Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/323830343a326566303a3a2f33332d3333203d3e20323634383632.roa
File: 323830343a326566303a3a2f33332d3333203d3e20323634383632.roa (raw, json)
Hash identifier: CdGpILaUxuDeCnjA0pMkKwCqYI/tzt4bnqg5trZIyL8=
Subject key identifier: 8B:DE:4E:91:31:0C:0A:95:4B:08:01:71:A8:D4:73:A7:84:96:08:8D
Certificate issuer: /CN=68990E6100D2FF0A00146743F6D743C3A3C7944B
Certificate serial: 60460DB4FBAEEB62F9387C1CED0ACA1D21248048
Authority key identifier: 68:99:0E:61:00:D2:FF:0A:00:14:67:43:F6:D7:43:C3:A3:C7:94:4B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68990E6100D2FF0A00146743F6D743C3A3C7944B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/323830343a326566303a3a2f33332d3333203d3e20323634383632.roa
Signing time: Tue 25 Mar 2025 20:35:24 +0000
ROA not before: Tue 25 Mar 2025 20:30:24 +0000
ROA not after: Tue 24 Mar 2026 20:35:24 +0000
asID: 264862
IP address blocks: 2804:2ef0::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:46:0d:b4:fb:ae:eb:62:f9:38:7c:1c:ed:0a:ca:1d:21:24:80:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68990E6100D2FF0A00146743F6D743C3A3C7944B
Validity
Not Before: Mar 25 20:30:24 2025 GMT
Not After : Mar 24 20:35:24 2026 GMT
Subject: CN=8BDE4E91310C0A954B080171A8D473A78496088D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:da:11:9f:e5:de:c4:ad:65:d7:97:3b:24:b0:
96:e7:3f:22:35:e5:69:c8:b8:ff:89:45:1d:51:4b:
cc:61:b4:96:cc:de:7e:ea:5a:2e:c4:f0:f0:30:1f:
6d:8f:6c:a8:de:c2:50:ce:61:1a:63:56:35:8e:f3:
cc:ed:84:73:cf:8d:96:a1:1a:46:e3:d8:90:72:46:
66:46:6d:19:1d:22:22:b1:1d:73:35:53:71:89:2f:
b4:66:6f:8e:6b:4c:b7:da:03:b8:39:14:2e:ea:00:
21:b2:8d:ea:53:91:cf:06:18:66:32:c5:e5:e5:4e:
58:0d:fc:2c:8c:b8:22:4b:1f:15:f4:98:cf:cf:26:
e7:e9:2a:a9:e5:d7:e3:0e:7b:39:9f:50:d7:12:7b:
66:09:59:a5:c1:41:a8:99:84:cc:ab:6c:1a:bc:14:
52:3a:78:5a:db:11:b9:14:ef:0a:b7:2f:9d:a7:32:
8b:5d:46:d6:ad:87:2b:c4:68:a8:c7:5e:7f:9c:84:
95:d3:fe:da:90:98:9c:20:f5:0d:4e:07:d7:36:34:
0d:5f:4a:4d:6e:7b:a8:55:27:0e:8b:6e:1b:ea:05:
25:f3:34:d7:1d:ee:0a:41:06:39:cb:13:2a:ca:db:
0a:22:26:4f:f0:8c:d9:fb:19:c3:54:f8:22:6a:b3:
9d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:DE:4E:91:31:0C:0A:95:4B:08:01:71:A8:D4:73:A7:84:96:08:8D
X509v3 Authority Key Identifier:
keyid:68:99:0E:61:00:D2:FF:0A:00:14:67:43:F6:D7:43:C3:A3:C7:94:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/68990E6100D2FF0A00146743F6D743C3A3C7944B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68990E6100D2FF0A00146743F6D743C3A3C7944B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/323830343a326566303a3a2f33332d3333203d3e20323634383632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2ef0::/33
Signature Algorithm: sha256WithRSAEncryption
19:cf:1b:58:28:63:e9:35:58:6e:f8:c4:23:c1:19:48:8a:8c:
1e:c0:a5:c2:1d:38:ef:83:d8:5e:11:c3:06:cd:65:1d:e0:69:
df:83:2b:fc:14:71:28:97:05:0a:1d:36:6b:6c:d1:ff:ad:2a:
e4:94:76:5e:a5:b2:fa:7e:e3:45:52:12:ce:f3:a0:c6:e2:1d:
56:c0:a8:13:a6:5e:85:a1:2d:cf:eb:c2:d9:83:48:47:aa:4a:
76:54:d4:59:5c:5d:cf:5d:78:58:99:63:c1:be:d4:a0:c3:56:
f6:7d:d5:e5:8f:73:08:ed:f7:5c:e3:5f:44:50:87:59:9c:3b:
aa:47:32:b3:de:ab:4f:16:e3:09:26:bf:cb:ad:60:10:67:2b:
13:da:d1:d5:f4:57:04:28:79:97:c9:4d:e0:5e:a6:4a:e8:4e:
84:89:85:45:a2:6c:38:7b:9c:ec:c1:e0:06:e3:e0:2f:a0:a1:
a1:be:b7:71:73:cb:d6:c4:59:98:68:b5:46:ba:4c:a2:ec:de:
11:4c:36:81:38:1c:4c:65:64:6d:f9:fc:a8:d5:8d:93:c8:6f:
20:32:b6:c2:a5:09:57:e6:6c:3c:27:f0:20:93:91:ee:a3:54:
68:a7:1f:c7:cf:91:01:99:77:1b:58:fd:03:8d:c6:ec:15:f2:
ca:6e:d7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:13:35 2025 by rpki-client on console.sobornost.net