Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a633030303a3a2f33352d3335203d3e20323730343430.roa
File: 323830343a366330343a633030303a3a2f33352d3335203d3e20323730343430.roa (raw, json)
Hash identifier: Oyp4LpXx+0XtNiYoGc9L77Aq+lI7C62Au7W1w31Otpc=
Subject key identifier: BF:8B:87:E1:CF:82:9B:F1:B8:CE:2E:5D:6D:57:EE:7C:74:87:70:19
Certificate issuer: /CN=972E69522EA7E06655376241FB13ED39AF30B19D
Certificate serial: 4083831688FF3817EECE312C7C5EF62B0CF187F6
Authority key identifier: 97:2E:69:52:2E:A7:E0:66:55:37:62:41:FB:13:ED:39:AF:30:B1:9D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/972E69522EA7E06655376241FB13ED39AF30B19D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a633030303a3a2f33352d3335203d3e20323730343430.roa
Signing time: Tue 28 Jan 2025 18:18:51 +0000
ROA not before: Tue 28 Jan 2025 18:13:51 +0000
ROA not after: Tue 27 Jan 2026 18:18:51 +0000
asID: 270440
IP address blocks: 2804:6c04:c000::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:83:83:16:88:ff:38:17:ee:ce:31:2c:7c:5e:f6:2b:0c:f1:87:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=972E69522EA7E06655376241FB13ED39AF30B19D
Validity
Not Before: Jan 28 18:13:51 2025 GMT
Not After : Jan 27 18:18:51 2026 GMT
Subject: CN=BF8B87E1CF829BF1B8CE2E5D6D57EE7C74877019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2a:ad:4d:21:d3:e9:8b:6d:4f:e0:b8:41:59:
3d:e3:db:56:4e:bb:a0:aa:3e:79:12:78:a4:b9:7b:
92:9c:03:4d:66:aa:a8:59:d0:15:17:8e:7e:a4:d2:
fe:d0:43:5b:fb:56:14:b8:45:88:9c:69:f1:d4:fa:
76:e9:b5:88:19:f6:ba:13:e8:be:17:71:90:e1:7e:
cc:dd:46:04:ee:fa:af:61:05:43:39:31:df:50:df:
af:51:5a:60:e5:77:92:9d:33:0c:0a:5f:c3:6a:fc:
01:5a:28:d4:f5:fb:f4:e3:15:82:fe:88:fc:c8:4f:
1d:27:bb:02:17:03:b2:4f:1d:15:64:6d:0c:d8:dd:
0b:11:a1:bd:26:7a:fe:1d:ff:49:83:fc:5f:8a:ef:
64:b7:34:8d:ef:be:a4:6b:3c:a1:31:b3:7b:5e:9f:
a5:ec:d0:ce:43:46:c4:90:a8:5e:38:f2:c9:8f:7a:
a5:ce:dc:d6:bf:91:ce:ce:8b:36:37:4a:c4:f8:76:
aa:ff:7d:89:2d:e5:26:7b:25:5b:ae:85:c0:3f:5e:
fd:f5:94:eb:66:73:dd:80:ee:a1:b9:d4:56:80:62:
14:6e:ed:87:42:fe:a7:b8:d2:01:d9:6d:8c:81:92:
9f:13:d0:6e:2f:fc:bf:88:92:78:2f:2a:ef:77:d9:
67:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8B:87:E1:CF:82:9B:F1:B8:CE:2E:5D:6D:57:EE:7C:74:87:70:19
X509v3 Authority Key Identifier:
keyid:97:2E:69:52:2E:A7:E0:66:55:37:62:41:FB:13:ED:39:AF:30:B1:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/972E69522EA7E06655376241FB13ED39AF30B19D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/972E69522EA7E06655376241FB13ED39AF30B19D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a633030303a3a2f33352d3335203d3e20323730343430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6c04:c000::/35
Signature Algorithm: sha256WithRSAEncryption
a2:a2:20:9c:ac:76:8f:7d:89:f6:fb:d7:06:aa:e6:c1:5f:60:
27:65:05:72:f6:c6:e6:04:70:ea:e8:ef:4c:be:39:e6:39:17:
e5:f4:1f:83:56:ca:cf:cd:29:bb:29:a5:26:f2:91:8f:14:c9:
30:c5:33:46:19:a3:4d:9f:f8:ae:40:62:1c:4d:b3:ad:9e:36:
44:8c:f4:8c:03:92:dd:8b:eb:f9:46:ea:a6:a5:81:0b:61:ac:
32:d2:d7:5a:6a:8d:59:d9:62:3d:36:35:f3:af:63:bc:03:0e:
2e:9b:33:49:fe:3f:63:71:ff:d4:77:78:3a:f7:1c:e3:4f:5b:
5f:be:53:ec:83:76:e5:41:ca:cf:9c:44:5c:8b:64:40:a3:40:
04:bf:c5:72:41:78:9f:a1:9f:95:30:38:8b:d1:8c:4f:c2:03:
ff:b3:5b:cc:7f:3d:32:da:0c:ea:8e:e3:69:62:86:e0:17:fc:
8d:1b:fb:46:4b:16:4f:1b:15:d8:84:66:d3:4d:58:56:d4:54:
10:24:06:b5:6e:ea:a7:dc:5a:1e:cc:07:d5:4d:31:a2:eb:f2:
33:12:2f:38:fb:35:28:2c:99:f5:4b:80:5e:b8:66:4d:6b:f2:
ec:7f:13:89:01:71:3d:a1:a6:ec:da:df:e9:35:ca:f1:50:4b:
8b:0a:4a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:52:55 2025 by rpki-client