Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a3a2f33332d3333203d3e20323634313431.roa
File: 323830343a316530633a3a2f33332d3333203d3e20323634313431.roa (raw, json)
Hash identifier: 2p4HwPbTzZ1RE159y7MMEfndMopqU//HOfpEdE08iL0=
Subject key identifier: FC:49:2C:CB:3F:EE:13:A7:69:3A:1B:21:44:49:43:9F:8B:2F:21:7A
Certificate issuer: /CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Certificate serial: 492CE8B40BFF54584013C37A698F56837CE107C7
Authority key identifier: A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a3a2f33332d3333203d3e20323634313431.roa
Signing time: Thu 02 Jan 2025 19:53:57 +0000
ROA not before: Thu 02 Jan 2025 19:48:57 +0000
ROA not after: Thu 01 Jan 2026 19:53:57 +0000
asID: 264141
IP address blocks: 2804:1e0c::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:2c:e8:b4:0b:ff:54:58:40:13:c3:7a:69:8f:56:83:7c:e1:07:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Validity
Not Before: Jan 2 19:48:57 2025 GMT
Not After : Jan 1 19:53:57 2026 GMT
Subject: CN=FC492CCB3FEE13A7693A1B214449439F8B2F217A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3f:6f:70:6c:58:2f:f7:85:9e:46:34:39:31:
eb:bf:63:95:40:b5:b1:c2:0b:89:5d:53:a5:b8:cd:
32:9c:cd:82:0a:32:9c:9f:74:01:de:49:49:8f:01:
c3:c5:b6:cf:21:7a:be:c2:f9:32:04:12:97:8d:77:
04:5a:67:40:37:1d:fa:12:e2:f4:c4:f0:8d:9e:31:
b1:49:71:2c:c3:5a:41:4d:dd:14:62:f0:c0:d3:e3:
21:89:0f:46:e2:a3:b7:2b:35:a6:83:06:bf:bc:63:
27:0d:50:80:7c:53:3c:86:eb:8b:fb:8f:af:3f:e7:
18:64:da:09:73:43:6e:da:2c:9b:a4:ea:7a:aa:a3:
52:22:01:e7:79:a8:1d:8e:a6:b7:c0:7f:14:6c:92:
51:1e:ac:76:72:09:69:df:86:cd:83:52:9b:ac:1d:
8a:26:1b:bb:1a:a7:9a:c9:32:49:ee:71:e2:94:a6:
28:79:d0:3a:c2:aa:37:87:2c:28:d5:47:55:0e:f3:
96:f5:48:2e:cd:14:fe:36:61:fa:7a:f9:9e:c1:27:
08:d5:4b:e9:1a:1a:c9:04:3d:c2:e8:76:45:32:8b:
42:ff:2b:96:37:81:03:a7:34:2e:cf:1b:4c:b5:88:
c9:11:ae:85:39:02:8b:fc:92:b8:37:01:80:5f:83:
59:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:49:2C:CB:3F:EE:13:A7:69:3A:1B:21:44:49:43:9F:8B:2F:21:7A
X509v3 Authority Key Identifier:
keyid:A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a3a2f33332d3333203d3e20323634313431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1e0c::/33
Signature Algorithm: sha256WithRSAEncryption
86:d6:14:00:a2:b4:cc:58:57:0f:cf:98:27:ae:b6:0f:b2:5d:
f8:06:87:3c:34:4b:3e:42:37:00:d2:2f:2f:84:07:e5:90:53:
de:fc:ab:c7:b3:b1:82:89:85:8e:79:0f:41:6a:52:2f:30:c4:
c1:49:15:88:63:44:8f:74:3e:43:2b:ae:91:1e:71:38:11:f8:
8f:de:cf:97:2a:4b:3d:80:2b:0b:f6:bb:1e:b0:e5:b3:7e:f4:
d4:46:6a:0b:77:7e:a0:14:dd:25:f0:7c:a8:e1:66:b5:32:a0:
be:e3:6b:e0:ba:4c:b7:e2:43:64:d2:cb:5b:d8:1b:78:1b:01:
8c:e4:99:9b:56:ad:e5:6e:0a:fe:09:75:df:9a:27:62:d1:53:
ef:7e:55:85:7d:29:2e:22:6f:30:c7:8d:ad:b6:e5:2b:7c:8c:
69:e9:c1:40:a3:28:80:92:39:a0:37:da:f3:d7:0d:b5:c5:41:
30:ca:be:1d:53:d4:6d:20:48:ed:53:a7:0b:c1:f1:5a:a0:c1:
85:ab:c6:e9:e7:6d:98:69:8a:29:f2:9d:8a:d0:a8:78:29:76:
db:4b:55:8d:6f:e1:e6:82:34:b1:ee:07:85:fe:d7:a1:82:0b:
c8:4c:1e:24:23:28:16:6b:e9:e9:29:58:a0:bd:a6:53:a8:86:
55:9e:3f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:24:07 2025 by rpki-client