Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a3a2f33322d3332203d3e20323633393430.roa
File: 323830343a323831383a3a2f33322d3332203d3e20323633393430.roa (raw, json)
Hash identifier: d154WuTOoAi2JbbF0N9fA+BZYtz3KDKVpj9SnREQ9Q8=
Subject key identifier: A0:B0:1F:AF:FE:94:A2:03:4C:71:85:24:46:18:1B:5F:55:2C:34:10
Certificate issuer: /CN=A00894A4159E2748ED3F950641ECEA8A9D01128D
Certificate serial: 5EA1EF3E7EF707D243812FCCF58BFE2FC07EA562
Authority key identifier: A0:08:94:A4:15:9E:27:48:ED:3F:95:06:41:EC:EA:8A:9D:01:12:8D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A00894A4159E2748ED3F950641ECEA8A9D01128D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a3a2f33322d3332203d3e20323633393430.roa
Signing time: Mon 10 Feb 2025 19:20:55 +0000
ROA not before: Mon 10 Feb 2025 19:15:55 +0000
ROA not after: Mon 09 Feb 2026 19:20:55 +0000
asID: 263940
IP address blocks: 2804:2818::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:a1:ef:3e:7e:f7:07:d2:43:81:2f:cc:f5:8b:fe:2f:c0:7e:a5:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A00894A4159E2748ED3F950641ECEA8A9D01128D
Validity
Not Before: Feb 10 19:15:55 2025 GMT
Not After : Feb 9 19:20:55 2026 GMT
Subject: CN=A0B01FAFFE94A2034C71852446181B5F552C3410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:87:28:fa:de:a1:5c:d8:d1:3b:44:09:ec:67:
9f:57:20:c1:e9:a0:9c:c7:21:4f:ec:76:44:75:0a:
d2:b0:8a:d7:88:eb:54:a7:d7:0d:aa:f7:c4:17:5a:
13:2c:b0:41:b1:d7:c3:4e:61:4e:e0:f1:40:75:ea:
f4:e8:fa:d3:94:ed:56:c3:af:26:af:7f:77:ed:7a:
5e:7f:86:30:bb:39:39:41:00:58:c1:ab:f9:a2:32:
8b:00:f4:e5:91:a0:ad:1c:55:af:3c:ae:67:db:79:
d4:cf:80:fd:e4:30:85:c8:4f:5a:4d:fb:c8:d8:66:
41:34:f7:ab:bc:3f:20:5c:6b:3a:42:c6:fc:04:ee:
2a:94:cb:ce:e5:f1:63:eb:45:05:e0:69:03:d9:d4:
d4:46:45:dc:96:62:19:ba:09:10:ea:1a:8f:6c:61:
a3:1e:c2:48:bc:97:d8:1d:ed:75:20:5c:f8:2c:6c:
92:23:57:10:0a:38:2f:f4:97:87:c0:1c:62:65:d2:
5a:49:70:04:b3:bc:3c:9d:ee:5e:3d:52:1f:a4:be:
92:c5:d0:8b:82:d4:26:e1:74:db:57:b4:f2:78:a1:
43:a4:99:45:80:88:c9:a4:fa:0e:6e:e4:4e:23:13:
2d:18:17:69:14:0d:ff:0e:b0:0b:12:0a:75:36:c6:
d7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B0:1F:AF:FE:94:A2:03:4C:71:85:24:46:18:1B:5F:55:2C:34:10
X509v3 Authority Key Identifier:
keyid:A0:08:94:A4:15:9E:27:48:ED:3F:95:06:41:EC:EA:8A:9D:01:12:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/A00894A4159E2748ED3F950641ECEA8A9D01128D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A00894A4159E2748ED3F950641ECEA8A9D01128D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a3a2f33322d3332203d3e20323633393430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2818::/32
Signature Algorithm: sha256WithRSAEncryption
07:e4:f9:5e:71:75:6d:4a:98:93:eb:55:46:f4:dc:2e:bf:00:
19:bf:4d:82:8a:4d:98:93:e5:d1:dd:fd:3b:61:84:54:ff:55:
aa:83:08:46:4d:2d:c5:f0:91:25:1d:72:56:08:4b:f1:6f:c7:
c2:25:d8:5c:2f:51:de:cd:c8:94:ab:46:3a:3b:2d:76:44:de:
49:f7:b8:a3:b0:4f:ef:cf:9f:28:d1:25:c3:21:1a:79:f7:44:
85:c0:4d:34:69:48:a1:0e:84:b7:e6:8d:85:5b:a6:d6:06:16:
ea:ad:bd:7d:ed:09:32:fc:b5:96:b2:8b:de:73:b3:40:07:5a:
33:91:69:72:18:df:30:52:11:7b:80:8a:c3:87:8c:66:61:7e:
4c:ea:a6:d4:11:52:ed:e1:06:cc:6c:0b:ce:0f:85:e7:79:ba:
03:f5:51:89:3f:f2:0f:8e:d5:25:31:9c:04:a6:ff:f6:15:75:
7b:3e:da:43:46:59:6a:9d:2c:23:51:95:26:aa:25:98:c5:8c:
f1:b5:72:c4:f4:7d:f2:e0:d1:ab:b8:16:ce:42:f9:d3:ce:44:
31:fc:0d:b4:c9:19:42:64:11:db:0c:23:37:d7:3f:75:78:62:
d6:bd:44:d5:e4:ec:ac:0f:7b:1a:99:3d:81:d1:fa:2f:c6:4d:
35:0a:66:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:23:00 2025 by rpki-client