Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a383030303a3a2f33342d3334203d3e20323638313331.roa
File: 323830343a353837383a383030303a3a2f33342d3334203d3e20323638313331.roa (raw, json)
Hash identifier: yPb2RV6D2NWqKzdwzfhGG96BGUAEhC4K2Cm3YQZS3CQ=
Subject key identifier: BC:ED:F8:49:D5:35:C1:58:99:8B:0E:04:A5:A7:B8:06:8E:64:95:1E
Certificate issuer: /CN=BD0B43860A0889125EAC647FBE9712DB5CD78027
Certificate serial: 72643026B11AEB809BAC1BCD19CE355BADD5EF19
Authority key identifier: BD:0B:43:86:0A:08:89:12:5E:AC:64:7F:BE:97:12:DB:5C:D7:80:27
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD0B43860A0889125EAC647FBE9712DB5CD78027.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a383030303a3a2f33342d3334203d3e20323638313331.roa
Signing time: Tue 03 Dec 2024 17:48:42 +0000
ROA not before: Tue 03 Dec 2024 17:43:42 +0000
ROA not after: Tue 02 Dec 2025 17:48:42 +0000
asID: 268131
IP address blocks: 2804:5878:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:64:30:26:b1:1a:eb:80:9b:ac:1b:cd:19:ce:35:5b:ad:d5:ef:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD0B43860A0889125EAC647FBE9712DB5CD78027
Validity
Not Before: Dec 3 17:43:42 2024 GMT
Not After : Dec 2 17:48:42 2025 GMT
Subject: CN=BCEDF849D535C158998B0E04A5A7B8068E64951E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:18:07:12:49:b7:fa:4a:d4:f4:77:1d:b0:30:
71:da:c9:ff:c9:84:a6:5b:02:4c:46:0d:0f:2b:b8:
5c:38:ab:c9:07:2a:89:a3:d2:0f:0a:9e:98:a3:59:
a9:04:c3:20:af:d2:38:61:96:17:03:26:0c:18:f7:
36:c7:bd:c2:6b:43:0e:b2:af:90:36:56:5c:df:ac:
bd:f3:ec:2f:71:f1:4c:eb:61:45:34:7e:b0:be:a5:
bd:ea:51:72:9f:29:af:ad:ad:5e:44:3f:54:0e:d2:
d2:6b:6b:6e:7d:56:48:88:f8:7e:4a:b9:bf:aa:9d:
c2:8f:e1:5f:28:1c:51:40:16:50:a3:39:07:31:d9:
dc:70:97:82:73:20:3c:98:b4:17:09:6d:47:47:71:
b7:b0:33:36:dc:80:e9:22:dd:fe:dc:c5:42:c7:e5:
09:6a:8b:a7:bf:d4:bb:f4:81:a1:c7:c8:6d:0b:56:
0a:55:d4:18:7b:ed:0d:a8:7f:e1:47:76:5c:d2:1a:
f8:79:57:2e:a3:e6:46:2e:8a:82:f1:b2:48:2e:38:
32:5c:21:d9:18:a2:6b:b8:64:c5:f8:84:26:7b:9a:
3b:9d:b3:72:34:68:59:72:f8:a7:85:e4:70:90:0f:
27:6a:3e:e7:e7:ba:b2:16:b4:26:50:ae:90:08:64:
30:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:ED:F8:49:D5:35:C1:58:99:8B:0E:04:A5:A7:B8:06:8E:64:95:1E
X509v3 Authority Key Identifier:
keyid:BD:0B:43:86:0A:08:89:12:5E:AC:64:7F:BE:97:12:DB:5C:D7:80:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/BD0B43860A0889125EAC647FBE9712DB5CD78027.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD0B43860A0889125EAC647FBE9712DB5CD78027.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a383030303a3a2f33342d3334203d3e20323638313331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5878:8000::/34
Signature Algorithm: sha256WithRSAEncryption
69:6c:9d:a0:54:e8:0b:ac:3c:fe:ed:b1:a3:63:15:23:d9:e0:
d6:e0:d4:04:60:31:93:4a:61:cc:05:f9:52:f0:66:bc:d3:e2:
78:23:63:ae:aa:fb:50:9e:fb:77:80:03:9b:68:6f:1f:50:2b:
da:b2:d1:76:22:e4:25:f2:c9:d2:b2:12:56:9d:78:14:0b:ef:
c7:17:88:c8:6d:94:e9:d1:91:84:31:51:51:eb:8a:84:52:32:
bf:72:f4:59:26:3b:77:e6:6b:79:69:27:01:c1:fa:f2:b8:23:
1e:d1:74:9a:24:9e:d3:60:9a:7d:1a:3a:93:05:94:0b:f6:29:
e3:67:4d:9d:c3:66:d3:e0:fe:11:89:d3:11:4a:80:56:db:d8:
8c:13:13:cb:3b:f6:aa:a9:92:d0:b6:eb:6a:ea:83:9a:ce:f6:
13:9d:79:5b:d3:ad:97:ed:52:23:37:aa:22:9e:50:44:24:d1:
b1:5f:c5:9a:c5:3d:c9:78:9b:0d:b9:9b:be:e4:7a:c8:b3:c0:
12:ba:d4:44:25:35:38:bc:ec:5f:68:6e:a7:f2:35:49:bf:19:
e7:aa:0d:ae:a3:f5:51:16:23:2c:5f:fd:6a:af:2c:f5:10:69:
0c:4e:ed:9f:c2:c4:a1:32:9c:22:09:30:90:65:f2:f9:f6:a3:
24:c4:23:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:20:26 2025 by rpki-client