Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/323830343a356235383a3a2f33322d313238203d3e20323638383336.roa
File: 323830343a356235383a3a2f33322d313238203d3e20323638383336.roa (raw, json)
Hash identifier: lZcSY4ZuUm/LJOuRXywkHQT/EUFBmvBm2c8VOSP9qMg=
Subject key identifier: 43:CD:24:A8:98:E8:44:1D:2A:44:45:3C:41:3D:69:55:DC:AF:F2:DA
Certificate issuer: /CN=60AB403170A672D3B6135E0C4A876F7657048DF0
Certificate serial: 31C20428736169D98BCFF70D41C9CE842C651FD6
Authority key identifier: 60:AB:40:31:70:A6:72:D3:B6:13:5E:0C:4A:87:6F:76:57:04:8D:F0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60AB403170A672D3B6135E0C4A876F7657048DF0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/323830343a356235383a3a2f33322d313238203d3e20323638383336.roa
Signing time: Thu 20 Mar 2025 20:40:01 +0000
ROA not before: Thu 20 Mar 2025 20:35:01 +0000
ROA not after: Thu 19 Mar 2026 20:40:01 +0000
asID: 268836
IP address blocks: 2804:5b58::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:c2:04:28:73:61:69:d9:8b:cf:f7:0d:41:c9:ce:84:2c:65:1f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60AB403170A672D3B6135E0C4A876F7657048DF0
Validity
Not Before: Mar 20 20:35:01 2025 GMT
Not After : Mar 19 20:40:01 2026 GMT
Subject: CN=43CD24A898E8441D2A44453C413D6955DCAFF2DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b3:78:15:2f:27:a7:6c:21:fe:1a:be:e3:3c:
85:2f:cd:d4:c1:77:18:48:12:cb:f5:3b:1e:02:18:
05:ae:38:52:70:c1:dc:3d:1f:3a:7e:e9:0d:c0:06:
bc:b1:d3:47:3f:ca:10:7b:48:41:95:16:08:7b:cb:
c6:78:19:61:27:46:b7:d3:57:9f:9a:bc:ac:2e:a4:
fb:ee:75:8f:f7:92:a9:00:2d:31:7e:3f:6c:4a:ec:
d9:b5:d8:ca:83:61:b5:ef:29:bd:3c:f6:e1:4e:c6:
8f:59:f5:5d:d7:fe:6d:48:17:03:7e:71:4a:75:0e:
9a:0c:7f:f9:11:6a:59:bf:41:3a:6f:cb:5a:71:95:
f7:ca:7c:90:40:5a:22:bf:7a:cc:bb:44:3c:f3:31:
73:a5:a0:dc:ec:27:66:17:77:7b:c2:e4:6d:3b:a7:
7e:c2:86:dc:ad:8d:d0:0f:82:c5:8f:72:2c:94:ea:
23:f3:7f:a8:cb:f9:4b:d4:99:e1:4a:40:ad:28:c8:
c9:69:76:55:00:78:51:fb:6d:0c:b5:07:f4:09:eb:
ca:ca:d2:81:2b:2d:6a:1a:da:0a:20:d5:d7:a0:8c:
33:e1:b6:ad:b9:47:54:10:97:3e:54:bd:88:4a:3e:
f1:31:a4:76:42:a3:57:c6:25:43:40:40:4e:17:ca:
bb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CD:24:A8:98:E8:44:1D:2A:44:45:3C:41:3D:69:55:DC:AF:F2:DA
X509v3 Authority Key Identifier:
keyid:60:AB:40:31:70:A6:72:D3:B6:13:5E:0C:4A:87:6F:76:57:04:8D:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/60AB403170A672D3B6135E0C4A876F7657048DF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60AB403170A672D3B6135E0C4A876F7657048DF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/323830343a356235383a3a2f33322d313238203d3e20323638383336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5b58::/32
Signature Algorithm: sha256WithRSAEncryption
16:cc:74:57:52:e0:da:77:6a:42:ac:c3:37:5c:79:13:6b:e5:
8a:c7:32:1e:de:54:42:b3:a4:9e:0e:f5:3a:bf:02:6d:b5:0e:
b0:f1:0b:99:eb:22:9f:d5:9f:56:06:76:f9:55:16:0f:0b:6f:
dc:ed:17:5b:55:05:06:9c:d7:7b:a8:52:1b:8a:95:4e:7d:df:
ce:98:d6:3d:a0:bd:07:ca:db:7a:2e:7d:c4:3c:3d:3c:bf:8e:
ef:a3:98:db:8b:25:83:f1:81:3f:a5:cf:87:b7:91:0e:ed:d1:
84:12:69:63:8c:aa:db:d3:01:14:fa:b8:fb:86:ed:ca:fd:92:
cb:a5:da:21:03:9b:59:5a:f3:f1:5f:01:43:db:d1:93:5a:9b:
45:d0:73:ef:6e:3f:b9:06:3b:ce:21:85:02:fb:fb:b8:c5:dc:
cf:30:74:4d:3a:81:bb:5a:12:b5:03:ea:67:91:e8:ad:22:c5:
47:f1:ca:3b:a7:ee:43:b2:05:13:00:cf:ff:28:eb:6d:0b:52:
98:c6:e4:fe:29:e8:30:55:55:45:2c:c0:b0:95:16:fe:54:fd:
ae:24:19:99:e6:9b:f7:d9:b4:ea:ed:1c:da:b8:30:6e:21:59:
c9:23:dc:8e:99:9b:5b:92:75:8f:90:e7:4f:2c:b0:94:1a:78:
d8:20:a7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:55:46 2025 by rpki-client