Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/323830343a373439383a3a2f33322d3434203d3e20323730393931.roa
File: 323830343a373439383a3a2f33322d3434203d3e20323730393931.roa (raw, json)
Hash identifier: 1nVescDhZB748DPO06KLiKZQV7YLDmgTqov+PIhCxEo=
Subject key identifier: 5A:85:5A:26:11:A0:8A:AE:15:18:9B:EB:F5:A8:65:92:4D:7C:8E:C1
Certificate issuer: /CN=2A0183D32B891D785CDF1CC86CFD0AE9460250B1
Certificate serial: 4C03EF55667AD41308BCA0339C5745805FD0C746
Authority key identifier: 2A:01:83:D3:2B:89:1D:78:5C:DF:1C:C8:6C:FD:0A:E9:46:02:50:B1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/323830343a373439383a3a2f33322d3434203d3e20323730393931.roa
Signing time: Thu 06 Mar 2025 08:56:45 +0000
ROA not before: Thu 06 Mar 2025 08:51:45 +0000
ROA not after: Thu 05 Mar 2026 08:56:45 +0000
asID: 270991
IP address blocks: 2804:7498::/32 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:03:ef:55:66:7a:d4:13:08:bc:a0:33:9c:57:45:80:5f:d0:c7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A0183D32B891D785CDF1CC86CFD0AE9460250B1
Validity
Not Before: Mar 6 08:51:45 2025 GMT
Not After : Mar 5 08:56:45 2026 GMT
Subject: CN=5A855A2611A08AAE15189BEBF5A865924D7C8EC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1b:84:e2:2c:9e:27:ee:72:b9:d9:e2:a5:89:
52:23:ee:82:60:3b:16:01:d8:4f:2a:64:c2:86:f1:
fd:8d:21:84:4d:b1:00:07:e3:0d:27:ef:8c:f5:d0:
b7:53:a8:b5:30:46:9c:28:f2:63:35:40:16:0d:d8:
78:30:d4:7f:c2:c0:39:ab:ee:52:48:74:f1:bb:1a:
38:26:0f:26:45:7b:23:42:41:b1:94:45:10:e6:19:
04:9c:8b:a2:94:07:e2:98:a2:ff:e3:3a:73:05:75:
18:42:ae:54:9b:0b:d1:94:36:b9:53:42:18:47:28:
3d:5a:43:d4:3f:fa:c2:0d:b4:d9:bf:e3:67:6d:65:
42:5c:f4:56:31:82:16:e3:01:79:ba:01:25:d5:fb:
12:59:02:2a:7c:42:84:5f:4a:54:f6:6e:74:4c:82:
14:bc:ae:bb:ec:38:5b:60:bf:71:30:58:86:fc:d0:
26:36:63:de:33:74:a9:91:b9:1e:f2:36:07:56:f3:
0f:d9:15:65:32:27:b0:1f:b3:6c:d9:62:11:98:8f:
93:54:83:95:6b:70:32:ce:79:d2:bf:67:b1:19:12:
09:7c:eb:88:24:77:76:95:09:9e:78:b2:8a:26:1c:
1b:33:2b:65:df:2a:bb:68:a0:93:01:64:ef:b2:c5:
13:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:85:5A:26:11:A0:8A:AE:15:18:9B:EB:F5:A8:65:92:4D:7C:8E:C1
X509v3 Authority Key Identifier:
keyid:2A:01:83:D3:2B:89:1D:78:5C:DF:1C:C8:6C:FD:0A:E9:46:02:50:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/323830343a373439383a3a2f33322d3434203d3e20323730393931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7498::/32
Signature Algorithm: sha256WithRSAEncryption
81:fe:65:e6:0c:49:a7:73:5e:7d:91:d9:3c:47:39:3a:a3:f2:
e3:de:f4:6a:2e:6d:2b:90:62:4a:ec:ad:6f:e5:dd:7e:24:fd:
d7:1a:ec:8f:30:43:fd:86:ea:0c:13:05:9a:74:a0:63:37:7a:
90:ca:fc:80:0d:99:31:91:7f:0f:a0:9b:e0:79:6e:d4:22:1e:
f5:db:ad:e6:c9:8f:6c:75:66:a4:8e:a7:e5:0e:08:66:c7:69:
7b:48:43:88:94:9a:6e:2f:67:5f:f1:c8:a4:7b:24:3b:c5:58:
8d:ef:62:51:49:9d:8f:5a:74:29:7b:4d:62:b4:e9:50:2f:62:
13:4f:57:e4:01:6e:c6:b4:05:08:d5:23:b8:58:3c:b5:cb:10:
d6:1d:0e:b9:44:f1:1e:7c:f4:de:fd:fd:7f:4e:85:fa:b9:13:
17:34:0a:95:ae:77:c8:30:54:2a:73:af:c3:b0:77:63:f5:d2:
49:fb:65:5b:42:5c:91:d5:7b:46:ac:1f:1e:7e:ac:0b:00:43:
35:ba:ff:1f:9a:da:41:d0:21:2b:31:4e:1b:3f:d2:00:36:2b:
f6:a8:4c:fa:87:dd:a7:2a:de:61:67:4f:00:47:d7:0b:1b:68:
6a:f9:5c:cc:e0:72:64:0b:ab:b7:ba:59:21:3e:c7:13:fe:53:
8f:3f:6c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:44:48 2025 by rpki-client