Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/323830343a316135633a3a2f33322d3438203d3e203631383536.roa
File: 323830343a316135633a3a2f33322d3438203d3e203631383536.roa (raw, json)
Hash identifier: ka57TFgNA07EevIabxK2WI1B1FcsCrw7HkDv0euQ/Rc=
Subject key identifier: EA:D2:78:26:16:05:D6:00:83:B1:D0:45:46:B6:D3:80:A2:6D:54:41
Certificate issuer: /CN=9954871A58BD1D563C66245B157E43881A74A8D7
Certificate serial: 1FE7B1F3CCC9E24F56D9317A9C6C8535012CC1BB
Authority key identifier: 99:54:87:1A:58:BD:1D:56:3C:66:24:5B:15:7E:43:88:1A:74:A8:D7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9954871A58BD1D563C66245B157E43881A74A8D7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/323830343a316135633a3a2f33322d3438203d3e203631383536.roa
Signing time: Thu 06 Mar 2025 06:51:54 +0000
ROA not before: Thu 06 Mar 2025 06:46:54 +0000
ROA not after: Thu 05 Mar 2026 06:51:54 +0000
asID: 61856
IP address blocks: 2804:1a5c::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:e7:b1:f3:cc:c9:e2:4f:56:d9:31:7a:9c:6c:85:35:01:2c:c1:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9954871A58BD1D563C66245B157E43881A74A8D7
Validity
Not Before: Mar 6 06:46:54 2025 GMT
Not After : Mar 5 06:51:54 2026 GMT
Subject: CN=EAD278261605D60083B1D04546B6D380A26D5441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0e:ac:07:8a:e0:61:82:be:53:c5:11:9c:ee:
e8:2d:49:23:7c:1b:15:f5:e0:68:9e:9f:fb:ea:2a:
d3:c3:4e:36:46:b9:c1:a4:67:1b:7c:d2:4f:e4:57:
42:24:83:83:0d:4f:63:58:06:19:69:7e:bb:14:19:
d9:b2:a4:dd:a6:8b:21:b3:5b:8f:87:84:4e:dc:06:
8b:77:4f:7a:90:7b:ec:47:e7:9c:e3:00:d6:e0:da:
77:da:cb:da:f0:ae:00:cf:65:72:c0:cf:9e:38:76:
73:86:8d:61:02:a6:b2:c6:fa:b1:54:86:47:37:8d:
b8:e1:46:27:fc:14:cc:d7:02:49:8f:bc:a5:d0:83:
83:f4:ee:ae:27:14:f4:d0:3f:04:15:4b:56:24:c4:
5a:21:ed:e9:3e:b0:57:1a:4e:b6:ff:65:b3:ec:7e:
75:1f:24:6b:90:f5:15:bc:d3:35:22:06:40:1c:65:
c9:c4:e9:ea:58:e0:04:e1:d1:a7:dc:d0:9f:10:d5:
8c:81:a3:f0:0c:2e:33:9f:bf:72:5f:ae:f9:ae:c8:
ce:2a:5c:6e:4e:2a:e0:30:42:47:be:5f:10:92:be:
b3:f3:87:20:b9:be:2a:7d:f7:3f:ab:48:3f:da:47:
ba:77:90:cf:6a:43:f1:5d:c5:e2:52:98:2a:35:92:
89:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D2:78:26:16:05:D6:00:83:B1:D0:45:46:B6:D3:80:A2:6D:54:41
X509v3 Authority Key Identifier:
keyid:99:54:87:1A:58:BD:1D:56:3C:66:24:5B:15:7E:43:88:1A:74:A8:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/9954871A58BD1D563C66245B157E43881A74A8D7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9954871A58BD1D563C66245B157E43881A74A8D7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/323830343a316135633a3a2f33322d3438203d3e203631383536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1a5c::/32
Signature Algorithm: sha256WithRSAEncryption
5e:dd:67:23:10:21:72:fb:53:2d:79:b5:67:50:6f:a3:99:1c:
8f:b7:55:4e:82:cb:1e:7e:eb:28:aa:e2:b6:c9:bb:6d:b9:6d:
db:c6:20:f2:08:94:21:3a:b5:a5:1c:24:40:53:2c:28:54:0a:
d0:7f:5b:15:a5:e8:46:6e:77:8c:17:71:b8:2b:8b:ba:09:07:
14:88:53:8c:42:53:7c:5a:03:81:90:93:b7:da:a2:25:ed:04:
54:82:c0:0b:75:97:ed:24:cc:e6:0a:75:43:9e:a0:33:28:0f:
10:98:26:04:26:42:e8:33:0d:16:f5:fe:97:a4:fe:0c:c3:fd:
1a:3f:55:3e:a6:ce:a0:e7:63:97:fd:6d:84:f3:3c:89:83:ba:
78:e9:49:ca:00:d5:08:fa:b3:1f:e2:ce:de:63:cc:46:e5:eb:
fb:d5:0a:cc:5e:04:a2:04:96:53:ed:9a:07:98:74:d3:55:d7:
c7:d1:3a:24:01:dc:27:e4:1b:02:77:6d:70:56:f7:1d:89:c9:
83:62:e0:e5:3e:35:40:ee:df:52:de:3d:8d:e4:41:53:ca:8e:
50:92:78:38:7a:07:68:4b:20:58:02:0b:f9:1c:64:a7:65:db:
8d:3d:dd:7b:5d:3d:31:4a:d5:28:a5:79:58:4b:8e:ba:d1:5e:
e0:1f:3f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:55:47 2025 by rpki-client