Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a3a2f33332d3333203d3e20323638383738.roa
File: 323830343a356266303a3a2f33332d3333203d3e20323638383738.roa (raw, json)
Hash identifier: TWk0qbr98hdZcik90dFhM/vWCOrd/lQB5+fTAQwFpUg=
Subject key identifier: E9:80:53:63:DC:13:43:0E:3E:4E:2A:D9:7B:17:63:5C:A9:A6:FD:75
Certificate issuer: /CN=BFB590FA7A04C15A07E802593C4472D77FAB7820
Certificate serial: 704F25C14A0D1FB76F33B380874168D8690D1D09
Authority key identifier: BF:B5:90:FA:7A:04:C1:5A:07:E8:02:59:3C:44:72:D7:7F:AB:78:20
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer
Subject info access: rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a3a2f33332d3333203d3e20323638383738.roa
Signing time: Wed 25 Dec 2024 09:58:29 +0000
ROA not before: Wed 25 Dec 2024 09:53:29 +0000
ROA not after: Wed 24 Dec 2025 09:58:29 +0000
asID: 268878
IP address blocks: 2804:5bf0::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:4f:25:c1:4a:0d:1f:b7:6f:33:b3:80:87:41:68:d8:69:0d:1d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFB590FA7A04C15A07E802593C4472D77FAB7820
Validity
Not Before: Dec 25 09:53:29 2024 GMT
Not After : Dec 24 09:58:29 2025 GMT
Subject: CN=E9805363DC13430E3E4E2AD97B17635CA9A6FD75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:66:cf:4a:49:7c:af:78:02:93:da:72:47:8d:
c1:5f:cf:af:f8:28:a0:c8:03:8b:d6:e0:4b:3e:e7:
c4:ee:76:62:89:b9:bf:4e:9b:2d:f3:28:43:3e:4b:
14:e9:04:62:ad:09:90:9c:19:7d:65:a2:ac:18:2c:
26:83:b9:db:c4:06:3d:e2:19:df:21:cd:58:c5:2c:
c6:22:0f:7d:79:b6:a2:d4:6e:00:06:16:f3:9b:a7:
e0:b8:71:b4:2f:03:21:8f:b0:fd:d4:ba:7f:42:a2:
f0:47:ad:c1:19:69:9e:87:50:b8:09:21:16:8b:49:
97:c3:de:9b:5e:91:cd:93:5f:ae:61:f9:c5:90:98:
7d:e4:31:33:10:ea:27:f3:55:5d:8b:29:fe:71:d9:
20:4f:01:d8:ab:8f:fc:d3:ae:40:7c:a1:5c:ca:3c:
3f:fa:21:57:a7:42:33:4e:6b:76:83:e3:bd:11:27:
58:d1:88:6b:23:74:f2:f2:0e:d8:90:b3:0d:57:c4:
02:a3:8b:68:88:5d:ff:8d:e0:8f:94:d3:72:88:f1:
6f:f0:7f:fc:ee:6f:63:64:4e:aa:16:c4:7b:92:cc:
1c:fa:ca:0d:62:0d:68:50:ab:d1:30:d1:ed:28:59:
f1:7b:3b:41:68:fe:60:d6:22:6c:18:8c:40:b0:8d:
7c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:80:53:63:DC:13:43:0E:3E:4E:2A:D9:7B:17:63:5C:A9:A6:FD:75
X509v3 Authority Key Identifier:
keyid:BF:B5:90:FA:7A:04:C1:5A:07:E8:02:59:3C:44:72:D7:7F:AB:78:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a3a2f33332d3333203d3e20323638383738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5bf0::/33
Signature Algorithm: sha256WithRSAEncryption
68:b5:14:98:bd:4f:0e:31:c2:44:81:fc:5e:7c:85:cc:88:e6:
2a:db:5d:0c:93:5e:a7:64:4c:cd:dd:f3:dd:e8:94:bf:16:99:
f9:fa:50:e6:09:32:ec:43:57:67:26:da:e3:ba:36:a3:a0:d4:
80:18:b4:21:e7:c1:87:ec:8d:f4:f4:42:56:7a:86:5d:8a:1f:
7f:f9:9c:2e:31:b0:2e:af:c0:38:a9:f8:bd:e5:0c:a0:73:06:
6f:99:61:aa:51:af:74:e5:65:e4:c0:a4:ca:00:6a:9e:91:28:
5e:19:f8:e2:23:79:c2:4f:3d:93:35:bc:4c:de:0a:1e:ae:1b:
1f:93:80:0f:49:e8:dc:db:d2:66:a0:48:8d:53:a6:c1:7d:50:
25:6a:d3:21:b8:23:8b:c6:d4:e7:ba:3a:7d:a5:ee:df:bc:e1:
07:26:2c:e3:bb:04:d9:47:7b:e1:fe:a2:d3:6f:c7:be:97:32:
63:96:4c:65:64:a5:c6:e9:06:79:6d:6d:d2:59:8b:c5:83:ee:
ce:fd:e6:a7:03:89:81:cb:64:43:ed:34:ca:55:48:f7:49:54:
bd:eb:93:c5:2d:e4:c9:d0:9b:67:92:f3:2a:37:b8:af:6f:82:
da:0e:db:3e:b7:27:a7:20:e0:03:a5:0a:15:09:ad:8a:2d:2e:
88:84:d6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:43:04 2025 by rpki-client