Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/323830343a313139343a3a2f33362d313238203d3e20323633343234.roa
File: 323830343a313139343a3a2f33362d313238203d3e20323633343234.roa (raw, json)
Hash identifier: NCf9XXYqaSpkUyKrxD05oUd7+tu7PsPaKM2rBledL3k=
Subject key identifier: A0:E5:D2:A0:47:46:71:CF:C0:78:95:64:EA:B6:7F:86:4E:87:23:1D
Certificate issuer: /CN=695A28FC133EB5408B9BA126D9FFE20884EDECD2
Certificate serial: 562102ADCCD8D68BCE9D183545F8F2D0A85BCF14
Authority key identifier: 69:5A:28:FC:13:3E:B5:40:8B:9B:A1:26:D9:FF:E2:08:84:ED:EC:D2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/323830343a313139343a3a2f33362d313238203d3e20323633343234.roa
Signing time: Wed 26 Mar 2025 11:43:44 +0000
ROA not before: Wed 26 Mar 2025 11:38:44 +0000
ROA not after: Wed 25 Mar 2026 11:43:44 +0000
asID: 263424
IP address blocks: 2804:1194::/36 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:21:02:ad:cc:d8:d6:8b:ce:9d:18:35:45:f8:f2:d0:a8:5b:cf:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695A28FC133EB5408B9BA126D9FFE20884EDECD2
Validity
Not Before: Mar 26 11:38:44 2025 GMT
Not After : Mar 25 11:43:44 2026 GMT
Subject: CN=A0E5D2A0474671CFC0789564EAB67F864E87231D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:29:99:53:71:4e:b8:97:c4:51:d3:42:bb:37:
a2:82:38:99:a6:79:c6:91:ed:50:40:09:22:ab:37:
79:93:e6:33:f0:bc:21:d6:cf:66:5a:40:c0:82:a1:
5f:ab:32:1d:65:e7:89:90:b1:5a:1c:83:e5:2f:52:
60:65:18:bd:99:de:fe:ac:6c:dc:b0:ef:87:d8:90:
d4:05:4c:43:1b:83:07:b6:ba:10:c5:69:b3:2d:c9:
d3:de:20:e8:d1:c9:7c:bf:2f:bf:9b:59:ad:80:3d:
d3:78:cd:1b:a2:e3:fd:89:d6:2a:91:37:62:e3:98:
26:25:14:f5:03:14:d3:90:9e:3a:48:c0:d7:04:ec:
5f:48:43:b0:ce:05:68:77:31:52:e5:62:dd:61:6d:
0c:a0:0d:cd:ce:33:d9:7e:6b:18:95:86:3f:64:41:
da:55:63:8b:c0:0e:39:09:a9:51:2c:90:86:c9:47:
d4:67:92:86:74:26:07:bf:c0:ef:58:37:cf:c0:72:
c0:0f:20:ee:4d:33:a9:f3:63:fb:40:bd:ce:36:8f:
cd:d1:d2:40:ea:81:85:15:d4:7d:5d:99:70:49:bd:
ba:da:6f:fc:07:83:c5:65:8d:62:5a:96:f4:50:c9:
11:da:d7:97:2e:cb:a2:6a:63:d4:ed:11:24:49:b2:
f4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E5:D2:A0:47:46:71:CF:C0:78:95:64:EA:B6:7F:86:4E:87:23:1D
X509v3 Authority Key Identifier:
keyid:69:5A:28:FC:13:3E:B5:40:8B:9B:A1:26:D9:FF:E2:08:84:ED:EC:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/323830343a313139343a3a2f33362d313238203d3e20323633343234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1194::/36
Signature Algorithm: sha256WithRSAEncryption
7c:0d:89:ef:61:51:94:51:4a:f2:41:7c:d0:ef:9a:a3:f9:f1:
14:b1:be:31:21:de:b8:ba:79:e4:af:9e:fb:e2:59:e1:c4:ee:
94:11:71:f1:32:c9:d8:08:27:52:6a:2c:47:29:d1:ee:82:59:
c3:09:e5:cd:66:7a:07:23:2e:58:5c:3a:7f:91:96:0b:d7:e7:
0a:7e:56:44:9e:8a:31:8d:27:2f:1f:ab:b1:d3:08:20:60:29:
24:75:a9:91:cf:57:48:a2:e5:c4:d2:d1:7f:a0:7e:8e:1e:29:
58:6e:f3:5b:b5:7a:54:4c:32:03:d1:99:16:01:5b:e1:f2:57:
9f:22:52:62:69:2e:04:e2:c2:78:22:e2:a3:17:89:f3:b0:a7:
c6:62:4f:5a:e1:16:6b:0c:54:60:78:b7:cc:82:b4:06:73:ce:
95:72:08:59:a4:d9:16:2f:7f:96:15:98:72:9d:b9:db:82:3f:
cf:21:d6:4c:54:89:b4:99:0c:d5:e4:a8:79:3b:30:93:3e:21:
41:9e:05:d2:31:67:7c:c4:6f:a7:92:be:56:6d:a0:b5:da:d4:
29:df:04:11:77:cb:2d:35:b4:ee:86:a2:b3:73:99:36:3e:c6:
1a:25:3e:4d:55:6c:17:69:d1:5c:6e:ff:b8:57:6c:a7:40:02:
00:a0:d2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:23:32 2025 by rpki-client