Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/323830343a313139633a3a2f33322d313238203d3e20323633343237.roa
File: 323830343a313139633a3a2f33322d313238203d3e20323633343237.roa (raw, json)
Hash identifier: xyDzxNzWdCH9JPx9VNfOQ7c6I72RcH7dF5VYdtVDGdo=
Subject key identifier: 71:C8:D5:7F:74:97:85:DE:08:78:AD:04:1D:AC:B6:87:FF:76:F1:83
Certificate issuer: /CN=52BFE68872F7B80B9A500C430D620459628C64FC
Certificate serial: 4F77BE7E7CAEEE77DD07A4CF38CAA5BF383A526E
Authority key identifier: 52:BF:E6:88:72:F7:B8:0B:9A:50:0C:43:0D:62:04:59:62:8C:64:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52BFE68872F7B80B9A500C430D620459628C64FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/323830343a313139633a3a2f33322d313238203d3e20323633343237.roa
Signing time: Tue 28 Feb 2023 13:33:47 +0000
ROA not before: Tue 28 Feb 2023 13:28:47 +0000
ROA not after: Tue 27 Feb 2024 13:33:47 +0000
asID: 263427
IP address blocks: 2804:119c::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:77:be:7e:7c:ae:ee:77:dd:07:a4:cf:38:ca:a5:bf:38:3a:52:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52BFE68872F7B80B9A500C430D620459628C64FC
Validity
Not Before: Feb 28 13:28:47 2023 GMT
Not After : Feb 27 13:33:47 2024 GMT
Subject: CN=71C8D57F749785DE0878AD041DACB687FF76F183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:27:83:0b:46:3c:ff:a0:ea:32:84:e5:9a:5d:
12:3b:ec:dc:a8:01:54:33:98:5f:a7:e8:f0:e4:9d:
ef:fc:3a:3a:0f:80:3f:f9:c4:06:c4:c1:f5:7c:e6:
f3:6e:47:99:92:b0:f4:21:35:5a:26:ed:6c:e5:4f:
d4:13:41:85:09:2d:4b:5b:6d:81:3c:f0:1e:04:06:
4f:77:1e:1d:39:90:71:a8:49:b0:53:e3:85:a5:96:
b4:63:c0:ae:85:de:d1:9b:d2:bf:c7:8a:79:e9:73:
3b:c5:a6:6c:56:01:bf:92:1c:e5:4c:dd:85:4d:13:
09:17:7c:13:61:9b:44:3a:9d:5c:1d:ca:45:b2:15:
e3:59:09:a5:ef:dd:11:69:31:56:b1:c3:ab:d3:c0:
0f:f7:93:f5:76:32:43:bc:6c:00:48:81:b3:30:65:
35:d3:c6:f6:32:44:e9:04:de:e0:f8:cd:d7:c1:f3:
4a:27:83:a3:86:c2:a9:a4:80:4f:08:3f:09:08:c8:
26:89:3b:2f:26:aa:94:94:13:8b:8e:3a:4e:9b:87:
95:1a:b7:06:16:0e:e8:cb:df:ba:fa:8e:45:ea:8f:
13:f9:c6:e3:1c:87:e6:b2:9c:42:42:b5:8d:df:07:
60:ef:35:b3:6f:3b:b9:71:45:42:f3:bb:11:37:c1:
2b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C8:D5:7F:74:97:85:DE:08:78:AD:04:1D:AC:B6:87:FF:76:F1:83
X509v3 Authority Key Identifier:
keyid:52:BF:E6:88:72:F7:B8:0B:9A:50:0C:43:0D:62:04:59:62:8C:64:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/52BFE68872F7B80B9A500C430D620459628C64FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52BFE68872F7B80B9A500C430D620459628C64FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/323830343a313139633a3a2f33322d313238203d3e20323633343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:119c::/32
Signature Algorithm: sha256WithRSAEncryption
12:14:22:d8:4c:a2:6a:c5:5d:6b:37:93:ac:fa:c0:53:46:c6:
f6:3c:6f:58:38:96:9a:d4:d7:b7:e4:05:38:60:5f:90:43:a3:
dc:d6:22:c8:41:e6:fa:14:9e:c3:c1:e0:5c:15:63:35:38:ca:
cc:74:8b:74:b1:09:18:a0:da:19:53:2c:7c:b2:31:0f:15:95:
25:49:f2:e8:72:eb:52:dd:39:9b:51:49:8a:9f:9f:62:13:e3:
8e:33:60:ef:16:29:e3:31:f2:a1:1b:72:33:b1:ef:c2:55:72:
e8:06:42:69:26:bb:d9:5c:9f:2b:e7:21:87:c8:5c:62:cc:be:
a3:97:ac:7c:50:98:41:ee:20:79:0d:90:fb:83:37:36:7b:81:
1e:fa:56:ba:ac:84:5b:43:8f:ab:30:6b:b8:ae:e6:3e:66:16:
d5:2e:fe:db:52:95:15:bb:de:e6:db:8a:a8:54:3a:16:de:37:
54:bd:9b:f4:5b:19:da:15:9b:da:c7:c4:ac:0e:cc:73:9e:9f:
5a:6a:bc:e5:67:c9:43:3b:7d:4d:5b:64:d5:10:b7:fc:12:c5:
09:cc:ea:7f:22:4a:72:94:85:0b:18:87:98:7e:f9:bd:86:31:
44:6e:13:64:bf:b9:f6:73:df:b8:43:d9:12:eb:70:9d:aa:8b:
fe:09:a3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:53:00 2025 by rpki-client