Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a3a2f33342d3334203d3e20323734363437.roa
File: 323830343a393138383a3a2f33342d3334203d3e20323734363437.roa (raw, json)
Hash identifier: 41jcxRb5sKnk4bzSj7SzNkX2Up+VCbyJZTXvNS4Voi8=
Subject key identifier: F5:5A:82:34:7E:DE:B5:09:AD:21:0C:02:1F:B2:52:33:75:F2:57:E2
Certificate issuer: /CN=48A5CE43DDF5F691570117B79D047D25F3A4035E
Certificate serial: 2188A1986069815EC600DF6A40F26BA6ACF9C030
Authority key identifier: 48:A5:CE:43:DD:F5:F6:91:57:01:17:B7:9D:04:7D:25:F3:A4:03:5E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48A5CE43DDF5F691570117B79D047D25F3A4035E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a3a2f33342d3334203d3e20323734363437.roa
Signing time: Thu 30 Jan 2025 17:21:09 +0000
ROA not before: Thu 30 Jan 2025 17:16:09 +0000
ROA not after: Thu 29 Jan 2026 17:21:09 +0000
asID: 274647
IP address blocks: 2804:9188::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:88:a1:98:60:69:81:5e:c6:00:df:6a:40:f2:6b:a6:ac:f9:c0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48A5CE43DDF5F691570117B79D047D25F3A4035E
Validity
Not Before: Jan 30 17:16:09 2025 GMT
Not After : Jan 29 17:21:09 2026 GMT
Subject: CN=F55A82347EDEB509AD210C021FB2523375F257E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:48:14:41:ea:59:e7:d1:b5:1a:52:b5:2a:5e:
8f:6f:c1:84:34:7f:eb:81:3c:ee:22:74:d7:b7:34:
95:33:4b:2a:ea:17:7d:22:7f:bb:6c:8d:7a:3e:f0:
6a:0a:c9:30:e2:f3:77:56:49:41:0b:20:b7:f4:e1:
16:d9:f8:66:41:65:7a:d6:27:61:9e:a8:c8:57:e8:
61:96:04:f1:b3:e3:28:28:c6:4f:b6:99:c6:6a:c6:
a2:41:5e:ba:41:d4:58:ab:39:ef:68:24:fe:1b:7d:
7a:73:8c:75:34:b7:8e:b3:34:ea:d1:94:ac:08:fc:
12:9c:be:c6:ba:0d:3a:fe:4a:e6:64:b2:3f:3e:5a:
b3:ac:68:f0:43:3d:c3:71:0b:5a:9d:53:67:ff:f7:
85:1c:52:86:f1:eb:b7:59:07:5b:e7:f6:0b:03:0c:
80:b7:5d:40:de:01:e5:1f:f6:df:74:91:b4:49:61:
f7:43:df:c1:5f:ee:4e:89:95:b9:b3:73:05:36:94:
e1:d7:2b:cd:28:7d:55:f8:4f:84:79:76:2b:7d:30:
85:16:f5:c7:c4:44:94:90:75:f8:8a:1e:d2:f3:c0:
67:33:33:63:17:4b:6e:37:57:e1:72:d2:e3:24:46:
29:65:09:dc:f3:ef:a7:98:da:94:b0:f5:5f:39:a8:
7d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5A:82:34:7E:DE:B5:09:AD:21:0C:02:1F:B2:52:33:75:F2:57:E2
X509v3 Authority Key Identifier:
keyid:48:A5:CE:43:DD:F5:F6:91:57:01:17:B7:9D:04:7D:25:F3:A4:03:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/48A5CE43DDF5F691570117B79D047D25F3A4035E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48A5CE43DDF5F691570117B79D047D25F3A4035E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a3a2f33342d3334203d3e20323734363437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:9188::/34
Signature Algorithm: sha256WithRSAEncryption
a2:23:04:ef:bd:28:88:dc:0d:55:75:ad:9b:fd:ab:c2:08:44:
29:fb:be:2e:a9:5f:70:65:9e:b7:eb:49:81:be:ae:06:f7:7f:
93:3d:ae:aa:41:ef:8a:a1:f8:b9:94:ab:af:e4:e0:43:14:11:
dc:02:00:3f:a8:2b:7b:35:aa:88:5a:0e:15:b8:72:32:16:22:
1c:37:b1:13:83:4d:95:19:db:da:21:d1:c9:f4:e5:7e:09:d2:
cf:4b:4d:33:a8:1e:d4:a6:99:b3:7a:a3:4d:5e:d5:08:7e:ed:
67:a1:2f:da:ce:96:29:f2:ab:b8:64:a0:4d:9b:8f:ae:2f:1d:
02:6a:dd:d4:d8:a0:36:54:7c:95:54:8b:09:9c:98:e7:ed:e7:
4f:92:f9:a8:82:8a:53:6c:b1:21:96:35:ee:ab:4f:7d:57:8e:
46:cb:90:fc:f2:f8:63:ef:ae:c4:ee:1a:a2:9f:7d:cf:64:24:
9d:c3:b5:17:31:bc:76:1b:40:33:3b:49:63:14:ca:bd:12:a4:
69:e6:f7:cb:e6:6a:04:b8:7b:07:47:b0:37:3e:64:19:5e:8a:
05:b7:c7:38:b5:85:f5:e7:e7:29:81:bf:7e:c9:e3:42:e8:f7:
16:73:be:c2:80:2c:cb:8f:7a:e7:2f:e1:ea:a3:6e:06:68:4b:
03:a7:d3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:43:39 2025 by rpki-client