Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/323830343a3637343a3a2f33322d3332203d3e203238333238.roa
File: 323830343a3637343a3a2f33322d3332203d3e203238333238.roa (raw, json)
Hash identifier: qwog+D53qeJD7WpuINU4eysTJPWNk6AcnGE06haR120=
Subject key identifier: 8E:BB:04:31:51:03:56:E5:40:4F:96:43:98:EA:32:B9:1A:1F:98:2D
Certificate issuer: /CN=5B2D2DF0A92DA3733DD7225515A63E3D6BF65785
Certificate serial: 2A5F1B96C1C79736DA11CA05FE906D2451163C84
Authority key identifier: 5B:2D:2D:F0:A9:2D:A3:73:3D:D7:22:55:15:A6:3E:3D:6B:F6:57:85
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer
Subject info access: rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/323830343a3637343a3a2f33322d3332203d3e203238333238.roa
Signing time: Wed 26 Mar 2025 21:46:59 +0000
ROA not before: Wed 26 Mar 2025 21:41:59 +0000
ROA not after: Wed 25 Mar 2026 21:46:59 +0000
asID: 28328
IP address blocks: 2804:674::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:5f:1b:96:c1:c7:97:36:da:11:ca:05:fe:90:6d:24:51:16:3c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B2D2DF0A92DA3733DD7225515A63E3D6BF65785
Validity
Not Before: Mar 26 21:41:59 2025 GMT
Not After : Mar 25 21:46:59 2026 GMT
Subject: CN=8EBB0431510356E5404F964398EA32B91A1F982D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:82:29:c2:3f:1f:da:c7:d6:f1:1b:4d:e1:12:
d8:43:99:c3:40:8a:c4:cc:92:d7:53:ce:3a:98:c4:
3b:75:34:46:63:54:12:5b:18:0d:0f:c3:5d:6e:59:
11:24:d1:4c:c5:38:75:6b:15:db:d5:77:0f:56:25:
60:10:f7:f1:3f:56:4d:43:34:c3:31:03:f9:6c:1a:
e3:e4:fe:5f:a4:02:aa:1f:d2:7d:87:95:a0:92:42:
aa:44:aa:84:7f:d9:8b:77:ed:17:5a:7b:aa:c0:bc:
a8:49:2f:5d:70:8b:1b:d8:5e:c7:f0:11:3e:e7:5d:
b2:ad:1e:a2:5a:13:6d:30:2a:be:eb:76:21:ed:01:
fa:da:c8:58:08:be:52:81:27:de:e4:49:ea:36:23:
1b:3c:57:e3:40:9d:f9:68:c0:71:38:69:e0:63:67:
20:d6:1d:63:28:73:92:b5:30:5b:f5:46:03:2e:12:
8a:e8:d6:f6:62:a2:28:80:76:7d:8c:55:ce:fb:f6:
3e:ec:bb:fe:31:4d:6d:29:23:4b:fa:fd:ef:86:12:
d0:40:f6:6c:66:6a:f1:08:46:16:fd:ac:9e:1b:0b:
e6:5b:5f:a2:15:f3:be:6c:8d:c8:20:fb:d5:6d:dc:
d9:5c:c7:5a:6f:1b:a1:e6:cc:70:0f:d5:57:3a:80:
35:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BB:04:31:51:03:56:E5:40:4F:96:43:98:EA:32:B9:1A:1F:98:2D
X509v3 Authority Key Identifier:
keyid:5B:2D:2D:F0:A9:2D:A3:73:3D:D7:22:55:15:A6:3E:3D:6B:F6:57:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/323830343a3637343a3a2f33322d3332203d3e203238333238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:674::/32
Signature Algorithm: sha256WithRSAEncryption
bc:5a:af:bc:a5:f5:cb:0b:df:44:cc:ed:79:8c:1a:de:75:b8:
95:7d:98:a7:5a:e8:9b:b4:bb:08:7c:c9:d4:70:4f:9c:55:bb:
41:5b:3d:98:89:1c:54:f1:10:87:d5:ba:22:b3:ee:87:24:46:
ac:ed:58:93:27:77:44:4c:a6:2a:57:83:ea:a5:66:b8:28:04:
c0:7c:f6:ff:dd:f3:cf:3b:ca:16:d8:e7:eb:52:2d:91:77:79:
3a:bb:1d:47:7c:13:cb:31:5a:88:cb:10:7c:1a:2b:30:05:09:
41:51:6c:ed:69:08:a4:a1:2d:ab:8b:9e:dc:3a:d5:a4:9b:85:
70:7a:d3:9f:f6:20:6e:67:78:59:21:1a:5a:0c:94:58:a6:86:
5d:93:68:d3:db:cc:58:60:0e:db:c8:53:a9:00:df:75:da:e5:
03:7f:8e:83:ed:34:2f:cf:e2:78:7a:62:cf:a0:24:0a:6c:98:
7d:7f:05:f5:b5:87:bd:c7:7f:4c:a0:8c:e0:cd:14:27:14:86:
45:8e:f1:5d:1d:47:71:d3:bd:d9:dc:d0:ca:d4:7e:ab:72:14:
8e:42:c6:73:fd:4d:a9:1c:34:ee:fc:26:e7:37:1d:4d:5a:d5:
de:bd:ba:c3:b4:ca:cb:95:66:73:d0:d1:a5:ca:33:bf:74:71:
2f:6b:87:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 06:03:01 2025 by rpki-client