Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/1/323830343a356363343a3a2f33322d3336203d3e20323638393239.roa
File: 323830343a356363343a3a2f33322d3336203d3e20323638393239.roa (raw, json)
Hash identifier: hxaKBvqS15pSALQ85E/o6ucRUevnZzjJQUrWI+8VP9g=
Subject key identifier: 09:8F:85:50:CD:2C:D9:7D:1C:60:7A:13:6E:24:80:D8:60:E3:29:E4
Certificate issuer: /CN=A58717AA812972E28B6CC3B85ADD1610222992E2
Certificate serial: 7F98D50019964069A69F18032A88BFD1BEBBEE5A
Authority key identifier: A5:87:17:AA:81:29:72:E2:8B:6C:C3:B8:5A:DD:16:10:22:29:92:E2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A58717AA812972E28B6CC3B85ADD1610222992E2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/1/323830343a356363343a3a2f33322d3336203d3e20323638393239.roa
Signing time: Thu 06 Mar 2025 00:34:22 +0000
ROA not before: Thu 06 Mar 2025 00:29:22 +0000
ROA not after: Thu 05 Mar 2026 00:34:22 +0000
asID: 268929
IP address blocks: 2804:5cc4::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:98:d5:00:19:96:40:69:a6:9f:18:03:2a:88:bf:d1:be:bb:ee:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A58717AA812972E28B6CC3B85ADD1610222992E2
Validity
Not Before: Mar 6 00:29:22 2025 GMT
Not After : Mar 5 00:34:22 2026 GMT
Subject: CN=098F8550CD2CD97D1C607A136E2480D860E329E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e4:f2:c3:0a:89:35:c5:56:1e:62:5c:c2:48:
8c:e1:e3:64:79:b3:3e:a0:88:a3:c1:3f:6e:10:28:
18:93:da:72:bf:83:c7:59:86:88:42:e1:94:b7:39:
be:2e:88:01:df:b6:47:77:e4:d3:9e:16:ad:c9:2b:
ef:8a:a5:82:87:69:3a:0c:44:97:79:49:b2:8f:25:
3a:32:20:07:71:2e:d3:e7:6d:e9:a2:c2:4b:78:30:
f4:ca:bb:0b:41:fe:c4:20:f5:9a:1e:a7:a9:ec:f5:
75:93:06:cc:54:e6:db:51:64:ef:6c:af:91:62:7e:
0c:9c:6f:cc:31:1c:5f:f2:bb:ac:4d:0f:a1:af:9c:
2d:f2:49:c4:9c:1e:f7:36:33:04:97:94:0a:49:2e:
71:90:23:a2:07:bd:1a:41:f4:78:23:75:ba:4a:31:
49:54:1f:60:93:b5:07:b1:b4:28:23:c6:c2:ba:2b:
f9:73:18:5e:43:ad:22:a8:57:b4:12:a0:65:5a:91:
6f:0d:3e:90:36:4c:b4:c4:c9:9b:e4:9e:5b:16:2a:
8d:f8:78:a9:38:75:f5:46:70:29:3f:36:aa:c5:99:
57:1e:17:a8:cc:c9:ff:ae:32:57:c2:04:3c:a8:38:
92:75:51:fc:57:cb:90:da:48:a1:01:32:ae:19:31:
d5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8F:85:50:CD:2C:D9:7D:1C:60:7A:13:6E:24:80:D8:60:E3:29:E4
X509v3 Authority Key Identifier:
keyid:A5:87:17:AA:81:29:72:E2:8B:6C:C3:B8:5A:DD:16:10:22:29:92:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/1/A58717AA812972E28B6CC3B85ADD1610222992E2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A58717AA812972E28B6CC3B85ADD1610222992E2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/1/323830343a356363343a3a2f33322d3336203d3e20323638393239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5cc4::/32
Signature Algorithm: sha256WithRSAEncryption
3f:ae:31:55:45:f6:f4:d2:e0:10:77:42:a7:1b:4b:0e:9d:f1:
31:20:49:73:74:c4:f5:e0:06:17:f3:22:70:29:35:5e:4d:6d:
41:86:73:2d:de:55:79:39:97:60:55:8a:f3:64:ec:69:1a:37:
eb:42:6a:08:dd:b2:dd:ba:4b:65:52:3e:a3:df:a7:22:cb:77:
8b:cf:d2:52:df:90:e8:31:e5:d0:81:67:76:c5:3f:ee:3b:af:
cb:ec:07:0d:eb:55:4b:0d:7f:fa:2f:6f:75:cf:74:b9:ad:1b:
b5:b6:79:44:52:e6:7d:9e:9b:7a:e8:2b:59:22:4f:ae:3f:95:
2b:19:e9:b1:3c:94:d4:0c:bf:dd:6d:bd:88:f8:32:7f:de:2c:
57:49:c5:90:e4:ad:84:48:7b:28:9e:7e:2f:bf:66:64:68:7b:
ca:cd:e5:d3:9c:c6:f9:f4:35:88:c1:d2:f7:2a:ff:7c:c2:4a:
5c:09:88:e5:dd:d8:41:e0:b3:32:7b:54:9d:b9:33:41:bf:a8:
d8:7b:d8:31:0a:4b:a7:ad:2f:21:81:7d:09:b1:2f:ae:fc:b5:
48:41:51:ff:17:8f:00:66:e6:32:5f:ff:16:2f:03:b2:e8:e6:
4b:59:ff:78:1b:38:5b:06:b9:49:dd:b0:29:56:32:03:f8:9a:
7a:2c:e3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:48:54 2025 by rpki-client