Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/323830343a373933303a333030303a3a2f33362d3336203d3e20323731323930.roa
File: 323830343a373933303a333030303a3a2f33362d3336203d3e20323731323930.roa (raw, json)
Hash identifier: RpADgUZyZmkcqr1E0Uxv8gRsoIIsU2COI+R6l+Ll4aI=
Subject key identifier: 09:EA:34:80:2C:17:0E:03:BE:2A:34:F6:F7:5D:0A:24:D9:58:59:9A
Certificate issuer: /CN=2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62
Certificate serial: 103ADF333E2EA5C4D250BECCA11426A43F1A857D
Authority key identifier: 2D:88:D2:4B:F4:0A:E9:E1:6A:0E:49:68:44:8E:C1:E1:F5:C8:7F:62
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/323830343a373933303a333030303a3a2f33362d3336203d3e20323731323930.roa
Signing time: Thu 30 Jan 2025 21:06:15 +0000
ROA not before: Thu 30 Jan 2025 21:01:15 +0000
ROA not after: Thu 29 Jan 2026 21:06:15 +0000
asID: 271290
IP address blocks: 2804:7930:3000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:3a:df:33:3e:2e:a5:c4:d2:50:be:cc:a1:14:26:a4:3f:1a:85:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62
Validity
Not Before: Jan 30 21:01:15 2025 GMT
Not After : Jan 29 21:06:15 2026 GMT
Subject: CN=09EA34802C170E03BE2A34F6F75D0A24D958599A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d3:de:9a:5b:98:2e:71:b6:87:f3:ac:dc:36:
eb:e5:e3:71:f4:85:18:e8:de:7b:7d:9a:d0:c1:b3:
9c:39:b9:d5:65:18:40:d5:c4:a8:89:12:be:4d:95:
b9:f5:13:75:82:10:e6:b7:65:33:c8:6d:bd:a7:46:
26:6c:c3:cc:26:f4:cc:75:07:6c:76:58:aa:1d:d5:
65:2e:02:37:65:ee:1a:6e:c4:20:b0:9d:70:b9:cf:
b9:ac:d2:60:48:5f:41:7e:9b:74:7e:2e:76:63:71:
7d:9c:36:16:40:66:4b:1b:90:03:5d:58:13:10:ec:
ee:db:fd:14:83:18:66:d9:8a:ff:18:3f:b5:f2:b4:
39:30:c3:0b:86:97:15:0c:5a:13:9a:c4:9d:c7:9a:
3f:59:7e:89:9a:62:9a:16:26:a4:94:2c:cd:46:12:
13:e0:2b:ab:d4:ab:89:f1:04:6a:b5:02:6f:fb:5c:
df:0e:dd:55:71:7b:7b:ac:7b:0e:63:ac:9e:4d:82:
20:54:ec:58:f8:32:96:20:29:60:04:00:98:84:2c:
90:75:87:88:6f:1c:0c:7e:f0:68:86:2e:c0:ef:41:
15:e9:31:4a:cb:c3:d2:47:21:d3:3f:6d:91:c6:0d:
84:df:09:75:93:5d:54:62:df:e7:f7:49:7c:c9:fe:
4c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EA:34:80:2C:17:0E:03:BE:2A:34:F6:F7:5D:0A:24:D9:58:59:9A
X509v3 Authority Key Identifier:
keyid:2D:88:D2:4B:F4:0A:E9:E1:6A:0E:49:68:44:8E:C1:E1:F5:C8:7F:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/323830343a373933303a333030303a3a2f33362d3336203d3e20323731323930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7930:3000::/36
Signature Algorithm: sha256WithRSAEncryption
67:96:7c:96:eb:0f:ee:2a:15:4c:0b:d8:58:4f:48:07:65:92:
e9:cb:8d:6b:6e:29:0e:80:8f:0e:3e:0c:37:48:cf:fa:7d:a8:
6c:84:ba:dc:46:02:1f:b9:c8:69:69:78:eb:66:44:c2:38:62:
c4:a5:da:2f:16:cb:18:04:6e:ea:b6:a2:33:0b:bb:cc:88:3c:
6b:e5:12:bd:69:ff:2c:15:85:90:d0:d3:89:c8:fb:64:0b:c9:
5d:d7:ed:bb:31:64:cb:b5:eb:e3:a6:8b:e1:9d:f8:48:ef:c4:
6e:04:af:c7:e3:01:a1:57:64:a5:ee:d1:90:81:bb:94:41:69:
ea:dd:35:76:d1:b7:a2:f3:97:48:82:7d:05:02:16:fa:e2:2a:
96:a9:5d:1a:32:03:50:7b:ae:20:5d:9d:5d:79:01:8c:1c:53:
bb:31:49:c2:96:70:7c:8d:c4:e9:60:31:e6:73:35:60:6e:9d:
2f:d1:41:92:79:5d:55:49:30:ea:6e:96:30:62:b6:ff:1f:b4:
ef:56:aa:6b:23:a3:41:8e:1b:e1:7a:00:18:d3:96:c3:24:4f:
8a:29:c9:12:a9:5a:48:69:c2:6e:fe:c8:d3:49:44:e7:b8:ee:
d6:71:d2:a9:92:24:d7:62:37:b8:4f:87:c2:a3:42:91:59:db:
be:85:13:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:21:46 2025 by rpki-client