Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a393030303a3a2f33362d3336203d3e20323634313431.roa
File: 323830343a316530633a393030303a3a2f33362d3336203d3e20323634313431.roa (raw, json)
Hash identifier: YAG3LiM+uu9iWGQm7IzYxMnNQRXXFSwLRr5CdsZe17o=
Subject key identifier: 5F:95:C1:7A:2F:7E:03:80:14:DE:15:AB:4E:30:76:FA:7A:61:B2:8F
Certificate issuer: /CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Certificate serial: 1296E35D5C67601644F4588E49BF0B2794756566
Authority key identifier: A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a393030303a3a2f33362d3336203d3e20323634313431.roa
Signing time: Thu 02 Jan 2025 20:06:14 +0000
ROA not before: Thu 02 Jan 2025 20:01:14 +0000
ROA not after: Thu 01 Jan 2026 20:06:14 +0000
asID: 264141
IP address blocks: 2804:1e0c:9000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:96:e3:5d:5c:67:60:16:44:f4:58:8e:49:bf:0b:27:94:75:65:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Validity
Not Before: Jan 2 20:01:14 2025 GMT
Not After : Jan 1 20:06:14 2026 GMT
Subject: CN=5F95C17A2F7E038014DE15AB4E3076FA7A61B28F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ff:e2:3d:85:7b:76:a5:5d:5a:63:68:8c:10:
3f:f3:b8:61:38:5d:d5:d0:2b:90:b8:18:3b:d0:ab:
7c:8b:ab:ba:c0:98:4e:a3:ed:ca:b2:72:ce:55:3b:
55:85:be:62:a8:fa:ee:38:c1:f5:a8:3d:ff:a6:60:
7c:07:31:e5:f5:f9:02:78:73:e2:c1:52:47:3a:9b:
e5:c9:02:1a:3a:3d:5e:82:72:c0:48:54:1e:06:21:
7f:8e:fe:7d:5d:10:86:46:d2:44:5d:e9:b0:44:2d:
cd:aa:f8:37:27:1e:89:a2:ac:48:56:a5:1b:b0:8a:
2c:83:63:4d:49:1d:84:6a:95:f9:8d:d4:92:41:f3:
49:bf:3c:0b:2b:ea:ed:2c:56:7b:9b:e1:40:da:7f:
db:3d:14:e8:05:54:19:97:1c:76:1d:57:3f:7b:2f:
b7:f2:48:b8:f6:60:12:b5:81:31:ee:08:2e:09:8a:
34:1c:4d:79:ce:de:94:6b:ae:1d:7c:a6:35:12:11:
10:f1:ad:57:e4:68:44:ae:4e:d4:84:0f:19:b3:d3:
a6:9a:77:3e:41:ac:74:e1:96:3e:4b:0c:ba:8e:b1:
19:aa:e5:84:d8:1b:d8:60:4f:4f:8c:1e:5d:ca:ed:
ca:18:94:51:19:c8:d4:21:a9:63:fa:f1:18:0e:70:
c9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:95:C1:7A:2F:7E:03:80:14:DE:15:AB:4E:30:76:FA:7A:61:B2:8F
X509v3 Authority Key Identifier:
keyid:A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a393030303a3a2f33362d3336203d3e20323634313431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1e0c:9000::/36
Signature Algorithm: sha256WithRSAEncryption
3b:56:e9:16:77:cd:f5:a8:70:6f:fe:99:12:69:8f:b1:90:94:
16:0d:1d:6d:c4:00:26:77:cb:54:92:a0:3b:33:d7:b0:42:69:
1c:aa:72:f8:08:03:6d:50:bf:97:f2:64:8e:ea:a0:3c:e0:e9:
cd:71:93:e5:1d:1f:3e:02:38:53:d3:59:07:9d:be:a0:f8:50:
70:65:d6:bd:73:05:fd:c2:02:a5:ac:25:75:88:fa:9b:0d:ee:
ce:9a:1a:70:26:d0:57:df:3f:ac:58:0b:d0:2b:e1:a5:55:32:
05:8d:c9:33:5f:f4:94:b0:26:b1:c0:ec:07:71:c3:cd:c2:92:
cc:fc:0a:15:9b:27:75:4e:20:49:5a:ba:c9:9c:cb:11:35:8a:
3c:da:82:c1:f8:2b:a0:b9:46:f0:82:46:c1:cc:d1:0a:85:79:
30:f3:f9:d0:ae:00:f0:96:b0:76:9e:af:36:79:03:3e:e4:9f:
ec:14:63:7c:c2:c1:56:37:a5:8d:28:b4:1f:2e:4d:47:06:7b:
1d:e3:d3:1e:7c:8e:21:a7:10:ca:41:ac:c3:a2:c6:98:df:05:
b9:ce:ce:10:2a:39:35:fa:cd:1e:d1:f4:1f:28:50:fe:90:cc:
24:4a:db:fb:5e:ad:73:09:4a:a1:a2:aa:90:cf:1a:ea:2d:9d:
7d:7a:c4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:59:17 2025 by rpki-client