Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/323830343a313732343a3a2f33322d3332203d3e20323633313236.roa
File: 323830343a313732343a3a2f33322d3332203d3e20323633313236.roa (raw, json)
Hash identifier: xsPWu5Oyc8zYvFSpUQl6AyPy98auaRdocgkmpbAT+rI=
Subject key identifier: 5A:4D:41:39:47:49:98:62:81:3B:16:B6:EF:1E:07:FC:72:80:AE:96
Certificate issuer: /CN=4CA21A8D928CABC0C9EF13850635B31EAF3C2642
Certificate serial: 016E88C63397C282EAE2686CCA0E2E6D924B319A
Authority key identifier: 4C:A2:1A:8D:92:8C:AB:C0:C9:EF:13:85:06:35:B3:1E:AF:3C:26:42
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.cer
Subject info access: rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/323830343a313732343a3a2f33322d3332203d3e20323633313236.roa
Signing time: Wed 05 Mar 2025 19:00:14 +0000
ROA not before: Wed 05 Mar 2025 18:55:14 +0000
ROA not after: Wed 04 Mar 2026 19:00:14 +0000
asID: 263126
IP address blocks: 2804:1724::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:6e:88:c6:33:97:c2:82:ea:e2:68:6c:ca:0e:2e:6d:92:4b:31:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4CA21A8D928CABC0C9EF13850635B31EAF3C2642
Validity
Not Before: Mar 5 18:55:14 2025 GMT
Not After : Mar 4 19:00:14 2026 GMT
Subject: CN=5A4D413947499862813B16B6EF1E07FC7280AE96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ac:0d:3a:cc:21:fc:f5:1c:54:76:fe:ab:bd:
3f:51:21:6f:d4:77:9b:66:c2:48:75:6f:56:41:11:
44:26:9a:0c:09:7d:5a:f9:35:17:a5:ac:0d:ca:26:
25:90:71:e3:57:7e:23:ff:3e:d9:49:4b:4b:0f:41:
c9:12:f8:a0:39:08:c5:e3:c7:9d:65:e2:d9:4e:72:
fb:db:fc:ae:72:9d:17:1a:50:6c:6d:1b:be:29:4d:
60:12:58:3a:d7:93:7a:30:91:d9:63:f0:70:6b:95:
d5:13:5c:54:4e:d9:10:1d:d0:bf:cb:12:74:d6:70:
9b:16:12:52:66:fb:f4:76:a5:9a:d1:76:69:82:ca:
65:7b:ac:ee:37:91:fa:e3:54:cd:6e:90:3b:6e:02:
7d:87:5f:e5:8d:cc:d1:60:0c:53:aa:01:80:7a:d5:
a9:fb:97:9b:40:63:d8:28:19:e1:bf:ed:cb:d5:39:
69:22:7f:5f:73:d0:b1:81:8c:e2:af:e8:f5:97:ca:
84:a8:33:e2:d4:53:8b:e5:3b:a2:ae:10:45:f1:29:
6a:1b:e8:c2:dd:c7:03:25:02:7a:79:a3:21:67:a0:
7e:e8:a1:33:84:97:28:6d:1a:14:5b:39:7e:13:1e:
63:71:dd:56:5b:6e:a0:5b:d4:17:42:8f:ed:07:21:
38:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4D:41:39:47:49:98:62:81:3B:16:B6:EF:1E:07:FC:72:80:AE:96
X509v3 Authority Key Identifier:
keyid:4C:A2:1A:8D:92:8C:AB:C0:C9:EF:13:85:06:35:B3:1E:AF:3C:26:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/323830343a313732343a3a2f33322d3332203d3e20323633313236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1724::/32
Signature Algorithm: sha256WithRSAEncryption
81:a2:37:1f:30:bc:3c:b7:58:3e:98:89:69:17:f3:08:27:67:
9c:6b:44:dd:58:ae:6f:57:db:6d:cb:75:a7:2c:42:46:84:d8:
23:63:17:e3:36:22:50:0a:24:c3:87:c9:13:bb:78:bb:15:ad:
d0:b6:33:11:2e:75:a1:03:64:6c:b5:2b:f0:96:ad:3e:d0:ad:
2e:2e:ca:f0:cc:de:b1:f2:23:22:a2:72:0c:0d:93:b9:37:e3:
fc:a3:51:02:32:a8:2d:1c:7b:32:5c:f1:b4:1d:a8:c4:04:60:
42:62:02:d9:a1:fb:ee:5f:c6:fe:e2:2c:9b:58:92:21:74:43:
b6:90:f2:37:00:02:b6:37:53:c3:3f:c5:85:7a:be:ae:42:de:
b7:d0:70:af:e9:4d:2f:a0:d6:6e:27:c4:c4:40:9f:7f:4c:41:
6d:3d:ca:75:50:0a:f3:27:2b:38:dc:a6:9b:11:97:19:6b:85:
81:e9:5a:f2:47:8b:98:3d:d8:95:03:3d:5a:5e:c1:56:e6:a4:
b5:45:ee:91:d4:2f:3e:21:02:79:e9:1c:a9:1b:56:bb:c2:21:
e6:fe:32:c1:1d:bd:c7:47:32:b0:fc:ff:9c:08:8d:2e:bc:70:
be:e1:9d:12:e0:79:1e:56:2b:43:47:30:f5:74:66:21:24:1f:
9a:ff:e8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:30:11 2025 by rpki-client