Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a343030303a3a2f33362d3336203d3e20323637393432.roa
File: 323830343a353539303a343030303a3a2f33362d3336203d3e20323637393432.roa (raw, json)
Hash identifier: vzS96SJQHZDCY6QhYNE+ZJzh44zzWWGxjx77HIgewj0=
Subject key identifier: 4B:EF:C0:C2:DC:C6:68:81:DE:82:BF:B1:FB:14:5F:21:AF:75:85:F0
Certificate issuer: /CN=0FD65004E7C4085F2D33DF17345261EDD9B3A811
Certificate serial: 0F68C83774A4EC38A93C5EEF1743D62CB64D40C7
Authority key identifier: 0F:D6:50:04:E7:C4:08:5F:2D:33:DF:17:34:52:61:ED:D9:B3:A8:11
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FD65004E7C4085F2D33DF17345261EDD9B3A811.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a343030303a3a2f33362d3336203d3e20323637393432.roa
Signing time: Wed 26 Mar 2025 16:49:56 +0000
ROA not before: Wed 26 Mar 2025 16:44:56 +0000
ROA not after: Wed 25 Mar 2026 16:49:56 +0000
asID: 267942
IP address blocks: 2804:5590:4000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:68:c8:37:74:a4:ec:38:a9:3c:5e:ef:17:43:d6:2c:b6:4d:40:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FD65004E7C4085F2D33DF17345261EDD9B3A811
Validity
Not Before: Mar 26 16:44:56 2025 GMT
Not After : Mar 25 16:49:56 2026 GMT
Subject: CN=4BEFC0C2DCC66881DE82BFB1FB145F21AF7585F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e5:88:2b:3b:b2:62:00:dc:48:4a:01:b1:8e:
d8:44:c6:5e:84:4b:a3:4a:d9:bd:78:f5:d9:7e:82:
b3:2c:ab:20:28:a1:17:13:72:13:df:db:68:15:bc:
b2:4b:c2:1f:4d:84:67:8e:9e:3f:11:66:40:cf:57:
30:37:2d:58:cb:10:b1:33:5c:08:93:02:d9:5c:52:
85:3d:8a:a4:91:05:97:d5:b1:02:c1:a8:e1:4a:61:
8a:d1:c7:15:5e:19:80:72:99:15:88:05:f5:55:b2:
42:5a:27:54:69:83:17:f3:1b:55:4d:cc:a6:73:07:
68:99:c2:bd:7b:2d:80:55:1b:0a:10:23:61:fc:99:
8e:46:20:f8:45:4e:d0:76:63:c9:6f:9a:82:9a:33:
19:c1:5f:c1:d3:a3:de:81:cf:5b:65:d7:81:10:94:
78:74:2f:af:01:3a:cc:40:eb:41:72:5a:93:26:45:
ba:69:06:2e:40:ff:30:cb:76:42:9c:80:d0:58:26:
6a:d8:8e:a8:d2:cb:dc:21:22:9d:74:91:19:11:84:
9d:fb:cc:61:6f:3a:82:68:2f:ba:f1:30:a1:da:e0:
9c:9f:41:1a:96:97:f3:d5:ec:ab:30:42:6a:32:b2:
18:37:6c:f6:92:bb:80:b4:05:7c:ca:f7:88:e7:33:
50:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EF:C0:C2:DC:C6:68:81:DE:82:BF:B1:FB:14:5F:21:AF:75:85:F0
X509v3 Authority Key Identifier:
keyid:0F:D6:50:04:E7:C4:08:5F:2D:33:DF:17:34:52:61:ED:D9:B3:A8:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/0FD65004E7C4085F2D33DF17345261EDD9B3A811.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FD65004E7C4085F2D33DF17345261EDD9B3A811.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a343030303a3a2f33362d3336203d3e20323637393432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5590:4000::/36
Signature Algorithm: sha256WithRSAEncryption
34:84:13:98:1f:a3:df:80:3c:c4:6e:eb:42:85:87:7f:4c:99:
30:73:95:c3:cb:bc:b5:3e:af:c5:bb:3b:64:22:0c:19:ec:dc:
4d:13:7a:15:b5:19:37:c8:35:d6:cd:19:0b:16:a7:cf:b5:8b:
a8:f4:ce:ea:0d:bf:d2:44:c6:1c:c6:d0:45:ae:61:6d:0e:48:
33:21:b3:1f:8d:77:f3:b6:f8:ff:a4:33:c2:67:46:7b:a2:7d:
ad:71:00:3a:60:b3:62:61:78:da:0c:df:51:40:90:ae:ad:7b:
2f:16:6a:44:96:f1:8f:23:3c:54:44:49:f6:6a:32:8b:73:11:
9d:df:e6:0c:95:84:16:ee:9b:a3:db:63:01:ac:31:01:f5:1e:
d0:de:7a:6a:0f:e0:0a:32:8c:e8:e3:c7:33:07:f9:5d:48:4d:
8c:67:5f:79:01:bd:66:a8:fb:44:89:b6:c8:d5:fa:30:f0:06:
7c:8c:15:cc:37:c9:c8:c3:0b:7d:78:47:24:bd:d3:85:81:7c:
db:9d:38:37:89:79:35:13:10:f2:0d:be:cf:4a:18:4d:2f:57:
b5:d9:00:97:43:63:e1:94:c6:eb:f7:f4:df:f7:4a:2a:02:bd:
1a:f0:7b:47:86:a0:5c:88:1f:65:fc:70:ad:d1:45:e6:b4:b7:
5a:e4:7a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:07:47 2025 by rpki-client