Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a383030303a3a2f33342d3334203d3e203631363038.roa
File: 323830343a383237303a383030303a3a2f33342d3334203d3e203631363038.roa (raw, json)
Hash identifier: 8M55ueYEU9gD0wgP6cFlMxQg3ob6dzf7yhsdWbb13X8=
Subject key identifier: 71:BA:9F:10:23:0D:AE:8F:9A:96:78:AC:61:1B:96:85:0C:31:6C:7C
Certificate issuer: /CN=AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01
Certificate serial: 652B9A80AC9AFDBB93C83198E7F9A0ED48C3011D
Authority key identifier: AD:72:AB:44:A3:53:1C:FD:69:32:D3:C0:A8:DA:40:F1:37:CA:AC:01
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a383030303a3a2f33342d3334203d3e203631363038.roa
Signing time: Thu 30 Jan 2025 18:28:28 +0000
ROA not before: Thu 30 Jan 2025 18:23:28 +0000
ROA not after: Thu 29 Jan 2026 18:28:28 +0000
asID: 61608
IP address blocks: 2804:8270:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:2b:9a:80:ac:9a:fd:bb:93:c8:31:98:e7:f9:a0:ed:48:c3:01:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01
Validity
Not Before: Jan 30 18:23:28 2025 GMT
Not After : Jan 29 18:28:28 2026 GMT
Subject: CN=71BA9F10230DAE8F9A9678AC611B96850C316C7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:52:4c:09:7b:b0:53:79:c7:d9:52:a3:69:a8:
ff:90:7e:57:67:ee:32:6c:7c:eb:04:d9:c0:5c:e4:
5a:50:42:d9:8b:50:81:e4:b4:2c:3d:cc:a4:5d:ec:
4f:e5:f6:dd:9a:d7:16:84:d5:be:5a:cb:50:27:91:
c8:fc:c1:de:cc:4c:67:3a:e3:83:9b:b3:99:99:af:
bf:67:d0:1d:45:ca:41:c0:be:45:d3:ac:2a:e2:88:
8a:e7:2f:c1:75:a6:40:c1:0d:66:f6:29:f5:ae:3a:
0a:86:85:76:ad:00:6e:a3:8e:ff:7b:e6:53:d1:42:
34:a5:a7:0b:c4:bb:25:22:a3:a5:8d:e9:c5:6e:0d:
83:61:4e:6e:bf:3e:d4:7a:80:de:bf:88:9f:1c:c3:
02:cc:29:9e:75:c7:ad:ff:24:ee:32:06:d5:41:f1:
61:35:70:5b:0e:90:96:5a:1b:71:5a:12:9a:f0:38:
72:1d:85:e7:66:06:5b:0a:7f:51:d3:80:f7:8f:43:
ea:e6:c7:97:e5:52:33:1d:ad:81:4c:35:96:df:e8:
93:6d:be:4b:3f:43:89:7b:97:af:55:78:57:ee:86:
63:46:44:68:9b:c6:c4:4f:e3:a5:57:3c:4d:c5:ec:
bb:38:0f:60:b9:75:ca:bc:15:6c:29:9c:f8:7c:0c:
d5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BA:9F:10:23:0D:AE:8F:9A:96:78:AC:61:1B:96:85:0C:31:6C:7C
X509v3 Authority Key Identifier:
keyid:AD:72:AB:44:A3:53:1C:FD:69:32:D3:C0:A8:DA:40:F1:37:CA:AC:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a383030303a3a2f33342d3334203d3e203631363038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8270:8000::/34
Signature Algorithm: sha256WithRSAEncryption
2c:bb:c2:62:da:a5:b6:f1:22:1c:3e:f6:00:77:1e:2e:3e:4f:
ba:e1:96:df:a4:35:44:85:d6:14:bb:56:69:10:68:56:d7:20:
6a:d8:44:e9:76:8b:4c:65:fd:58:bd:74:f9:6a:43:f5:c9:ec:
c9:87:76:8a:69:88:56:09:bb:1a:40:8a:1f:07:eb:af:4d:9e:
6e:40:a2:07:e7:cb:4a:e6:9c:26:93:3d:8d:68:0b:fd:7e:12:
48:bf:49:a2:82:78:6a:e0:b7:fe:51:5a:04:bd:49:c0:f5:58:
3f:90:ad:74:52:f7:38:b9:d1:d8:e8:22:e7:62:18:4c:6a:b8:
51:48:0f:31:33:71:d7:7c:9d:d4:1b:e0:34:1b:6a:4e:a7:f4:
83:ec:b6:e2:b4:d7:0c:a6:33:68:bf:00:3e:96:6f:77:e7:c4:
5f:86:03:1d:e8:ea:3a:e3:0a:c6:ac:63:99:c0:99:4e:42:cd:
67:a1:9f:1c:5e:a1:9c:ca:0a:cd:14:af:5e:2f:76:62:a1:56:
08:7c:f2:05:02:26:71:8f:97:c2:c3:f4:a4:42:2b:2e:b6:20:
3f:c2:8a:49:8f:0c:fe:be:86:ea:10:d5:48:7b:14:dc:e7:d9:
78:1d:69:46:43:66:a3:20:6e:53:48:78:f2:2d:29:43:9b:c4:
7e:68:9f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 22:23:49 2025 by rpki-client