Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/323830343a323063303a3a2f33322d3438203d3e20323634353132.roa
File: 323830343a323063303a3a2f33322d3438203d3e20323634353132.roa (raw, json)
Hash identifier: xee9sI4lZhpA/ae1SfSHZt6s0IIwr6d9n4pRuri1Uv0=
Subject key identifier: 05:B3:76:39:FE:44:03:9C:5B:A1:D7:62:CD:F3:F2:BA:B5:86:61:B5
Certificate issuer: /CN=CE444325009DC85BE712BCD01156510F2B6F4AB9
Certificate serial: 20E2FBC3D5177FDFB156DD400ECB1B5809CF1DC3
Authority key identifier: CE:44:43:25:00:9D:C8:5B:E7:12:BC:D0:11:56:51:0F:2B:6F:4A:B9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/323830343a323063303a3a2f33322d3438203d3e20323634353132.roa
Signing time: Thu 06 Mar 2025 17:52:26 +0000
ROA not before: Thu 06 Mar 2025 17:47:26 +0000
ROA not after: Thu 05 Mar 2026 17:52:26 +0000
asID: 264512
IP address blocks: 2804:20c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:e2:fb:c3:d5:17:7f:df:b1:56:dd:40:0e:cb:1b:58:09:cf:1d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE444325009DC85BE712BCD01156510F2B6F4AB9
Validity
Not Before: Mar 6 17:47:26 2025 GMT
Not After : Mar 5 17:52:26 2026 GMT
Subject: CN=05B37639FE44039C5BA1D762CDF3F2BAB58661B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dc:fe:bc:72:ba:9f:ba:7d:87:8b:e7:79:ed:
2c:a6:83:12:f9:34:22:4a:5e:b9:5a:50:af:b5:c0:
9e:0c:f6:96:92:5e:07:53:00:19:12:e7:97:e1:42:
8f:3f:0e:71:f1:f4:43:d8:14:45:b5:63:ad:b5:e4:
6c:fc:d7:7e:09:30:7d:84:3a:7c:29:02:b3:b6:9e:
76:01:24:98:ea:6c:dd:7d:7b:77:08:81:2e:8f:1f:
8b:6e:52:f1:37:58:a7:f8:94:72:bb:fe:06:cb:04:
05:d8:32:fd:07:31:ae:be:a2:f6:38:02:46:84:1e:
66:8e:c9:0a:e2:fd:df:03:5b:ff:dc:27:16:46:df:
32:79:30:65:67:74:92:9f:23:42:cc:38:8a:75:6c:
e0:1b:53:46:e2:60:6c:f2:3f:97:b2:46:51:03:e9:
ae:89:07:00:68:58:aa:6f:75:1d:4d:c9:88:48:60:
4a:57:89:88:c7:c6:47:ac:6e:89:fe:27:af:45:7b:
8f:53:66:dc:09:cd:89:ce:ef:e2:ed:7a:0b:5d:e4:
af:65:bf:39:b3:85:6c:b0:e0:86:1d:04:3f:32:c6:
50:c7:0a:a2:80:36:d4:d9:0b:05:e7:44:f5:b6:a7:
f0:2b:6b:b0:25:14:cb:32:d4:f4:af:ea:d3:58:0b:
15:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B3:76:39:FE:44:03:9C:5B:A1:D7:62:CD:F3:F2:BA:B5:86:61:B5
X509v3 Authority Key Identifier:
keyid:CE:44:43:25:00:9D:C8:5B:E7:12:BC:D0:11:56:51:0F:2B:6F:4A:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/323830343a323063303a3a2f33322d3438203d3e20323634353132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:20c0::/32
Signature Algorithm: sha256WithRSAEncryption
28:88:5e:b2:ce:db:21:d0:1f:a5:02:14:9e:31:8e:e7:a6:8c:
03:91:80:fd:fd:ad:04:3c:91:9e:2c:44:8c:6d:bd:cb:1a:6d:
06:11:76:71:a8:f6:47:6c:c3:bb:f3:2e:47:a1:f9:8b:60:8d:
a3:0a:d8:8a:d0:d5:29:28:36:26:81:f1:f4:19:2d:2a:87:05:
b4:0b:14:88:23:4e:6a:8a:10:c6:39:43:3c:4a:00:48:e7:a4:
52:52:5a:eb:a8:fb:31:de:cb:48:56:78:f1:63:3d:fd:bc:7d:
17:8c:33:df:5c:24:3b:a3:95:a5:a0:c4:8d:6b:6a:d4:13:f7:
19:ff:a5:21:e8:e4:87:4b:c2:22:09:eb:25:1e:59:57:04:6a:
0b:e8:76:60:c5:6f:f9:7c:be:c8:e3:6d:48:07:31:22:52:be:
cb:0f:5b:76:2f:5d:48:0c:9a:5b:2f:f4:ed:09:da:55:f8:ea:
f6:4b:a6:05:51:4a:83:66:1f:0e:eb:10:92:fd:87:eb:7e:f8:
52:dc:e3:00:5d:f1:f1:bc:52:1e:78:26:e7:16:23:8a:14:3e:
ca:8a:0b:b9:58:f9:a7:2b:1a:2c:df:66:f7:be:97:f9:8b:a5:
ce:cf:e5:cf:84:20:ac:95:3a:40:e7:58:36:b7:11:f2:ef:75:
f1:3a:f2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:51:01 2025 by rpki-client