Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/0/323830343a3464383a3a2f33322d3336203d3e203532393935.roa
File: 323830343a3464383a3a2f33322d3336203d3e203532393935.roa (raw, json)
Hash identifier: Zx9SARtEutr/4XG07U8c0lmHXyWa2b2IBeaUMznjpZg=
Subject key identifier: 5B:D4:DF:DF:7C:E4:AB:A2:A4:1F:52:BD:A8:BA:92:23:24:E2:E6:E8
Certificate issuer: /CN=1E5F9067846F1D128DA384BACDA2B1C825AAB969
Certificate serial: 4F78278CF1E42ADD81143047D88FE4B7BAE75B83
Authority key identifier: 1E:5F:90:67:84:6F:1D:12:8D:A3:84:BA:CD:A2:B1:C8:25:AA:B9:69
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E5F9067846F1D128DA384BACDA2B1C825AAB969.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/0/323830343a3464383a3a2f33322d3336203d3e203532393935.roa
Signing time: Fri 28 Mar 2025 17:04:49 +0000
ROA not before: Fri 28 Mar 2025 16:59:49 +0000
ROA not after: Fri 27 Mar 2026 17:04:49 +0000
asID: 52995
IP address blocks: 2804:4d8::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:78:27:8c:f1:e4:2a:dd:81:14:30:47:d8:8f:e4:b7:ba:e7:5b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E5F9067846F1D128DA384BACDA2B1C825AAB969
Validity
Not Before: Mar 28 16:59:49 2025 GMT
Not After : Mar 27 17:04:49 2026 GMT
Subject: CN=5BD4DFDF7CE4ABA2A41F52BDA8BA922324E2E6E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:28:df:a5:fd:d6:9d:09:8c:73:aa:98:b9:b6:
b2:ae:5b:01:5d:fb:e4:89:c3:1a:41:70:8a:4d:35:
9c:21:14:c1:ea:21:d4:35:35:bb:6b:ab:fd:a5:f9:
b3:bc:24:ae:d2:43:e5:56:84:78:f2:ac:77:90:cb:
a8:6d:b2:ed:90:44:6f:38:e8:d2:1f:55:ae:29:41:
fb:86:ab:d2:1e:51:c2:1f:d3:e4:ce:d4:f3:b6:06:
36:41:b4:ca:54:14:f0:45:a2:55:81:8c:fc:1c:58:
96:a0:c7:fd:c3:0f:55:05:6a:b2:f5:a1:0b:c0:a0:
6c:36:14:cd:25:4d:1a:da:76:0a:96:c5:03:58:83:
2f:4f:c5:c5:66:0d:be:34:18:37:5e:32:a2:ea:11:
2e:c2:80:35:13:e3:04:3c:59:d6:4e:c2:b8:01:fa:
61:07:79:42:b9:73:5b:2c:20:44:fe:21:77:f5:d4:
24:41:4c:18:96:ef:48:b4:34:1a:54:07:75:e7:24:
f5:84:a6:27:7b:ed:38:39:6e:7a:35:15:43:68:50:
07:c1:2f:6f:01:08:e6:e8:ca:0a:b9:84:cc:44:81:
8b:28:35:46:39:17:3e:57:46:1e:f1:57:2c:ac:0a:
c8:df:9e:d8:62:c5:fa:c4:b3:b2:7a:bc:9e:4e:98:
c6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D4:DF:DF:7C:E4:AB:A2:A4:1F:52:BD:A8:BA:92:23:24:E2:E6:E8
X509v3 Authority Key Identifier:
keyid:1E:5F:90:67:84:6F:1D:12:8D:A3:84:BA:CD:A2:B1:C8:25:AA:B9:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/0/1E5F9067846F1D128DA384BACDA2B1C825AAB969.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E5F9067846F1D128DA384BACDA2B1C825AAB969.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/0/323830343a3464383a3a2f33322d3336203d3e203532393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4d8::/32
Signature Algorithm: sha256WithRSAEncryption
04:7a:83:d8:1b:20:e9:e9:ff:52:ad:a1:be:c1:a4:ba:ec:0b:
bc:1c:2c:b5:56:52:c3:e7:bc:3d:c5:dd:0c:a8:2a:9e:37:91:
00:f7:c4:4f:5d:75:0f:b2:b1:8f:00:a8:7c:fe:4d:ef:75:a0:
0b:3f:c6:69:a2:6d:a2:36:d3:4b:66:0e:c6:a6:59:0f:49:9b:
f6:84:a1:0d:4a:68:37:34:77:aa:5d:97:33:df:c4:fb:df:3c:
f6:9c:ea:fe:ec:dc:b8:a9:f9:ba:a9:7e:ed:d5:d1:c8:46:df:
c8:3c:91:c8:9f:23:5c:02:bc:19:d8:ed:32:62:af:d5:c3:4a:
29:e8:ce:45:ed:6b:0e:83:7c:7e:9a:67:51:b5:fb:93:93:5e:
79:83:16:ff:b2:60:bf:ca:ae:85:6f:cb:e8:9c:88:2c:ed:b6:
c0:20:a6:03:52:10:fe:37:59:df:59:25:0f:93:2d:39:74:a9:
0e:40:17:ac:6a:88:26:81:4a:27:b9:67:f4:d1:47:87:cd:2d:
6b:48:bd:65:8d:e0:1b:51:2c:4f:9d:1e:b7:7a:38:a1:4f:16:
fc:9c:72:c9:52:e5:fa:48:0d:84:ac:04:3a:89:17:94:6c:a3:
d8:99:99:32:c2:b2:3e:f8:b8:10:f0:1e:d8:16:4e:a5:c5:79:
ed:5b:21:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 18:32:56 2025 by rpki-client