Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a633030303a3a2f33372d3337203d3e20323730343430.roa
File: 323830343a366330343a633030303a3a2f33372d3337203d3e20323730343430.roa (raw, json)
Hash identifier: XM8wPEwxcpjUxGw1q3SjHt1fQDUs7Bs05p93zcAbtwk=
Subject key identifier: 94:E9:63:DE:B5:00:B9:C3:65:54:EA:92:2E:70:F4:0A:32:A4:B3:CD
Certificate issuer: /CN=972E69522EA7E06655376241FB13ED39AF30B19D
Certificate serial: 4F737FCE0337FE58C06E0335B2BE67635EFDC4DF
Authority key identifier: 97:2E:69:52:2E:A7:E0:66:55:37:62:41:FB:13:ED:39:AF:30:B1:9D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/972E69522EA7E06655376241FB13ED39AF30B19D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a633030303a3a2f33372d3337203d3e20323730343430.roa
Signing time: Tue 28 Jan 2025 18:18:51 +0000
ROA not before: Tue 28 Jan 2025 18:13:51 +0000
ROA not after: Tue 27 Jan 2026 18:18:51 +0000
asID: 270440
IP address blocks: 2804:6c04:c000::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:73:7f:ce:03:37:fe:58:c0:6e:03:35:b2:be:67:63:5e:fd:c4:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=972E69522EA7E06655376241FB13ED39AF30B19D
Validity
Not Before: Jan 28 18:13:51 2025 GMT
Not After : Jan 27 18:18:51 2026 GMT
Subject: CN=94E963DEB500B9C36554EA922E70F40A32A4B3CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:66:5d:c9:f1:9d:db:85:ad:55:20:53:0b:33:
94:de:de:af:40:03:43:f7:a7:96:95:f4:36:10:e7:
5f:07:6a:5e:c9:09:f7:53:9a:c7:a4:4d:aa:8c:40:
6a:ff:06:92:da:4d:11:f5:b1:fb:bc:d6:ab:a6:c9:
14:45:71:0a:9f:d4:4e:6d:06:0a:d0:0e:7b:7f:67:
75:51:35:e8:fb:07:ba:71:69:9c:ce:f6:6a:33:5c:
8a:22:e2:6c:9d:10:ac:99:0b:bb:e1:2e:ab:b2:b5:
47:30:67:ca:bf:9b:83:db:2a:ea:ea:75:4a:bb:21:
57:b3:df:15:31:f2:61:81:79:4d:61:fc:76:6c:51:
7b:81:c0:2c:db:35:7c:82:b2:e4:00:fb:a0:22:d7:
92:39:07:1b:ea:d7:26:e1:2a:b9:a3:5b:ea:d1:32:
b7:53:60:b6:a3:2c:3b:ba:a4:d0:33:2b:72:62:04:
c5:58:e4:c8:2a:84:aa:3e:e7:4a:ad:a0:52:3f:e0:
fa:d6:f2:68:ce:e8:56:76:a0:5d:51:0f:2d:6b:ef:
e9:4b:39:7f:ae:0a:26:b4:47:7d:96:f7:a1:75:f8:
b2:2f:f0:21:10:9b:b4:9d:e6:6a:03:34:17:6d:e9:
58:51:4d:df:36:b3:16:dc:e9:86:a3:5a:2e:d5:84:
72:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E9:63:DE:B5:00:B9:C3:65:54:EA:92:2E:70:F4:0A:32:A4:B3:CD
X509v3 Authority Key Identifier:
keyid:97:2E:69:52:2E:A7:E0:66:55:37:62:41:FB:13:ED:39:AF:30:B1:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/972E69522EA7E06655376241FB13ED39AF30B19D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/972E69522EA7E06655376241FB13ED39AF30B19D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a633030303a3a2f33372d3337203d3e20323730343430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6c04:c000::/37
Signature Algorithm: sha256WithRSAEncryption
12:48:c7:29:38:2c:ba:ad:4e:9b:7b:55:f3:43:ba:5b:d5:07:
b6:02:c6:26:1c:e6:2f:23:ef:75:e6:27:d7:32:fe:66:e6:a5:
e9:68:93:fe:1f:b2:57:c3:ed:43:94:6c:8a:40:c3:05:35:14:
48:85:64:c9:64:b5:7e:55:79:5d:a7:1a:7b:1f:5e:fb:53:2b:
7a:d0:88:23:40:18:82:56:31:4d:45:ab:f9:42:3d:64:5d:3e:
c5:1b:5a:df:d5:1b:9e:4b:c4:1b:d8:7b:e6:49:5c:b1:52:98:
42:4f:cb:e7:aa:2e:65:8e:5a:5b:34:65:ac:aa:60:a7:c8:c0:
18:ad:fe:3c:28:52:5a:fa:0c:5d:2e:9f:c0:1f:6c:89:3f:8b:
23:9e:ed:72:d5:ae:9d:db:1d:41:7c:92:1a:7e:1e:fa:fb:19:
51:9e:b2:89:a1:06:38:64:dc:aa:ea:d2:bd:a5:1c:9c:12:d0:
b5:58:89:e0:e0:5f:6a:e7:f5:ab:63:37:2c:a8:1e:cb:73:9b:
36:1b:b1:86:8a:66:4f:4c:2f:8e:7d:6c:ab:4e:05:c4:f3:69:
5d:84:c8:7c:a0:4b:39:66:7e:52:c3:28:25:16:fe:90:4c:0a:
20:bb:c5:21:0d:03:52:a3:b0:a0:e3:44:26:98:71:4f:12:50:
eb:74:d0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:52:49 2025 by rpki-client