Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/323830343a326265303a373330303a3a2f34302d3430203d3e20323632353033.roa
File: 323830343a326265303a373330303a3a2f34302d3430203d3e20323632353033.roa (raw, json)
Hash identifier: 6KePHcOdPwwLVtUu8WYBvjtfSszK2vg0HmDIbINi+88=
Subject key identifier: 40:70:D2:E3:5F:B9:EC:D2:94:22:57:76:EB:31:F9:6C:60:BE:A3:26
Certificate issuer: /CN=A5A5E563B461C001EA666874188010075B6CA70D
Certificate serial: 2ED9FBF9E46D6B6401DEA60874C5F8F913806193
Authority key identifier: A5:A5:E5:63:B4:61:C0:01:EA:66:68:74:18:80:10:07:5B:6C:A7:0D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A5E563B461C001EA666874188010075B6CA70D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/323830343a326265303a373330303a3a2f34302d3430203d3e20323632353033.roa
Signing time: Sun 05 Jan 2025 18:58:45 +0000
ROA not before: Sun 05 Jan 2025 18:53:45 +0000
ROA not after: Sun 04 Jan 2026 18:58:45 +0000
asID: 262503
IP address blocks: 2804:2be0:7300::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:d9:fb:f9:e4:6d:6b:64:01:de:a6:08:74:c5:f8:f9:13:80:61:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5A5E563B461C001EA666874188010075B6CA70D
Validity
Not Before: Jan 5 18:53:45 2025 GMT
Not After : Jan 4 18:58:45 2026 GMT
Subject: CN=4070D2E35FB9ECD294225776EB31F96C60BEA326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:12:59:0e:48:48:7f:bc:2c:9e:33:ad:33:9f:
5d:c1:42:a5:2c:6d:ac:cb:3a:1c:ba:12:91:61:39:
ba:50:02:e9:32:45:52:25:ea:36:42:72:05:8c:72:
50:89:6a:70:bc:7f:9f:a2:45:c9:74:df:0e:30:bc:
7f:1d:b7:2b:3a:d0:cb:e4:75:56:2b:43:c9:12:4f:
37:6a:0e:1b:ac:96:ff:95:85:de:82:c0:d2:0d:11:
eb:27:fa:e2:8e:26:05:9c:85:d7:1a:63:ee:9c:56:
a3:0c:ec:33:f7:f1:0a:64:ea:41:00:ca:1e:9f:11:
c4:8d:5e:fb:ba:06:af:17:c4:27:6a:72:6f:c0:73:
f4:03:fd:49:d8:d1:53:4b:6f:e1:1a:88:34:96:6b:
39:fa:90:57:7b:a0:db:e2:90:32:87:64:fe:31:b5:
4b:c0:8b:c3:f2:5e:0a:d3:29:42:bd:05:0c:fa:a1:
80:d0:87:fa:7d:95:6e:4d:b0:9c:a3:7d:7f:82:3d:
fd:8a:d3:22:ec:70:dd:39:4d:8f:4b:af:ac:8f:43:
93:c8:73:8b:c7:da:50:9c:5e:44:6a:88:c8:d8:10:
d0:30:d0:0f:98:27:75:ad:31:ff:7b:01:6e:75:5e:
e3:50:9f:29:27:a3:2e:5a:8b:48:47:43:26:d9:a1:
8a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:70:D2:E3:5F:B9:EC:D2:94:22:57:76:EB:31:F9:6C:60:BE:A3:26
X509v3 Authority Key Identifier:
keyid:A5:A5:E5:63:B4:61:C0:01:EA:66:68:74:18:80:10:07:5B:6C:A7:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/A5A5E563B461C001EA666874188010075B6CA70D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A5E563B461C001EA666874188010075B6CA70D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/323830343a326265303a373330303a3a2f34302d3430203d3e20323632353033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2be0:7300::/40
Signature Algorithm: sha256WithRSAEncryption
8d:96:59:04:27:38:9a:9b:47:f5:57:bb:9c:c9:2a:8a:6b:95:
96:99:f2:dc:27:77:9c:65:eb:85:61:91:67:5e:03:6c:02:3c:
f5:b7:90:d4:8d:2b:56:51:8d:46:b4:42:6d:13:a2:26:d7:c1:
fc:95:a5:92:a7:32:96:fc:b2:77:21:2e:75:31:3b:d2:81:0a:
cd:18:86:b3:c2:14:38:86:a6:2e:61:59:c2:ec:52:5b:d1:e0:
39:4e:6e:d1:1c:39:16:e6:5a:1c:b7:1e:34:94:96:aa:c3:52:
c8:9a:4e:81:d5:a3:fc:10:8e:b9:d1:58:11:9c:b2:4c:00:3e:
81:e6:58:89:cd:f3:70:a7:92:03:49:5f:43:4c:51:63:ea:67:
09:2a:63:33:82:6b:81:a9:8a:e0:ce:26:7f:87:47:c9:55:7c:
73:e2:af:ab:4f:d2:1b:e9:4c:20:a8:00:90:cc:fd:56:7f:3a:
61:60:ce:7e:d2:a4:3b:f5:4d:cf:40:47:3e:db:56:d0:2a:2e:
d7:09:3e:c8:31:bd:c3:39:e3:5b:62:3a:e2:94:97:a7:20:ca:
c2:b0:fb:90:6a:29:24:a1:e5:1a:a0:7d:30:77:9a:0a:10:9b:
6d:a0:3f:c7:2c:93:28:c9:08:0d:4e:f1:41:f7:c2:7b:31:5e:
a1:fe:f3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:14:21 2025 by rpki-client