Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a383030303a3a2f33332d3333203d3e203532353435.roa
File: 323830343a6531633a383030303a3a2f33332d3333203d3e203532353435.roa (raw, json)
Hash identifier: 1cppSIhZ4oBFfaBlGaVkf9ClaBoD1ZvH2ww6ZQkhu3I=
Subject key identifier: 48:68:88:84:CE:F1:FC:40:DF:C9:90:CC:53:64:18:58:AE:D8:9D:6C
Certificate issuer: /CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
Certificate serial: 633C2A4D6FF603F2452BC9D3759DEBEEFB43DFE9
Authority key identifier: 35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a383030303a3a2f33332d3333203d3e203532353435.roa
Signing time: Thu 06 Mar 2025 02:06:27 +0000
ROA not before: Thu 06 Mar 2025 02:01:27 +0000
ROA not after: Thu 05 Mar 2026 02:06:27 +0000
asID: 52545
IP address blocks: 2804:e1c:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:3c:2a:4d:6f:f6:03:f2:45:2b:c9:d3:75:9d:eb:ee:fb:43:df:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
Validity
Not Before: Mar 6 02:01:27 2025 GMT
Not After : Mar 5 02:06:27 2026 GMT
Subject: CN=48688884CEF1FC40DFC990CC53641858AED89D6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b4:98:7d:aa:6f:78:a0:ff:a1:cb:07:8d:f6:
a9:66:8a:76:59:00:9e:53:39:2c:01:be:66:48:76:
7b:b7:2f:36:7f:35:a2:2f:bd:33:b3:e0:bb:1e:bf:
7d:3e:6d:18:a1:64:33:85:ff:13:9b:e8:0a:cb:da:
be:c7:1a:93:94:ab:73:0e:7f:96:91:ae:07:2f:ce:
59:9a:c9:82:89:a8:c0:af:04:a3:7a:9b:5a:f8:8e:
40:cf:3d:6f:8b:5a:ab:78:81:48:a9:01:7a:0b:67:
8f:28:1c:73:65:72:f6:53:52:60:60:0d:ba:be:61:
d1:c6:dc:ca:74:ed:dd:26:b1:70:19:81:df:1e:a9:
54:44:57:d3:f3:65:81:c0:f6:aa:a0:36:c5:11:62:
21:4b:57:9a:09:e9:38:1f:fc:ed:e3:67:42:26:68:
88:83:2b:c3:39:6d:c1:1f:d5:18:a2:b0:58:c0:95:
c4:ca:76:2d:71:ab:a4:b0:c7:8b:43:58:07:2f:73:
1b:4d:18:d3:d3:92:b9:8f:e2:52:e0:ed:47:fc:8f:
31:ef:ed:62:4f:75:57:92:e4:91:8a:e9:87:db:44:
dc:78:77:72:c0:fe:e2:62:2e:58:8c:53:36:a3:17:
75:03:a5:87:44:33:c3:a5:e3:e8:59:fd:bb:24:70:
b3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:68:88:84:CE:F1:FC:40:DF:C9:90:CC:53:64:18:58:AE:D8:9D:6C
X509v3 Authority Key Identifier:
keyid:35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a383030303a3a2f33332d3333203d3e203532353435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:e1c:8000::/33
Signature Algorithm: sha256WithRSAEncryption
83:b3:da:72:f3:ea:5f:d7:17:d2:47:53:f5:dd:30:db:85:2c:
c2:27:2b:c7:c7:d4:dd:8d:ac:e3:c5:01:78:99:53:46:7c:70:
53:18:48:c0:07:d6:fc:9d:5b:8b:13:ff:d3:7a:d4:13:e9:ff:
af:ad:84:a0:1b:99:ff:f8:e5:0c:76:3e:35:9a:b5:f7:1a:90:
80:ce:65:91:31:d8:36:e9:d1:d2:e9:49:c9:56:25:73:81:17:
7a:28:76:35:0e:2d:4e:1d:52:b6:1e:cc:cc:95:fb:10:57:87:
e7:79:af:e5:60:aa:86:e2:10:5a:9c:ed:6b:3d:97:d1:1e:f9:
55:ea:f5:90:74:0c:11:27:6f:79:06:0a:aa:d4:3b:41:50:f8:
4c:79:e8:43:14:70:b5:51:05:56:47:43:d6:60:c4:0a:aa:39:
8d:08:72:69:67:24:f3:9d:b5:ce:02:30:a6:f4:b4:48:20:51:
8b:5a:43:6a:70:e0:4f:f6:74:38:24:db:12:4e:5a:a7:7e:0f:
0e:1a:af:d4:51:8b:c2:eb:36:00:6a:7b:a0:34:36:29:5e:29:
a1:7d:60:05:ac:3b:d7:37:e2:95:ee:df:54:e3:85:45:2c:17:
7d:15:bf:6d:3a:10:eb:ed:fb:a0:1e:56:60:60:fc:a3:61:f3:
7e:9a:08:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 12:07:40 2025 by rpki-client