Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a3a2f33362d3336203d3e20323637393432.roa
File: 323830343a353539303a3a2f33362d3336203d3e20323637393432.roa (raw, json)
Hash identifier: XbsxXc8CiAn7jNVZsezg02m4IUuPY3INwGJ7WE0RTpg=
Subject key identifier: 24:7B:9B:ED:4B:06:65:FE:6F:78:26:26:6B:4D:A7:49:A0:21:50:8F
Certificate issuer: /CN=0FD65004E7C4085F2D33DF17345261EDD9B3A811
Certificate serial: 0FC9774C3CEE979A4C2756AAC5F68226224C2D59
Authority key identifier: 0F:D6:50:04:E7:C4:08:5F:2D:33:DF:17:34:52:61:ED:D9:B3:A8:11
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FD65004E7C4085F2D33DF17345261EDD9B3A811.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a3a2f33362d3336203d3e20323637393432.roa
Signing time: Wed 26 Mar 2025 16:49:38 +0000
ROA not before: Wed 26 Mar 2025 16:44:38 +0000
ROA not after: Wed 25 Mar 2026 16:49:38 +0000
asID: 267942
IP address blocks: 2804:5590::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:c9:77:4c:3c:ee:97:9a:4c:27:56:aa:c5:f6:82:26:22:4c:2d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FD65004E7C4085F2D33DF17345261EDD9B3A811
Validity
Not Before: Mar 26 16:44:38 2025 GMT
Not After : Mar 25 16:49:38 2026 GMT
Subject: CN=247B9BED4B0665FE6F7826266B4DA749A021508F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a2:fb:7a:bf:6b:52:c6:69:1d:91:be:16:51:
92:d7:d0:b0:e5:2c:dc:66:24:a4:e3:b9:c4:63:e4:
4a:e1:aa:09:19:7a:74:99:9e:38:65:8b:3b:60:8c:
84:e0:e1:54:10:6d:bb:3e:cd:58:01:2d:55:a7:08:
31:fd:b4:54:23:f1:76:31:e0:8f:ba:ea:a8:07:92:
e6:34:1e:20:96:85:ec:b2:0f:53:30:94:13:a0:ee:
3e:b5:6a:f8:9b:cc:16:a8:da:91:4f:ae:00:80:30:
78:f9:03:be:74:26:84:c9:77:55:45:16:29:56:e8:
04:6d:1f:a4:78:07:46:43:a4:ba:78:81:b4:72:0c:
39:51:77:f0:1e:31:80:a7:e2:76:0c:0a:a9:ad:66:
ec:fa:bb:65:42:b6:95:ba:70:7d:c5:40:d3:bc:e1:
56:1f:fe:66:55:87:a2:e4:6d:14:7f:8a:20:c9:3a:
42:08:56:85:32:f0:a3:4b:ca:22:08:a7:6e:4d:cd:
a2:e1:94:3e:77:17:7e:bb:1e:31:0e:84:a5:54:94:
41:32:c7:37:15:06:60:fb:84:5e:0b:16:29:00:be:
bf:c7:db:50:77:7b:cd:07:ba:44:01:6b:d4:a8:44:
4f:c8:db:f9:82:6f:fa:94:17:9e:62:f6:70:01:90:
d0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7B:9B:ED:4B:06:65:FE:6F:78:26:26:6B:4D:A7:49:A0:21:50:8F
X509v3 Authority Key Identifier:
keyid:0F:D6:50:04:E7:C4:08:5F:2D:33:DF:17:34:52:61:ED:D9:B3:A8:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/0FD65004E7C4085F2D33DF17345261EDD9B3A811.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FD65004E7C4085F2D33DF17345261EDD9B3A811.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a3a2f33362d3336203d3e20323637393432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5590::/36
Signature Algorithm: sha256WithRSAEncryption
90:32:fc:fd:ed:41:ba:10:e3:db:49:8e:2f:e4:4c:db:37:f0:
20:52:1e:8b:db:89:86:95:a0:64:61:e0:fe:e0:52:7f:c5:b7:
6e:85:71:52:b9:d9:b8:06:96:e0:e7:ba:5c:27:9d:ee:0a:5e:
80:43:5f:7a:1a:d3:ef:0c:19:0a:75:8f:63:cc:58:09:dd:e5:
5e:55:48:a0:3f:82:76:e2:9d:7e:3d:fc:c0:54:2c:16:3e:8c:
66:7d:c4:04:53:30:ab:8b:6b:f8:b4:fc:e5:11:dc:03:ce:30:
52:a9:d9:08:8a:a1:f7:1e:87:3b:d8:07:4c:cc:5d:1d:3c:f4:
be:01:11:95:67:24:8e:38:3a:9e:3f:15:11:9e:8c:86:5e:92:
b9:3b:c0:97:c7:19:19:b7:f4:40:24:b6:39:1b:fd:6d:b5:80:
6a:95:1e:21:17:3e:de:db:17:a1:2a:b6:19:52:29:91:e0:d3:
dc:7a:96:a0:92:1c:c5:97:42:08:33:7d:ea:7c:12:83:25:24:
45:7e:77:84:d0:a6:39:9c:12:e4:05:d3:13:90:85:89:3d:f6:
78:fb:5e:c1:fc:b1:1f:6f:51:3b:be:15:1b:ae:9f:63:68:56:
b7:d2:95:bc:b7:66:fb:2e:7a:00:37:2e:61:67:5d:c8:94:04:
c4:e1:13:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:03:05 2025 by rpki-client