Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/323830343a3133383a3a2f33322d3337203d3e203131343332.roa
File: 323830343a3133383a3a2f33322d3337203d3e203131343332.roa (raw, json)
Hash identifier: PPekn/TbiAwZrUnUTvoGIR/C6CK1xTfX/AL5sBGZ0T4=
Subject key identifier: 53:BC:0C:1C:1C:C1:2B:C6:9D:0A:CA:39:FD:B4:A7:79:B9:37:A4:3B
Certificate issuer: /CN=EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD
Certificate serial: 5B1F7FBA692E613ED1E9545E26F566C1A9FFF6D0
Authority key identifier: EF:37:AC:3A:AD:D3:EB:0F:41:65:34:BF:4E:8C:B3:C7:1C:32:BA:AD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/323830343a3133383a3a2f33322d3337203d3e203131343332.roa
Signing time: Mon 17 Mar 2025 16:50:58 +0000
ROA not before: Mon 17 Mar 2025 16:45:58 +0000
ROA not after: Mon 16 Mar 2026 16:50:58 +0000
asID: 11432
IP address blocks: 2804:138::/32 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:1f:7f:ba:69:2e:61:3e:d1:e9:54:5e:26:f5:66:c1:a9:ff:f6:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD
Validity
Not Before: Mar 17 16:45:58 2025 GMT
Not After : Mar 16 16:50:58 2026 GMT
Subject: CN=53BC0C1C1CC12BC69D0ACA39FDB4A779B937A43B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:88:48:8c:3a:cb:a6:8a:42:d8:80:3c:9d:bd:
d0:d1:d2:99:e1:f3:df:44:41:f9:70:e1:9e:8b:2f:
af:c9:ff:03:c2:b6:86:32:55:30:f0:b3:50:67:b1:
bb:2c:93:d3:8f:44:a1:64:db:24:45:ef:71:c7:b7:
bd:4d:f9:4e:eb:57:01:26:ae:f2:c1:3a:3e:41:17:
2c:e5:13:70:ca:b9:cd:7e:fc:d3:d4:f6:a6:9f:4e:
d8:ea:bd:e6:cb:9b:13:f9:49:52:ca:9e:14:66:8e:
e0:f4:f1:11:76:d8:be:e4:6e:93:ae:d6:14:f5:fe:
cd:4c:33:0a:29:26:a3:a6:75:67:ec:12:ad:1e:f3:
c1:a5:ae:3e:90:d4:c3:56:32:d4:d0:8a:fe:d3:a7:
c0:5c:92:32:38:08:42:b5:9d:b1:76:64:7d:c6:f7:
27:5a:28:8b:d5:48:93:1c:03:40:7a:f9:3c:19:9a:
08:2f:5f:df:82:be:89:45:d8:3e:38:20:f0:74:48:
2e:05:73:fb:49:15:e1:86:3d:9e:4b:ea:6b:e2:3b:
f9:06:f1:7f:9e:c9:9f:7a:c2:23:d2:b6:6c:68:d9:
6f:63:b1:8b:b9:04:00:3c:dd:00:05:a3:2c:a3:f2:
e3:fb:b5:d7:27:3f:a1:6e:25:39:fb:f3:b3:3d:3e:
50:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:BC:0C:1C:1C:C1:2B:C6:9D:0A:CA:39:FD:B4:A7:79:B9:37:A4:3B
X509v3 Authority Key Identifier:
keyid:EF:37:AC:3A:AD:D3:EB:0F:41:65:34:BF:4E:8C:B3:C7:1C:32:BA:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/323830343a3133383a3a2f33322d3337203d3e203131343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:138::/32
Signature Algorithm: sha256WithRSAEncryption
2e:90:51:fa:64:4c:b9:7f:11:d0:f1:aa:6c:f0:fb:64:b8:6a:
eb:4e:0c:23:85:4a:40:a5:b8:58:b5:1f:f4:b8:3d:2b:10:16:
c3:2c:ff:e0:75:4e:d2:79:a1:8a:fd:4a:32:5f:76:f0:2e:ac:
13:d9:c7:d2:ca:b7:48:1d:c9:87:cc:e3:91:28:e5:21:0d:20:
96:44:50:8b:95:37:6f:b0:19:bb:ec:f0:32:5e:85:ac:92:55:
d9:49:91:59:34:dc:c3:9f:a7:18:9c:5d:7d:12:f9:b3:72:44:
57:b2:be:12:65:e0:a5:1a:ad:bf:52:9c:3f:c8:fd:ec:b2:ca:
c1:36:84:ed:a8:40:ad:af:bb:03:91:e7:db:7d:12:45:cd:82:
6f:8b:f4:3e:be:14:a8:3a:56:47:91:c0:36:c8:f3:4e:3d:ca:
53:2c:e3:32:c5:cd:3a:07:64:be:35:81:b1:f6:d3:58:d3:e5:
c9:ae:99:66:17:f0:20:b3:c4:dd:69:03:ea:67:9b:aa:83:db:
83:03:a0:d2:54:96:b9:38:69:94:d8:fb:88:b6:c1:5c:80:bf:
de:45:25:15:62:53:b6:eb:05:64:be:ab:36:e1:64:05:01:cd:
0c:f3:f5:fc:d9:62:38:b9:38:24:41:a0:ed:bc:3d:13:c1:6a:
8f:02:cf:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:06:33 2025 by rpki-client