Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a3a2f33322d3438203d3e203532353435.roa
File: 323830343a6531633a3a2f33322d3438203d3e203532353435.roa (raw, json)
Hash identifier: 1VqC7tOwiCjsSS1K4bUpPIhl+XZkmIm9aQWRvFzeBG0=
Subject key identifier: 43:63:25:C6:CA:B1:5D:D4:D1:88:17:B4:AB:C9:2A:56:19:20:97:A1
Certificate issuer: /CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
Certificate serial: 78171E235AA62FC62997AA0EFED81F723776B71F
Authority key identifier: 35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a3a2f33322d3438203d3e203532353435.roa
Signing time: Thu 06 Mar 2025 02:06:27 +0000
ROA not before: Thu 06 Mar 2025 02:01:27 +0000
ROA not after: Thu 05 Mar 2026 02:06:27 +0000
asID: 52545
IP address blocks: 2804:e1c::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:17:1e:23:5a:a6:2f:c6:29:97:aa:0e:fe:d8:1f:72:37:76:b7:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
Validity
Not Before: Mar 6 02:01:27 2025 GMT
Not After : Mar 5 02:06:27 2026 GMT
Subject: CN=436325C6CAB15DD4D18817B4ABC92A56192097A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f3:28:77:7d:22:ca:01:36:49:fb:1d:46:9f:
71:63:44:10:cf:99:73:4a:cb:5a:e8:4e:3c:d8:27:
7b:bf:33:c0:90:f6:d4:a7:b2:a5:59:d3:79:76:49:
61:12:bf:a4:80:30:bf:ae:3f:94:17:4a:fa:9b:0f:
46:c0:a9:ed:f6:98:12:e6:cb:10:0a:5f:d8:7a:95:
2c:f0:41:11:5f:34:1b:2b:a4:23:b4:9d:ae:5b:54:
94:72:46:06:ec:a2:2c:1b:6f:9d:98:c0:85:6e:74:
aa:ad:f5:db:47:73:64:2c:05:c2:27:bb:e0:9b:77:
32:10:b0:71:ad:06:b1:d1:98:1a:85:45:18:92:87:
11:97:2c:af:c5:bd:b4:cf:34:e0:d9:3d:5f:d2:d9:
14:ed:3e:af:22:20:fa:0a:f4:47:b9:49:18:f2:c1:
6f:88:b5:47:dc:45:90:ab:c5:87:05:d5:d1:19:f1:
ca:83:28:bb:2a:c0:24:c9:ca:6b:a0:18:4a:7b:1f:
02:36:33:da:53:ef:b5:2e:c8:32:bc:a4:e3:21:9c:
e8:29:21:0a:56:73:8c:b2:09:55:21:73:ad:59:a6:
1f:56:40:82:d6:cf:0a:62:00:c9:9f:e8:14:dc:30:
eb:85:95:fa:5e:9a:0f:45:0b:4d:40:28:2b:88:c9:
96:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:63:25:C6:CA:B1:5D:D4:D1:88:17:B4:AB:C9:2A:56:19:20:97:A1
X509v3 Authority Key Identifier:
keyid:35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a3a2f33322d3438203d3e203532353435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:e1c::/32
Signature Algorithm: sha256WithRSAEncryption
58:46:c8:91:7b:35:c4:15:2c:00:02:da:83:39:14:2f:88:4b:
11:8d:a4:ff:07:53:23:0b:f3:f9:30:3d:21:55:f2:7a:a8:cf:
5a:36:4d:ae:f2:48:fa:7c:e3:c8:72:d5:99:b7:2a:e4:5a:03:
94:d8:fc:a6:4c:0f:d9:85:89:e3:29:85:b7:4d:8d:db:4b:c4:
42:cf:3a:f6:a7:ab:f9:51:a4:66:31:1e:ca:1e:26:e2:a8:cc:
72:ed:21:78:13:8f:45:2c:e4:88:63:34:b1:ae:18:34:5d:72:
21:85:bb:db:04:2a:e3:57:11:79:66:55:df:0b:35:af:6f:02:
42:07:95:54:de:a4:5a:ba:02:ef:86:74:94:09:01:1c:7f:4b:
cb:a9:12:ea:e9:77:6b:49:26:a2:2f:bd:bd:28:79:d6:42:c3:
da:fc:c5:ed:c9:93:09:c6:91:2a:81:a4:1a:ab:2b:80:09:48:
4c:fb:a5:2f:10:2b:18:40:22:28:06:e8:fe:b2:5a:83:14:dd:
bc:cc:c2:42:54:96:ae:31:fa:12:c1:42:80:d2:61:2f:38:30:
4b:e9:40:0a:9b:e5:eb:fc:91:7b:4f:db:a7:f6:8b:1d:8b:f8:
d4:38:da:28:24:45:a6:b2:bb:82:5f:b7:2f:24:10:11:ac:ff:
d3:37:24:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 02:32:05 2025 by rpki-client