Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a666230303a3a2f34302d3430203d3e203532353435.roa
File: 323830343a6531633a666230303a3a2f34302d3430203d3e203532353435.roa (raw, json)
Hash identifier: 6GYdIkLF43eOretGuZj8d2uqKCKHVIFJuPUGeAQd8uc=
Subject key identifier: 87:67:D9:09:BD:EB:65:AD:51:ED:39:32:6B:7A:A8:DF:F2:0F:CF:2F
Certificate issuer: /CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
Certificate serial: 213AB72279C33B34E1723B5D62FF921F1E63BDA9
Authority key identifier: 35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a666230303a3a2f34302d3430203d3e203532353435.roa
Signing time: Thu 04 Apr 2024 01:52:35 +0000
ROA not before: Thu 04 Apr 2024 01:47:35 +0000
ROA not after: Thu 03 Apr 2025 01:52:35 +0000
asID: 52545
IP address blocks: 2804:e1c:fb00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:3a:b7:22:79:c3:3b:34:e1:72:3b:5d:62:ff:92:1f:1e:63:bd:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
Validity
Not Before: Apr 4 01:47:35 2024 GMT
Not After : Apr 3 01:52:35 2025 GMT
Subject: CN=8767D909BDEB65AD51ED39326B7AA8DFF20FCF2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a5:59:5f:ba:48:fb:0d:51:f2:38:73:70:ac:
fa:2b:fa:38:e8:60:6e:ee:17:8b:df:3c:c6:c5:46:
74:e8:11:ab:71:54:96:0b:fb:8d:35:c3:97:0d:85:
3e:bc:5a:82:77:e1:03:aa:ea:ba:0c:18:ab:b4:36:
f4:13:27:b3:9f:91:e8:36:1e:63:a2:cb:62:a5:4e:
b9:3c:62:3a:95:9e:39:c3:34:fd:b9:64:66:8f:64:
1b:38:f5:92:e5:29:40:b0:4e:92:76:bc:ca:09:61:
39:75:08:dd:2f:df:ef:9a:59:50:74:0a:54:07:1b:
f5:9c:8a:6a:38:60:3b:7f:c3:09:b9:fa:e1:9d:fe:
b5:7a:1e:86:8c:dc:34:ea:d5:41:54:85:ad:64:41:
21:60:29:64:11:ec:b6:42:91:c0:a2:f2:02:e2:ec:
ee:b9:fc:65:77:50:ee:93:1e:d6:71:52:eb:b0:95:
01:36:25:9d:14:3a:e7:54:8e:50:d5:6e:e9:6a:74:
7d:40:6c:c1:5e:a6:85:f3:05:64:11:b4:83:34:19:
94:49:21:0d:81:11:0d:15:37:29:37:f6:b0:98:df:
e1:de:3f:de:43:20:95:89:69:f0:72:16:37:7d:67:
37:4f:23:eb:ce:b7:2e:0e:a5:a6:d7:0e:14:64:68:
a3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:67:D9:09:BD:EB:65:AD:51:ED:39:32:6B:7A:A8:DF:F2:0F:CF:2F
X509v3 Authority Key Identifier:
keyid:35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a666230303a3a2f34302d3430203d3e203532353435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:e1c:fb00::/40
Signature Algorithm: sha256WithRSAEncryption
0b:d6:06:1d:29:b4:fa:7e:24:0d:2d:f3:e4:fc:a3:36:39:11:
d4:fb:80:12:29:1b:ef:28:d0:9f:1f:43:e5:07:ab:f2:bc:c7:
9b:e7:8e:76:64:37:77:0b:76:5c:f9:09:0c:f5:09:84:88:37:
3e:66:27:95:fa:0b:d1:6b:16:39:da:a6:29:70:e3:4a:50:6c:
db:25:94:84:aa:3f:b9:8b:84:32:4d:17:86:6b:4e:8f:44:bc:
b9:93:66:79:c3:cf:98:51:f5:c3:26:e7:ae:5a:3a:cc:e4:1b:
37:09:64:70:7a:1b:53:fe:1d:59:dd:61:71:3f:7f:58:31:ba:
f5:c2:36:e0:ee:6e:c2:2a:2b:c3:13:d8:9e:79:4c:06:cc:09:
fb:58:90:89:13:b8:03:46:f6:7f:2d:70:66:30:e1:93:e0:9a:
3c:76:4f:78:be:9f:0e:1d:32:ba:db:f1:07:50:03:22:af:c0:
cb:b3:9a:70:af:67:cb:07:ef:8b:e1:8e:21:d7:e1:f7:78:8e:
18:53:15:35:c5:65:2e:4f:fc:bd:11:49:68:63:50:58:eb:24:
98:f4:41:d0:df:58:68:34:d5:6a:c2:1c:68:d2:64:0d:8c:9d:
18:48:54:a7:6f:2c:20:1d:37:2f:7e:8a:ab:24:a3:6a:e5:05:
a7:3a:e8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:16:52 2025 by rpki-client