Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/323830343a3838633a3a2f33322d3333203d3e203532383732.roa
File: 323830343a3838633a3a2f33322d3333203d3e203532383732.roa (raw, json)
Hash identifier: XxNrlGrzniPNdiIzz0sYbbCPmDoqsny7Le/kxAbRd4s=
Subject key identifier: BE:CC:DF:1D:4B:1B:B6:27:68:DD:61:C1:26:4B:46:D8:A9:18:10:55
Certificate issuer: /CN=67F46E91955DB6CC22A4F3A0BA0A45DDEBAE0A44
Certificate serial: 2FA2D427B8148CCA1BA3F333AD5FDDE358F3723E
Authority key identifier: 67:F4:6E:91:95:5D:B6:CC:22:A4:F3:A0:BA:0A:45:DD:EB:AE:0A:44
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67F46E91955DB6CC22A4F3A0BA0A45DDEBAE0A44.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/323830343a3838633a3a2f33322d3333203d3e203532383732.roa
Signing time: Wed 29 Jan 2025 19:02:24 +0000
ROA not before: Wed 29 Jan 2025 18:57:24 +0000
ROA not after: Wed 28 Jan 2026 19:02:24 +0000
asID: 52872
IP address blocks: 2804:88c::/32 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:a2:d4:27:b8:14:8c:ca:1b:a3:f3:33:ad:5f:dd:e3:58:f3:72:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67F46E91955DB6CC22A4F3A0BA0A45DDEBAE0A44
Validity
Not Before: Jan 29 18:57:24 2025 GMT
Not After : Jan 28 19:02:24 2026 GMT
Subject: CN=BECCDF1D4B1BB62768DD61C1264B46D8A9181055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8a:8a:d7:5e:7c:77:47:a0:2e:bb:dd:f0:04:
11:c4:7d:07:dc:db:bd:e1:b8:e8:17:a6:2a:fe:9b:
35:07:bb:3b:02:09:f0:1b:f9:4a:53:1d:1e:1e:b0:
29:20:39:95:c7:70:05:85:fd:82:ee:45:4c:fe:6e:
2a:2e:4b:1a:44:25:b7:19:2d:76:d0:65:d4:70:92:
c3:ec:e2:dc:e9:33:c1:02:b6:e4:6b:a7:2f:e1:ab:
8e:f7:e0:c0:9a:66:ea:62:4a:70:aa:af:91:52:20:
26:0e:fe:47:f0:11:a4:5c:8c:f6:48:c4:65:78:90:
d7:82:c5:c4:96:a9:1e:f0:a8:7b:b2:39:01:80:81:
08:aa:17:39:7a:cf:f7:31:10:e6:2c:31:7d:bb:5e:
ad:f5:ba:88:91:d6:44:7a:a2:ba:68:c8:08:92:9d:
a9:c1:b6:26:f8:b2:d9:1f:be:77:2e:98:5e:01:95:
c5:53:bc:0c:07:d3:35:e4:ed:bb:69:d0:a3:1c:91:
5f:f9:ea:37:34:25:c6:bc:c7:5f:39:1f:70:a6:58:
e6:65:1d:72:ad:51:4b:04:d1:61:26:06:ae:84:be:
a1:34:b9:e0:2c:bf:f2:73:b1:b7:45:a4:40:46:05:
8d:dc:0f:95:9d:9a:95:dd:7f:df:a8:df:51:15:97:
23:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CC:DF:1D:4B:1B:B6:27:68:DD:61:C1:26:4B:46:D8:A9:18:10:55
X509v3 Authority Key Identifier:
keyid:67:F4:6E:91:95:5D:B6:CC:22:A4:F3:A0:BA:0A:45:DD:EB:AE:0A:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/67F46E91955DB6CC22A4F3A0BA0A45DDEBAE0A44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67F46E91955DB6CC22A4F3A0BA0A45DDEBAE0A44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/323830343a3838633a3a2f33322d3333203d3e203532383732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:88c::/32
Signature Algorithm: sha256WithRSAEncryption
bb:e1:21:a9:13:db:19:72:a1:6b:5b:b6:8a:12:94:50:c3:b8:
85:9f:fc:f8:19:82:96:fe:42:81:e3:cb:b6:ff:05:95:bb:7f:
56:03:9c:84:8e:47:ca:7e:ac:de:d2:99:e4:b8:ea:23:58:51:
ce:2f:05:09:8d:0c:b1:dc:dc:22:ff:b7:49:88:b2:25:51:f9:
71:87:a7:b5:ae:c8:32:99:eb:5d:49:19:87:7e:dc:3d:d2:b7:
1e:b1:00:d8:9d:f4:9a:ef:5f:6c:3f:d9:2d:82:b1:30:28:38:
c1:89:a1:fd:6a:72:a8:20:a1:ca:8d:6c:ec:fa:87:4e:fb:6f:
6c:9c:fb:9a:67:7c:23:05:51:8d:3e:63:2c:54:11:f8:dd:c4:
3e:22:3e:dd:a7:62:0a:f5:d0:e5:2b:69:5d:6e:16:24:41:59:
2b:32:03:da:26:d9:f2:5a:06:cb:60:f3:9b:18:9f:96:fc:a9:
90:14:c0:d7:37:fb:fd:29:5f:91:b7:ee:da:f5:b0:6f:5f:2a:
70:8d:4f:34:d6:4e:66:bb:19:31:2c:53:46:2c:4e:77:7f:a7:
e9:37:b4:fe:06:72:6f:1b:7b:58:63:2a:8d:36:a1:30:2b:61:
1d:b4:43:61:25:13:87:3e:e3:be:5f:d1:49:83:7d:65:06:69:
f9:16:7f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:44:28 2025 by rpki-client