Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a3a2f34382d313238203d3e203532353830.roa
File: 323830343a6366383a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier: G/KJ8W+rQDLqRM1lrvUrHHjqxfd4VxnEPNmwN0FT0CA=
Subject key identifier: D1:12:B8:BB:B3:72:C8:09:31:7F:F2:12:C3:E5:2C:0C:2D:82:9D:F1
Certificate issuer: /CN=5BDA506F64A8D15344248A07983674C7DAF0E848
Certificate serial: 01D63BDFC2B80F5AB94F64873205552358ECC789
Authority key identifier: 5B:DA:50:6F:64:A8:D1:53:44:24:8A:07:98:36:74:C7:DA:F0:E8:48
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BDA506F64A8D15344248A07983674C7DAF0E848.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a3a2f34382d313238203d3e203532353830.roa
Signing time: Mon 27 Jan 2025 21:56:45 +0000
ROA not before: Mon 27 Jan 2025 21:51:45 +0000
ROA not after: Mon 26 Jan 2026 21:56:45 +0000
asID: 52580
IP address blocks: 2804:cf8::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:d6:3b:df:c2:b8:0f:5a:b9:4f:64:87:32:05:55:23:58:ec:c7:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BDA506F64A8D15344248A07983674C7DAF0E848
Validity
Not Before: Jan 27 21:51:45 2025 GMT
Not After : Jan 26 21:56:45 2026 GMT
Subject: CN=D112B8BBB372C809317FF212C3E52C0C2D829DF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ad:ff:da:80:74:83:80:6e:1c:87:b0:a3:b6:
7e:25:ce:95:4b:84:09:22:f9:67:a7:8b:4d:57:54:
39:78:2d:9a:53:e4:68:17:42:fd:56:2a:fb:70:15:
fc:69:d1:ed:10:e5:98:e0:25:18:2a:6c:4c:b5:6f:
69:15:78:00:24:30:96:e8:45:3b:f6:9a:05:2f:60:
30:11:27:15:f9:72:5b:86:e8:54:75:67:45:b2:74:
51:1f:ae:74:b6:d7:11:31:ba:2a:37:62:49:83:5d:
0e:b3:7f:16:96:23:b9:2d:4c:c8:11:5f:3e:c8:8f:
dd:94:21:18:60:1a:d1:ab:5c:ea:44:cf:48:3c:8a:
c1:12:8c:93:d7:11:94:54:d6:84:31:6a:a5:93:80:
95:da:2d:31:10:8f:0e:0c:33:bc:76:62:90:9b:de:
14:1a:db:e7:e9:ff:d3:26:1a:63:b6:d3:e3:23:a1:
c1:05:02:2b:45:f1:f7:d8:a8:c3:69:a3:a4:fa:f3:
9c:e4:d6:b7:7b:88:ec:51:ef:c7:9a:a9:6e:f8:84:
da:d7:aa:db:fb:ff:f2:55:28:a5:b8:78:be:a7:47:
65:59:9f:46:61:34:1f:a0:21:c0:e2:db:7b:ab:f6:
4e:90:f2:4f:76:3d:72:25:49:b0:b7:fa:c2:a4:4d:
7e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:12:B8:BB:B3:72:C8:09:31:7F:F2:12:C3:E5:2C:0C:2D:82:9D:F1
X509v3 Authority Key Identifier:
keyid:5B:DA:50:6F:64:A8:D1:53:44:24:8A:07:98:36:74:C7:DA:F0:E8:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/5BDA506F64A8D15344248A07983674C7DAF0E848.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BDA506F64A8D15344248A07983674C7DAF0E848.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a3a2f34382d313238203d3e203532353830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:cf8::/48
Signature Algorithm: sha256WithRSAEncryption
4d:06:55:a0:83:8e:ea:57:ac:28:f7:f1:42:ed:a1:af:1f:5a:
a4:23:97:58:db:85:b9:0f:42:61:05:19:d4:4a:7b:3e:6e:d6:
5d:cb:ab:7f:4d:f1:77:aa:f2:c7:b4:a8:72:f1:35:dc:ea:98:
5c:c7:77:be:5f:6a:b2:71:70:1d:fa:e3:75:7a:e0:8b:14:8f:
f0:db:a4:2b:fd:a5:88:9d:7a:4a:c0:ec:ce:7b:7b:2c:83:da:
e8:e7:9f:52:93:bf:0e:ce:78:50:1b:ac:1d:4e:e5:47:f2:63:
17:ce:09:77:a6:a5:e7:98:24:cb:f9:53:d3:6b:c7:6e:7a:83:
5a:7d:85:0e:82:1e:60:df:36:b0:b0:80:62:00:6a:91:4a:d3:
f3:f0:c1:e2:6a:f3:a1:7c:80:06:b7:c6:84:42:bb:a5:4b:9d:
cd:5d:bf:d4:33:44:ca:2b:b3:77:e7:36:8a:68:cf:db:58:6a:
2b:23:68:10:91:75:88:61:3a:6d:1f:84:b8:e9:a7:7a:6c:9b:
d9:f7:5e:d3:1c:c3:65:78:fc:0b:29:5a:1a:ac:a9:8e:8c:80:
8f:d4:e5:d6:67:f0:c0:72:74:ca:7a:22:5d:bc:d2:b4:3b:8b:
01:3a:a6:06:48:49:2d:04:93:b3:b3:67:4b:da:73:4a:a6:98:
51:74:09:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 13:04:29 2025 by rpki-client