Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a31333a3a2f34382d3438203d3e203631383838.roa
File: 323830343a6536303a31333a3a2f34382d3438203d3e203631383838.roa (raw, json)
Hash identifier: JCy5QX2qDQGToBiOpXcrOVJMBZIZQ3xQsSLWFpJ90ZE=
Subject key identifier: 66:F5:A4:E9:64:ED:E7:A0:99:DF:01:A4:B5:34:29:5B:A3:5B:3B:A5
Certificate issuer: /CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Certificate serial: 5CB258050666492C6575E5EEEA5FFFD906D29682
Authority key identifier: 96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject info access: rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a31333a3a2f34382d3438203d3e203631383838.roa
Signing time: Wed 05 Mar 2025 19:00:04 +0000
ROA not before: Wed 05 Mar 2025 18:55:04 +0000
ROA not after: Wed 04 Mar 2026 19:00:04 +0000
asID: 61888
IP address blocks: 2804:e60:13::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:b2:58:05:06:66:49:2c:65:75:e5:ee:ea:5f:ff:d9:06:d2:96:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Validity
Not Before: Mar 5 18:55:04 2025 GMT
Not After : Mar 4 19:00:04 2026 GMT
Subject: CN=66F5A4E964EDE7A099DF01A4B534295BA35B3BA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0c:ff:7c:23:29:b5:4f:16:57:f8:a1:74:cf:
62:56:53:a2:56:bf:1f:49:c4:e5:41:a0:76:22:79:
05:33:65:2c:f5:3a:80:ff:70:45:38:46:fc:81:62:
8b:92:50:48:ea:83:dc:12:ff:09:60:f6:a0:80:13:
6a:2d:91:77:1c:66:2c:bc:ef:e4:3f:a1:0b:b0:8d:
cc:f0:57:7c:ae:14:83:4a:0c:62:f7:f7:9d:f4:a6:
ce:31:72:e6:5e:d5:d3:b2:c9:aa:ea:9a:b3:12:5d:
de:2c:1c:ee:39:4b:a5:6b:c4:b1:32:b5:28:20:38:
4f:1d:18:a2:a3:9e:6c:95:58:fa:d5:73:7e:f2:cc:
7d:b8:6d:f8:8e:ef:16:42:61:fd:52:79:95:71:0f:
92:e7:70:33:02:3d:c9:d7:5b:3d:03:27:69:d9:bd:
39:fb:29:a2:8d:25:6e:b2:98:5b:e1:94:92:b1:c4:
c2:cc:a4:7f:96:0a:40:9d:13:9f:9e:fb:63:c2:eb:
f1:a6:dd:ca:49:bc:a6:99:cf:88:2a:ba:3a:67:0f:
5a:83:5c:8f:e0:85:c1:a8:2c:9c:68:e2:01:73:ce:
3a:7d:7d:9f:c2:4f:67:dc:e1:22:4f:de:aa:22:a9:
41:34:9b:be:ce:ec:c2:3c:6d:99:74:54:07:b8:52:
c3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F5:A4:E9:64:ED:E7:A0:99:DF:01:A4:B5:34:29:5B:A3:5B:3B:A5
X509v3 Authority Key Identifier:
keyid:96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a31333a3a2f34382d3438203d3e203631383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:e60:13::/48
Signature Algorithm: sha256WithRSAEncryption
3f:25:ce:1e:7e:a5:5d:cb:ae:a1:b1:e6:56:c0:cd:a1:6b:87:
59:fe:91:5d:c9:0c:bb:7e:e2:9a:a6:ec:c9:0a:08:62:6b:84:
a1:94:4c:5d:b3:f5:14:e8:6f:b5:77:57:12:10:98:62:ed:5c:
14:9c:f6:e5:ee:5f:27:e3:89:d7:af:25:36:6f:32:33:05:87:
b8:81:5b:e9:aa:f4:23:26:40:87:02:50:65:c1:7d:70:57:95:
1d:a8:27:fb:de:f1:0d:b0:52:22:bb:0d:6d:86:97:ad:08:58:
09:96:c1:af:ce:60:e1:d3:d5:47:6b:e3:f6:8c:6e:53:ec:3b:
4a:01:c9:ec:bf:40:f0:c3:b4:c0:00:ef:8c:43:7b:6f:1f:3a:
fe:9e:db:1e:eb:41:02:51:05:c5:ac:b9:24:41:07:76:65:c9:
6c:34:af:ec:a0:d0:15:20:5a:22:dc:5e:47:3b:22:7e:28:82:
46:62:c4:b2:1a:62:15:7a:16:be:a7:b1:41:52:95:6f:a1:87:
54:2b:26:15:b7:2a:fa:c6:50:ce:0b:a3:f6:73:b4:4b:44:d0:
5f:f9:d9:ee:cc:5f:38:56:dd:c4:36:f1:f0:6f:3a:d1:13:01:
a4:bf:7c:3f:c8:8e:d9:88:f1:13:a9:58:9e:9a:85:8e:4f:0f:
65:91:e3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:56:02 2025 by rpki-client