Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/323830343a383434633a3a2f33322d3332203d3e20323732323532.roa
File: 323830343a383434633a3a2f33322d3332203d3e20323732323532.roa (raw, json)
Hash identifier: mXdTRI10D2SFuz4hfPwRZebgNu/Ck64i01fOaigsvbU=
Subject key identifier: DF:9C:8A:95:70:12:4B:60:CA:E0:1F:72:2A:DF:A8:DF:EF:A8:0E:A6
Certificate issuer: /CN=1D5955A8F874129F0C236C5E0F4A977609D094F7
Certificate serial: 161584EA9C486E7443D6C0848C387680D0DBF223
Authority key identifier: 1D:59:55:A8:F8:74:12:9F:0C:23:6C:5E:0F:4A:97:76:09:D0:94:F7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D5955A8F874129F0C236C5E0F4A977609D094F7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/323830343a383434633a3a2f33322d3332203d3e20323732323532.roa
Signing time: Fri 31 Jan 2025 12:34:49 +0000
ROA not before: Fri 31 Jan 2025 12:29:49 +0000
ROA not after: Fri 30 Jan 2026 12:34:49 +0000
asID: 272252
IP address blocks: 2804:844c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:15:84:ea:9c:48:6e:74:43:d6:c0:84:8c:38:76:80:d0:db:f2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D5955A8F874129F0C236C5E0F4A977609D094F7
Validity
Not Before: Jan 31 12:29:49 2025 GMT
Not After : Jan 30 12:34:49 2026 GMT
Subject: CN=DF9C8A9570124B60CAE01F722ADFA8DFEFA80EA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c6:bc:4e:e9:5a:fe:47:4b:71:82:0f:97:1b:
36:81:51:b8:c9:14:bc:31:a8:81:b3:d8:a7:fb:d9:
94:c8:b6:93:36:69:66:c7:d7:db:38:bd:a5:d2:c0:
8b:f4:46:03:e4:e4:12:cf:9b:4f:9b:31:d9:01:3e:
b3:a4:e0:3b:66:38:41:1a:ec:ac:08:6f:c0:e3:0c:
c6:d1:91:5a:05:cf:19:eb:40:47:11:8e:60:6c:11:
70:23:92:f1:bb:76:f7:5f:2f:aa:63:f6:9d:fc:05:
69:7e:23:f6:36:88:20:13:b9:e3:d2:30:af:d1:44:
c2:9f:66:81:38:87:c5:35:07:3f:4c:89:33:98:52:
97:34:5e:b3:ee:1e:12:c3:56:04:c6:19:41:d0:16:
b2:34:77:f8:1b:17:e5:b2:58:51:c8:f0:ea:a0:00:
05:75:8f:93:00:b4:a7:bf:12:cd:2f:b8:57:16:3e:
08:73:a5:f9:74:5e:c7:60:36:f5:83:71:7a:51:cd:
e3:14:1e:f4:e8:6f:98:16:9b:aa:02:67:7e:bc:7e:
4f:fb:de:27:31:51:11:91:c6:4d:5a:33:ed:28:e8:
d6:83:53:29:16:86:a2:10:5f:3e:89:25:86:26:69:
1b:35:98:ca:f5:54:1b:f5:ed:20:ba:e0:54:a1:4e:
af:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9C:8A:95:70:12:4B:60:CA:E0:1F:72:2A:DF:A8:DF:EF:A8:0E:A6
X509v3 Authority Key Identifier:
keyid:1D:59:55:A8:F8:74:12:9F:0C:23:6C:5E:0F:4A:97:76:09:D0:94:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/1D5955A8F874129F0C236C5E0F4A977609D094F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D5955A8F874129F0C236C5E0F4A977609D094F7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/323830343a383434633a3a2f33322d3332203d3e20323732323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:844c::/32
Signature Algorithm: sha256WithRSAEncryption
28:da:ef:87:ba:42:91:08:6d:94:f1:59:df:c2:08:39:d4:72:
10:04:39:9c:ce:6a:e2:12:01:c6:86:84:d0:c3:42:05:b2:f4:
cb:2b:96:22:45:16:2e:56:86:62:98:a7:04:98:80:5f:1e:d2:
cf:e1:df:fa:2c:9d:80:ad:73:91:0f:60:36:d7:b1:09:da:13:
8a:77:6d:0c:e1:ec:50:15:3d:a0:f8:b2:c0:6a:14:7f:84:a5:
21:a0:06:f0:35:53:0e:a4:8d:e5:0c:8c:cd:3b:49:12:da:ee:
19:27:36:4d:fe:a5:63:f2:c3:83:39:a5:57:2b:c5:6f:d1:2f:
b6:28:bd:7b:19:8d:35:a1:63:62:d8:6a:94:03:9e:8c:59:57:
99:49:0f:0d:5a:b4:97:30:b9:c7:dc:b6:9a:89:b2:54:bc:3d:
f6:c9:54:5a:91:48:b7:17:eb:5b:8b:eb:f0:4d:41:69:49:60:
d2:e8:fd:08:ee:0d:5f:3b:12:18:82:01:7e:59:33:dc:f9:81:
3d:6e:ff:af:90:f3:99:30:87:f7:d1:27:b3:bf:70:eb:7e:b0:
6e:55:4d:59:d5:e7:9a:ac:fd:38:33:39:87:f8:5d:0f:06:4b:
2a:32:ca:4e:ed:ab:2f:b6:f6:3a:cf:3e:4e:30:7e:3e:86:f9:
1a:6e:e1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 23:23:59 2025 by rpki-client