Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/323830343a373633303a3a2f33332d3333203d3e20323731303935.roa
File: 323830343a373633303a3a2f33332d3333203d3e20323731303935.roa (raw, json)
Hash identifier: rMLm5hkY3lLZTv23WMtyompaxAN9MdvbPHahAcydOtI=
Subject key identifier: F9:FA:64:5A:03:6C:BF:9B:22:5B:A8:38:99:45:04:EA:73:A4:81:67
Certificate issuer: /CN=BB28C577DF924111463D0D089EB3700DB6333A08
Certificate serial: 44CA6821FF8229E942FA4492B9083962E84AF32B
Authority key identifier: BB:28:C5:77:DF:92:41:11:46:3D:0D:08:9E:B3:70:0D:B6:33:3A:08
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB28C577DF924111463D0D089EB3700DB6333A08.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/323830343a373633303a3a2f33332d3333203d3e20323731303935.roa
Signing time: Mon 13 Jan 2025 16:25:45 +0000
ROA not before: Mon 13 Jan 2025 16:20:45 +0000
ROA not after: Mon 12 Jan 2026 16:25:45 +0000
asID: 271095
IP address blocks: 2804:7630::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:ca:68:21:ff:82:29:e9:42:fa:44:92:b9:08:39:62:e8:4a:f3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BB28C577DF924111463D0D089EB3700DB6333A08
Validity
Not Before: Jan 13 16:20:45 2025 GMT
Not After : Jan 12 16:25:45 2026 GMT
Subject: CN=F9FA645A036CBF9B225BA838994504EA73A48167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a3:08:ac:3a:7b:5e:bc:55:ad:b5:45:ee:96:
4e:33:23:4c:15:38:35:01:56:a5:db:4a:34:3a:52:
5a:d6:3e:9a:82:5b:18:00:cb:05:ea:9c:65:aa:61:
7c:a2:59:3f:c7:da:af:44:30:7a:ce:d7:e3:cc:1b:
4f:1f:cf:3f:b0:d1:41:3c:54:ab:1b:cb:f3:3f:1d:
44:e9:99:ff:2a:4a:d0:37:12:df:d0:58:bf:65:bd:
7e:a8:e2:7e:80:a2:7c:c0:31:94:18:d4:b0:74:23:
cb:f7:8c:10:c7:7f:02:18:20:50:e2:3e:c9:ba:6a:
67:48:48:c4:08:57:d1:a7:7a:5a:78:42:25:34:9f:
f6:14:80:15:98:c6:3e:99:70:e1:7e:2d:88:4b:90:
ab:63:28:56:1d:42:46:ca:da:97:b7:1c:6e:f2:79:
c1:e0:78:54:0d:a9:41:b2:21:28:79:1f:be:b3:22:
bf:e6:47:c3:64:30:7b:78:68:d3:0e:8b:a3:1b:83:
ef:b4:e0:e6:5e:50:9d:98:17:a0:de:ec:00:cc:3e:
ce:7d:68:86:f5:a3:2a:ba:8a:7e:43:f3:6a:ae:d8:
89:9a:08:5e:7e:a7:25:44:94:c8:73:18:33:88:b2:
52:6a:46:b7:14:44:6a:15:27:26:9a:8c:ed:3a:52:
05:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FA:64:5A:03:6C:BF:9B:22:5B:A8:38:99:45:04:EA:73:A4:81:67
X509v3 Authority Key Identifier:
keyid:BB:28:C5:77:DF:92:41:11:46:3D:0D:08:9E:B3:70:0D:B6:33:3A:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/BB28C577DF924111463D0D089EB3700DB6333A08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB28C577DF924111463D0D089EB3700DB6333A08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/323830343a373633303a3a2f33332d3333203d3e20323731303935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7630::/33
Signature Algorithm: sha256WithRSAEncryption
bd:ca:49:c9:70:9e:b8:b8:1d:67:3b:78:26:b0:ef:12:12:1d:
43:e7:3a:c3:29:3b:42:80:39:06:50:8c:3c:d0:ab:01:d9:8c:
a2:eb:f2:4d:3a:9d:68:92:93:e2:a2:1e:c7:81:86:bc:fc:d1:
97:03:2d:d6:99:da:77:16:8b:58:00:1a:f7:9f:fc:e8:87:87:
db:cc:3b:4c:20:9a:b2:02:d2:53:01:f0:67:cb:e6:c0:36:75:
53:dd:80:7c:0d:b3:5f:ed:f3:87:8e:bd:f1:79:04:ed:32:68:
2d:1b:92:dd:13:17:e4:f2:41:0c:de:7d:34:a7:8b:4b:50:7b:
82:a6:5c:c7:80:98:32:71:d0:5b:10:78:f2:e0:01:29:af:22:
7f:49:5c:20:34:f0:19:09:ca:3d:a8:e6:ea:fe:de:63:f4:88:
9c:27:e1:ab:17:0e:07:3c:d3:1f:58:83:54:46:80:37:b0:a2:
54:6f:8e:84:7f:a5:70:a9:36:24:59:32:f8:a4:e7:64:82:59:
43:0c:17:c6:63:61:aa:92:99:38:92:4a:52:e3:b1:23:b4:ce:
3b:0b:72:9d:54:fe:64:95:9c:d1:6f:78:ed:71:9d:83:f2:9e:
d1:00:e7:d8:7b:d6:52:c1:0b:b5:49:8e:3f:a3:59:89:8d:97:
53:38:ef:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 17:33:22 2025 by rpki-client