Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/1/323830343a356335303a3a2f33322d313238203d3e20323638393031.roa
File: 323830343a356335303a3a2f33322d313238203d3e20323638393031.roa (raw, json)
Hash identifier: XtMCYKKNy3smVa5tNSvF7uBud0PzsUGyJwyoHvhmFCc=
Subject key identifier: CB:49:50:2E:3A:71:38:38:29:B4:00:98:C3:E1:8F:4C:EC:AF:33:45
Certificate issuer: /CN=358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51
Certificate serial: 38547FB354778DDA63B970003CAC292D1BB2C8F9
Authority key identifier: 35:8D:0C:BA:1A:BA:22:62:A3:AF:D5:F8:2C:60:EF:92:BD:58:7C:51
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/1/323830343a356335303a3a2f33322d313238203d3e20323638393031.roa
Signing time: Thu 06 Mar 2025 05:12:14 +0000
ROA not before: Thu 06 Mar 2025 05:07:14 +0000
ROA not after: Thu 05 Mar 2026 05:12:14 +0000
asID: 268901
IP address blocks: 2804:5c50::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:54:7f:b3:54:77:8d:da:63:b9:70:00:3c:ac:29:2d:1b:b2:c8:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51
Validity
Not Before: Mar 6 05:07:14 2025 GMT
Not After : Mar 5 05:12:14 2026 GMT
Subject: CN=CB49502E3A71383829B40098C3E18F4CECAF3345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:78:19:38:8c:e9:7b:7d:5d:51:77:00:72:3e:
17:cb:b6:03:54:1a:a6:35:83:7f:38:d9:71:05:44:
0b:a4:01:4e:f5:d9:36:4f:21:6d:82:19:72:5a:06:
19:12:ed:f8:5c:73:f4:47:a2:6c:9d:eb:21:a9:24:
74:f2:6b:53:ed:48:41:87:21:45:b5:cf:fc:43:58:
b1:82:d2:57:85:fa:54:d8:5d:a9:d7:5d:eb:3c:11:
aa:f4:91:cf:5b:fb:a2:8a:69:33:6c:91:d6:c9:00:
f5:7e:d9:00:e5:5c:16:2d:a5:6f:64:ed:db:e2:77:
81:97:2a:e8:ff:76:a7:2c:3e:a0:74:17:08:a9:4e:
9a:5e:41:d8:fa:06:05:31:a8:59:7f:b1:f0:d9:0b:
83:b0:3b:d4:0c:d8:4f:43:1b:63:e4:f0:65:86:fa:
99:f3:3e:66:2a:f9:1d:4c:df:79:2b:80:3b:12:e5:
3d:21:31:88:7b:51:34:48:23:c6:76:63:36:e6:c4:
1b:a5:96:0e:00:be:b1:20:99:b8:2e:6b:57:a8:41:
77:f9:e6:3e:ad:3f:b3:2e:ec:a0:e5:1c:a8:d9:d9:
89:a8:d9:e4:d2:a0:75:f9:dd:17:e6:aa:4f:1e:b5:
c8:4f:b5:46:55:e3:3b:fc:48:58:46:b4:f5:fd:c5:
3b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:49:50:2E:3A:71:38:38:29:B4:00:98:C3:E1:8F:4C:EC:AF:33:45
X509v3 Authority Key Identifier:
keyid:35:8D:0C:BA:1A:BA:22:62:A3:AF:D5:F8:2C:60:EF:92:BD:58:7C:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/1/323830343a356335303a3a2f33322d313238203d3e20323638393031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5c50::/32
Signature Algorithm: sha256WithRSAEncryption
b2:0c:91:13:b0:2f:a1:7c:90:bd:80:a2:7c:ce:a8:18:d2:d4:
bb:0a:13:a6:d9:a0:8a:50:da:4e:cd:1c:80:3a:6a:36:a2:63:
25:8d:08:8c:b3:71:ea:1c:db:ec:0c:84:84:6f:2b:d7:67:e7:
59:72:ee:82:9d:9a:3e:c2:d9:75:ea:60:86:29:b6:78:ce:af:
29:c3:f1:19:69:25:73:9c:c6:04:52:e9:c1:96:f7:0a:28:e2:
6b:c4:72:4d:fa:76:87:b8:86:27:ce:7a:d6:0c:73:b5:3c:e7:
0b:37:94:d3:59:ae:c6:85:e9:41:9a:61:9a:c9:72:76:66:29:
ef:b2:5c:00:95:4f:a0:d9:12:3b:aa:5c:d2:f2:b7:e2:43:5a:
a4:8f:10:ba:97:72:a8:59:f4:bc:fe:85:ef:ea:46:93:56:97:
73:6b:2d:f9:27:9d:62:f1:00:7b:ac:32:a2:05:97:21:ab:b7:
09:d1:b3:d0:15:1f:ab:93:0b:0b:0f:05:b2:46:eb:0a:39:56:
4d:7e:1f:9b:e4:38:25:04:3f:62:ba:98:6a:e5:2b:df:c1:08:
1a:d4:a9:03:15:db:5c:33:5b:6f:3a:b9:e5:62:10:30:7f:61:
07:84:c8:65:b5:fb:2c:ba:53:84:a6:a2:84:e4:1e:51:bf:0c:
fe:5e:29:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:29:48 2025 by rpki-client