Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/323830343a3332383a383030303a3a2f33332d3333203d3e20323632383638.roa
File: 323830343a3332383a383030303a3a2f33332d3333203d3e20323632383638.roa (raw, json)
Hash identifier: MsnGxeFC/bUPaZ4d9tedSjWm4lw78ZenbS31Ii6qm88=
Subject key identifier: 28:BA:99:3F:E2:A1:63:7F:B1:21:78:34:CB:30:A0:3F:E2:06:24:9D
Certificate issuer: /CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
Certificate serial: 2E748BFC9646A5E17EF77BDF417204DAC2177069
Authority key identifier: BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
Subject info access: rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/323830343a3332383a383030303a3a2f33332d3333203d3e20323632383638.roa
Signing time: Thu 06 Mar 2025 11:39:07 +0000
ROA not before: Thu 06 Mar 2025 11:34:07 +0000
ROA not after: Thu 05 Mar 2026 11:39:07 +0000
asID: 262868
IP address blocks: 2804:328:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:74:8b:fc:96:46:a5:e1:7e:f7:7b:df:41:72:04:da:c2:17:70:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
Validity
Not Before: Mar 6 11:34:07 2025 GMT
Not After : Mar 5 11:39:07 2026 GMT
Subject: CN=28BA993FE2A1637FB1217834CB30A03FE206249D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b8:16:a7:b8:9b:03:b0:18:07:13:e1:ed:4e:
6f:85:33:f2:ae:24:91:45:42:37:2f:72:6e:49:8e:
c6:d5:6a:ee:8e:b3:a0:2c:98:fa:c4:d0:2a:8f:7d:
5c:6b:b9:7a:45:9f:09:2b:67:bc:cf:5b:85:6a:b3:
c1:5c:37:4f:4f:17:e6:0c:05:62:2a:84:c9:c3:3f:
7f:52:7e:30:61:ad:c0:01:b0:ea:fc:31:07:41:07:
0a:3e:18:fd:29:ed:0c:ad:f7:36:63:20:3d:9c:8e:
0d:c5:51:79:40:6e:9c:fa:7e:10:4b:47:d9:fb:c2:
92:ee:25:0d:12:59:f3:98:6b:cc:b8:6f:32:e3:1c:
5c:f4:af:61:e7:55:c6:b1:44:21:da:a6:86:30:41:
ed:3c:a7:59:59:68:52:00:d2:84:cc:c7:31:31:82:
b9:f9:1e:9f:6d:04:6a:d3:03:0e:43:03:8b:9a:24:
79:8b:d2:d9:43:8e:a4:37:d0:13:36:90:17:ec:18:
6f:51:c8:2c:26:98:ba:e2:c4:f9:48:3f:db:af:62:
44:a9:ec:86:bf:8b:4e:ce:47:db:98:3d:88:55:9a:
4c:5c:d0:3c:3c:82:18:be:2f:bb:80:41:b8:ee:cd:
d9:2a:db:6c:bf:79:7e:02:57:fa:2a:3f:2d:76:76:
9a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BA:99:3F:E2:A1:63:7F:B1:21:78:34:CB:30:A0:3F:E2:06:24:9D
X509v3 Authority Key Identifier:
keyid:BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/323830343a3332383a383030303a3a2f33332d3333203d3e20323632383638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:328:8000::/33
Signature Algorithm: sha256WithRSAEncryption
65:a5:9e:ca:b3:d9:3c:30:e8:41:ab:2e:f6:de:2c:97:27:61:
4d:8f:96:30:2f:8b:b7:b3:20:ba:6b:cf:bf:54:53:ee:99:b6:
dc:f0:ae:16:3e:84:ad:f7:13:af:54:f5:85:ec:af:2f:7c:99:
34:e0:6f:74:d9:1f:ed:16:46:bd:01:d6:04:c4:ae:1b:ad:d3:
b7:9d:68:87:8a:61:c0:6a:a4:16:26:55:b7:f3:d3:da:96:ea:
c4:37:de:11:09:56:d1:4b:99:f7:60:9e:a6:60:e0:eb:7f:88:
7d:39:08:01:07:cf:fb:b8:9e:83:3b:07:bd:81:2f:a0:a4:4b:
af:3a:0a:47:cd:39:ab:94:62:36:38:fa:7c:6c:91:3a:9c:9a:
e5:f5:4c:e7:ac:1d:5a:a0:71:b5:5a:2e:34:35:0a:dc:3d:03:
2b:d9:4b:a6:f2:bb:d3:9b:cd:6b:45:da:9b:88:da:53:9b:6f:
4a:4c:ca:db:00:2d:5a:57:53:e0:85:56:04:e2:c9:3b:92:e1:
7b:a9:a8:85:05:3a:03:e6:94:cc:98:ba:8c:1e:b3:4d:59:53:
60:bd:27:4e:a7:49:8e:03:af:17:6e:71:56:43:a2:d3:84:56:
a6:9d:3c:b0:a8:42:b7:7d:58:56:63:a9:64:31:ef:e4:6d:96:
b3:8a:18:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:33:39 2025 by rpki-client