Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a323030303a3a2f33362d3336203d3e20323638313331.roa
File: 323830343a353837383a323030303a3a2f33362d3336203d3e20323638313331.roa (raw, json)
Hash identifier: 0DeRKIRi2o5NeOW0is9sPqicto0FKv1hDNng+RYx/YI=
Subject key identifier: 68:8E:CF:33:72:7E:E6:7A:96:E9:28:72:03:6B:B7:31:C0:A4:1B:8D
Certificate issuer: /CN=BD0B43860A0889125EAC647FBE9712DB5CD78027
Certificate serial: 70ACA746D5537C741DEFB89C6EA680D1B03E4DB0
Authority key identifier: BD:0B:43:86:0A:08:89:12:5E:AC:64:7F:BE:97:12:DB:5C:D7:80:27
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD0B43860A0889125EAC647FBE9712DB5CD78027.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a323030303a3a2f33362d3336203d3e20323638313331.roa
Signing time: Tue 03 Dec 2024 17:48:40 +0000
ROA not before: Tue 03 Dec 2024 17:43:40 +0000
ROA not after: Tue 02 Dec 2025 17:48:40 +0000
asID: 268131
IP address blocks: 2804:5878:2000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:ac:a7:46:d5:53:7c:74:1d:ef:b8:9c:6e:a6:80:d1:b0:3e:4d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD0B43860A0889125EAC647FBE9712DB5CD78027
Validity
Not Before: Dec 3 17:43:40 2024 GMT
Not After : Dec 2 17:48:40 2025 GMT
Subject: CN=688ECF33727EE67A96E92872036BB731C0A41B8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ea:f9:28:d0:82:b5:cc:5b:09:a8:0e:44:cc:
e2:ad:95:e9:5b:2d:3d:b4:3f:26:b5:ed:57:b1:14:
8b:62:16:7f:2f:57:7b:5b:cf:45:cb:3d:cc:7d:04:
d4:fb:52:7a:81:29:c8:15:80:a4:36:db:eb:b9:be:
94:6e:e6:38:e7:ca:c9:17:48:04:3e:da:42:11:75:
19:95:41:48:14:bc:b0:18:a2:94:ae:79:72:34:70:
8e:b7:80:15:c5:45:92:16:9c:0c:0e:cb:c4:3e:2d:
1c:37:a8:56:12:22:79:0f:ea:e1:51:32:d2:ac:ca:
9f:54:2b:23:7d:43:67:c3:94:f3:ce:21:dd:c1:0e:
38:bf:04:1e:5f:ba:ef:41:a8:cc:3d:9f:ae:f6:d6:
e3:0d:4c:0a:27:56:22:f5:6d:64:26:ac:cf:6a:09:
66:6d:a9:77:76:d8:8a:04:10:7b:b2:ce:c0:b3:41:
ff:8a:f4:34:7d:54:55:30:f5:f0:68:d7:a2:86:a7:
ea:db:8d:a7:e8:2b:3c:0a:e2:1b:c2:fa:79:94:a2:
ec:51:18:a1:e0:d1:52:4b:65:2f:88:59:58:d8:e6:
85:70:04:43:9c:6e:20:11:bd:03:fd:fe:58:d0:fd:
ff:1d:c1:59:d6:a4:7b:c6:5f:41:ff:7a:4b:df:33:
15:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8E:CF:33:72:7E:E6:7A:96:E9:28:72:03:6B:B7:31:C0:A4:1B:8D
X509v3 Authority Key Identifier:
keyid:BD:0B:43:86:0A:08:89:12:5E:AC:64:7F:BE:97:12:DB:5C:D7:80:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/BD0B43860A0889125EAC647FBE9712DB5CD78027.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD0B43860A0889125EAC647FBE9712DB5CD78027.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a323030303a3a2f33362d3336203d3e20323638313331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5878:2000::/36
Signature Algorithm: sha256WithRSAEncryption
37:19:7d:31:09:0b:51:38:2f:2f:8d:39:64:09:35:02:b4:78:
45:3b:fd:9b:a5:11:51:36:ff:42:8e:27:5f:ae:0c:98:b5:ca:
bb:6e:cf:9b:51:aa:d0:f9:31:ec:d5:da:d3:ad:29:a2:73:b6:
c4:1e:08:ab:f0:3a:72:4b:d5:59:31:ad:cd:e7:a3:40:17:1a:
4a:5b:37:91:d7:da:81:5e:7b:23:2d:de:2a:38:0a:c1:be:22:
f8:88:cb:61:63:35:bd:a8:a4:58:d8:19:4f:a3:bd:fa:71:97:
88:c5:e4:45:57:5e:d9:4c:5b:de:a2:ce:17:42:d9:f8:6a:e1:
46:94:b3:09:6c:01:eb:20:2f:b0:52:ed:c1:15:ea:5b:59:aa:
fb:f2:22:f3:e2:33:a5:1f:01:d2:56:35:fa:75:5d:01:42:a2:
af:19:57:ac:38:87:ad:9e:9b:11:06:fb:68:ca:f7:d3:03:f4:
53:68:58:01:e4:cb:d0:71:5d:60:c1:22:db:a0:16:d1:bd:8a:
0e:61:bd:2a:c0:12:3e:80:7c:23:d1:b3:88:20:ce:7b:51:4f:
ee:0e:78:9d:f3:40:b0:42:86:3f:eb:5f:85:c7:3d:a2:b4:87:
00:7f:7e:31:17:43:fe:55:23:0a:e5:29:69:65:f3:1b:08:aa:
d7:ea:66:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:45:59 2025 by rpki-client