Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a3a2f33322d3332203d3e20323633323536.roa
File: 323830343a313765303a3a2f33322d3332203d3e20323633323536.roa (raw, json)
Hash identifier: tbpG0VQnTAX2JTYTV/zNdJZh0rL6DgDYod6z52l/Pgk=
Subject key identifier: 31:7E:37:F4:87:16:55:85:DE:EC:B2:18:8F:21:EB:0C:81:62:35:11
Certificate issuer: /CN=60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011
Certificate serial: 020117A88B4ADE5A951BFB611836ED3C5002880B
Authority key identifier: 60:F5:CE:DC:60:B1:C9:2A:5A:74:DC:B3:CF:E6:F0:44:F9:46:20:11
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a3a2f33322d3332203d3e20323633323536.roa
Signing time: Fri 10 Jan 2025 16:41:54 +0000
ROA not before: Fri 10 Jan 2025 16:36:54 +0000
ROA not after: Fri 09 Jan 2026 16:41:54 +0000
asID: 263256
IP address blocks: 2804:17e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:01:17:a8:8b:4a:de:5a:95:1b:fb:61:18:36:ed:3c:50:02:88:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011
Validity
Not Before: Jan 10 16:36:54 2025 GMT
Not After : Jan 9 16:41:54 2026 GMT
Subject: CN=317E37F487165585DEECB2188F21EB0C81623511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a4:81:64:f8:e0:b1:6f:30:8c:36:2c:ec:93:
ed:64:47:d4:bd:06:23:40:5d:65:9c:b0:c0:24:65:
c4:39:d2:cd:a8:87:71:55:09:16:3e:97:08:0f:f6:
c5:6b:b3:94:01:cb:ba:fb:fc:87:bf:4c:63:c7:87:
e3:37:c4:47:5d:3d:5a:59:8b:4b:0c:69:a2:0e:90:
a2:80:e6:e3:9b:de:96:2e:e4:83:f5:bd:db:35:53:
34:0e:2e:90:f2:70:c2:8e:06:dc:be:c9:6c:63:51:
6a:21:63:39:c0:23:cc:b1:16:c5:32:c0:42:e2:da:
86:17:1d:19:4f:2c:12:24:20:9c:09:f8:94:46:1d:
a6:41:a0:ca:9c:ba:a1:17:6b:18:95:03:ca:e7:06:
b8:11:49:47:41:04:05:6b:e2:65:0b:5c:b2:48:ee:
be:28:92:07:40:7e:98:68:fa:0f:33:25:a9:07:ad:
c9:6d:e4:dc:e1:cc:65:97:83:9f:ee:ab:25:d8:56:
2f:2d:56:17:fb:e9:64:be:66:9f:a5:36:67:c1:3f:
3e:ef:ee:64:3e:69:3f:20:15:91:37:76:dd:27:06:
7a:6b:1e:d5:c3:60:2d:09:18:50:26:fa:6a:0d:ef:
52:5b:67:e0:65:43:d2:29:7f:be:6b:db:19:df:c8:
55:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7E:37:F4:87:16:55:85:DE:EC:B2:18:8F:21:EB:0C:81:62:35:11
X509v3 Authority Key Identifier:
keyid:60:F5:CE:DC:60:B1:C9:2A:5A:74:DC:B3:CF:E6:F0:44:F9:46:20:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a3a2f33322d3332203d3e20323633323536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:17e0::/32
Signature Algorithm: sha256WithRSAEncryption
54:c3:77:6a:ff:7e:c4:f1:b0:16:05:ac:ec:b4:8b:ba:8c:2c:
da:0f:85:1d:19:f7:7f:36:81:3e:4f:0f:eb:fa:2a:9b:a1:91:
29:6b:4e:01:87:d3:a2:d6:a8:ea:8c:c2:bd:03:40:1a:83:da:
ee:6d:26:90:61:3d:c2:67:2e:2c:30:5c:18:87:33:ae:ac:e0:
cc:c1:ca:e4:7b:56:13:d4:57:fb:64:f4:f4:38:7b:22:b9:4c:
de:a3:8b:88:69:23:03:f0:3f:3f:b5:73:36:a6:21:79:f1:a3:
7b:f4:56:ad:ff:74:57:d8:bb:ef:b8:62:16:dc:fe:57:51:86:
b5:7a:64:98:e8:6e:7b:d5:e8:78:fa:01:f2:5a:26:27:93:c0:
ec:b7:69:7b:fd:06:46:31:4a:1a:b2:5f:53:91:77:e5:97:ee:
95:1a:64:73:8b:11:df:df:d1:2a:54:35:49:3c:41:6d:55:75:
2f:d4:27:10:9a:1d:52:12:66:70:ba:c6:1c:df:ae:07:1b:71:
46:62:93:eb:df:ed:e1:e5:9a:51:bf:2d:3e:4c:72:fe:9d:05:
ff:98:c5:d0:14:56:c5:ff:df:c7:c1:a1:02:de:85:13:5c:ea:
59:c3:b1:e6:97:ef:f5:96:9d:38:cb:06:2b:ab:ba:04:10:47:
c9:cb:50:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:28:20 2025 by rpki-client