apr 2025 14:38:51 +0000
ROA not before: Tue 22 Apr 2025 14:33:51 +0000
ROA not after: Tue 21 Apr 2026 14:38:51 +0000
asID: 271657
IP address blocks: 2804:7ef4:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:8d:04:21:d0:28:24:70:a6:e1:26:4d:26:3b:72:47:a9:7d:67:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2114B3B965382FA7393E772A6837B5B8D7173834
Validity
Not Before: Apr 22 14:33:51 2025 GMT
Not After : Apr 21 14:38:51 2026 GMT
Subject: CN=306E8052FA5A0610AB15087E23BF1B5CEFB78090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:63:ee:ab:3e:1e:d6:96:01:9a:c7:9a:14:0f:
be:0d:a2:39:13:1f:ff:cc:1f:d7:57:38:be:7c:9a:
ed:0c:3d:df:7e:06:95:e4:37:1d:93:e4:c7:2d:da:
59:84:50:f9:fc:1a:a5:67:02:8e:25:03:0c:69:f9:
26:51:c1:9c:32:e5:9f:9c:ea:f6:88:e1:21:07:d1:
89:69:60:af:cc:7f:f6:45:fd:c1:2d:21:2b:f3:28:
8b:49:36:ae:93:d2:90:32:6f:85:55:54:d0:7a:96:
fb:1c:ae:a5:e5:bc:45:6f:65:16:5e:b2:32:48:fb:
71:34:b0:9d:0b:13:e2:54:5e:f5:13:3b:c8:d9:7e:
dd:4b:8b:e8:30:81:2a:83:14:ef:ad:d0:c1:ec:95:
8f:2a:de:27:40:36:f2:a0:1e:ba:14:96:b0:95:c1:
ed:7a:93:31:91:6f:f5:3a:56:06:0e:0f:0c:4a:e8:
cc:d6:97:d0:96:80:cf:44:38:9f:27:5f:c3:72:c9:
ee:da:3f:5a:1f:53:f3:c0:fa:4e:ec:97:d2:63:21:
e1:33:fa:82:1f:30:f5:2d:04:6d:62:09:40:7b:c8:
65:a1:da:6b:ba:d1:69:57:d3:3c:1f:2c:9a:31:c9:
9d:af:1f:99:b3:04:99:f3:da:4f:6b:5a:16:09:c5:
9c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6E:80:52:FA:5A:06:10:AB:15:08:7E:23:BF:1B:5C:EF:B7:80:90
X509v3 Authority Key Identifier:
keyid:21:14:B3:B9:65:38:2F:A7:39:3E:77:2A:68:37:B5:B8:D7:17:38:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/2114B3B965382FA7393E772A6837B5B8D7173834.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2114B3B965382FA7393E772A6837B5B8D7173834.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/323830343a376566343a383030303a3a2f33332d3333203d3e20323731363537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7ef4:8000::/33
Signature Algorithm: sha256WithRSAEncryption
41:14:9d:f0:90:9b:89:d4:e6:77:61:2f:86:a1:cc:11:7d:c7:
e1:fb:43:ab:22:1a:21:1c:f3:cb:cd:8c:b0:fc:31:21:da:46:
2a:70:93:44:f2:eb:2b:dd:8d:7d:5b:29:d6:88:43:d5:a9:68:
d7:20:28:af:cb:fd:48:d5:3b:a8:50:d4:ee:f5:14:16:93:26:
3d:19:4a:ca:75:a0:b8:ef:45:c1:aa:61:f8:ca:54:67:51:29:
92:ec:0c:24:9b:07:99:d0:f0:0f:62:fd:cf:74:81:2c:23:51:
63:78:62:52:33:87:91:5a:d4:83:65:f7:c2:a6:af:d6:a9:7a:
de:d8:d0:53:d8:b9:ee:59:21:79:78:4f:b7:ee:d8:0a:b2:3a:
4c:2e:4a:dd:56:f8:ae:f0:81:8a:38:b0:02:fd:87:10:15:e6:
f7:e8:aa:77:0e:e9:1d:1a:93:91:59:db:2a:37:71:62:16:f4:
8b:d4:cb:76:1c:23:c3:0d:16:87:4f:66:8c:30:a6:63:7f:8f:
22:eb:cf:d9:38:82:82:05:dd:96:cc:ce:e4:a0:f2:c5:8f:bf:
1a:d7:39:51:a9:92:c5:f5:41:1c:51:79:df:ba:44:14:4f:db:
dd:a8:0c:46:3a:87:b7:58:3f:92:52:81:10:e4:75:5e:ea:d2:
be:65:66:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 03:55:11 2025 by rpki-client