Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/323830343a326664383a3a2f33322d3332203d3e20323634393135.roa
File: 323830343a326664383a3a2f33322d3332203d3e20323634393135.roa (raw, json)
Hash identifier: LI/5GsGhRrL1gdRynGAKm6JPwTAMtco0JAJ9JijY4TE=
Subject key identifier: 09:BB:51:C0:2B:FE:E8:BA:B4:1F:79:CD:D7:15:A5:4A:9F:8E:09:2A
Certificate issuer: /CN=DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D
Certificate serial: 0CD3C4AB3235F853E542D100D3B6E7E24A526FC3
Authority key identifier: DC:28:C5:A2:EA:1E:56:49:5A:A9:66:FB:19:84:C7:F3:06:4F:DA:1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/323830343a326664383a3a2f33322d3332203d3e20323634393135.roa
Signing time: Thu 13 Mar 2025 18:14:25 +0000
ROA not before: Thu 13 Mar 2025 18:09:25 +0000
ROA not after: Thu 12 Mar 2026 18:14:25 +0000
asID: 264915
IP address blocks: 2804:2fd8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:d3:c4:ab:32:35:f8:53:e5:42:d1:00:d3:b6:e7:e2:4a:52:6f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D
Validity
Not Before: Mar 13 18:09:25 2025 GMT
Not After : Mar 12 18:14:25 2026 GMT
Subject: CN=09BB51C02BFEE8BAB41F79CDD715A54A9F8E092A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:01:21:21:5b:39:c2:bb:c6:27:67:6e:e0:f5:
c9:68:b5:78:dc:7d:e4:aa:8c:9e:d8:f0:3f:fa:dd:
42:9e:26:73:c0:9a:6b:aa:18:f7:7c:21:be:17:de:
0a:55:a3:d3:07:5b:72:db:fd:68:04:81:5e:d7:71:
cd:04:ab:ad:3c:c9:29:1d:f3:09:cf:8d:54:fb:30:
a3:58:9b:92:38:df:04:8c:44:c6:58:43:38:b3:33:
63:4c:2a:48:70:31:4b:2d:f6:ed:f7:20:04:77:22:
ce:78:8d:9f:f2:96:14:71:81:22:27:52:09:1d:ff:
e4:ee:51:af:06:0e:7c:ac:28:9b:2b:81:ac:63:b2:
3c:6c:10:22:5c:6b:df:54:02:90:e1:40:dd:09:1c:
d2:67:94:ec:d5:6e:45:bd:af:f1:a5:99:f5:07:a8:
bf:ab:9e:f4:79:ba:7e:0d:7a:80:28:46:2b:9c:53:
b9:6e:51:27:c4:c7:a9:2d:bd:54:d5:86:df:de:69:
4b:a5:ab:e0:36:ac:b0:5c:45:51:92:d6:2e:f1:90:
c4:c6:01:03:45:62:5f:4a:b7:67:87:2d:fb:9a:22:
00:af:da:87:3c:2f:2f:ba:10:e1:e3:bf:46:f4:f4:
44:1c:88:c8:6e:83:1c:2b:ad:b9:6b:d9:ab:48:88:
fc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:BB:51:C0:2B:FE:E8:BA:B4:1F:79:CD:D7:15:A5:4A:9F:8E:09:2A
X509v3 Authority Key Identifier:
keyid:DC:28:C5:A2:EA:1E:56:49:5A:A9:66:FB:19:84:C7:F3:06:4F:DA:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/323830343a326664383a3a2f33322d3332203d3e20323634393135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2fd8::/32
Signature Algorithm: sha256WithRSAEncryption
16:ef:7a:62:9a:f6:ee:56:c8:0a:21:78:41:57:2d:51:8a:eb:
fa:b6:40:34:a6:41:25:62:c3:e8:e0:d3:57:32:da:c6:a9:c2:
5e:2f:8e:2d:44:54:40:48:61:63:bd:42:07:0f:fd:2a:05:f6:
5f:1f:35:02:3e:13:18:bd:04:8d:a2:84:aa:a9:b9:6a:90:d8:
79:88:13:65:a8:2e:8e:55:37:ea:83:bf:db:88:35:d8:b3:d1:
2b:b2:b5:0f:14:69:08:18:ba:f9:94:29:e0:04:a8:46:09:03:
14:59:e2:01:76:43:e1:8f:0d:ce:b6:d6:c5:3a:dd:1a:93:a8:
10:42:66:c0:eb:22:50:86:8c:b4:b9:79:0c:4b:a7:54:48:88:
66:b1:93:4e:94:d5:54:ed:a3:7e:8a:4b:7a:b1:49:ec:1b:1f:
25:ab:40:73:21:e1:b5:70:de:65:97:37:55:05:52:6f:00:a3:
93:db:f6:d3:2f:60:2b:af:03:77:d1:bf:d2:77:ef:f4:a5:02:
0b:a8:24:6a:25:75:ea:80:de:a6:e1:1f:bb:5c:6e:37:3a:73:
a5:3f:d0:cf:b9:4f:e9:05:29:f2:2c:26:0e:41:77:99:67:84:
ed:b1:f5:9b:90:e4:22:66:88:8f:7b:9d:b2:05:10:22:bc:6a:
70:10:09:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:57:03 2025 by rpki-client