Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/323830343a3637343a383030303a3a2f34302d3430203d3e203238333238.roa
File: 323830343a3637343a383030303a3a2f34302d3430203d3e203238333238.roa (raw, json)
Hash identifier: ty62y8Lvk+0RtjS/RxW5z3B5z40toYVlDtkeHDTSp3E=
Subject key identifier: 58:DF:76:C1:B1:F4:4B:69:25:9A:83:16:C6:98:89:0B:A8:94:40:DD
Certificate issuer: /CN=5B2D2DF0A92DA3733DD7225515A63E3D6BF65785
Certificate serial: 53A1DE79931DDA07C003CA9FAB99B03F1951D883
Authority key identifier: 5B:2D:2D:F0:A9:2D:A3:73:3D:D7:22:55:15:A6:3E:3D:6B:F6:57:85
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer
Subject info access: rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/323830343a3637343a383030303a3a2f34302d3430203d3e203238333238.roa
Signing time: Wed 26 Mar 2025 21:46:58 +0000
ROA not before: Wed 26 Mar 2025 21:41:58 +0000
ROA not after: Wed 25 Mar 2026 21:46:58 +0000
asID: 28328
IP address blocks: 2804:674:8000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:a1:de:79:93:1d:da:07:c0:03:ca:9f:ab:99:b0:3f:19:51:d8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B2D2DF0A92DA3733DD7225515A63E3D6BF65785
Validity
Not Before: Mar 26 21:41:58 2025 GMT
Not After : Mar 25 21:46:58 2026 GMT
Subject: CN=58DF76C1B1F44B69259A8316C698890BA89440DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f5:95:49:bb:2c:ce:c1:2e:0d:6a:78:a0:de:
8c:1e:87:35:13:62:e5:90:f6:f5:aa:e3:a1:44:69:
a1:ec:80:fe:61:85:17:d4:f0:91:e6:ef:3b:52:9e:
fb:3b:e2:35:f1:a4:61:9c:69:6b:44:bf:b1:b0:0a:
1a:86:86:79:c4:72:ea:74:3c:2a:c4:e6:02:22:fc:
e5:d0:b7:83:96:d7:f5:7a:aa:dd:65:f6:b9:c0:f8:
56:e5:21:5b:6e:34:2e:3d:cf:8f:87:45:f7:63:19:
ed:c7:11:30:36:fb:34:51:e1:46:34:e3:91:c8:bd:
f4:26:38:41:bd:0d:cd:32:51:81:35:5b:68:f5:50:
60:7a:62:23:f8:45:9b:4d:24:34:09:d9:48:c7:ad:
9a:da:c0:99:b1:c4:61:ea:0c:76:3f:e1:a0:5c:c2:
e6:1f:82:6d:e2:85:4a:d0:a9:7f:94:52:41:13:4d:
3b:52:ce:64:89:0f:73:6d:4c:05:3a:14:34:db:33:
e7:10:e3:e2:6a:83:11:48:54:6a:2e:29:dc:d1:2b:
8e:20:5e:59:59:38:df:04:20:f0:f9:8c:2f:40:94:
23:a6:a5:dc:f4:06:c5:97:d0:94:13:c0:0e:f1:29:
52:28:00:ce:8a:90:4b:e2:44:b4:3a:a5:4a:1c:4b:
e1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DF:76:C1:B1:F4:4B:69:25:9A:83:16:C6:98:89:0B:A8:94:40:DD
X509v3 Authority Key Identifier:
keyid:5B:2D:2D:F0:A9:2D:A3:73:3D:D7:22:55:15:A6:3E:3D:6B:F6:57:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/323830343a3637343a383030303a3a2f34302d3430203d3e203238333238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:674:8000::/40
Signature Algorithm: sha256WithRSAEncryption
9c:6b:49:6d:02:4e:f2:85:3e:f9:17:42:0c:fb:8c:e7:2a:c1:
12:bf:ad:3f:8a:f8:79:13:99:4f:e4:a4:06:12:b1:28:c3:6f:
18:71:75:98:07:40:de:b2:39:c4:3e:a4:a2:b5:95:68:e0:63:
19:17:00:06:f1:db:30:3e:d9:54:2f:21:0a:aa:b5:18:f3:ca:
9a:92:0e:f7:81:5e:70:c6:9f:78:40:94:f7:ba:5b:b7:8c:3e:
78:ad:ee:46:ba:4f:32:63:2b:a6:40:37:a7:42:1d:b2:f7:b0:
4a:46:88:4f:c3:70:60:e5:9f:0b:e6:1e:53:74:aa:20:d5:8d:
63:40:06:f6:fe:e0:d4:27:14:a6:b7:28:42:a3:88:78:fa:6e:
08:e4:1e:24:ca:67:15:e6:3c:75:bf:c8:4f:b3:f7:d4:d5:c0:
06:ea:bf:e3:3b:9e:21:7e:49:f0:99:c1:26:5b:a3:2e:13:04:
9c:16:95:dc:da:c8:31:5f:b8:f7:64:7d:d8:ab:20:f6:b4:25:
4f:b4:4e:51:8e:8e:bf:ee:9a:6c:63:75:00:b7:77:d5:f8:3f:
44:a1:20:99:f4:5d:ca:be:ba:45:6e:60:75:16:1d:43:a5:d2:
be:69:33:4e:6e:4d:be:a1:3d:da:87:f9:e6:c4:32:33:53:48:
5b:b4:4c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 06:06:08 2025 by rpki-client