Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a613030303a3a2f33362d3336203d3e20323637393432.roa
File: 323830343a353539303a613030303a3a2f33362d3336203d3e20323637393432.roa (raw, json)
Hash identifier: VQx5aaXs4X69Gut7Y/7a5oXefH/uwotFTgY6r7rXhB0=
Subject key identifier: 50:9A:49:87:AE:98:D9:A0:CA:BE:E5:F2:DF:54:AD:54:A0:18:B2:A0
Certificate issuer: /CN=0FD65004E7C4085F2D33DF17345261EDD9B3A811
Certificate serial: 693153C70CE080F4520BCDBFD204F2E87EA4C1E0
Authority key identifier: 0F:D6:50:04:E7:C4:08:5F:2D:33:DF:17:34:52:61:ED:D9:B3:A8:11
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FD65004E7C4085F2D33DF17345261EDD9B3A811.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a613030303a3a2f33362d3336203d3e20323637393432.roa
Signing time: Wed 26 Mar 2025 16:50:28 +0000
ROA not before: Wed 26 Mar 2025 16:45:28 +0000
ROA not after: Wed 25 Mar 2026 16:50:28 +0000
asID: 267942
IP address blocks: 2804:5590:a000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:31:53:c7:0c:e0:80:f4:52:0b:cd:bf:d2:04:f2:e8:7e:a4:c1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FD65004E7C4085F2D33DF17345261EDD9B3A811
Validity
Not Before: Mar 26 16:45:28 2025 GMT
Not After : Mar 25 16:50:28 2026 GMT
Subject: CN=509A4987AE98D9A0CABEE5F2DF54AD54A018B2A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2a:87:26:d9:4c:8c:a3:bd:3f:f8:3f:71:4b:
00:3a:5d:5f:e7:11:3d:4b:ab:68:24:9e:7d:ec:89:
8b:48:30:67:31:90:31:a7:c2:57:2f:b1:b0:d5:a8:
83:a5:bd:47:ca:c4:f1:5f:f5:d9:45:01:29:41:88:
68:c4:3a:11:6a:18:30:8f:11:4a:ec:10:4d:3f:28:
2b:71:6f:26:cf:d5:00:73:98:fb:68:0d:f9:80:2a:
c8:53:8b:e0:79:63:51:36:51:7a:72:25:97:c0:40:
09:8f:2f:ee:30:6d:37:c3:ad:92:9c:01:c7:79:b9:
54:dd:f6:48:25:c1:14:46:6a:9b:db:c2:7e:53:87:
6f:bf:19:91:65:5a:34:b9:9e:85:31:41:3c:a7:ad:
ac:bb:81:7e:7b:ef:e1:a4:64:64:a0:6d:4b:59:00:
94:e0:98:db:f2:aa:18:e5:ab:b3:cd:75:77:71:37:
bb:8e:3a:e4:d1:18:9c:c9:a1:3d:27:ab:84:e0:4f:
64:89:9f:b5:5f:ba:43:4b:d6:0d:97:83:16:6c:3c:
e6:19:e5:58:fb:f5:2d:40:93:81:e6:8a:38:97:92:
51:da:61:06:48:00:de:55:3d:d1:5d:f6:79:a6:6f:
b7:20:5a:44:fc:2c:6b:9a:a7:4a:2a:f6:7c:23:46:
33:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9A:49:87:AE:98:D9:A0:CA:BE:E5:F2:DF:54:AD:54:A0:18:B2:A0
X509v3 Authority Key Identifier:
keyid:0F:D6:50:04:E7:C4:08:5F:2D:33:DF:17:34:52:61:ED:D9:B3:A8:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/0FD65004E7C4085F2D33DF17345261EDD9B3A811.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FD65004E7C4085F2D33DF17345261EDD9B3A811.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a613030303a3a2f33362d3336203d3e20323637393432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5590:a000::/36
Signature Algorithm: sha256WithRSAEncryption
9f:fc:30:80:e3:0e:2f:e9:e2:cd:64:6c:74:05:32:72:1c:6f:
c5:c8:fe:75:94:2e:04:6f:15:90:5a:f1:35:8d:53:5c:13:fe:
a7:10:33:b0:78:2f:6b:49:0d:a9:c6:45:66:2d:53:83:ff:6d:
f8:75:3e:03:fe:b9:2d:79:09:70:9f:30:f9:6b:35:f1:2e:d9:
d8:7c:41:8e:40:62:8b:5e:b4:7c:5a:ac:86:aa:a9:74:97:8a:
35:da:ca:5c:e3:e7:06:23:f3:1d:59:1e:96:be:a6:db:de:cc:
05:27:f3:eb:1f:26:6e:4f:30:1a:d6:51:f0:96:55:53:84:45:
c8:16:09:f4:b6:ee:9c:9f:30:35:65:4a:75:6e:be:35:d7:30:
ab:f4:01:d3:d7:38:95:11:3a:31:a2:03:1d:59:51:f7:0c:94:
e8:a5:5d:a8:1a:8b:ea:72:2c:f0:ad:b3:b7:49:8b:b5:26:ab:
52:15:b1:f4:a1:e4:83:e1:13:86:0e:1a:fa:69:77:91:b3:a2:
20:34:e9:42:4c:4c:17:4e:a3:d4:77:8e:12:be:20:92:12:e8:
f7:fc:13:82:a5:54:3e:c3:ad:6c:38:c2:97:65:00:fb:89:8e:
ba:63:68:3d:cd:50:d4:2d:43:f3:c7:90:72:e3:18:74:b9:a8:
23:41:03:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:07:50 2025 by rpki-client