Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a383030303a3a2f33332d3333203d3e20323638313331.roa
File: 323830343a353837383a383030303a3a2f33332d3333203d3e20323638313331.roa (raw, json)
Hash identifier: ViJL6uvCefd/gq/MOm5ojl7W9+N5IetYj8bqj8uUtPU=
Subject key identifier: 5C:4B:4E:58:B1:8E:F5:A8:C7:16:99:74:EA:F5:1F:BF:8B:22:A9:1D
Certificate issuer: /CN=BD0B43860A0889125EAC647FBE9712DB5CD78027
Certificate serial: 1F8E33BDA802CFAD5C05D59A89365292D6115574
Authority key identifier: BD:0B:43:86:0A:08:89:12:5E:AC:64:7F:BE:97:12:DB:5C:D7:80:27
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD0B43860A0889125EAC647FBE9712DB5CD78027.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a383030303a3a2f33332d3333203d3e20323638313331.roa
Signing time: Tue 03 Dec 2024 17:48:36 +0000
ROA not before: Tue 03 Dec 2024 17:43:36 +0000
ROA not after: Tue 02 Dec 2025 17:48:36 +0000
asID: 268131
IP address blocks: 2804:5878:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:8e:33:bd:a8:02:cf:ad:5c:05:d5:9a:89:36:52:92:d6:11:55:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD0B43860A0889125EAC647FBE9712DB5CD78027
Validity
Not Before: Dec 3 17:43:36 2024 GMT
Not After : Dec 2 17:48:36 2025 GMT
Subject: CN=5C4B4E58B18EF5A8C7169974EAF51FBF8B22A91D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:19:52:51:e2:0d:af:3b:7f:c1:14:76:70:2b:
4c:64:c6:2e:d2:7a:9e:f1:72:6e:71:ab:b7:41:e3:
a1:3e:bd:4c:67:d4:3c:cf:0a:c8:40:49:4d:8d:37:
dd:8e:1e:8d:7a:6c:b6:73:3b:43:ea:45:d6:94:ba:
0f:e6:c7:02:27:77:b5:12:8d:bb:5d:ac:0a:94:de:
44:ff:e9:09:6a:8d:06:03:d3:5b:c8:0a:c1:4e:04:
7a:d6:ba:0d:6c:c5:87:26:04:c0:2d:6f:a5:86:25:
05:53:39:92:18:81:21:f5:7b:9d:55:4d:f3:75:18:
f5:37:40:8c:a8:33:1c:d3:a6:c7:a2:2f:62:e4:45:
36:42:99:58:c0:1a:9c:72:2b:c1:3f:87:34:5d:d2:
53:1a:01:67:0e:dd:9a:b3:b9:95:38:7e:78:80:40:
50:d0:f3:7b:16:61:96:76:d6:f8:6e:ba:b9:62:35:
9d:45:83:36:55:58:b4:12:8b:d1:94:d9:8f:d1:e3:
4d:53:d9:9b:96:02:51:cb:d6:97:5b:61:7f:bc:ef:
df:da:57:4b:e9:e4:9b:d7:35:0f:5c:0c:b0:3b:c7:
80:c7:c0:48:88:d7:5d:6f:c7:76:72:78:60:83:0d:
f5:e5:25:3b:85:33:90:f1:36:e6:bd:0a:71:98:d7:
f5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4B:4E:58:B1:8E:F5:A8:C7:16:99:74:EA:F5:1F:BF:8B:22:A9:1D
X509v3 Authority Key Identifier:
keyid:BD:0B:43:86:0A:08:89:12:5E:AC:64:7F:BE:97:12:DB:5C:D7:80:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/BD0B43860A0889125EAC647FBE9712DB5CD78027.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD0B43860A0889125EAC647FBE9712DB5CD78027.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a383030303a3a2f33332d3333203d3e20323638313331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5878:8000::/33
Signature Algorithm: sha256WithRSAEncryption
6b:d5:44:7a:08:ca:74:8a:e5:c7:a4:ad:b8:2f:ab:76:a4:3e:
52:6a:ae:c9:12:c8:23:6b:0d:6a:41:33:0a:d0:37:c4:5c:b0:
a9:04:e1:83:55:2f:0b:62:54:fc:4a:ee:3f:ab:83:99:16:65:
8c:8c:64:de:f2:4f:86:4c:d7:79:c7:e3:f6:d9:b1:45:05:89:
bf:51:c8:d1:03:c1:0b:40:b2:1b:7b:c8:39:b2:6e:c2:52:fa:
b1:e6:c9:9b:48:62:8e:e3:df:ae:ac:ad:fc:93:f0:92:82:7c:
e1:ae:67:f6:b1:0c:f2:3f:c6:90:16:57:ad:e5:81:c8:15:3f:
df:db:8f:81:90:d1:11:89:0c:0c:3e:a9:41:8a:b6:86:4d:35:
01:06:a5:ba:75:b9:1b:2c:1b:f5:40:5c:6e:ad:5b:eb:d3:87:
3d:71:ca:06:35:4d:cb:a1:ae:be:4e:f0:a1:4e:dc:3d:e1:48:
1c:04:8a:a0:3b:69:39:ee:e9:e6:dd:cc:f9:11:d6:f2:e4:46:
92:c7:2e:8f:bf:e3:be:23:ab:c6:1b:7d:f6:90:ff:d1:8e:ff:
a0:f4:b8:db:b2:3f:01:c2:ea:09:2f:2d:db:b9:e9:fa:63:4a:
72:31:10:ff:d1:4a:cd:d0:ef:02:fa:30:3c:f5:af:1d:cb:e1:
41:ec:71:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:35:16 2025 by rpki-client