Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/323830343a363738303a3a2f33322d3332203d3e20323639363332.roa
File: 323830343a363738303a3a2f33322d3332203d3e20323639363332.roa (raw, json)
Hash identifier: IY3akvHIcHpQo0XyCYCYYPBXbbjb8RHhwkE+qgv3kM0=
Subject key identifier: 82:F9:69:B0:CD:C3:C2:C2:93:AA:A2:84:1F:7B:E8:EF:3B:9F:F3:5D
Certificate issuer: /CN=B5AF9993AB3F76FAF271D8EFDA2EE9E691E3852D
Certificate serial: 0A29EB2AA81CFB1BA248ACFDA86DB5680DCDD941
Authority key identifier: B5:AF:99:93:AB:3F:76:FA:F2:71:D8:EF:DA:2E:E9:E6:91:E3:85:2D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5AF9993AB3F76FAF271D8EFDA2EE9E691E3852D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/323830343a363738303a3a2f33322d3332203d3e20323639363332.roa
Signing time: Mon 24 Feb 2025 16:45:36 +0000
ROA not before: Mon 24 Feb 2025 16:40:36 +0000
ROA not after: Mon 23 Feb 2026 16:45:36 +0000
asID: 269632
IP address blocks: 2804:6780::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:29:eb:2a:a8:1c:fb:1b:a2:48:ac:fd:a8:6d:b5:68:0d:cd:d9:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5AF9993AB3F76FAF271D8EFDA2EE9E691E3852D
Validity
Not Before: Feb 24 16:40:36 2025 GMT
Not After : Feb 23 16:45:36 2026 GMT
Subject: CN=82F969B0CDC3C2C293AAA2841F7BE8EF3B9FF35D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:92:bb:a9:32:47:d4:a7:8a:35:ad:6c:46:96:
9a:ec:98:32:2d:27:73:4c:b2:57:17:ec:f6:72:a4:
27:fd:8f:7f:f4:9d:b9:a1:78:21:f5:af:fa:95:19:
cc:84:39:e4:c7:10:67:6b:20:76:e4:59:b7:e6:ca:
a3:e0:fd:bb:fe:f9:db:a5:7a:eb:67:51:cd:1a:01:
4e:a3:4d:03:81:70:08:fc:f4:dc:fa:13:27:9c:5d:
53:78:c4:48:f7:b5:e0:5d:ef:af:7c:44:be:97:f7:
4b:64:af:92:a9:75:72:e5:8f:f7:bd:78:e0:cd:fe:
a3:6d:c0:68:05:dc:30:62:1f:4c:08:6c:0f:c8:8f:
12:54:c1:55:1d:c1:d9:67:e4:94:14:1b:d1:be:80:
92:3e:4b:f7:d5:36:78:d7:ae:f8:81:f9:e6:56:72:
5a:c9:57:3c:db:9e:92:03:c4:a9:8c:d5:4b:09:33:
60:6c:55:f7:ae:4c:a8:26:82:cd:d3:ee:6b:e0:50:
8b:b4:66:84:e4:ae:9c:83:c1:20:79:72:f3:ba:65:
5a:03:d6:00:84:3a:e4:cd:9a:ed:bd:8e:f7:30:0f:
02:38:9d:30:01:9b:6d:4c:79:0a:66:90:66:c3:98:
35:57:73:d7:32:77:95:46:68:48:f6:39:7e:5a:7b:
d2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F9:69:B0:CD:C3:C2:C2:93:AA:A2:84:1F:7B:E8:EF:3B:9F:F3:5D
X509v3 Authority Key Identifier:
keyid:B5:AF:99:93:AB:3F:76:FA:F2:71:D8:EF:DA:2E:E9:E6:91:E3:85:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/B5AF9993AB3F76FAF271D8EFDA2EE9E691E3852D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5AF9993AB3F76FAF271D8EFDA2EE9E691E3852D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/323830343a363738303a3a2f33322d3332203d3e20323639363332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6780::/32
Signature Algorithm: sha256WithRSAEncryption
4a:67:54:ec:2b:28:6b:3d:ac:f7:46:6d:89:8e:c6:50:6a:6e:
3c:e1:a2:32:e4:96:bc:d3:18:cd:f6:55:59:b4:50:11:d9:58:
72:74:85:e2:03:66:dd:8b:ce:fa:c1:b2:5a:03:3b:32:0a:4f:
b1:26:8c:91:a3:0e:4a:d0:54:7a:62:1b:31:aa:8c:bb:75:43:
6f:58:8b:6a:77:30:f7:8c:d8:6b:b1:89:49:bb:87:88:33:21:
ac:12:78:5b:3b:c0:60:a6:4b:d0:71:6d:7e:44:5d:8b:81:9b:
de:9b:bb:23:23:30:40:bb:6f:14:2a:97:68:86:48:0e:52:8d:
49:34:89:f5:83:70:0f:1e:4d:29:d9:ff:1b:c5:46:ac:bc:92:
f5:84:50:98:e2:fa:3e:ff:fc:dd:d4:5c:90:b7:56:6a:1f:af:
59:21:d0:7e:e8:74:05:0b:af:32:d6:fa:00:26:1e:f0:7b:82:
fb:fb:f1:7b:37:98:3d:f5:2b:4b:91:11:5a:32:4f:31:53:e9:
4f:b5:58:e0:26:8b:37:6a:c4:10:3d:7d:5c:b5:67:b1:3a:ec:
cd:cb:a6:56:08:e5:df:a6:d5:8b:50:d7:9b:28:46:30:a6:c0:
f0:34:3a:80:72:29:d9:65:4e:ef:a4:65:07:3e:90:1f:72:d6:
f2:95:1c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 00:01:13 2025 by rpki-client