Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/323830343a346131303a3a2f33322d3332203d3e20323637323136.roa
File: 323830343a346131303a3a2f33322d3332203d3e20323637323136.roa (raw, json)
Hash identifier: 9WvbHv0owkOFHcCOcQi/le381YqTDHBfS+JdwGeL2rw=
Subject key identifier: B3:54:00:73:11:69:18:6A:7D:B4:73:C1:79:F3:50:5B:45:C3:EC:74
Certificate issuer: /CN=FFD6C5FB56F6D62A4CAD09740260CC262A90B013
Certificate serial: 7229A2384FB25B53497582661F093E87DFDCE70C
Authority key identifier: FF:D6:C5:FB:56:F6:D6:2A:4C:AD:09:74:02:60:CC:26:2A:90:B0:13
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFD6C5FB56F6D62A4CAD09740260CC262A90B013.cer
Subject info access: rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/323830343a346131303a3a2f33322d3332203d3e20323637323136.roa
Signing time: Sun 02 Feb 2025 15:02:18 +0000
ROA not before: Sun 02 Feb 2025 14:57:18 +0000
ROA not after: Sun 01 Feb 2026 15:02:18 +0000
asID: 267216
IP address blocks: 2804:4a10::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:29:a2:38:4f:b2:5b:53:49:75:82:66:1f:09:3e:87:df:dc:e7:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FFD6C5FB56F6D62A4CAD09740260CC262A90B013
Validity
Not Before: Feb 2 14:57:18 2025 GMT
Not After : Feb 1 15:02:18 2026 GMT
Subject: CN=B35400731169186A7DB473C179F3505B45C3EC74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:52:d6:e6:d9:a4:07:79:5f:f4:8a:65:29:51:
b0:9c:c1:23:38:0b:f9:6b:93:53:a9:27:60:45:5b:
98:32:c0:b0:69:91:64:1f:fe:61:5f:cb:3e:01:d5:
ec:27:e4:45:86:62:bb:48:08:1b:9f:24:01:ea:a0:
24:dc:dd:94:14:91:92:cd:ee:db:5f:f4:d9:16:f7:
44:a3:1d:77:50:32:0c:8c:78:e6:7e:79:20:e3:7c:
8d:c2:47:e6:71:d9:54:35:96:53:9f:2d:ef:c6:83:
ea:97:07:34:98:43:d2:5f:e6:a3:da:9c:89:44:e2:
6c:8a:b8:2a:a1:2d:ad:77:23:b8:e1:a3:9e:7a:5e:
32:47:c8:ac:eb:4e:64:36:08:5a:f3:9f:8a:87:d3:
de:e1:a8:ce:23:13:d5:85:26:04:13:da:27:e5:cb:
f1:3e:69:da:85:94:4c:08:71:43:60:9f:98:a8:4f:
2b:5a:d5:ed:87:ee:dc:04:a4:40:3b:3e:1a:50:b0:
04:73:9c:35:59:a6:9c:d2:ef:61:f8:9f:b4:de:41:
dc:9d:a6:42:a6:90:d7:d3:e5:26:c4:21:d5:a6:ad:
4f:1f:27:61:8e:54:48:ed:22:6c:bb:27:a1:65:75:
7e:36:de:cc:77:ad:21:9f:03:9d:ea:75:53:42:c8:
17:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:54:00:73:11:69:18:6A:7D:B4:73:C1:79:F3:50:5B:45:C3:EC:74
X509v3 Authority Key Identifier:
keyid:FF:D6:C5:FB:56:F6:D6:2A:4C:AD:09:74:02:60:CC:26:2A:90:B0:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/FFD6C5FB56F6D62A4CAD09740260CC262A90B013.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFD6C5FB56F6D62A4CAD09740260CC262A90B013.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/323830343a346131303a3a2f33322d3332203d3e20323637323136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4a10::/32
Signature Algorithm: sha256WithRSAEncryption
70:57:ea:bb:25:cc:37:92:d4:ee:0a:6e:08:1f:76:66:42:3d:
1a:95:da:15:ba:1b:24:8f:fe:e5:97:e7:18:60:84:1b:f7:5e:
3e:fd:13:bb:72:5b:24:a7:50:6f:c6:91:de:06:aa:5f:66:8f:
2a:95:21:38:77:9d:81:dc:dd:7d:12:3d:25:9b:2e:8d:7f:e1:
26:85:1a:8f:49:2b:3b:5f:0c:8a:e1:5f:f7:6e:eb:26:06:5c:
10:73:e6:05:c6:9b:ea:2f:a0:f4:5f:c5:0f:6f:de:f4:3e:4c:
ff:2c:e7:85:48:82:42:3b:ec:57:b4:53:6d:03:69:80:84:4c:
ac:e5:10:d0:28:0c:08:35:b2:86:bb:c4:63:a6:e3:4b:64:8c:
a7:f1:1c:62:13:05:ad:02:ad:3f:d1:db:de:1d:55:82:9f:e7:
bc:52:04:45:ba:fb:0a:50:75:99:7e:96:af:2f:92:80:19:a8:
a5:4f:b1:e9:70:d4:ac:c9:6b:c0:63:50:62:cf:28:a7:aa:f8:
43:cc:f3:18:07:fb:74:77:64:9a:71:a6:9c:09:d0:2f:5a:b0:
d1:39:15:3f:ca:7f:7c:a9:70:23:26:ea:4e:d8:d3:45:f0:0c:
5c:81:63:ae:9c:2d:59:c3:88:67:09:9e:6a:39:bc:89:e2:f4:
6e:71:39:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:22:45 2025 by rpki-client