Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a3a2f33322d3332203d3e20323638313331.roa
File: 323830343a353837383a3a2f33322d3332203d3e20323638313331.roa (raw, json)
Hash identifier: Y1t07bH67902gX6vfkqUtKI0JZqgIgvstuKHr9nqykk=
Subject key identifier: 11:76:2B:B2:5D:7F:C5:D7:7D:3E:27:D0:E1:A4:81:92:B1:FF:F2:BD
Certificate issuer: /CN=BD0B43860A0889125EAC647FBE9712DB5CD78027
Certificate serial: 51708E36D3C2AD511292142179BA0D60857C54C1
Authority key identifier: BD:0B:43:86:0A:08:89:12:5E:AC:64:7F:BE:97:12:DB:5C:D7:80:27
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD0B43860A0889125EAC647FBE9712DB5CD78027.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a3a2f33322d3332203d3e20323638313331.roa
Signing time: Tue 03 Dec 2024 17:48:37 +0000
ROA not before: Tue 03 Dec 2024 17:43:37 +0000
ROA not after: Tue 02 Dec 2025 17:48:37 +0000
asID: 268131
IP address blocks: 2804:5878::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:70:8e:36:d3:c2:ad:51:12:92:14:21:79:ba:0d:60:85:7c:54:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD0B43860A0889125EAC647FBE9712DB5CD78027
Validity
Not Before: Dec 3 17:43:37 2024 GMT
Not After : Dec 2 17:48:37 2025 GMT
Subject: CN=11762BB25D7FC5D77D3E27D0E1A48192B1FFF2BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:df:bd:40:16:5f:a4:68:f4:3b:5c:be:11:cb:
06:4b:2a:8b:f3:17:d9:c7:72:a0:3f:e4:fd:fd:3a:
6a:c7:ad:ce:95:36:0d:1c:51:70:f3:da:3c:ef:3c:
9b:3e:c4:22:91:72:dc:62:ee:ef:d1:6e:8b:24:07:
86:af:a9:87:78:f9:7c:96:8a:27:d5:90:2b:80:1f:
d4:f3:40:44:3f:fc:8f:f5:88:02:07:c8:0d:ee:c4:
e2:57:c5:33:11:6b:d0:10:ca:db:a8:ff:06:16:7f:
a0:dd:eb:0a:50:02:c1:40:2c:c0:75:19:2f:ec:c7:
0e:ef:95:ff:bf:fc:54:9e:1d:5c:b4:56:71:52:9f:
d7:31:a3:1d:7a:d2:f8:ed:53:21:35:af:71:55:96:
70:f5:1e:96:ae:0b:3e:73:26:7a:a6:f8:a2:f2:a4:
1a:11:16:31:4e:aa:29:92:93:7c:8e:1b:2a:33:09:
e3:ac:f4:b0:66:24:1c:66:63:7a:38:75:c0:85:14:
e0:5a:fe:8d:be:34:c2:66:dd:3a:ac:e2:2c:2b:a8:
b2:0a:37:90:29:ee:4f:37:d3:77:1d:0e:54:98:18:
b7:d2:25:cc:5a:03:b2:47:1a:18:19:2c:95:9c:dd:
f2:9a:3a:2f:b8:a1:35:ef:20:90:eb:9f:83:46:0d:
d5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:76:2B:B2:5D:7F:C5:D7:7D:3E:27:D0:E1:A4:81:92:B1:FF:F2:BD
X509v3 Authority Key Identifier:
keyid:BD:0B:43:86:0A:08:89:12:5E:AC:64:7F:BE:97:12:DB:5C:D7:80:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/BD0B43860A0889125EAC647FBE9712DB5CD78027.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD0B43860A0889125EAC647FBE9712DB5CD78027.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a3a2f33322d3332203d3e20323638313331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5878::/32
Signature Algorithm: sha256WithRSAEncryption
0d:14:cf:f2:f7:e6:2c:16:c1:89:87:db:e3:8d:9a:81:32:a9:
37:5d:4e:47:c2:23:aa:de:57:06:54:35:d9:e0:3e:03:aa:3a:
cb:12:d2:74:90:34:b0:87:17:f9:cd:74:39:bd:73:64:f0:7c:
c0:16:7f:22:ea:6f:2b:39:d7:87:b6:3b:af:c5:54:8c:15:76:
69:86:66:9f:3e:f9:ed:2c:b1:92:56:8d:05:12:6f:84:c1:ce:
73:02:0f:1c:d3:2d:fc:56:a1:1a:3a:d6:25:5b:75:8d:d9:f4:
ea:df:d6:20:27:0b:f4:4b:b7:78:12:7d:54:71:e6:f9:35:99:
e4:84:1c:82:40:7c:34:f5:0f:2b:00:0f:0d:9c:45:88:df:2d:
c9:81:58:81:b9:e4:4c:7d:43:67:08:8d:00:76:e4:61:c2:14:
d9:4d:ad:9a:28:b1:bd:14:cd:b1:f8:ca:68:4c:ab:ec:c8:eb:
f7:4f:54:57:f4:17:00:c8:27:0f:b7:92:c4:16:d0:f8:71:26:
8a:d7:e1:4b:4e:2a:63:2c:9d:b0:69:d7:32:c4:bc:2e:5a:81:
0d:ef:8a:ed:a6:4d:1b:9b:ba:55:d1:b7:98:0e:67:61:f0:23:
9f:00:b5:69:fc:c6:bf:5c:b7:6b:0e:56:ff:90:54:27:17:0e:
a7:ff:c4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:47:18 2025 by rpki-client