Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a383030303a3a2f33332d3333203d3e20323633323536.roa
File: 323830343a313765303a383030303a3a2f33332d3333203d3e20323633323536.roa (raw, json)
Hash identifier: Z1z0NASbWdA2Cwvbp6c8kHxW/THF+wxaQSlKb14PvjA=
Subject key identifier: 8D:54:04:58:9B:3A:A3:15:BD:37:39:4F:6E:6B:2B:14:0B:33:6C:A2
Certificate issuer: /CN=60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011
Certificate serial: 06882712E1D40FABEFC610049F6C315BA0BB6DF7
Authority key identifier: 60:F5:CE:DC:60:B1:C9:2A:5A:74:DC:B3:CF:E6:F0:44:F9:46:20:11
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a383030303a3a2f33332d3333203d3e20323633323536.roa
Signing time: Fri 10 Jan 2025 16:41:54 +0000
ROA not before: Fri 10 Jan 2025 16:36:54 +0000
ROA not after: Fri 09 Jan 2026 16:41:54 +0000
asID: 263256
IP address blocks: 2804:17e0:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:88:27:12:e1:d4:0f:ab:ef:c6:10:04:9f:6c:31:5b:a0:bb:6d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011
Validity
Not Before: Jan 10 16:36:54 2025 GMT
Not After : Jan 9 16:41:54 2026 GMT
Subject: CN=8D5404589B3AA315BD37394F6E6B2B140B336CA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e8:44:aa:9a:b4:f8:54:a7:3b:63:0e:d0:9a:
9d:43:2e:15:4a:f8:a5:1a:22:a3:48:cd:62:81:59:
2c:e6:89:36:bb:f2:e6:1f:7a:da:9f:1f:d3:f1:34:
40:17:76:d4:de:a3:f2:79:dc:93:2c:8d:72:a8:d6:
46:42:1d:f6:79:08:27:8f:39:9b:79:c1:f5:ef:d1:
0b:af:b3:c0:ea:22:8b:63:33:f1:c3:b6:32:d5:29:
df:42:ca:53:56:d2:42:90:6e:7c:a6:57:cc:0c:93:
9f:44:d1:c1:fc:34:7b:81:a3:1a:bd:79:1f:1f:22:
3b:9b:49:6e:de:13:61:db:58:ae:58:4f:51:37:d3:
99:44:e0:33:12:51:09:55:88:77:fe:3c:a0:56:29:
bd:df:a3:08:13:93:79:de:53:27:33:5f:bc:33:7b:
c7:cb:5c:13:25:d2:96:d1:85:54:fa:2b:1f:db:c2:
22:86:a7:44:c3:6a:46:36:a7:7b:41:76:4a:9f:e4:
bb:0c:f4:2b:38:00:db:3a:44:93:8d:e6:62:36:ad:
9e:3e:26:89:ce:e6:75:cd:d7:19:c3:37:b0:d7:28:
e7:83:0d:3c:eb:9b:8b:3e:07:c5:93:cb:c0:c5:43:
10:24:ec:73:ff:9a:e7:63:da:1d:1b:33:83:0b:24:
91:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:54:04:58:9B:3A:A3:15:BD:37:39:4F:6E:6B:2B:14:0B:33:6C:A2
X509v3 Authority Key Identifier:
keyid:60:F5:CE:DC:60:B1:C9:2A:5A:74:DC:B3:CF:E6:F0:44:F9:46:20:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a383030303a3a2f33332d3333203d3e20323633323536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:17e0:8000::/33
Signature Algorithm: sha256WithRSAEncryption
26:34:77:ff:40:1e:d0:d0:ed:69:db:ac:d9:c3:16:92:2c:96:
c7:91:2f:fb:3a:62:d1:8e:88:d9:bd:8a:a8:c7:1d:44:6d:14:
90:28:71:c6:7c:1e:1f:cc:c8:c1:b3:c6:aa:6b:b7:62:a7:c6:
f1:92:6f:7c:67:30:b2:be:f4:e0:c0:da:b1:ba:43:f0:8d:6a:
70:5d:71:7f:fb:97:ae:5c:13:6f:6f:82:c1:7c:09:80:a1:3c:
50:5f:0f:a0:7d:82:64:a7:96:f1:79:c6:73:58:f9:89:66:8e:
12:57:de:66:12:51:a7:ec:92:fe:57:c1:83:8d:0b:7d:f8:1e:
e8:a9:cb:ce:98:5c:f1:af:47:1d:ce:21:25:c6:29:17:7d:0f:
62:f2:d0:93:b8:2f:9d:fb:af:5b:5b:86:dc:c4:8d:56:0d:ce:
0d:57:52:e0:c2:64:dd:f5:da:b1:d7:b3:23:b4:ca:70:22:6f:
a0:3e:15:1f:6b:23:9c:88:6c:56:64:0e:ae:72:cd:3c:3f:82:
66:e4:32:42:f0:c8:ed:49:4c:c9:50:c8:12:03:c5:36:a3:64:
be:34:01:41:2e:3f:4c:48:e1:4e:c6:9c:9b:e0:a2:89:8f:2a:
53:ee:a4:8b:aa:9f:d3:e1:4d:5f:cb:71:ee:32:e5:42:ae:63:
9b:8f:a1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 14:40:29 2025 by rpki-client