Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a383030303a3a2f33342d3334203d3e20323633323536.roa
File: 323830343a313765303a383030303a3a2f33342d3334203d3e20323633323536.roa (raw, json)
Hash identifier: AQ4ZDIm8k1ZXh98LIWbLhGCqzcLQSV/AFy4KDSM2jdk=
Subject key identifier: 0F:D7:0A:0B:67:F4:73:17:BC:34:ED:00:4C:06:97:FA:82:92:14:D5
Certificate issuer: /CN=0156B956215AE4C7F951D9FABA7689B0C1830680
Certificate serial: 0AA2A2FF971DF1DDAE68693CA8A4C30B1EF0A455
Authority key identifier: 01:56:B9:56:21:5A:E4:C7:F9:51:D9:FA:BA:76:89:B0:C1:83:06:80
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0156B956215AE4C7F951D9FABA7689B0C1830680.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a383030303a3a2f33342d3334203d3e20323633323536.roa
Signing time: Fri 23 May 2025 16:53:05 +0000
ROA not before: Fri 23 May 2025 16:48:05 +0000
ROA not after: Fri 22 May 2026 16:53:05 +0000
asID: 263256
IP address blocks: 2804:17e0:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:a2:a2:ff:97:1d:f1:dd:ae:68:69:3c:a8:a4:c3:0b:1e:f0:a4:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0156B956215AE4C7F951D9FABA7689B0C1830680
Validity
Not Before: May 23 16:48:05 2025 GMT
Not After : May 22 16:53:05 2026 GMT
Subject: CN=0FD70A0B67F47317BC34ED004C0697FA829214D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:71:9a:5f:70:44:1a:7b:76:49:08:20:84:83:
d0:c2:c2:c9:ed:d0:72:41:45:d3:02:13:bc:68:75:
1c:e9:6a:ff:e4:d8:67:db:f1:e8:86:42:4c:e7:6b:
42:37:61:b9:dc:8c:a0:0c:7a:49:20:bb:96:0e:cf:
56:58:24:ba:f6:cd:e6:92:24:7d:15:3b:98:3b:60:
3f:0c:f6:81:b1:29:4e:ce:58:9a:39:1c:8e:d8:7e:
39:3f:c6:fc:1f:f9:63:d4:b7:5b:3f:bf:6a:ec:5d:
22:88:18:ff:7f:5f:e8:15:0a:bd:1c:5a:af:79:76:
27:4b:16:3f:66:3e:66:52:06:59:0a:7e:ca:1c:0c:
36:53:d5:3e:88:bb:f3:6e:b7:dd:94:9b:a2:e8:03:
60:d6:36:9f:32:33:7f:b8:42:47:2b:28:64:3a:af:
7c:1c:67:57:83:82:c6:8e:95:10:ec:8f:73:b7:eb:
4e:a5:47:ee:a9:1c:d3:15:2b:66:6d:78:c3:ba:3b:
ed:96:50:d3:70:7c:df:cc:01:b2:24:9b:ce:43:01:
03:02:4e:31:49:d2:21:f3:dc:bc:7f:c0:83:fe:5b:
61:4d:5b:63:37:ef:58:40:6b:ca:b0:63:3a:af:d3:
29:af:5c:e6:11:99:9d:6e:36:bb:08:ba:61:8f:f2:
8b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D7:0A:0B:67:F4:73:17:BC:34:ED:00:4C:06:97:FA:82:92:14:D5
X509v3 Authority Key Identifier:
keyid:01:56:B9:56:21:5A:E4:C7:F9:51:D9:FA:BA:76:89:B0:C1:83:06:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/0156B956215AE4C7F951D9FABA7689B0C1830680.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0156B956215AE4C7F951D9FABA7689B0C1830680.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a383030303a3a2f33342d3334203d3e20323633323536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:17e0:8000::/34
Signature Algorithm: sha256WithRSAEncryption
06:6d:64:42:90:fc:07:b1:5b:11:83:d2:07:fb:8e:f1:76:03:
3b:c4:4b:01:d0:2e:88:05:fb:e5:06:61:b6:ad:5e:22:35:36:
9c:55:67:a9:90:7e:87:9c:a3:f6:13:8d:b1:e4:53:cc:d4:b5:
e3:aa:cc:53:d0:a4:53:1b:74:b2:df:b1:8b:54:7e:f9:a4:8b:
39:33:99:d0:9d:72:ef:f9:d3:47:22:24:ec:7c:cc:83:59:0b:
c7:1e:11:9f:38:ea:3e:71:00:f8:ed:a4:3e:3f:3f:be:a9:fe:
d2:da:61:94:84:e9:28:69:c2:0d:d6:57:05:53:b9:b5:99:e5:
14:30:61:d7:0a:4a:7a:84:59:41:b1:25:a5:99:07:b4:d7:0f:
75:7e:6c:da:5f:77:88:1b:22:0a:4c:23:f1:6d:69:3c:5a:6b:
3e:77:8b:9b:d1:bd:78:35:73:b8:35:33:93:7a:89:20:93:1a:
54:c0:b5:22:03:64:a0:31:c2:55:06:b0:8d:c9:5e:78:a0:2d:
42:a5:d6:85:1e:a7:7a:9a:59:ba:8a:7e:87:8a:51:7f:07:7e:
08:7e:4a:37:3f:c1:29:33:16:7b:f4:a2:4a:ed:69:2e:32:07:
94:d3:0a:e7:5e:ef:78:fd:7d:dd:79:60:ad:c6:00:01:f6:a9:
24:9e:8f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 09:46:47 2025 by rpki-client