Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a3a2f33342d3334203d3e20323638313331.roa
File: 323830343a353837383a3a2f33342d3334203d3e20323638313331.roa (raw, json)
Hash identifier: FPuTj53hdhjeWub3YUG94RGUqbzqqeJ0FQr1y2qvVW4=
Subject key identifier: FF:E7:E8:87:3C:41:25:42:EA:7F:85:AE:80:02:57:FC:E6:D5:E2:0F
Certificate issuer: /CN=BD0B43860A0889125EAC647FBE9712DB5CD78027
Certificate serial: 065D69FC1FAEB60596ADC2C52BC02B9C05C703F5
Authority key identifier: BD:0B:43:86:0A:08:89:12:5E:AC:64:7F:BE:97:12:DB:5C:D7:80:27
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD0B43860A0889125EAC647FBE9712DB5CD78027.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a3a2f33342d3334203d3e20323638313331.roa
Signing time: Tue 03 Dec 2024 17:48:38 +0000
ROA not before: Tue 03 Dec 2024 17:43:38 +0000
ROA not after: Tue 02 Dec 2025 17:48:38 +0000
asID: 268131
IP address blocks: 2804:5878::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:5d:69:fc:1f:ae:b6:05:96:ad:c2:c5:2b:c0:2b:9c:05:c7:03:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD0B43860A0889125EAC647FBE9712DB5CD78027
Validity
Not Before: Dec 3 17:43:38 2024 GMT
Not After : Dec 2 17:48:38 2025 GMT
Subject: CN=FFE7E8873C412542EA7F85AE800257FCE6D5E20F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:95:39:cd:f4:40:87:85:b4:5b:3a:0c:05:e2:
fe:ca:30:27:9e:3d:75:29:7c:8f:a8:13:3c:43:4d:
82:b6:eb:a5:aa:88:c9:0d:03:14:66:2b:92:e0:ab:
ac:03:03:81:b0:30:92:d2:f6:74:03:dc:91:7a:af:
80:7d:89:fc:f9:63:27:83:a3:55:81:ef:f7:22:89:
5a:9c:76:33:ef:89:f6:db:0c:dc:94:ef:66:eb:c8:
35:15:32:30:a2:80:f7:08:3e:37:e0:ae:f3:dc:1d:
75:ce:1d:88:eb:53:65:2e:da:b4:d9:a8:9c:d1:cc:
f6:36:37:49:b1:b0:a9:d4:cf:e1:af:d1:c8:70:57:
fb:76:3c:23:b2:a4:e1:a2:5c:0c:89:f2:05:2d:a8:
9f:d9:32:c1:d4:2d:c3:8d:18:ae:c9:93:2e:e1:74:
99:98:3d:fc:6d:b4:5d:ab:42:c3:cd:a9:68:3c:54:
c8:fe:cb:08:7e:0a:07:67:ea:8d:89:ab:2e:71:e1:
ff:1a:d8:48:65:9c:12:73:69:0e:0b:99:01:f2:f2:
67:35:9e:b6:2c:9b:06:13:4c:1c:de:15:69:8a:f1:
38:c0:a6:4e:a3:f6:b4:9c:cd:76:95:26:b6:33:ed:
05:74:61:71:32:36:74:ac:a6:ec:13:63:0e:c4:ea:
30:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E7:E8:87:3C:41:25:42:EA:7F:85:AE:80:02:57:FC:E6:D5:E2:0F
X509v3 Authority Key Identifier:
keyid:BD:0B:43:86:0A:08:89:12:5E:AC:64:7F:BE:97:12:DB:5C:D7:80:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/BD0B43860A0889125EAC647FBE9712DB5CD78027.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD0B43860A0889125EAC647FBE9712DB5CD78027.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a3a2f33342d3334203d3e20323638313331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5878::/34
Signature Algorithm: sha256WithRSAEncryption
59:ef:f3:76:a3:1b:02:a9:27:8a:93:a4:b6:41:fa:82:7a:5d:
ce:66:63:fe:c8:03:32:96:90:ee:06:0b:1e:30:e7:aa:5e:73:
03:c9:dd:cb:00:c9:2a:e2:2b:e1:5f:8e:89:cd:35:ab:46:58:
75:27:7e:b4:12:fe:de:9e:1a:06:78:c1:e4:16:0a:e1:94:4e:
c4:19:55:2c:b0:30:7b:64:9c:69:01:e8:a8:e1:6c:d6:79:06:
c5:bb:1a:0b:f4:af:c6:17:6c:e9:cc:0f:fc:8a:5d:db:29:d4:
c0:e3:99:09:66:8a:a4:e4:06:a9:c4:0f:fb:d8:9c:46:dd:e2:
c5:0f:9a:7f:8f:3f:11:fc:bc:08:b0:5c:3c:8a:ad:9a:dc:a8:
76:e8:8a:ab:55:51:cf:f4:13:ca:0e:f8:e3:5f:5c:09:a0:42:
70:fd:05:e5:b7:1d:2e:71:68:87:37:ef:f2:f5:17:eb:a5:b6:
18:56:c7:10:68:12:9f:59:5e:91:8a:6b:65:36:f2:ec:d5:20:
58:48:20:5a:ba:20:5e:77:bc:0c:88:03:34:3d:c9:72:b9:5e:
3d:4c:d7:b6:7c:98:18:a1:1d:cf:7e:e5:97:55:35:57:6f:53:
a5:9c:26:f8:fb:e3:8c:2b:3a:08:2a:97:84:f1:e1:13:00:17:
52:db:24:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:27:29 2025 by rpki-client