Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a3a2f34382d3438203d3e203532353435.roa
File: 323830343a6531633a3a2f34382d3438203d3e203532353435.roa (raw, json)
Hash identifier: tMslQHnLGJAB5UxjTGpb/vZP2ppEaTiJwBDm93IvmOI=
Subject key identifier: 7E:5B:50:C8:57:26:C8:A7:85:B8:81:0A:7D:64:1B:DA:13:5F:C2:B3
Certificate issuer: /CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
Certificate serial: 43D36AA0BCCC62940DCD4AFF85D834C40340BF1F
Authority key identifier: 35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a3a2f34382d3438203d3e203532353435.roa
Signing time: Thu 06 Mar 2025 02:06:26 +0000
ROA not before: Thu 06 Mar 2025 02:01:26 +0000
ROA not after: Thu 05 Mar 2026 02:06:26 +0000
asID: 52545
IP address blocks: 2804:e1c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:d3:6a:a0:bc:cc:62:94:0d:cd:4a:ff:85:d8:34:c4:03:40:bf:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
Validity
Not Before: Mar 6 02:01:26 2025 GMT
Not After : Mar 5 02:06:26 2026 GMT
Subject: CN=7E5B50C85726C8A785B8810A7D641BDA135FC2B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a2:8a:40:6f:34:4b:d7:1e:bf:c5:f7:26:ea:
7f:41:74:8a:82:38:a1:19:18:39:c4:6d:cc:dc:eb:
91:a7:67:6d:cb:45:9c:75:bc:32:ea:8d:9d:c3:3c:
84:79:78:4c:a2:eb:65:28:3b:8d:c8:ca:18:0b:ad:
12:b8:d0:c8:da:ce:4e:61:bc:1a:14:a1:c6:8a:71:
7a:3f:92:c4:cf:a9:f6:4a:47:38:19:9a:a7:fb:5e:
9d:15:bc:09:7f:64:9f:92:8b:c5:3b:df:57:4f:90:
81:59:7c:64:7f:25:f5:d3:8e:cd:68:b2:d4:f6:9c:
cf:dd:56:b0:cf:0a:2d:42:67:a5:71:87:15:ce:84:
02:f7:4a:d3:b5:c8:9e:c6:43:fa:3f:3c:18:f7:b3:
5a:cc:13:a6:f6:ad:41:df:21:38:ef:21:e5:62:54:
59:4b:50:45:c6:b9:a1:d3:7a:80:0f:33:48:48:16:
c8:ce:4a:e0:17:6c:08:1f:2c:7f:a1:1a:35:6c:6c:
89:9d:df:eb:85:68:b5:0c:13:af:eb:2e:65:18:99:
c3:42:80:12:b0:5a:80:16:cb:5c:2f:5c:61:72:de:
14:52:b2:36:9b:25:89:65:7c:f7:85:e8:70:bb:f7:
bd:9d:e1:5a:a5:ee:96:d4:95:d9:72:ab:e1:59:9b:
7c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5B:50:C8:57:26:C8:A7:85:B8:81:0A:7D:64:1B:DA:13:5F:C2:B3
X509v3 Authority Key Identifier:
keyid:35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a3a2f34382d3438203d3e203532353435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:e1c::/48
Signature Algorithm: sha256WithRSAEncryption
7f:81:c0:05:54:52:e3:15:60:de:16:47:c0:90:91:7e:8a:2b:
37:f3:1a:54:6e:23:00:69:21:e6:44:6b:87:0a:21:e7:cc:9d:
6f:e4:15:70:d1:87:43:45:3b:e5:4b:ec:48:57:91:22:cc:c7:
4b:ca:6b:31:ed:07:c2:25:49:5c:af:f2:73:da:6b:32:07:50:
d1:9d:26:ab:dd:03:30:a8:1e:55:50:e4:cb:f3:a6:b4:7d:a5:
1d:a6:14:01:e5:38:de:1f:78:14:0a:db:c9:93:36:88:1f:d3:
93:d8:00:8b:13:aa:09:d4:92:2e:f9:6c:fa:7c:e7:03:e6:55:
b5:00:86:34:08:ad:92:a6:ce:fe:82:39:1e:28:3b:dc:32:79:
92:0c:5d:32:55:aa:33:53:95:3b:4e:19:eb:7f:72:f9:82:c7:
6f:ed:0d:b9:e2:1e:b6:04:dd:64:2f:d8:2a:ae:17:f4:d6:ee:
e6:ad:67:dc:68:8f:d1:a0:37:c4:7d:81:6f:f8:55:1c:77:21:
00:af:00:41:35:91:8b:4d:d5:4c:ce:70:c7:fc:0e:bd:a8:e0:
41:94:9d:57:3b:c1:ca:c8:fa:d3:fb:02:1c:e2:c6:2a:56:75:
a0:6a:a4:ad:8f:2e:98:4b:ba:56:b3:a7:98:e6:ae:79:29:0e:
58:b0:57:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 21:39:51 2025 by rpki-client