Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/323830343a356234303a3a2f33322d3332203d3e20323638383239.roa
File: 323830343a356234303a3a2f33322d3332203d3e20323638383239.roa (raw, json)
Hash identifier: uWtTok8/SWinpdvoaLccJqLT3QzD22YmQzKWwYQIB9U=
Subject key identifier: 53:D8:C7:D7:33:2A:D3:4F:5A:55:56:89:90:35:F9:6D:A0:91:A8:62
Certificate issuer: /CN=2E8650E1A7B09F7749A5126450B8242131048354
Certificate serial: 3FA723CCC03B15B457EE2F0BD6B9A171DC121A1B
Authority key identifier: 2E:86:50:E1:A7:B0:9F:77:49:A5:12:64:50:B8:24:21:31:04:83:54
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8650E1A7B09F7749A5126450B8242131048354.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/323830343a356234303a3a2f33322d3332203d3e20323638383239.roa
Signing time: Tue 18 Feb 2025 14:13:00 +0000
ROA not before: Tue 18 Feb 2025 14:08:00 +0000
ROA not after: Tue 17 Feb 2026 14:13:00 +0000
asID: 268829
IP address blocks: 2804:5b40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:a7:23:cc:c0:3b:15:b4:57:ee:2f:0b:d6:b9:a1:71:dc:12:1a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E8650E1A7B09F7749A5126450B8242131048354
Validity
Not Before: Feb 18 14:08:00 2025 GMT
Not After : Feb 17 14:13:00 2026 GMT
Subject: CN=53D8C7D7332AD34F5A5556899035F96DA091A862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:80:8d:10:7d:46:94:2f:c7:28:a5:ee:c7:e5:
4e:bd:68:b1:fa:a1:d4:e6:9f:22:b8:da:cd:37:9e:
9f:89:fc:3a:30:8a:fa:0b:da:da:77:f0:a8:ab:7c:
12:46:75:f5:54:0b:69:c2:47:ba:de:a8:1b:4a:c5:
d1:3f:2e:ee:8f:33:5c:dd:6c:ac:ee:9c:c9:db:80:
98:5e:c2:ed:2c:27:cc:27:10:32:e9:66:22:f7:2b:
5b:63:13:4e:ff:50:a8:c1:eb:92:0e:bc:80:4b:a9:
7f:af:80:eb:be:62:20:87:f2:70:71:9f:f7:e1:cf:
4a:c8:af:f7:52:20:6c:74:bb:c7:10:e3:c6:7b:52:
3a:a0:81:e7:41:eb:f3:bc:4e:86:6f:9f:66:8e:77:
a7:7d:f2:c9:9f:10:2a:00:2a:99:bb:b8:79:dd:6f:
d6:0e:58:fb:a4:aa:1d:c2:db:3e:95:10:01:65:d5:
44:71:f4:f2:94:fe:c1:39:94:d6:6d:1d:93:f1:38:
c8:fc:10:33:cd:f1:15:5f:2f:b0:a8:68:1e:38:71:
56:8d:e2:ab:da:59:ea:27:71:4f:4f:4d:fc:2b:da:
8b:29:f0:f1:d7:9b:d5:f9:85:dd:5c:ca:29:68:da:
e9:4a:77:6a:6b:d5:95:5a:84:72:7d:93:dc:d1:25:
79:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D8:C7:D7:33:2A:D3:4F:5A:55:56:89:90:35:F9:6D:A0:91:A8:62
X509v3 Authority Key Identifier:
keyid:2E:86:50:E1:A7:B0:9F:77:49:A5:12:64:50:B8:24:21:31:04:83:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/2E8650E1A7B09F7749A5126450B8242131048354.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8650E1A7B09F7749A5126450B8242131048354.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/323830343a356234303a3a2f33322d3332203d3e20323638383239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5b40::/32
Signature Algorithm: sha256WithRSAEncryption
65:1c:a7:2d:72:8e:36:b0:3f:96:4b:25:ca:3b:29:53:7f:20:
fe:ef:9d:2d:f8:d2:bd:7b:a9:19:8d:b3:4c:8f:a9:7f:41:f5:
a0:d0:8c:a4:6f:56:b3:cf:fb:21:23:d4:e0:05:42:4e:07:67:
9a:97:55:64:16:6d:01:12:69:66:e9:fb:e6:60:b6:ca:89:b9:
9c:ff:c4:62:3e:67:bb:a6:70:f6:50:34:1e:c8:6e:5b:03:8f:
68:2e:25:cf:2d:4c:64:e6:d9:51:36:d6:7f:c0:ba:e8:a5:6b:
d8:e9:94:fd:ca:88:d0:69:20:1c:40:03:a5:26:1d:e1:a2:27:
a2:83:7d:5d:7c:d4:aa:69:ab:84:a2:87:16:bf:62:0c:aa:af:
82:e7:8c:c6:82:a2:75:db:65:b0:27:ba:3a:4f:65:6e:62:b3:
c6:81:16:69:a0:a2:ae:01:86:e1:d0:b0:56:cb:38:e3:5d:2d:
9e:96:54:3c:d7:51:67:a8:08:a8:38:f6:85:6f:e6:17:bc:14:
82:ca:07:1b:fc:94:56:cc:5e:ed:0f:51:ed:aa:71:1c:bd:ac:
78:18:9c:99:5f:51:d2:43:98:c8:64:23:d9:8f:7c:e0:af:e3:
44:72:c8:3e:96:3f:84:34:5c:86:e7:13:65:46:f7:2d:cb:06:
37:33:50:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:14:37 2025 by rpki-client