Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a3a2f33352d3335203d3e20323634313431.roa
File: 323830343a316530633a3a2f33352d3335203d3e20323634313431.roa (raw, json)
Hash identifier: VDLTX5zIKqUumaJckZyHPWez6qEQGiUHBfdlTLVd+WE=
Subject key identifier: 34:CF:A8:C5:44:83:67:3A:A9:43:B5:99:A0:50:D6:A5:A1:DD:36:15
Certificate issuer: /CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Certificate serial: 05AF349B44873AAFA37C2FEF9877FD27F9FE3AF8
Authority key identifier: A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a3a2f33352d3335203d3e20323634313431.roa
Signing time: Thu 02 Jan 2025 19:56:50 +0000
ROA not before: Thu 02 Jan 2025 19:51:50 +0000
ROA not after: Thu 01 Jan 2026 19:56:50 +0000
asID: 264141
IP address blocks: 2804:1e0c::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:af:34:9b:44:87:3a:af:a3:7c:2f:ef:98:77:fd:27:f9:fe:3a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Validity
Not Before: Jan 2 19:51:50 2025 GMT
Not After : Jan 1 19:56:50 2026 GMT
Subject: CN=34CFA8C54483673AA943B599A050D6A5A1DD3615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a3:b7:0a:5f:96:6b:6c:09:fc:7d:93:a3:35:
bb:09:86:db:24:ca:87:40:c6:2c:71:de:cd:c2:9e:
ae:aa:2c:f1:fd:ed:6a:98:74:77:df:cf:f6:69:5a:
50:b6:7c:91:b7:e7:1d:43:c5:67:b7:e6:b8:95:f7:
d0:cc:58:76:30:80:7f:e9:61:8e:e3:70:e9:a5:9c:
47:c4:02:a0:56:af:a6:96:9e:35:1e:25:d3:3d:12:
08:21:d0:0d:fd:de:f6:43:38:fe:2a:09:0a:7c:03:
3a:7b:48:2c:ba:9e:ef:ca:96:55:56:db:4d:29:2f:
ef:7f:98:84:c1:f3:48:60:f3:21:a1:6e:9d:2b:6a:
70:97:23:db:79:62:a7:e5:33:dc:ff:50:a3:ea:8c:
dd:f4:b0:90:82:35:b0:fb:3a:2e:94:c6:6e:90:6a:
6b:22:08:6e:22:80:22:f4:5f:e2:60:91:39:40:56:
5e:f6:fb:6b:ad:3f:30:50:ba:f9:85:35:5f:fe:eb:
5d:22:4a:04:73:c5:fa:05:04:d5:ab:81:00:39:78:
1e:65:b3:d5:b0:8a:f3:5c:3b:f5:6c:b3:3b:76:aa:
51:41:22:38:12:da:8c:47:18:b1:cb:34:c4:aa:ce:
34:ed:d3:d7:61:bf:97:51:81:8a:de:8e:39:c5:33:
3a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CF:A8:C5:44:83:67:3A:A9:43:B5:99:A0:50:D6:A5:A1:DD:36:15
X509v3 Authority Key Identifier:
keyid:A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a3a2f33352d3335203d3e20323634313431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1e0c::/35
Signature Algorithm: sha256WithRSAEncryption
43:43:9c:07:70:f8:0c:58:e5:e0:95:43:c4:a3:95:e8:9a:10:
97:f0:63:15:97:f9:63:7f:6d:8a:94:d4:70:c8:f0:52:25:5e:
4e:42:c2:5d:a5:f5:54:1c:eb:08:7d:3c:16:13:80:a9:37:2f:
2c:34:1f:90:35:6a:46:da:8f:d9:fc:ca:1b:dd:c9:df:6b:83:
a6:c3:00:9f:48:86:09:f5:1c:ab:54:5d:64:07:b5:1e:aa:e0:
39:ef:43:0a:52:ff:69:bd:bf:42:38:14:38:61:f4:32:ca:f8:
97:31:71:ff:0d:f3:ea:78:98:37:7a:26:2c:11:f0:f4:d3:21:
b3:ff:09:0c:fd:66:f6:37:f9:32:e7:f1:f6:af:13:cc:05:e5:
c6:83:b9:39:5e:ae:f2:48:7e:f9:df:c1:53:52:73:01:22:2f:
54:01:9a:da:a2:aa:d0:a4:11:b0:bb:47:df:51:5f:ba:02:72:
dc:fa:08:28:25:4e:9b:12:3e:e4:48:5c:0e:aa:5b:9e:c8:25:
01:74:f6:59:68:16:a8:7a:4f:9a:03:fc:bd:1b:4a:73:10:2d:
5f:56:33:06:00:a1:6d:33:eb:ac:d1:0a:b4:8f:1e:90:77:96:
de:cb:7b:50:d7:2b:79:78:55:11:a7:b3:cb:e1:85:4e:08:14:
17:a3:c9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:27:16 2025 by rpki-client