Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a363030303a3a2f33352d3335203d3e20323634313431.roa
File: 323830343a316530633a363030303a3a2f33352d3335203d3e20323634313431.roa (raw, json)
Hash identifier: F3AQn+4B0HAr+AqwM4zF5buOaJvmbfAvWk3sO0w/U2Q=
Subject key identifier: 25:77:07:73:D4:BB:52:1D:B2:86:CB:43:33:D6:AC:90:5E:26:30:B3
Certificate issuer: /CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Certificate serial: 75EB14DB961F46134175934256076910D5186167
Authority key identifier: A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a363030303a3a2f33352d3335203d3e20323634313431.roa
Signing time: Thu 02 Jan 2025 20:02:09 +0000
ROA not before: Thu 02 Jan 2025 19:57:09 +0000
ROA not after: Thu 01 Jan 2026 20:02:09 +0000
asID: 264141
IP address blocks: 2804:1e0c:6000::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:eb:14:db:96:1f:46:13:41:75:93:42:56:07:69:10:d5:18:61:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Validity
Not Before: Jan 2 19:57:09 2025 GMT
Not After : Jan 1 20:02:09 2026 GMT
Subject: CN=25770773D4BB521DB286CB4333D6AC905E2630B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cd:88:c0:e4:bd:69:51:88:9e:3d:3e:ae:73:
37:b0:41:81:20:b3:1f:37:29:08:d2:52:a9:0d:a6:
fe:2b:fd:b8:55:58:0b:32:7f:57:ac:05:ef:62:af:
90:7d:f2:64:e1:eb:c4:f1:c8:fd:7a:04:04:7f:95:
e2:86:d2:21:4e:cc:81:fe:e4:a2:dc:41:e8:21:ab:
d8:87:c7:25:30:85:4b:b3:bf:da:43:ef:8c:ec:eb:
c7:dd:1d:da:72:73:fa:63:1c:f8:a7:f1:62:f5:d7:
72:64:2c:ee:5c:8f:2b:fe:cf:85:77:7c:e0:f9:46:
01:2e:45:31:59:e7:68:99:68:6c:24:47:9d:52:ec:
17:f4:c0:41:e3:39:70:32:33:50:02:90:98:6e:49:
96:89:44:18:b0:e9:d6:47:35:b0:23:65:22:68:d2:
1a:56:e1:e9:8b:dc:32:e7:09:3c:28:f3:0e:16:b4:
88:ee:ad:66:56:b2:97:da:a5:d1:59:c4:a8:cd:63:
12:9f:bb:08:61:a5:e0:e4:46:14:bf:e4:cf:a3:14:
f7:cf:2b:b2:ec:73:a5:85:57:9c:d8:14:81:46:0e:
5c:a6:c9:80:c1:b1:62:c1:93:50:f8:7c:c1:54:59:
3e:4a:92:d3:2a:ed:bf:b0:b9:98:61:b1:4a:1c:b3:
90:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:77:07:73:D4:BB:52:1D:B2:86:CB:43:33:D6:AC:90:5E:26:30:B3
X509v3 Authority Key Identifier:
keyid:A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a363030303a3a2f33352d3335203d3e20323634313431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1e0c:6000::/35
Signature Algorithm: sha256WithRSAEncryption
1b:86:49:c6:15:31:1a:be:59:f7:d3:3d:e5:a7:bd:36:25:7f:
69:de:40:05:e2:40:d0:7e:d3:79:c4:94:06:62:8a:3a:60:7d:
b5:8d:1d:9f:c5:41:b0:a3:a9:4a:3b:b2:2a:fb:c6:c1:98:50:
c6:2a:bf:9c:a3:21:e7:0b:90:49:f2:e6:70:1b:ac:2c:8a:08:
29:ec:59:20:8f:c9:9f:8c:b3:01:cf:b7:c1:cb:de:ff:0a:02:
c5:60:00:c8:b4:b0:e8:8a:97:43:8d:70:71:cd:ac:68:37:7c:
96:c6:66:0c:51:35:29:ba:82:d1:df:02:ff:6f:c6:76:9a:c2:
5c:36:4f:fc:3f:10:a7:ee:de:2c:b9:ea:12:3b:98:6b:be:88:
dd:15:54:5c:91:16:24:61:5b:74:d0:db:80:83:50:f5:4e:b5:
12:d6:bc:bc:8c:e1:04:30:51:0b:27:ed:b6:20:7d:ef:ac:8e:
d8:23:2e:8b:5d:c6:f9:4f:22:f9:cd:eb:e2:87:ed:56:31:58:
0a:f6:7d:e4:f4:b8:f0:c2:fe:95:6f:7a:d1:cf:4a:93:05:fe:
c4:07:1e:33:d1:ad:2b:05:8d:1d:0e:8d:a5:97:1a:01:c0:73:
0b:2d:f1:19:7e:24:60:d8:48:5e:b2:72:1d:1e:38:ce:84:ff:
c8:8f:74:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:35:51 2025 by rpki-client