Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/323830343a313332343a3a2f33322d3332203d3e20323633353138.roa
File: 323830343a313332343a3a2f33322d3332203d3e20323633353138.roa (raw, json)
Hash identifier: dzGCAZPrgOHeJ8jdtBkNimP+h0MZPXHo+Sn9MXmtW4Q=
Subject key identifier: 28:20:B5:C7:B7:AE:CF:B2:09:A9:93:1A:64:9D:64:7F:9D:09:4C:A9
Certificate issuer: /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial: 76E9257A6C4914EC6643A61600E569D07E3BC025
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/323830343a313332343a3a2f33322d3332203d3e20323633353138.roa
Signing time: Thu 23 Jan 2025 20:46:20 +0000
ROA not before: Thu 23 Jan 2025 20:41:20 +0000
ROA not after: Thu 22 Jan 2026 20:46:20 +0000
asID: 263518
IP address blocks: 2804:1324::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:e9:25:7a:6c:49:14:ec:66:43:a6:16:00:e5:69:d0:7e:3b:c0:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Validity
Not Before: Jan 23 20:41:20 2025 GMT
Not After : Jan 22 20:46:20 2026 GMT
Subject: CN=2820B5C7B7AECFB209A9931A649D647F9D094CA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f0:c8:95:88:af:ce:36:f5:a5:45:8f:0d:af:
44:a8:71:cc:3b:eb:96:fd:e5:3c:84:4b:0c:be:54:
d0:ba:4c:ea:f0:af:0a:a4:9f:a6:8f:ab:78:54:1c:
4a:9b:ee:4a:dc:aa:24:56:39:1b:a0:cf:e8:fe:29:
33:ba:de:3d:6b:2c:2f:34:a9:a7:e6:12:cf:9d:eb:
fb:83:b5:c2:35:58:ea:69:3a:59:38:a1:37:f2:89:
6a:50:ab:27:cf:cd:94:16:0b:2f:47:ff:e6:75:10:
a3:8e:ba:28:5b:27:25:b1:81:48:1a:a4:e4:a0:08:
b0:93:59:50:ba:a1:90:1e:41:1b:ae:0c:0f:b8:f3:
29:08:4e:f3:18:87:cc:57:75:43:11:b6:97:1f:45:
1f:45:e1:2c:ae:04:93:28:69:7a:11:ae:c5:06:4f:
28:72:f5:1f:0c:b4:34:a5:0d:f5:3b:99:13:fa:23:
5b:75:4c:b9:9c:ae:d8:35:a4:b8:c6:47:21:92:20:
58:ed:94:6f:87:11:66:a2:ef:65:aa:43:06:3e:39:
59:62:f0:1e:0a:5b:40:36:e4:af:0e:dd:4c:d1:33:
1d:70:37:18:ae:f3:f9:12:4b:79:1c:c0:15:bf:60:
e0:5d:ee:2b:e3:13:40:cc:d8:6b:0b:14:da:e2:85:
d9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:20:B5:C7:B7:AE:CF:B2:09:A9:93:1A:64:9D:64:7F:9D:09:4C:A9
X509v3 Authority Key Identifier:
keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/323830343a313332343a3a2f33322d3332203d3e20323633353138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1324::/32
Signature Algorithm: sha256WithRSAEncryption
a1:52:72:aa:9f:f7:af:87:d2:7b:d4:fc:bf:c7:1a:c4:b7:a5:
f1:4a:35:2a:f3:7a:b6:bb:00:7f:9b:f5:d0:1a:a3:90:fe:71:
e3:df:89:84:1f:dd:a7:2e:80:d9:f7:34:60:ff:06:e7:0b:d5:
bb:29:e9:da:0b:1a:85:02:93:63:4f:85:b1:99:67:52:3b:71:
d2:37:83:93:c9:a0:fc:16:55:64:60:57:6f:d8:e1:d5:49:41:
14:0c:05:77:a7:bc:a8:a8:2a:ff:60:ab:85:5e:e6:60:f1:d4:
3e:ee:e6:5c:24:89:92:a5:48:dc:c6:28:44:5f:24:83:db:48:
b6:0e:ad:0b:06:ef:a9:7d:2e:9a:2e:6e:ce:ea:19:4b:49:19:
42:74:f5:87:fc:92:df:62:ac:e3:8b:fc:3a:24:21:90:15:1a:
87:a4:86:9d:14:e1:92:a6:c5:e0:b2:f7:41:8f:d6:d7:1b:8f:
21:88:d2:4e:f5:4f:53:ab:cd:02:28:ab:9a:b6:1e:76:0c:78:
23:7d:f1:08:8e:e2:a3:2f:ff:c3:9c:4c:ad:86:97:a4:28:ba:
35:32:e5:77:3d:72:d2:28:f3:95:ed:b5:cb:d1:de:83:3d:90:
15:4b:81:28:92:59:b6:38:47:79:ad:6f:4e:1e:85:ce:8a:6b:
c8:5f:60:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:16:42 2025 by rpki-client