Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/323830343a6664343a3a2f33322d3332203d3e20323633363036.roa
File: 323830343a6664343a3a2f33322d3332203d3e20323633363036.roa (raw, json)
Hash identifier: YcVgO/TqLV2RVsEcY5YxfTDDibwjME6ohrDzPZUeqZ0=
Subject key identifier: C3:57:CD:CF:A5:70:E9:7F:7D:05:4D:E6:84:D2:CE:7D:F4:3E:BB:0A
Certificate issuer: /CN=561575F60242E48030BC35A771871EB47C6EFF55
Certificate serial: 5ABC29E27E234727549EBBF4D5580E62B750A256
Authority key identifier: 56:15:75:F6:02:42:E4:80:30:BC:35:A7:71:87:1E:B4:7C:6E:FF:55
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/561575F60242E48030BC35A771871EB47C6EFF55.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/323830343a6664343a3a2f33322d3332203d3e20323633363036.roa
Signing time: Sat 25 Jan 2025 14:21:51 +0000
ROA not before: Sat 25 Jan 2025 14:16:51 +0000
ROA not after: Sat 24 Jan 2026 14:21:51 +0000
asID: 263606
IP address blocks: 2804:fd4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:bc:29:e2:7e:23:47:27:54:9e:bb:f4:d5:58:0e:62:b7:50:a2:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=561575F60242E48030BC35A771871EB47C6EFF55
Validity
Not Before: Jan 25 14:16:51 2025 GMT
Not After : Jan 24 14:21:51 2026 GMT
Subject: CN=C357CDCFA570E97F7D054DE684D2CE7DF43EBB0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3e:25:95:f8:77:1a:0b:01:db:0b:bc:3e:26:
c0:4b:10:40:f6:7f:e1:72:67:8c:0f:b0:de:74:8b:
e1:09:66:b1:4c:38:96:ef:ef:74:ff:cb:f7:bd:50:
f9:56:ad:39:6d:17:d4:c4:79:b6:b9:de:8d:18:c6:
59:4c:97:ed:64:04:1e:a1:b6:cb:2a:f7:1f:e7:30:
2a:c9:f3:a9:2b:d9:9e:9e:b8:96:23:35:19:3f:36:
76:13:ca:16:56:ef:cb:67:e7:af:91:73:3b:68:4e:
44:6b:19:5d:bd:9e:e3:7e:4f:d4:50:5c:7e:af:64:
d8:11:67:c7:d0:e6:a4:45:41:8c:69:c3:77:ba:85:
c6:4b:9c:02:ec:f6:e3:3d:2e:2d:a2:b3:6a:d2:50:
98:b1:a8:d9:38:f6:28:b9:da:c0:fc:0f:cf:5f:92:
ef:54:58:83:05:cc:65:68:4c:13:77:f7:23:8f:39:
c6:60:8a:cd:29:f0:7b:a2:a5:95:31:0d:c0:3c:3c:
19:76:72:96:cf:ba:e4:8b:b3:14:9b:00:84:6d:19:
d7:97:e2:90:22:34:05:60:81:30:23:d8:8d:5f:52:
47:c6:8c:b6:ca:1f:5d:11:4a:f1:1c:40:6e:ad:f0:
42:2a:0b:f3:a8:a7:e1:29:3c:6f:4d:6a:06:92:39:
c6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:57:CD:CF:A5:70:E9:7F:7D:05:4D:E6:84:D2:CE:7D:F4:3E:BB:0A
X509v3 Authority Key Identifier:
keyid:56:15:75:F6:02:42:E4:80:30:BC:35:A7:71:87:1E:B4:7C:6E:FF:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/561575F60242E48030BC35A771871EB47C6EFF55.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/323830343a6664343a3a2f33322d3332203d3e20323633363036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:fd4::/32
Signature Algorithm: sha256WithRSAEncryption
a7:10:62:0a:83:51:03:89:b1:75:45:b8:6d:44:01:41:1d:35:
4c:7a:8d:1d:b7:e5:86:97:91:e7:ae:66:59:83:67:56:40:c8:
bf:5b:58:2c:17:8d:e5:f3:83:d9:96:e8:b7:b7:77:6c:02:98:
6a:8d:b0:56:e1:7d:a8:55:f4:c9:52:12:0f:d2:a8:61:c4:b7:
c4:50:e3:19:98:ec:61:b1:5c:0e:9a:34:65:ee:38:34:05:53:
ed:d9:45:d6:c0:12:5c:eb:77:37:e8:2a:31:b1:46:77:07:70:
13:11:93:76:38:ac:cf:4d:32:d3:ad:75:a3:40:f5:33:9d:0d:
27:fc:cb:cb:1e:3d:12:f8:8a:49:65:04:78:87:7d:2f:5c:eb:
86:e9:ac:13:37:f5:b8:49:18:e2:a1:54:bf:03:af:f3:80:52:
17:b5:97:49:73:4e:40:4e:d5:3e:e0:e7:42:93:78:08:21:98:
73:cb:12:06:0c:86:5c:d5:43:d3:19:83:25:5a:82:66:cd:0a:
34:dd:d2:a6:d0:35:e2:3d:6d:e4:b0:5d:cd:f9:b5:4e:5e:98:
d7:2b:e2:b3:ea:e1:fd:b2:75:9c:bd:cf:c8:54:69:60:cc:4f:
2d:ba:f3:e0:37:73:aa:f3:9e:92:d3:91:3d:7c:04:be:5c:53:
49:1f:f3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:49:47 2025 by rpki-client