Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/323830343a3331633a3a2f33322d3332203d3e203532393632.roa
File: 323830343a3331633a3a2f33322d3332203d3e203532393632.roa (raw, json)
Hash identifier: GaY/KkDMesX4ecslQ2IyQkLXINIqloyzn4qsHySo8g8=
Subject key identifier: A1:DC:C0:7C:AB:EC:7F:5A:3E:34:99:4E:E4:FE:74:B6:07:F6:C0:8A
Certificate issuer: /CN=5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C
Certificate serial: 5E8D94D2F4A877742A2005286397D96703DC03ED
Authority key identifier: 5A:EE:39:E0:3A:3D:AE:A5:B7:81:8D:FE:7D:26:45:BC:EC:E4:DD:1C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/323830343a3331633a3a2f33322d3332203d3e203532393632.roa
Signing time: Tue 04 Mar 2025 17:09:59 +0000
ROA not before: Tue 04 Mar 2025 17:04:59 +0000
ROA not after: Tue 03 Mar 2026 17:09:59 +0000
asID: 52962
IP address blocks: 2804:31c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:8d:94:d2:f4:a8:77:74:2a:20:05:28:63:97:d9:67:03:dc:03:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C
Validity
Not Before: Mar 4 17:04:59 2025 GMT
Not After : Mar 3 17:09:59 2026 GMT
Subject: CN=A1DCC07CABEC7F5A3E34994EE4FE74B607F6C08A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:60:f7:22:45:c5:6a:63:ac:18:6b:cb:5d:36:
b9:8f:d5:7b:58:f1:24:70:d5:74:0d:17:f4:47:f0:
48:c4:ec:e7:82:11:40:f5:ec:08:70:76:b7:2b:92:
3e:44:26:7a:1f:0b:9a:e9:b2:a0:93:81:15:76:22:
a0:23:b2:22:1f:a3:34:2d:1b:08:d3:c6:f1:72:2b:
fb:99:13:67:c8:11:b8:59:eb:65:8f:39:d0:99:f7:
24:1a:b6:1c:45:27:2b:52:da:d4:2e:f2:e0:73:bd:
85:7b:11:59:a6:cc:89:c5:0b:a6:ce:1c:56:d4:70:
16:14:89:ff:be:c3:3e:80:5f:70:0b:b5:3e:9c:d3:
cd:c0:29:18:8d:be:a2:d7:ae:a2:7c:85:06:7c:fc:
e5:69:5f:4b:80:d2:21:38:bc:27:86:92:3d:dc:bf:
62:78:37:b7:0a:6e:67:29:e2:34:eb:ee:09:31:4d:
f1:c4:3c:6f:ee:39:4d:a4:fc:30:27:30:71:3e:41:
fa:11:e4:f5:b9:d2:9a:4c:4a:e1:e9:56:84:0f:14:
a8:12:43:89:bf:d6:3c:fb:e5:a1:4b:47:a7:8b:38:
4a:77:cd:9b:dc:87:90:03:f2:68:22:b9:dd:b9:31:
d9:86:c0:42:9a:a4:95:60:b4:ad:a0:73:88:2c:0d:
96:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DC:C0:7C:AB:EC:7F:5A:3E:34:99:4E:E4:FE:74:B6:07:F6:C0:8A
X509v3 Authority Key Identifier:
keyid:5A:EE:39:E0:3A:3D:AE:A5:B7:81:8D:FE:7D:26:45:BC:EC:E4:DD:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/323830343a3331633a3a2f33322d3332203d3e203532393632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:31c::/32
Signature Algorithm: sha256WithRSAEncryption
46:10:42:7d:7e:7e:1a:d5:5f:dc:08:f0:7f:f4:cb:d4:3a:a4:
bf:d1:74:92:03:5e:5a:f0:ee:9d:0c:39:a8:73:74:28:78:7c:
b7:71:ae:1e:a2:47:fc:7b:a5:95:2d:87:d4:d5:f6:b7:12:84:
1e:9e:d9:e8:1f:47:6a:d2:95:0d:e4:ec:b5:b6:f3:fe:59:b4:
b1:ae:9c:0d:e9:c5:53:83:a2:4e:f2:33:15:38:7e:09:de:40:
16:7c:b3:53:b3:10:27:34:8a:ab:e3:08:58:87:83:0f:ad:5e:
cd:55:f5:90:9f:41:c3:3e:b0:b1:29:7d:1e:46:44:64:66:56:
dc:10:60:5f:31:a8:28:9e:c1:25:25:6d:0a:bd:1d:81:14:6f:
6a:4c:e6:3c:a0:67:f0:90:29:0c:41:8a:fa:82:48:f3:36:c8:
01:33:80:e5:d6:47:6a:7d:f9:39:78:45:6e:45:3d:27:2d:6f:
b4:82:5a:84:4e:d9:d6:bf:11:2f:50:32:6b:0f:f7:df:41:64:
e3:06:c0:f1:26:05:b7:ed:18:f3:6e:62:67:7e:95:0f:90:35:
df:99:34:42:51:0c:19:c0:5e:7f:f6:23:47:4c:9b:bd:ab:f9:
22:ac:27:c0:66:43:69:63:13:89:f2:5e:56:c2:3f:78:b7:a5:
12:d0:38:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:57:01 2025 by rpki-client