Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a3a2f33322d3336203d3e203532373036.roa
File: 323830343a6337303a3a2f33322d3336203d3e203532373036.roa (raw, json)
Hash identifier: CZm+0mHD+WsR+ecbv1E9qy6EfeQ0Pot5kvpXjgp0mrM=
Subject key identifier: 5D:E0:BE:B0:B7:BC:A3:6B:FC:03:F1:B4:37:F5:EF:7D:84:33:13:9E
Certificate issuer: /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial: 31C95A237676972289AD3C885ED36E8BC803DAA6
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a3a2f33322d3336203d3e203532373036.roa
Signing time: Mon 17 Jul 2023 12:47:25 +0000
ROA not before: Mon 17 Jul 2023 12:42:25 +0000
ROA not after: Mon 15 Jul 2024 12:47:25 +0000
asID: 52706
IP address blocks: 2804:c70::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:c9:5a:23:76:76:97:22:89:ad:3c:88:5e:d3:6e:8b:c8:03:da:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
Validity
Not Before: Jul 17 12:42:25 2023 GMT
Not After : Jul 15 12:47:25 2024 GMT
Subject: CN=5DE0BEB0B7BCA36BFC03F1B437F5EF7D8433139E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:68:6b:7f:04:56:fd:6b:27:97:05:f0:b5:52:
4c:9e:d5:f7:ba:e2:4b:a5:68:c6:db:45:01:c6:4e:
c0:dc:c8:82:49:88:6a:7e:89:c7:15:0e:bf:c5:9e:
70:83:85:d9:93:a3:50:2c:89:5e:1c:42:77:ee:41:
bf:7f:89:cd:82:03:9c:6c:d9:37:53:ec:63:8c:68:
db:fd:12:6f:3b:ad:1b:f6:5f:cd:56:a0:a2:c3:7d:
53:9e:f3:8a:98:a5:fc:7e:da:a9:ba:cc:d4:2d:96:
9b:53:be:7d:ff:8a:ba:15:e3:1c:1e:f2:77:52:6a:
82:94:29:a9:dd:af:17:0c:02:7d:62:07:05:c0:2c:
06:27:22:8e:60:30:5b:c1:ab:e1:4b:15:d2:9b:68:
d6:cd:af:ee:ba:6a:de:63:79:50:8f:2d:38:d9:7c:
e2:a2:16:30:1e:fc:13:0b:57:de:a6:7f:5d:86:19:
f5:4f:0a:47:52:33:a5:ca:b7:ce:35:cf:f2:c4:c1:
33:ac:a2:87:29:60:bb:ab:35:88:cc:cc:c8:4f:25:
49:47:56:95:98:25:e5:66:a2:6e:a1:86:b2:23:d0:
e3:27:80:f8:8f:2c:2e:0d:af:bd:f1:44:b9:d8:17:
da:1b:c5:5d:e1:44:53:06:90:92:d8:55:fe:f1:e7:
8f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E0:BE:B0:B7:BC:A3:6B:FC:03:F1:B4:37:F5:EF:7D:84:33:13:9E
X509v3 Authority Key Identifier:
keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a3a2f33322d3336203d3e203532373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:c70::/32
Signature Algorithm: sha256WithRSAEncryption
1b:bb:6a:8b:6a:5f:95:4b:0d:7d:be:27:0b:a1:29:f9:2c:de:
ad:03:fb:2e:56:2c:04:8e:92:d2:b5:68:13:1e:44:1c:6b:14:
b1:1c:40:2a:fe:dc:1f:de:46:e9:b2:b9:95:01:b6:20:ad:ec:
9c:54:57:e8:78:63:be:84:af:9e:4e:2e:0a:53:3c:dd:8b:3f:
e7:04:0e:ee:63:e5:05:8c:47:b8:a4:86:ec:3c:4f:8e:e7:76:
ab:a1:3c:8e:d9:59:e2:83:78:52:ef:b0:d6:82:94:37:7f:42:
e8:be:bb:10:25:58:5d:ec:fd:eb:04:d0:85:6d:48:6d:09:a5:
a3:3f:35:fa:11:6d:05:e7:06:ed:0e:56:82:39:f5:03:97:17:
bd:c2:2b:18:b0:24:a5:82:c7:7d:b9:7d:0c:ba:7c:50:82:36:
55:e9:2e:4a:63:4d:ba:79:29:c7:c7:67:b4:f0:2c:91:c4:f9:
32:56:ec:a7:54:8b:98:09:b8:78:00:38:85:fc:e9:1d:28:57:
13:af:ea:78:bf:26:42:54:e6:d9:c6:9e:09:e8:43:f4:7d:d7:
25:28:08:b5:48:c1:2e:8f:67:c0:a4:45:1b:cf:c0:1b:cf:bd:
09:a8:d4:5b:e7:eb:9f:ee:9d:1d:66:5c:0c:30:7f:3e:55:e7:
79:be:77:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 03:04:02 2025 by rpki-client