Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a383030303a3a2f33342d3334203d3e203631353932.roa
File: 323830343a346333343a383030303a3a2f33342d3334203d3e203631353932.roa (raw, json)
Hash identifier: QXiQ7MW7rtrSyGhUM7VHETO2tKZWmwGkeSE3AWc44jA=
Subject key identifier: 5D:A9:1C:28:C5:6B:15:9D:39:19:65:75:3D:B8:B8:B2:4D:A4:24:DE
Certificate issuer: /CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
Certificate serial: 5461CFF8719EB7B2ABEAD8F045150C67CE78D00A
Authority key identifier: 45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a383030303a3a2f33342d3334203d3e203631353932.roa
Signing time: Wed 12 Feb 2025 14:31:03 +0000
ROA not before: Wed 12 Feb 2025 14:26:03 +0000
ROA not after: Wed 11 Feb 2026 14:31:03 +0000
asID: 61592
IP address blocks: 2804:4c34:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:61:cf:f8:71:9e:b7:b2:ab:ea:d8:f0:45:15:0c:67:ce:78:d0:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
Validity
Not Before: Feb 12 14:26:03 2025 GMT
Not After : Feb 11 14:31:03 2026 GMT
Subject: CN=5DA91C28C56B159D391965753DB8B8B24DA424DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:61:ce:df:b5:bd:58:6e:6f:07:6e:93:c9:08:
27:c8:e7:fc:7a:f2:ba:50:53:92:07:d7:7d:99:29:
44:ce:59:a2:13:08:61:12:bd:04:8b:5c:84:73:1a:
04:10:9b:35:35:2d:03:1d:fe:8e:81:26:f8:0e:98:
72:79:f2:9b:5b:97:ba:9e:03:72:db:05:d2:a3:a8:
a8:06:18:eb:8c:3d:9f:00:ee:7c:ef:19:92:f4:72:
48:ec:5d:9f:18:c4:72:6b:06:b7:25:59:02:4e:8e:
da:c8:c5:6a:d1:34:41:95:df:6a:5e:08:32:0c:d7:
7f:40:f2:e3:87:e4:1c:d8:21:6a:30:19:7e:eb:87:
ee:36:80:58:94:03:f3:a1:e1:09:aa:1a:be:f2:3a:
f4:22:83:24:78:08:3e:10:61:72:8e:c7:8b:a1:79:
87:47:06:be:26:8b:a1:34:15:9b:ec:84:0e:19:d1:
4a:ec:7c:a1:59:05:5f:50:86:65:b0:c9:08:62:6b:
33:2a:80:b2:58:05:a0:28:ca:96:cc:59:af:4b:4c:
3f:57:57:01:59:d8:73:8c:4b:33:b6:58:3e:6d:e8:
01:de:57:a4:77:a5:44:71:dc:33:19:96:3b:de:3b:
18:fe:af:d5:77:79:59:5a:92:fb:0a:13:91:19:22:
35:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A9:1C:28:C5:6B:15:9D:39:19:65:75:3D:B8:B8:B2:4D:A4:24:DE
X509v3 Authority Key Identifier:
keyid:45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a383030303a3a2f33342d3334203d3e203631353932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4c34:8000::/34
Signature Algorithm: sha256WithRSAEncryption
5f:49:25:ed:13:0f:d8:29:96:df:1a:c8:31:6d:1d:c3:c3:07:
2f:a9:4a:31:b2:d0:dd:b1:eb:b1:17:5c:35:71:84:a7:e9:67:
cf:71:2c:3f:3a:3f:60:ad:8a:20:e3:f8:a2:ec:0b:54:a9:13:
d0:c9:df:94:55:75:31:c2:eb:06:b6:1d:0f:c4:be:6c:aa:5e:
9b:11:b4:17:98:58:1b:95:79:73:83:8d:12:09:7e:b5:04:6e:
91:c6:a6:00:52:5f:d8:8d:6c:ee:b9:3c:0f:58:9b:f9:4e:1a:
15:e9:8b:ca:c8:e7:a8:53:bd:98:5b:6d:9f:b8:0b:6b:eb:76:
f0:b2:d5:d0:d5:8d:40:27:3f:69:6b:36:9a:ba:5a:ef:d5:fe:
a5:ec:c0:d1:52:1c:8c:e7:84:00:1b:f1:c2:9a:6d:62:f5:0d:
48:e4:6e:e9:49:8e:48:67:11:ec:be:3d:d5:3e:ca:02:01:c5:
6d:81:74:e6:ca:0d:98:ec:47:2f:dc:b1:e0:02:be:f5:86:2c:
a1:70:dc:51:12:61:57:b3:63:ea:bf:00:f4:7f:e3:00:75:21:
6e:6c:a9:3c:34:76:ee:0d:67:b3:c2:28:66:33:36:2a:18:d6:
24:41:a8:fd:63:5b:c4:60:00:66:73:10:a3:91:9c:25:4b:e0:
eb:dc:79:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:53:17 2025 by rpki-client