Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/1/323830343a353239383a3a2f33322d3334203d3e20323638353238.roa
File: 323830343a353239383a3a2f33322d3334203d3e20323638353238.roa (raw, json)
Hash identifier: j+AtHVFyhIxGILDr7hJSYzAAlOEjQOTKdRfG1Ga6AFY=
Subject key identifier: 3C:F0:5C:51:F8:9F:27:4B:20:29:1F:6E:29:C0:EB:65:4C:B7:18:39
Certificate issuer: /CN=3A9605B2DF9025F5056C61296B879441CB6D80F9
Certificate serial: 4743E49977D0C85FA02DBFCD95F995666A021634
Authority key identifier: 3A:96:05:B2:DF:90:25:F5:05:6C:61:29:6B:87:94:41:CB:6D:80:F9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A9605B2DF9025F5056C61296B879441CB6D80F9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/1/323830343a353239383a3a2f33322d3334203d3e20323638353238.roa
Signing time: Thu 06 Mar 2025 08:09:47 +0000
ROA not before: Thu 06 Mar 2025 08:04:47 +0000
ROA not after: Thu 05 Mar 2026 08:09:47 +0000
asID: 268528
IP address blocks: 2804:5298::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:43:e4:99:77:d0:c8:5f:a0:2d:bf:cd:95:f9:95:66:6a:02:16:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A9605B2DF9025F5056C61296B879441CB6D80F9
Validity
Not Before: Mar 6 08:04:47 2025 GMT
Not After : Mar 5 08:09:47 2026 GMT
Subject: CN=3CF05C51F89F274B20291F6E29C0EB654CB71839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dd:c3:a5:c6:54:ad:76:34:86:38:a2:67:fd:
bc:dd:e3:07:44:e6:65:e0:e4:05:ba:00:b5:e0:2b:
9e:06:65:b8:3d:b3:43:7d:23:ab:25:d0:91:6b:5a:
b6:40:19:ff:b0:da:6b:3c:6c:7c:9f:f8:e1:c0:61:
e1:5f:a3:ed:64:a0:e6:42:8b:6d:9b:a3:d5:89:8b:
fb:d6:ea:29:a9:2f:f2:ef:44:96:ec:f7:bc:e7:40:
79:5b:fa:0c:8c:5b:fd:c2:4e:f0:fa:9e:33:6e:00:
81:d9:af:65:d7:5d:9e:51:83:34:98:61:36:c3:1c:
9d:1b:8d:66:96:54:c9:69:83:5f:c2:37:bd:5b:e4:
01:d6:53:4a:f0:78:2b:5c:c5:f6:01:f1:d7:1e:1f:
15:31:78:44:17:77:11:ff:a6:d8:91:4c:82:dc:a7:
e6:6e:0f:0c:5f:db:49:ea:83:06:db:0d:a5:7f:9e:
e5:de:39:04:eb:37:48:03:0f:de:b3:f2:fa:39:9f:
4e:6d:54:74:66:88:08:2c:dc:5d:cc:ab:81:30:a3:
63:91:a1:28:56:c7:ce:93:65:0e:79:ca:14:8a:74:
1c:89:97:d6:ee:be:05:82:38:a3:14:a9:32:2e:65:
d3:f0:99:dd:8d:d4:d9:03:bf:76:36:96:60:ec:5c:
52:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F0:5C:51:F8:9F:27:4B:20:29:1F:6E:29:C0:EB:65:4C:B7:18:39
X509v3 Authority Key Identifier:
keyid:3A:96:05:B2:DF:90:25:F5:05:6C:61:29:6B:87:94:41:CB:6D:80:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/1/3A9605B2DF9025F5056C61296B879441CB6D80F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A9605B2DF9025F5056C61296B879441CB6D80F9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/1/323830343a353239383a3a2f33322d3334203d3e20323638353238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5298::/32
Signature Algorithm: sha256WithRSAEncryption
09:6e:bd:b3:11:dd:8c:7a:0f:6e:f4:8a:43:32:7a:d3:81:13:
d6:fb:1e:87:04:88:4f:1e:e4:f5:53:1d:62:d4:79:cd:b1:3b:
c4:23:ad:40:9b:82:f6:88:22:29:84:03:f5:67:e4:27:cd:bc:
38:cc:4a:06:2c:1b:a4:5a:29:6f:bf:db:c7:c1:36:96:71:a7:
d2:9a:1a:88:c7:fc:f9:f4:d3:a4:26:4c:1d:af:f9:a7:28:44:
3a:b0:41:ba:55:0c:b2:9d:9e:d9:64:49:e1:0d:71:a2:7f:bb:
9c:46:9f:51:b3:64:a4:0c:70:fb:6f:94:df:78:41:4f:9e:ce:
50:73:f9:6e:37:d8:6e:56:61:a9:18:33:65:6f:29:63:a0:6f:
23:63:3a:47:0d:17:79:8e:50:eb:bb:e7:22:d5:67:24:2b:99:
8f:50:23:26:e4:32:8e:a0:3d:0d:2d:44:f1:42:a1:2f:dc:4e:
70:34:75:7a:76:fb:c5:4e:4f:0b:4e:72:6e:b0:47:69:b5:df:
be:88:80:4a:aa:42:0b:a7:71:8a:20:d3:3a:8e:f6:e4:0a:a0:
43:f0:de:62:be:70:62:47:c8:db:69:9a:17:21:9f:6a:c5:25:
c4:3f:b2:1b:d0:d2:80:46:02:84:3a:52:3f:87:6d:8b:0e:4a:
88:47:6e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:21:32 2025 by rpki-client