Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a363030303a3a2f33362d3336203d3e20323637393432.roa
File: 323830343a353539303a363030303a3a2f33362d3336203d3e20323637393432.roa (raw, json)
Hash identifier: DDHlknxCE6FLbzUzJwjmvyeiAScMWW3F40Gqnn+yYBA=
Subject key identifier: 13:AE:21:59:8D:C3:01:F3:AC:4D:2F:01:38:9D:CF:B6:05:ED:96:3D
Certificate issuer: /CN=0FD65004E7C4085F2D33DF17345261EDD9B3A811
Certificate serial: 303AA617B75EAC1BD9D984A6CC3DFE7A212A56AB
Authority key identifier: 0F:D6:50:04:E7:C4:08:5F:2D:33:DF:17:34:52:61:ED:D9:B3:A8:11
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FD65004E7C4085F2D33DF17345261EDD9B3A811.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a363030303a3a2f33362d3336203d3e20323637393432.roa
Signing time: Wed 26 Mar 2025 16:50:05 +0000
ROA not before: Wed 26 Mar 2025 16:45:05 +0000
ROA not after: Wed 25 Mar 2026 16:50:05 +0000
asID: 267942
IP address blocks: 2804:5590:6000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:3a:a6:17:b7:5e:ac:1b:d9:d9:84:a6:cc:3d:fe:7a:21:2a:56:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FD65004E7C4085F2D33DF17345261EDD9B3A811
Validity
Not Before: Mar 26 16:45:05 2025 GMT
Not After : Mar 25 16:50:05 2026 GMT
Subject: CN=13AE21598DC301F3AC4D2F01389DCFB605ED963D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:62:14:81:cf:05:76:d4:4c:25:19:a8:25:a4:
bb:ce:e0:80:28:eb:81:9d:ea:22:9a:14:f4:59:f4:
23:13:f0:01:9d:09:c4:b9:27:bb:ca:25:1e:59:00:
63:26:2d:7b:f2:68:29:d7:b6:a8:74:a6:6d:16:fc:
52:25:96:0f:ed:51:ba:19:3b:69:e8:28:35:b2:27:
9a:d2:e7:36:44:af:c4:36:d9:0a:ee:02:45:55:99:
a0:75:6a:cc:07:e9:95:91:17:0e:31:c6:ae:5c:7e:
dd:45:71:08:64:be:4d:26:80:4f:84:8b:eb:a5:d5:
4f:29:54:34:33:a6:c7:95:26:a0:f2:d3:a7:a5:b5:
04:4d:54:cc:9c:5f:de:3e:ba:98:2d:85:09:53:5c:
e4:d9:36:6e:f8:db:bd:f1:01:6c:9c:06:9d:af:20:
ee:cb:24:cc:e2:3a:20:d8:ec:dc:ae:df:3f:65:cd:
04:01:a6:1f:a0:7c:2f:cc:61:a5:3f:bf:7c:cc:bd:
d8:ef:e0:cf:d8:ab:d7:93:5f:58:9a:65:13:af:ea:
1d:49:7b:16:35:bd:ef:23:f9:77:e8:8f:61:17:ea:
46:6f:3a:e9:1c:18:89:ff:7c:d2:43:12:bd:2b:ff:
8b:c6:14:19:42:59:77:43:02:b0:89:64:f4:c0:fd:
9b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AE:21:59:8D:C3:01:F3:AC:4D:2F:01:38:9D:CF:B6:05:ED:96:3D
X509v3 Authority Key Identifier:
keyid:0F:D6:50:04:E7:C4:08:5F:2D:33:DF:17:34:52:61:ED:D9:B3:A8:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/0FD65004E7C4085F2D33DF17345261EDD9B3A811.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FD65004E7C4085F2D33DF17345261EDD9B3A811.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a363030303a3a2f33362d3336203d3e20323637393432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5590:6000::/36
Signature Algorithm: sha256WithRSAEncryption
56:80:9a:de:2a:ab:b3:ec:88:69:bf:ef:a5:80:2d:b6:ed:01:
6c:65:d1:85:1b:56:09:40:8d:2d:f4:dd:ff:e4:d3:78:6c:c2:
41:10:30:c8:57:48:11:32:68:6f:e5:0c:4f:8f:1a:08:88:91:
b1:97:46:be:93:a2:f6:b2:c4:68:a0:9e:67:b0:17:20:0b:40:
b1:ad:6f:1e:9e:36:2f:de:fa:f0:2b:60:f2:29:39:a2:28:7a:
53:47:72:6c:99:68:49:ad:2b:59:b8:8e:fe:c5:dc:0c:37:41:
f2:e2:bf:cf:a7:85:f8:51:1e:c8:05:6a:a5:4b:92:24:aa:f3:
ee:42:51:5a:8b:d2:72:ec:c5:6f:12:15:63:12:28:06:b6:b7:
05:ce:b6:32:f4:28:03:a0:a0:a1:5c:4d:ce:29:59:d9:57:72:
88:6d:b9:c8:f7:44:f7:8d:e2:9b:39:f0:da:8e:83:58:a1:6a:
b5:cc:e8:ee:ff:9c:47:7e:2d:67:de:7c:48:b3:35:da:6d:65:
91:e0:6a:bb:c7:e3:dd:dd:8d:91:f4:b2:03:36:e7:1d:0f:4e:
55:9b:40:bb:a6:67:8a:fd:0b:75:29:85:04:81:ae:8e:8c:8f:
e2:cd:6c:27:7c:42:af:66:80:47:d8:d3:ec:8d:ab:8f:8f:f1:
a6:05:d0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:52:54 2025 by rpki-client