Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/323830343a333362303a3a2f33322d3438203d3e203532363632.roa
File: 323830343a333362303a3a2f33322d3438203d3e203532363632.roa (raw, json)
Hash identifier: dKRcdpYQwGN4g/8SNRrmTcSy423QAHcOYImLbXn+XO4=
Subject key identifier: B2:A7:9B:B4:78:F8:A1:1E:2E:5B:75:D2:4B:E2:96:3A:03:C6:D4:0D
Certificate issuer: /CN=C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7
Certificate serial: 36238C604189B6DEB4D56CE8EEB45EE4F03194F0
Authority key identifier: C5:C2:95:E6:A5:83:EE:5A:FE:D6:88:BF:67:FB:5D:62:DC:E1:6F:B7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/323830343a333362303a3a2f33322d3438203d3e203532363632.roa
Signing time: Thu 01 Aug 2024 17:26:38 +0000
ROA not before: Thu 01 Aug 2024 17:21:38 +0000
ROA not after: Thu 31 Jul 2025 17:26:38 +0000
asID: 52662
IP address blocks: 2804:33b0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:23:8c:60:41:89:b6:de:b4:d5:6c:e8:ee:b4:5e:e4:f0:31:94:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7
Validity
Not Before: Aug 1 17:21:38 2024 GMT
Not After : Jul 31 17:26:38 2025 GMT
Subject: CN=B2A79BB478F8A11E2E5B75D24BE2963A03C6D40D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:18:b1:c1:e7:9c:0a:a4:f1:fe:c7:4f:09:b3:
c9:6f:60:1f:60:47:d1:65:6b:6b:c3:37:18:f5:f3:
47:ee:56:3c:15:11:ab:e9:9e:1e:53:5f:78:9c:75:
de:4c:9d:cf:f9:83:82:90:c5:90:62:06:46:bb:de:
3f:a5:6b:ea:46:63:5e:a9:f5:ea:fc:01:60:e1:bc:
74:ec:41:7b:3b:f1:23:73:ea:a9:ba:b7:f9:9b:4c:
32:39:6d:a9:bf:89:88:b3:36:04:6e:9f:ec:5c:df:
79:b8:f2:f0:75:7e:99:63:e9:ce:7c:7c:e5:62:21:
ff:d5:38:4c:5a:db:2d:d0:0c:4d:04:b2:81:c5:2e:
41:06:bd:de:67:30:75:8e:37:dc:90:39:a9:0d:f4:
fb:e5:f1:fa:38:04:ea:ce:68:49:9f:48:a0:f5:53:
b1:83:58:f1:70:c6:21:54:ec:7f:8b:1e:2d:43:ab:
f9:e4:f2:25:2b:d8:3e:94:1a:21:43:2c:48:22:32:
d4:c7:0b:31:b2:43:91:ca:3f:76:3a:db:f9:ea:08:
b5:70:ef:98:a8:36:5b:27:e2:f6:4e:7c:94:05:c3:
21:f7:f1:1c:d7:ab:00:dd:87:2c:72:ad:d4:88:45:
6f:ac:cd:3f:d0:81:03:41:50:73:15:9e:63:e5:89:
05:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A7:9B:B4:78:F8:A1:1E:2E:5B:75:D2:4B:E2:96:3A:03:C6:D4:0D
X509v3 Authority Key Identifier:
keyid:C5:C2:95:E6:A5:83:EE:5A:FE:D6:88:BF:67:FB:5D:62:DC:E1:6F:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/323830343a333362303a3a2f33322d3438203d3e203532363632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:33b0::/32
Signature Algorithm: sha256WithRSAEncryption
02:07:5e:1c:72:15:6e:4b:52:8e:b8:62:04:24:49:25:dc:93:
3a:8a:30:e7:fa:e2:f9:bc:42:79:26:66:1a:05:41:11:14:ce:
27:ed:2c:58:fa:1d:c3:bf:96:07:70:40:0c:0f:e8:ca:84:1f:
ed:a1:28:55:92:c7:ca:19:d6:92:a0:5b:c0:20:5f:b8:bd:cd:
5b:07:e8:d4:d9:a0:cb:c8:e1:01:95:e4:5c:a5:cc:ca:f7:59:
00:29:86:66:5f:8b:d8:8b:59:c0:25:4d:75:8d:36:6b:6d:dc:
6f:2b:38:86:df:56:ee:7a:1f:cd:fc:79:2b:36:d5:8c:51:08:
f2:61:93:23:f6:6b:32:44:17:e9:99:e5:dc:f2:f4:84:20:d6:
f4:3e:52:5a:6a:0f:35:11:0d:b7:f8:73:98:8c:ba:6f:18:30:
b6:db:5f:35:85:2c:e4:0b:ec:db:31:ca:b4:e5:0b:ae:5a:14:
5a:73:02:c5:96:26:58:ba:9f:c6:b4:2a:fb:bc:63:98:73:e7:
ac:62:73:2a:14:62:85:ca:1a:fa:53:73:b6:52:be:41:2e:3d:
4b:39:4f:50:f9:41:8a:bc:8f:80:4c:86:44:c6:f4:54:e5:50:
75:4c:58:a2:bd:0f:59:5e:4a:c6:0a:58:a5:bb:6c:48:be:76:
3f:5e:f3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:58:07 2025 by rpki-client