Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a633030303a3a2f33342d3334203d3e20323637393432.roa
File: 323830343a353539303a633030303a3a2f33342d3334203d3e20323637393432.roa (raw, json)
Hash identifier: TCHxbLJ2+D6gUEd77i1AX9GxCMLyCGCNfAeahw4D94M=
Subject key identifier: A8:91:C0:67:08:89:F6:EA:6C:18:E6:9F:94:30:5A:47:64:05:40:FF
Certificate issuer: /CN=0FD65004E7C4085F2D33DF17345261EDD9B3A811
Certificate serial: 45EE648AFDC6E0D64BA86F6AA82B0AB2C7FBD861
Authority key identifier: 0F:D6:50:04:E7:C4:08:5F:2D:33:DF:17:34:52:61:ED:D9:B3:A8:11
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FD65004E7C4085F2D33DF17345261EDD9B3A811.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a633030303a3a2f33342d3334203d3e20323637393432.roa
Signing time: Wed 26 Mar 2025 16:51:05 +0000
ROA not before: Wed 26 Mar 2025 16:46:05 +0000
ROA not after: Wed 25 Mar 2026 16:51:05 +0000
asID: 267942
IP address blocks: 2804:5590:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:ee:64:8a:fd:c6:e0:d6:4b:a8:6f:6a:a8:2b:0a:b2:c7:fb:d8:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FD65004E7C4085F2D33DF17345261EDD9B3A811
Validity
Not Before: Mar 26 16:46:05 2025 GMT
Not After : Mar 25 16:51:05 2026 GMT
Subject: CN=A891C0670889F6EA6C18E69F94305A47640540FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5c:a3:32:26:b1:3b:06:e7:17:17:d8:ec:50:
c7:75:c3:45:a6:cf:8c:8d:54:3b:3a:f6:1d:4f:70:
49:03:8e:19:15:ad:d8:e5:f5:58:a9:b8:09:dd:30:
ba:0c:d7:9d:b8:29:1f:f0:9e:18:96:ba:0f:78:1d:
5a:7e:5e:4c:3c:1a:da:66:9d:ec:e9:da:03:40:4a:
99:c9:8e:45:93:f9:4f:08:ee:1f:fa:14:c0:cc:15:
cb:47:6e:84:2b:dd:08:3e:d1:81:49:7e:87:3a:6a:
ae:95:60:9a:5b:06:f9:c0:c4:ec:fb:34:88:55:8a:
15:b0:f7:a9:01:7d:6c:f8:b4:b3:31:04:80:9d:76:
5c:88:38:88:5f:17:9f:b1:b2:aa:f8:28:ab:61:27:
79:63:cb:9c:57:ba:f4:f6:2b:ef:bf:35:33:1a:6e:
29:6b:6f:74:7f:fd:0e:8a:fa:0e:26:c4:70:fb:7a:
f6:7d:bb:d7:5b:10:94:2b:d8:3a:2f:77:be:b9:8a:
bf:45:bf:50:52:ce:c9:32:fd:f4:a1:70:db:a5:0d:
a0:93:14:94:5f:77:58:8b:c8:36:81:d5:d7:f8:65:
1c:97:e8:97:70:71:e6:99:d9:82:30:b4:dc:99:a3:
d4:0a:67:f9:5d:0b:db:73:31:e3:94:ba:39:6a:d6:
e9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:91:C0:67:08:89:F6:EA:6C:18:E6:9F:94:30:5A:47:64:05:40:FF
X509v3 Authority Key Identifier:
keyid:0F:D6:50:04:E7:C4:08:5F:2D:33:DF:17:34:52:61:ED:D9:B3:A8:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/0FD65004E7C4085F2D33DF17345261EDD9B3A811.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FD65004E7C4085F2D33DF17345261EDD9B3A811.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a633030303a3a2f33342d3334203d3e20323637393432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5590:c000::/34
Signature Algorithm: sha256WithRSAEncryption
00:d5:83:b9:14:75:9f:90:cb:c7:64:79:b3:f4:32:8a:a5:6b:
e2:25:83:06:91:10:d6:b9:7a:93:fc:06:ad:06:2b:a3:d8:5b:
1b:c7:57:87:6d:53:2d:cb:69:7d:4c:8b:62:b7:3b:80:73:df:
e3:44:3b:37:82:25:27:a1:26:f8:90:e8:71:82:46:87:fd:bb:
55:47:8a:7d:aa:00:5e:88:4c:59:d8:1c:62:98:52:2d:45:0a:
5a:82:da:01:70:6c:41:17:10:5c:92:09:0a:b6:89:41:c0:2e:
4d:06:ac:26:0e:e1:b9:ff:67:48:54:e4:98:70:aa:2e:66:bb:
30:00:1c:13:9e:97:75:85:ac:c0:67:25:d3:19:a3:48:ae:6a:
9a:cc:a3:3f:5e:5d:a4:8b:af:95:44:e0:3b:29:fe:18:b7:d4:
2a:f4:f9:32:23:69:9d:c3:bd:38:2d:fa:a6:b4:d6:75:71:8a:
bf:64:a2:3e:8a:de:74:52:14:7f:93:37:e6:f6:8f:75:37:ec:
73:15:17:27:6b:86:43:ae:11:c4:5f:48:1d:e7:f8:b1:5e:11:
22:d8:40:41:48:24:d3:ec:78:fd:b5:6a:93:8b:25:81:02:87:
3e:b8:9c:e2:34:e1:56:38:0b:16:67:10:0e:c2:f0:20:e1:74:
b0:f3:e8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:02:50 2025 by rpki-client