Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a633030303a3a2f33342d3334203d3e20323634313431.roa
File: 323830343a316530633a633030303a3a2f33342d3334203d3e20323634313431.roa (raw, json)
Hash identifier: 2oVCnfCQa2RR6/VXTSqKuBM4InEucxA39lsfNaVMmcs=
Subject key identifier: 16:8D:54:96:F7:92:B1:4B:03:D8:66:3A:88:A3:4D:1A:20:91:66:FE
Certificate issuer: /CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Certificate serial: 4C5D64B5C9E96F60924933631AB3F2BA509E7320
Authority key identifier: A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a633030303a3a2f33342d3334203d3e20323634313431.roa
Signing time: Thu 02 Jan 2025 19:27:02 +0000
ROA not before: Thu 02 Jan 2025 19:22:02 +0000
ROA not after: Thu 01 Jan 2026 19:27:02 +0000
asID: 264141
IP address blocks: 2804:1e0c:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:5d:64:b5:c9:e9:6f:60:92:49:33:63:1a:b3:f2:ba:50:9e:73:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Validity
Not Before: Jan 2 19:22:02 2025 GMT
Not After : Jan 1 19:27:02 2026 GMT
Subject: CN=168D5496F792B14B03D8663A88A34D1A209166FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:42:c3:72:eb:19:87:81:e2:4d:6e:f0:df:55:
50:48:df:53:96:22:e4:fa:4f:2f:5d:65:16:fd:42:
5b:11:4b:0a:fd:07:25:da:59:af:31:91:02:9e:da:
59:4b:a9:1b:d3:f3:de:64:d7:b0:12:00:b1:d2:6b:
b0:45:9c:3f:ea:e0:5f:10:ec:c4:cc:39:13:cc:44:
20:31:05:a3:ee:60:63:42:58:f5:36:22:48:5f:b7:
7b:ab:60:95:8a:af:6b:c9:f5:c0:51:c5:ae:77:89:
48:3c:cd:91:40:15:f9:78:fd:80:62:5b:f9:2d:18:
ab:22:af:3d:39:5c:93:1d:57:ff:11:62:97:2b:cc:
e5:51:bb:eb:4c:40:ac:32:23:57:2f:df:8a:80:81:
b7:6d:89:f3:ac:10:bc:b0:f6:46:73:e1:86:a3:dc:
19:25:a0:fd:c3:fd:0e:8d:27:47:f2:c8:70:92:7f:
7f:d2:b4:a9:9b:b2:d3:64:85:a7:ab:f2:c9:05:d6:
43:4d:7d:78:f9:f4:af:21:2c:1e:8d:5c:0d:7f:4f:
52:c6:28:00:5d:4c:64:ff:64:63:49:c1:3d:18:59:
05:d3:69:6a:b1:a7:6f:d4:37:a4:b4:25:62:24:c8:
21:6b:99:8a:cc:d8:6f:d0:6a:98:92:45:0e:ea:fb:
ea:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8D:54:96:F7:92:B1:4B:03:D8:66:3A:88:A3:4D:1A:20:91:66:FE
X509v3 Authority Key Identifier:
keyid:A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a633030303a3a2f33342d3334203d3e20323634313431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1e0c:c000::/34
Signature Algorithm: sha256WithRSAEncryption
2f:09:e3:d6:b0:9a:41:e6:6b:ea:74:81:42:e3:eb:93:cf:01:
05:3e:20:74:fe:df:2e:17:f1:64:75:9f:43:92:b9:16:65:f9:
22:f6:68:f7:95:a1:c7:49:7d:58:44:cb:73:8a:de:59:ef:dc:
78:89:66:66:2e:1a:ec:59:37:f7:64:48:4b:22:1e:f3:35:01:
4e:4f:03:8b:0b:03:eb:3a:e4:37:a1:4a:08:df:26:fe:24:74:
70:d9:f5:2c:db:50:01:f1:0d:be:cc:4d:60:70:40:5b:1d:3d:
80:9b:58:d1:58:fa:86:48:d5:24:67:64:be:05:90:1c:c1:52:
e8:94:59:2d:c0:25:4a:e6:33:37:c2:36:4a:d0:47:e2:3a:e9:
d8:ba:f6:46:65:f2:ff:eb:5d:e8:94:fe:51:20:19:6e:df:70:
2d:a9:81:e3:75:32:cc:de:24:24:f6:13:26:3a:73:06:67:70:
2b:b8:77:da:fd:03:4b:63:88:42:cb:0a:6e:d6:8a:0e:48:ee:
ad:48:fd:8d:0e:1e:74:5a:61:bf:3b:31:d0:e0:fb:da:6c:ad:
2c:06:42:c1:67:cd:2f:3a:57:fb:c6:88:bb:e8:f3:54:6a:b1:
c9:f4:1d:b7:87:0c:f0:a7:0f:bb:19:73:01:07:82:57:f6:0c:
3d:79:c6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:05:21 2025 by rpki-client