Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/323830343a383434633a383030303a3a2f33342d3334203d3e20323732323532.roa
File: 323830343a383434633a383030303a3a2f33342d3334203d3e20323732323532.roa (raw, json)
Hash identifier: csOB5kmjqzP+p6VPo3fw6MV+bNzWciHJJHODrHJLkfY=
Subject key identifier: F5:28:A4:FF:A0:AA:43:F1:EA:D0:77:42:F5:BC:C7:87:FA:CD:73:47
Certificate issuer: /CN=1D5955A8F874129F0C236C5E0F4A977609D094F7
Certificate serial: 375AC592DEB679821749DE65F028660F97EF41FB
Authority key identifier: 1D:59:55:A8:F8:74:12:9F:0C:23:6C:5E:0F:4A:97:76:09:D0:94:F7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D5955A8F874129F0C236C5E0F4A977609D094F7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/323830343a383434633a383030303a3a2f33342d3334203d3e20323732323532.roa
Signing time: Fri 31 Jan 2025 12:34:49 +0000
ROA not before: Fri 31 Jan 2025 12:29:49 +0000
ROA not after: Fri 30 Jan 2026 12:34:49 +0000
asID: 272252
IP address blocks: 2804:844c:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:5a:c5:92:de:b6:79:82:17:49:de:65:f0:28:66:0f:97:ef:41:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D5955A8F874129F0C236C5E0F4A977609D094F7
Validity
Not Before: Jan 31 12:29:49 2025 GMT
Not After : Jan 30 12:34:49 2026 GMT
Subject: CN=F528A4FFA0AA43F1EAD07742F5BCC787FACD7347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:79:ce:e7:6d:20:79:a2:b7:fa:6c:8c:a3:61:
d6:31:54:89:eb:3c:77:b4:78:76:19:31:41:0b:c7:
a7:25:34:f4:b9:cd:de:bd:83:3c:f9:14:cd:74:f1:
d3:14:d0:ff:dd:25:1d:87:f7:b7:91:a0:30:74:a0:
02:0b:4a:65:be:4a:3b:8a:5c:9e:2f:d2:5d:a8:d1:
e9:7f:f0:ab:97:6e:63:4e:68:b2:c4:a7:7e:0f:25:
0e:06:3a:52:7b:64:2f:23:3d:b2:23:45:a7:cd:a4:
32:a3:05:21:60:55:21:76:03:12:60:34:00:7a:13:
35:7f:86:06:e8:d1:5e:41:bc:d0:f2:14:c3:7b:05:
54:6c:ba:2b:76:cb:45:04:3a:8a:ec:c6:6d:06:8f:
41:96:04:d2:35:07:eb:b5:26:28:05:52:7f:dc:c2:
e6:6b:fc:a0:21:80:eb:51:a0:20:bc:77:80:58:6c:
19:93:bf:8f:89:02:e9:59:29:6f:a2:fe:c0:da:77:
68:51:cb:4d:71:9d:ae:a1:48:7b:1c:40:6d:ce:2d:
ac:30:f4:63:45:a1:90:b3:6f:9b:76:03:15:8f:0c:
b4:66:5f:79:1c:50:ff:88:e4:14:30:c2:46:f7:cd:
08:20:e5:f2:0a:4d:da:c3:e1:a4:f7:31:e9:3d:70:
e7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:28:A4:FF:A0:AA:43:F1:EA:D0:77:42:F5:BC:C7:87:FA:CD:73:47
X509v3 Authority Key Identifier:
keyid:1D:59:55:A8:F8:74:12:9F:0C:23:6C:5E:0F:4A:97:76:09:D0:94:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/1D5955A8F874129F0C236C5E0F4A977609D094F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D5955A8F874129F0C236C5E0F4A977609D094F7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/323830343a383434633a383030303a3a2f33342d3334203d3e20323732323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:844c:8000::/34
Signature Algorithm: sha256WithRSAEncryption
c8:ce:95:d1:03:55:50:95:25:3e:a3:f2:c8:33:32:35:a2:f6:
35:35:9c:4a:71:d3:09:5c:7a:e4:f3:80:4f:d5:f8:e7:75:10:
96:d9:ab:e2:04:c0:f4:dc:76:54:f5:15:29:2c:8e:8c:05:1f:
39:3d:e4:e3:41:5d:13:9d:38:db:6e:8a:0e:b8:80:44:5a:10:
a4:12:8e:bb:c3:44:b5:44:42:e1:00:31:72:bc:c1:c4:77:6d:
2e:c3:4a:92:da:af:69:9f:de:26:bc:11:24:6d:49:45:81:e3:
5e:31:72:3e:93:39:88:f3:65:92:e8:01:52:99:ba:1c:f4:fc:
52:58:6b:5a:5a:ea:50:56:12:e3:6b:b7:f7:d6:b1:12:d1:d5:
af:00:45:74:62:87:65:55:11:c3:3e:06:52:a4:c2:f7:8a:91:
87:5d:89:1f:b3:35:1b:68:f1:1e:5b:f9:90:7c:b2:00:31:b3:
56:78:89:ad:da:12:ec:06:29:6a:26:81:97:b2:73:c5:08:3f:
a2:2d:d7:16:0c:dd:79:1b:ca:6c:05:ed:d9:fa:43:69:a8:93:
3f:4a:1f:d2:b4:74:e2:a0:84:68:1b:40:8a:29:16:a3:d0:d6:
98:e6:76:c4:e8:08:9e:00:81:77:a3:5e:46:d1:73:01:e2:30:
1d:40:a1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 23:31:39 2025 by rpki-client