Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/323830343a356562383a3a2f33322d3336203d3e20323632383636.roa
File: 323830343a356562383a3a2f33322d3336203d3e20323632383636.roa (raw, json)
Hash identifier: WAfKCOz4yWM5A0V6rG36aEqOu04Md0bG3lwifJ136po=
Subject key identifier: 8E:38:77:A2:54:F6:59:B1:4D:6B:2C:8F:04:92:72:90:67:6B:35:AC
Certificate issuer: /CN=732B1140085142A7D7474788EEF465DEABBE5080
Certificate serial: 0A5E1558B57AF5438A810BAEBD0C03C0DEC23674
Authority key identifier: 73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/323830343a356562383a3a2f33322d3336203d3e20323632383636.roa
Signing time: Thu 06 Mar 2025 01:21:39 +0000
ROA not before: Thu 06 Mar 2025 01:16:39 +0000
ROA not after: Thu 05 Mar 2026 01:21:39 +0000
asID: 262866
IP address blocks: 2804:5eb8::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:5e:15:58:b5:7a:f5:43:8a:81:0b:ae:bd:0c:03:c0:de:c2:36:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=732B1140085142A7D7474788EEF465DEABBE5080
Validity
Not Before: Mar 6 01:16:39 2025 GMT
Not After : Mar 5 01:21:39 2026 GMT
Subject: CN=8E3877A254F659B14D6B2C8F04927290676B35AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:06:f0:c6:e3:af:ae:ca:47:1d:a3:05:6e:87:
0f:88:03:b4:67:2c:6b:08:fe:5c:a0:94:ac:50:32:
4a:67:3f:14:c7:13:08:d9:4d:d3:b6:d3:f3:06:54:
c1:23:36:58:85:83:c0:a5:4b:c1:e7:8a:8d:78:a7:
18:58:65:34:32:ca:09:17:dd:fc:59:96:b2:16:eb:
1b:4e:52:17:24:4b:43:f9:17:c4:5e:e1:cb:5e:7f:
f2:a5:61:8d:c1:db:db:09:c7:33:bd:d4:4a:07:41:
f5:c2:47:2c:34:f8:30:a0:33:bd:7d:fa:a0:0c:d5:
87:09:a3:8b:94:70:ba:48:c9:6a:16:68:04:62:e3:
3a:97:e3:b8:c1:6e:23:a9:64:91:46:38:0a:70:60:
f3:7f:7b:17:09:d8:5d:70:0d:82:6d:17:af:7e:62:
85:42:81:d8:d9:1e:9b:c7:53:d9:eb:c2:d1:32:39:
a7:3a:7a:5f:c6:78:5c:8c:5f:db:a6:53:0c:8b:6c:
97:7e:a9:a8:c1:0f:ad:9a:b6:24:e8:7f:72:8b:ff:
63:ad:f5:9d:a8:46:4a:7d:3d:65:f9:88:d4:64:d8:
e3:ae:86:9b:21:a4:fa:cd:e9:81:b3:0d:0e:86:39:
c7:db:ca:32:03:34:75:5c:ca:98:af:9a:33:11:49:
94:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:38:77:A2:54:F6:59:B1:4D:6B:2C:8F:04:92:72:90:67:6B:35:AC
X509v3 Authority Key Identifier:
keyid:73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/323830343a356562383a3a2f33322d3336203d3e20323632383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5eb8::/32
Signature Algorithm: sha256WithRSAEncryption
2e:bd:f3:6e:48:70:9e:04:3b:af:53:28:84:d6:c8:6d:1c:67:
50:a0:f8:73:2d:fc:6b:8f:cb:cd:8c:8d:93:a6:c0:cc:25:9c:
b7:bf:b6:df:a5:bf:6a:7b:09:79:d4:ea:23:62:f3:54:ad:d5:
14:c1:ba:4d:e2:95:6c:d4:19:57:ee:cb:cd:1c:d8:8a:7b:96:
f0:c0:aa:45:2c:c6:2b:a0:7f:37:86:8f:d7:cd:ed:0e:3f:66:
78:7a:b8:10:58:45:a3:f2:55:ac:64:6e:9b:2f:ba:90:7a:d0:
d0:c3:f4:f8:74:2d:d7:78:a6:68:3e:ff:4e:d1:cf:39:4b:0e:
87:5d:62:c8:3e:0d:e5:b2:a6:c0:ae:b2:e9:9e:22:04:69:18:
44:1b:4c:a9:f8:2f:6a:a0:ac:24:cc:84:26:70:1c:09:12:22:
bc:22:91:f2:fa:a3:19:aa:a0:35:65:44:ff:94:c6:06:70:a5:
f7:4b:c4:7a:87:27:54:f6:70:da:56:75:eb:28:9d:e5:5d:b2:
d4:c0:3b:59:af:48:2d:c5:13:2d:0f:c2:2e:89:b0:72:d8:10:
85:3b:e5:da:a8:e2:12:15:27:c6:ea:0c:a7:26:e9:8a:de:33:
39:09:3a:32:47:27:d8:72:1e:a6:04:b7:0c:2c:44:92:18:ab:
f4:96:3b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:27:16 2025 by rpki-client