Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a3a2f33332d3333203d3e20323638313331.roa
File: 323830343a353837383a3a2f33332d3333203d3e20323638313331.roa (raw, json)
Hash identifier: z5Um26w/ziE6O7MlPJBnt2ewJZ7WzBX3lKXzAh7owYg=
Subject key identifier: 48:BF:E3:3E:E0:87:80:D0:93:1C:C7:AE:E9:93:E1:39:A6:1C:66:79
Certificate issuer: /CN=BD0B43860A0889125EAC647FBE9712DB5CD78027
Certificate serial: 53C05FEF76A6A05507E6A26A0C276F868E19801E
Authority key identifier: BD:0B:43:86:0A:08:89:12:5E:AC:64:7F:BE:97:12:DB:5C:D7:80:27
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD0B43860A0889125EAC647FBE9712DB5CD78027.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a3a2f33332d3333203d3e20323638313331.roa
Signing time: Tue 03 Dec 2024 17:48:38 +0000
ROA not before: Tue 03 Dec 2024 17:43:38 +0000
ROA not after: Tue 02 Dec 2025 17:48:38 +0000
asID: 268131
IP address blocks: 2804:5878::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:c0:5f:ef:76:a6:a0:55:07:e6:a2:6a:0c:27:6f:86:8e:19:80:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD0B43860A0889125EAC647FBE9712DB5CD78027
Validity
Not Before: Dec 3 17:43:38 2024 GMT
Not After : Dec 2 17:48:38 2025 GMT
Subject: CN=48BFE33EE08780D0931CC7AEE993E139A61C6679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:99:17:50:2d:ae:c6:a2:99:c2:1b:f6:5c:90:
a0:10:f0:7f:e6:35:90:5b:3c:ae:49:9a:a5:9e:83:
c4:48:51:88:c2:96:ef:e5:16:52:76:40:d9:56:26:
a1:4a:76:8f:b7:59:1f:e0:c8:9e:62:47:9a:3d:4b:
3a:9e:92:36:01:0b:76:e3:2f:2a:76:17:68:55:92:
43:33:0e:2b:53:8b:25:60:6d:e6:55:cd:6a:dd:b3:
bb:74:cc:c7:f7:98:53:bf:2a:ef:c3:2e:49:a6:4e:
03:3a:59:69:b0:ac:61:e1:79:ef:79:f7:0f:16:de:
a9:cf:1c:b4:f9:aa:2e:4f:12:fd:1e:c3:8a:0e:9a:
61:b1:40:f9:cd:37:78:f9:dd:2a:47:40:3a:0b:fe:
dc:3a:09:26:92:4d:39:62:eb:d1:da:f8:bd:56:f4:
a9:b4:c8:96:37:03:4a:6e:e3:8c:72:49:e9:02:24:
12:70:86:be:80:9f:27:31:2b:99:25:db:a9:f0:fa:
f0:ee:96:df:fa:f5:d8:df:ae:3e:bd:09:c8:99:03:
9f:4d:4a:02:e2:c1:24:1f:20:70:99:84:f6:c7:a7:
ff:4e:f7:de:4b:a5:fa:a3:7d:32:04:3c:af:fe:0b:
a8:f3:bc:dc:26:ba:48:c0:85:f9:91:0c:33:77:f6:
ec:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BF:E3:3E:E0:87:80:D0:93:1C:C7:AE:E9:93:E1:39:A6:1C:66:79
X509v3 Authority Key Identifier:
keyid:BD:0B:43:86:0A:08:89:12:5E:AC:64:7F:BE:97:12:DB:5C:D7:80:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/BD0B43860A0889125EAC647FBE9712DB5CD78027.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD0B43860A0889125EAC647FBE9712DB5CD78027.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a3a2f33332d3333203d3e20323638313331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5878::/33
Signature Algorithm: sha256WithRSAEncryption
57:0c:05:c8:cd:18:be:5a:49:f1:60:5f:97:4d:98:d5:ca:7e:
3e:3a:b2:17:1b:fa:b7:2d:a1:88:28:9c:eb:51:7c:d0:3f:8d:
77:09:4e:61:93:5f:08:65:05:8f:1e:a7:eb:05:a6:c7:26:f8:
59:91:0c:13:56:10:fd:40:48:b8:c5:f6:6e:2f:ae:e7:21:1f:
ce:35:74:b7:f6:95:99:20:bc:b2:22:98:cc:66:d1:1e:77:44:
7c:6f:ff:a4:68:ec:9b:a1:9f:a4:4b:11:d2:45:79:57:d1:ee:
ff:98:c2:e5:f3:9a:6e:6e:f5:56:f2:f7:7a:f8:c0:14:07:46:
0b:fb:f9:41:68:c0:3e:31:9f:0f:97:37:d2:77:33:fe:86:66:
ad:3d:7e:f1:8c:ba:47:6f:23:cd:26:0f:42:11:06:3e:05:e3:
ac:a0:06:f1:01:cf:7c:52:80:d8:64:25:04:ce:80:ee:12:7a:
c7:b8:7b:c0:72:ed:a9:c7:53:43:d1:42:99:d8:72:d0:2b:da:
c6:ce:ac:90:a2:b0:a4:ea:8a:44:fa:fc:a0:c0:c7:13:02:c7:
43:c6:58:d0:1e:e1:a5:0c:cd:66:7b:4a:36:09:4f:4d:c6:1a:
0e:0d:0c:5d:65:eb:c3:b5:20:94:ef:1f:8b:5a:2a:71:df:71:
a2:ab:f9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:56:18 2025 by rpki-client