Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/323830343a353534633a3a2f33322d3332203d3e20323632383939.roa
File: 323830343a353534633a3a2f33322d3332203d3e20323632383939.roa (raw, json)
Hash identifier: ZkjO2ZXyzt3Q/Y5gmQ1gEDDN6kSVOBiG+BJqjtUJPeM=
Subject key identifier: 59:08:54:95:B0:DC:21:7A:EE:69:3A:25:9E:F1:64:15:E2:67:0C:FF
Certificate issuer: /CN=65ED5B226428D53E661BBABFEE00DB614AC84E30
Certificate serial: 3A1901FC55C18EC5E744CAFA0B851A114D726F9E
Authority key identifier: 65:ED:5B:22:64:28:D5:3E:66:1B:BA:BF:EE:00:DB:61:4A:C8:4E:30
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65ED5B226428D53E661BBABFEE00DB614AC84E30.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/323830343a353534633a3a2f33322d3332203d3e20323632383939.roa
Signing time: Mon 05 May 2025 12:33:01 +0000
ROA not before: Mon 05 May 2025 12:28:01 +0000
ROA not after: Mon 04 May 2026 12:33:01 +0000
asID: 262899
IP address blocks: 2804:554c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:19:01:fc:55:c1:8e:c5:e7:44:ca:fa:0b:85:1a:11:4d:72:6f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ED5B226428D53E661BBABFEE00DB614AC84E30
Validity
Not Before: May 5 12:28:01 2025 GMT
Not After : May 4 12:33:01 2026 GMT
Subject: CN=59085495B0DC217AEE693A259EF16415E2670CFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c0:0f:79:5d:08:57:a7:49:eb:2d:45:42:25:
27:13:f1:c8:31:50:d8:b3:93:70:b6:6a:25:a4:a7:
3c:14:3c:f3:f3:24:04:42:69:c5:ad:b1:21:1b:59:
e7:69:3c:33:4b:fd:9d:c2:69:f7:fe:21:99:e5:db:
ef:1e:2c:13:35:51:b9:9b:da:66:aa:e1:90:04:74:
90:45:81:49:1b:50:9e:b6:fd:fa:a7:00:d6:02:81:
3f:0c:11:4e:a8:19:9e:8d:83:6c:c7:5f:5d:ce:aa:
9a:93:0e:96:13:49:99:08:e0:56:d7:94:b4:05:d5:
be:9b:e3:70:58:f0:c5:8c:55:3c:85:f0:70:64:40:
d7:52:c1:26:72:b7:5e:1b:c9:05:a7:f8:d2:36:19:
6b:74:b4:96:92:85:13:d4:bd:5b:2f:cd:30:6a:02:
fc:a1:c9:15:3e:82:35:c2:67:06:88:86:8d:52:28:
f3:f8:0d:15:09:45:05:47:fa:e2:61:60:1d:f2:63:
9e:6a:c1:db:ef:ad:41:34:d1:9e:d3:e8:ca:7b:a2:
04:d6:ea:b5:d4:89:60:1a:2f:91:a5:ae:f2:ce:0a:
47:a9:09:c7:5b:b4:a4:fa:09:04:03:10:af:04:6f:
2a:8e:99:f2:80:f6:95:2b:f7:b8:54:67:4a:7b:db:
45:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:08:54:95:B0:DC:21:7A:EE:69:3A:25:9E:F1:64:15:E2:67:0C:FF
X509v3 Authority Key Identifier:
keyid:65:ED:5B:22:64:28:D5:3E:66:1B:BA:BF:EE:00:DB:61:4A:C8:4E:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/65ED5B226428D53E661BBABFEE00DB614AC84E30.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65ED5B226428D53E661BBABFEE00DB614AC84E30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/323830343a353534633a3a2f33322d3332203d3e20323632383939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:554c::/32
Signature Algorithm: sha256WithRSAEncryption
59:1e:fe:2d:db:7a:94:cc:a1:5a:55:8f:4f:e3:5c:79:1c:66:
f1:59:38:9c:40:b9:88:a9:e5:f0:03:6c:7e:a3:af:26:6e:f1:
14:63:ef:25:ae:79:1d:8a:0a:c2:6e:59:91:ed:d8:7a:23:bd:
c3:8b:eb:e2:7b:6a:6b:ee:72:3e:87:12:3c:ce:4e:de:3f:e8:
00:c9:2a:77:63:8b:cd:78:c7:09:dd:b8:8e:f4:f6:71:e0:0c:
fd:e7:0e:16:f8:59:9e:2c:8e:8a:2b:2f:ee:d5:d7:66:61:62:
ee:02:e5:2a:4b:01:b3:96:c3:67:fd:73:13:fc:1c:f9:c2:fc:
e3:89:b4:86:ad:7f:c2:d5:65:b7:64:36:4a:9d:fa:79:fe:a7:
65:c8:93:da:67:50:54:2b:ea:8f:10:92:65:6b:07:d6:fe:b0:
18:00:9e:71:96:45:4a:e9:92:1b:07:e9:cd:5c:49:a2:76:5d:
17:6a:c0:2a:a5:67:14:2e:02:b8:07:05:06:e3:94:79:14:fe:
04:8a:68:61:ea:5d:fa:ab:3a:08:1d:77:05:a0:26:78:68:64:
8b:3b:71:0a:42:de:24:4f:0d:dc:a9:ab:5c:ac:c9:07:c3:e7:
fe:d6:f8:99:68:60:ff:ab:59:54:b4:37:c3:84:3d:ba:0e:72:
c9:3a:3d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 02:55:11 2025 by rpki-client