Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/323830343a373933303a393030303a3a2f33362d3336203d3e20323731323930.roa
File: 323830343a373933303a393030303a3a2f33362d3336203d3e20323731323930.roa (raw, json)
Hash identifier: wy3470+vdTjEUbL3rv4PfBYMgnGNEInQlnNiLVyPu6I=
Subject key identifier: EE:DD:ED:16:DA:BC:A4:8F:F6:A6:E9:8A:3D:25:78:18:1C:32:8A:45
Certificate issuer: /CN=2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62
Certificate serial: 071810C638F555A33609899641D56B0F53CC1153
Authority key identifier: 2D:88:D2:4B:F4:0A:E9:E1:6A:0E:49:68:44:8E:C1:E1:F5:C8:7F:62
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/323830343a373933303a393030303a3a2f33362d3336203d3e20323731323930.roa
Signing time: Thu 30 Jan 2025 21:06:14 +0000
ROA not before: Thu 30 Jan 2025 21:01:14 +0000
ROA not after: Thu 29 Jan 2026 21:06:14 +0000
asID: 271290
IP address blocks: 2804:7930:9000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:18:10:c6:38:f5:55:a3:36:09:89:96:41:d5:6b:0f:53:cc:11:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62
Validity
Not Before: Jan 30 21:01:14 2025 GMT
Not After : Jan 29 21:06:14 2026 GMT
Subject: CN=EEDDED16DABCA48FF6A6E98A3D2578181C328A45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:42:5f:bf:b1:4e:4c:2c:32:68:2c:d2:22:4f:
26:92:2f:36:ea:d2:5a:5e:6f:dc:b4:c9:f2:d4:ae:
36:51:d0:4f:bb:08:75:9e:de:f6:6e:5d:4b:dc:55:
d2:f2:f3:2c:db:ad:95:bf:74:24:93:01:87:74:c8:
58:fe:05:9c:95:80:5f:8f:8f:5b:b2:e2:38:07:6a:
4d:f5:04:34:fe:5c:68:59:38:93:c1:97:03:44:e9:
90:92:d7:91:8a:8c:0b:d7:86:32:d6:6a:9b:8a:68:
88:d8:12:e4:17:96:3c:0e:a4:b7:cb:61:f2:73:8d:
99:17:a5:50:6b:bf:0a:1d:ad:12:2c:09:19:41:e3:
23:cc:cb:07:4b:0a:d9:f4:ff:4b:c9:91:ed:92:1c:
85:28:c4:66:bc:67:53:16:1b:09:1a:c5:cb:2f:81:
2e:d1:c7:86:fc:6b:91:e9:a2:67:de:01:27:2a:6f:
50:e7:86:9c:58:6a:d3:99:5f:ce:55:cf:52:9a:3e:
ac:92:64:72:b5:bd:92:09:db:5e:b9:a9:1d:40:35:
a8:6a:84:a4:e1:78:c4:8d:43:cc:40:57:9c:b4:e0:
95:37:29:c8:35:68:f6:49:56:3d:b3:6c:cd:c0:07:
77:4d:74:e7:8a:af:03:a5:9a:0e:85:90:37:58:58:
99:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DD:ED:16:DA:BC:A4:8F:F6:A6:E9:8A:3D:25:78:18:1C:32:8A:45
X509v3 Authority Key Identifier:
keyid:2D:88:D2:4B:F4:0A:E9:E1:6A:0E:49:68:44:8E:C1:E1:F5:C8:7F:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/323830343a373933303a393030303a3a2f33362d3336203d3e20323731323930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7930:9000::/36
Signature Algorithm: sha256WithRSAEncryption
80:3e:f9:7b:cd:d0:11:8f:6d:40:59:79:f9:34:e6:72:5b:bd:
b0:6d:36:23:ea:65:9f:ae:1a:1f:83:dc:17:bd:25:e0:99:89:
1e:60:c3:6f:44:8d:6f:32:4b:e5:e3:dd:b3:74:49:62:6b:1a:
e1:91:a2:b2:7e:da:b5:45:a9:a9:88:40:1b:28:44:c3:2c:b9:
ba:53:c2:fb:c1:76:35:0e:d7:b0:50:64:42:f8:9e:4c:32:c2:
f6:90:0a:7f:f2:f4:7a:55:57:98:ec:b5:fc:76:3b:be:a3:3a:
a7:9c:48:04:0c:06:60:bc:17:36:37:4b:cd:5d:c3:7f:4e:3a:
4d:50:34:1f:3a:c3:24:30:57:91:b1:21:86:ad:65:d1:18:07:
36:d1:02:56:96:db:fd:e4:d2:bb:bf:b5:25:0b:2f:f4:48:e2:
59:ff:4b:04:4e:35:96:29:3f:05:f2:ec:a7:c0:3c:bb:f0:2a:
a3:ae:a2:04:52:86:ea:35:71:19:58:72:54:6b:54:52:b7:09:
eb:c8:98:12:b7:bf:19:80:65:23:6b:21:c1:06:5f:65:55:fc:
b9:ec:ec:92:5d:86:b9:59:74:ba:c3:7b:3c:15:3b:8d:21:7a:
50:0e:b6:c6:77:df:bd:06:ab:24:67:6d:4d:54:39:38:a0:f0:
7b:72:c3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:41:48 2025 by rpki-client