Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a663830303a3a2f33372d3337203d3e20323634313431.roa
File: 323830343a316530633a663830303a3a2f33372d3337203d3e20323634313431.roa (raw, json)
Hash identifier: Pv8agPDKDocvxeEho07+lO+Gvc+UYfUN5+64DmHzha0=
Subject key identifier: 70:9C:08:78:FE:AD:72:7D:C6:F7:14:7C:0C:AB:55:A1:F0:52:22:D5
Certificate issuer: /CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Certificate serial: 5588F969A933770495E004CB47E75DAC140302DF
Authority key identifier: A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a663830303a3a2f33372d3337203d3e20323634313431.roa
Signing time: Thu 02 Jan 2025 20:12:50 +0000
ROA not before: Thu 02 Jan 2025 20:07:50 +0000
ROA not after: Thu 01 Jan 2026 20:12:50 +0000
asID: 264141
IP address blocks: 2804:1e0c:f800::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:88:f9:69:a9:33:77:04:95:e0:04:cb:47:e7:5d:ac:14:03:02:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Validity
Not Before: Jan 2 20:07:50 2025 GMT
Not After : Jan 1 20:12:50 2026 GMT
Subject: CN=709C0878FEAD727DC6F7147C0CAB55A1F05222D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7e:27:11:e8:8e:38:3c:86:bc:a9:b0:33:9b:
2f:70:fb:74:07:86:2e:ec:38:af:e7:ad:7f:4e:62:
e0:fc:65:a8:67:28:09:6d:75:1c:b6:1b:3c:0c:f5:
9c:78:f2:ba:eb:22:0c:b0:5c:0c:c8:73:4c:92:9b:
b3:b8:c6:1f:bc:66:fd:f5:5e:49:61:79:be:c7:bc:
75:bf:e2:58:0c:d7:f5:3f:65:66:48:ab:ea:26:eb:
7d:3d:b4:f8:b5:17:57:e4:f6:26:58:50:1d:87:4d:
a2:5c:16:7d:f0:15:ac:e8:90:41:bc:93:ee:1a:3d:
91:f3:9d:60:6e:da:aa:26:6c:19:44:d2:3c:e8:59:
3f:d3:14:44:9f:c4:e7:26:4f:5e:af:2e:91:58:4d:
65:e9:e1:0f:7e:ec:b8:d1:c1:aa:03:f6:05:0d:85:
b1:03:a0:cf:2b:27:27:d8:d8:26:80:41:79:4b:fc:
e7:e1:5d:ed:5d:6d:dd:5b:ea:b6:fa:2d:2a:ec:ec:
16:e0:7f:fc:56:fd:fb:d9:81:ba:45:cc:96:3b:d0:
50:ae:1a:db:98:b6:a3:51:d9:49:73:f5:09:46:5e:
27:62:95:d9:c1:3b:9b:af:5c:80:f2:05:2a:51:a9:
b1:ab:00:87:e6:4a:a3:be:29:fd:de:9b:61:69:a0:
66:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9C:08:78:FE:AD:72:7D:C6:F7:14:7C:0C:AB:55:A1:F0:52:22:D5
X509v3 Authority Key Identifier:
keyid:A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a663830303a3a2f33372d3337203d3e20323634313431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1e0c:f800::/37
Signature Algorithm: sha256WithRSAEncryption
87:59:ee:64:f7:07:bd:ae:f8:df:d0:7a:e5:85:c4:03:18:a7:
80:8b:6e:cc:43:4d:02:3d:48:02:77:b1:9d:b0:a8:95:f4:d3:
c7:59:34:84:06:c0:cb:0e:8b:ca:19:17:76:42:c7:9d:96:fa:
18:7e:c9:21:aa:13:63:af:a2:7b:ff:fb:59:aa:55:dd:03:2d:
19:eb:2f:55:31:5f:4b:4d:36:aa:18:84:17:4c:d3:c3:b7:ac:
a6:cd:e1:51:e9:7d:12:e3:a8:5e:6a:ad:0f:44:a9:cc:0f:f3:
4c:34:6c:6c:24:eb:4e:be:68:ae:1b:a1:07:24:82:15:27:41:
b9:6b:8e:f9:78:ca:23:58:b9:dd:77:1d:21:74:68:8e:a5:51:
ac:69:4f:88:9a:fa:6e:e5:c9:03:e1:4e:93:61:6d:8f:7b:f6:
35:f5:31:84:e3:51:b0:69:ed:98:8b:cd:85:cc:d5:78:a5:ac:
c9:f9:3f:3e:0d:0d:c0:ff:1e:fd:7d:f3:47:17:30:88:af:fb:
6f:ea:d2:11:35:4e:af:81:e6:b1:ce:cb:79:b0:66:ae:8f:8e:
6d:d3:12:e9:4a:de:55:3b:8b:f5:cf:64:af:fa:e8:fc:f0:ae:
3e:ce:f1:69:38:45:18:21:d7:19:48:20:89:29:a8:5f:95:6c:
2d:42:d9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:44:21 2025 by rpki-client