Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a663030303a3a2f33362d3336203d3e20323637393432.roa
File: 323830343a353539303a663030303a3a2f33362d3336203d3e20323637393432.roa (raw, json)
Hash identifier: XdqDxAY3tOuLmeFJRsfBnUssqhlkYmgvi1g37uubjvI=
Subject key identifier: C1:49:33:1D:D9:7C:6A:60:9A:6A:04:D2:69:C4:BB:C9:18:37:0A:36
Certificate issuer: /CN=0FD65004E7C4085F2D33DF17345261EDD9B3A811
Certificate serial: 60D13930B094C9D3C60046E5F93A7A84813C6206
Authority key identifier: 0F:D6:50:04:E7:C4:08:5F:2D:33:DF:17:34:52:61:ED:D9:B3:A8:11
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FD65004E7C4085F2D33DF17345261EDD9B3A811.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a663030303a3a2f33362d3336203d3e20323637393432.roa
Signing time: Wed 26 Mar 2025 16:51:16 +0000
ROA not before: Wed 26 Mar 2025 16:46:16 +0000
ROA not after: Wed 25 Mar 2026 16:51:16 +0000
asID: 267942
IP address blocks: 2804:5590:f000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:d1:39:30:b0:94:c9:d3:c6:00:46:e5:f9:3a:7a:84:81:3c:62:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FD65004E7C4085F2D33DF17345261EDD9B3A811
Validity
Not Before: Mar 26 16:46:16 2025 GMT
Not After : Mar 25 16:51:16 2026 GMT
Subject: CN=C149331DD97C6A609A6A04D269C4BBC918370A36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5b:cf:13:38:e1:f4:2a:67:46:38:7a:ea:5f:
84:76:dd:2d:fb:f4:fd:7b:d3:27:2c:6e:04:db:23:
9a:cb:5c:c8:b3:16:2c:2c:de:cc:22:88:9c:14:35:
3a:f7:3f:08:fe:5c:08:ab:1f:42:fe:46:9d:07:f4:
2b:5a:8e:53:1c:e4:bb:1d:fc:03:9f:73:c5:c6:50:
7c:42:9b:4e:cf:dd:a8:db:48:44:7d:ee:0f:fc:9a:
eb:8f:bb:1a:26:43:53:e3:f6:91:d0:90:4f:7f:e1:
2e:8e:d0:42:09:65:de:9a:b0:20:21:b2:51:d6:d6:
14:de:e2:c0:b9:db:87:47:6b:09:c4:0d:fa:f1:b9:
d4:d2:ec:7a:6f:35:69:ab:95:8e:5c:67:72:3f:7b:
57:10:6a:76:32:5e:b4:99:a4:06:78:e5:bd:73:e5:
89:c1:9a:26:73:97:b2:ef:a8:3f:f0:f8:b3:88:e4:
9d:24:a6:81:6c:8d:6e:8e:b7:d9:ed:e0:1c:5a:6b:
36:18:50:c0:45:d1:2e:f2:cf:ec:e4:74:25:4a:29:
54:b7:17:14:ad:1a:f2:01:72:88:a8:61:f2:c4:6f:
f6:09:c6:5b:12:b6:96:41:c3:1f:ea:d4:f0:4d:45:
87:47:60:cc:14:e6:ee:cd:ad:3c:0c:07:a1:cd:40:
ce:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:49:33:1D:D9:7C:6A:60:9A:6A:04:D2:69:C4:BB:C9:18:37:0A:36
X509v3 Authority Key Identifier:
keyid:0F:D6:50:04:E7:C4:08:5F:2D:33:DF:17:34:52:61:ED:D9:B3:A8:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/0FD65004E7C4085F2D33DF17345261EDD9B3A811.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FD65004E7C4085F2D33DF17345261EDD9B3A811.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a663030303a3a2f33362d3336203d3e20323637393432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5590:f000::/36
Signature Algorithm: sha256WithRSAEncryption
8b:e0:fc:73:6b:6a:7a:c2:5f:bc:9a:64:06:59:2e:f4:4e:8e:
d1:36:61:c1:1e:60:96:04:79:4a:c4:29:05:97:23:a8:ca:a6:
90:91:a9:1d:68:ce:da:56:b1:30:13:fc:72:3b:4a:db:56:63:
ef:e5:35:1c:77:53:38:b3:2a:80:80:87:58:4a:40:99:ab:d4:
73:a5:39:6e:94:9c:96:b0:7e:81:c5:96:1b:10:53:c2:78:a8:
e5:37:b0:e1:24:f4:34:59:d0:e5:26:04:2b:23:5b:05:f1:3c:
ca:cf:58:92:a3:e4:42:87:8d:b2:a8:20:e9:f4:a7:85:23:8b:
a6:93:49:bd:f9:aa:22:64:e3:a4:c5:f7:78:a4:70:92:57:7c:
bd:80:46:b3:17:31:f2:f8:bd:57:09:c2:d6:4f:64:52:4f:ea:
7e:4e:dc:76:e8:40:25:20:18:da:a0:63:8b:04:5b:08:bf:86:
94:70:bc:41:8a:5b:97:06:c8:69:58:32:5d:de:5d:34:7f:22:
f9:96:e2:c4:13:fe:f2:9c:86:32:2e:ab:1b:29:d6:90:59:3c:
20:0c:3d:0f:76:49:a8:c4:d1:be:d0:64:8c:98:41:04:aa:2e:
56:f0:eb:b5:b9:0a:08:c2:e0:b6:bb:40:3b:20:67:0a:b8:6c:
cb:df:1b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:05:24 2025 by rpki-client