Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a633030303a3a2f33362d3336203d3e20323730373630.roa
File: 323830343a373066633a633030303a3a2f33362d3336203d3e20323730373630.roa (raw, json)
Hash identifier: 6qQndCDS5vnPCYeR6vomdg6D6til+mJKEr7uOpM2j50=
Subject key identifier: 2B:B9:CA:60:23:34:E7:F7:93:A6:AA:B1:B3:E4:31:09:17:43:72:CC
Certificate issuer: /CN=5C7EFAB7DE3678425BB38CB274647243463C6597
Certificate serial: 033C170C77DB97968815B01E5EB39AB398F57C4F
Authority key identifier: 5C:7E:FA:B7:DE:36:78:42:5B:B3:8C:B2:74:64:72:43:46:3C:65:97
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C7EFAB7DE3678425BB38CB274647243463C6597.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a633030303a3a2f33362d3336203d3e20323730373630.roa
Signing time: Wed 15 Jan 2025 14:00:18 +0000
ROA not before: Wed 15 Jan 2025 13:55:18 +0000
ROA not after: Wed 14 Jan 2026 14:00:18 +0000
asID: 270760
IP address blocks: 2804:70fc:c000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:3c:17:0c:77:db:97:96:88:15:b0:1e:5e:b3:9a:b3:98:f5:7c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C7EFAB7DE3678425BB38CB274647243463C6597
Validity
Not Before: Jan 15 13:55:18 2025 GMT
Not After : Jan 14 14:00:18 2026 GMT
Subject: CN=2BB9CA602334E7F793A6AAB1B3E43109174372CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d1:78:ad:7e:65:db:48:31:6d:4c:ae:3d:28:
82:f7:73:69:fe:a6:99:a3:56:b4:5c:02:46:67:d4:
60:0d:28:2a:6a:4e:17:6d:a3:89:77:34:b5:f9:a3:
24:97:6c:dc:9c:dc:b6:19:47:2a:5e:0a:3a:5a:d5:
c3:96:49:62:30:c2:3d:68:f9:7f:52:44:c6:20:a2:
f2:ff:b9:39:cd:ac:4e:54:1f:6d:2f:04:45:63:ee:
72:8e:8a:d2:de:94:bf:7f:82:a2:43:fc:d8:72:be:
e1:5a:14:ca:3a:c3:08:d9:f3:e4:de:bb:49:6e:f0:
45:88:7f:08:27:d8:b0:a7:1c:ad:e6:93:75:33:12:
1c:ca:b3:1b:27:11:56:4f:37:5f:31:f2:e7:6c:a1:
8b:6a:0c:44:88:36:ef:74:ff:f0:54:a1:c3:e8:93:
0a:3a:1b:e0:df:0c:69:fd:05:f3:40:e7:b6:f0:a6:
db:e8:d9:39:f6:70:38:43:eb:56:22:bf:cf:d0:82:
f0:fc:41:36:fa:2f:bc:7e:09:f6:14:89:61:b8:20:
b6:dc:26:69:f3:03:ea:35:80:f7:bd:b2:94:c8:97:
3c:6d:48:2f:04:2b:43:1f:43:38:d2:9d:e9:f4:a8:
8a:ec:37:77:8e:16:b6:32:57:67:cd:95:2c:82:98:
19:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B9:CA:60:23:34:E7:F7:93:A6:AA:B1:B3:E4:31:09:17:43:72:CC
X509v3 Authority Key Identifier:
keyid:5C:7E:FA:B7:DE:36:78:42:5B:B3:8C:B2:74:64:72:43:46:3C:65:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/5C7EFAB7DE3678425BB38CB274647243463C6597.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C7EFAB7DE3678425BB38CB274647243463C6597.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a633030303a3a2f33362d3336203d3e20323730373630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:70fc:c000::/36
Signature Algorithm: sha256WithRSAEncryption
28:08:ee:c9:6b:f3:9e:0b:bb:24:7d:a9:55:41:33:4b:26:73:
2e:c4:64:2a:17:ff:6c:49:c1:23:1e:48:86:82:56:34:71:3b:
26:07:f0:89:e9:52:31:05:56:36:53:2e:67:d5:e9:c2:b9:cd:
c6:cf:74:37:10:72:4a:72:4b:87:4d:57:00:86:48:81:49:0a:
e6:11:11:46:87:6a:79:31:a1:c7:15:2d:5a:ac:a7:22:4a:9f:
db:8e:f3:16:24:ef:1c:58:d3:8b:e9:8d:cc:94:d9:0b:66:23:
aa:77:0b:58:41:9c:68:4b:3c:12:2a:17:2b:bb:12:8f:95:2d:
99:ef:22:e6:bd:de:e9:0e:12:23:4b:ba:ba:af:bf:89:5f:2a:
1d:47:71:c0:3b:fd:50:50:87:bd:59:74:39:59:ba:9c:aa:4f:
bf:35:e7:e8:b3:67:e2:a8:0b:a8:93:b5:7a:e4:af:43:69:5e:
a4:d4:06:e8:fe:91:8b:da:f6:a9:a0:30:a9:28:74:59:ef:78:
cc:9e:7f:4a:33:49:9e:09:59:bd:cc:47:36:ab:43:0f:ec:03:
35:9a:6d:4e:5d:ed:94:8a:11:31:a9:57:f5:09:e0:5a:25:a8:
49:e3:e3:e2:b4:eb:b4:77:c5:23:4c:2b:ca:4e:ae:4f:0c:ad:
f9:81:a8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:22:02 2025 by rpki-client