Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a633030303a3a2f33342d3334203d3e20323638313331.roa
File: 323830343a353837383a633030303a3a2f33342d3334203d3e20323638313331.roa (raw, json)
Hash identifier: jkU9ckuao2KI2X3b3Gz33ykePTgpRlYTZbQCur34kMc=
Subject key identifier: AE:C8:69:B8:EF:95:F9:F8:65:4F:D4:59:FB:A5:16:51:1F:33:46:22
Certificate issuer: /CN=BD0B43860A0889125EAC647FBE9712DB5CD78027
Certificate serial: 3D65AABDA5BFBDBD9BA4A61CA86C6BBC2D25F3B3
Authority key identifier: BD:0B:43:86:0A:08:89:12:5E:AC:64:7F:BE:97:12:DB:5C:D7:80:27
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD0B43860A0889125EAC647FBE9712DB5CD78027.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a633030303a3a2f33342d3334203d3e20323638313331.roa
Signing time: Tue 03 Dec 2024 17:48:40 +0000
ROA not before: Tue 03 Dec 2024 17:43:40 +0000
ROA not after: Tue 02 Dec 2025 17:48:40 +0000
asID: 268131
IP address blocks: 2804:5878:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:65:aa:bd:a5:bf:bd:bd:9b:a4:a6:1c:a8:6c:6b:bc:2d:25:f3:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD0B43860A0889125EAC647FBE9712DB5CD78027
Validity
Not Before: Dec 3 17:43:40 2024 GMT
Not After : Dec 2 17:48:40 2025 GMT
Subject: CN=AEC869B8EF95F9F8654FD459FBA516511F334622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2d:f4:89:22:84:da:a3:45:47:30:1b:da:24:
3d:65:40:60:04:2c:06:23:f8:1b:c8:ad:a8:87:08:
56:8f:df:d7:9b:d9:03:3b:6e:d3:6a:f1:16:c1:f5:
ce:df:0b:f5:eb:8e:86:c1:e9:54:92:66:ea:79:9c:
b5:e2:07:8f:44:ad:48:30:f9:19:21:a4:5e:b3:43:
08:73:a1:03:06:db:cd:79:a2:7e:dc:e6:68:4a:d1:
62:e2:3c:4d:ca:03:41:c5:7b:33:62:ba:78:80:4b:
74:6d:a2:9b:80:2e:2b:b6:d3:48:d6:3c:99:2a:45:
27:1a:59:fe:0b:00:e4:ae:12:44:a8:b5:f6:d2:1c:
31:3a:7b:e0:03:3e:62:2d:82:90:11:2a:3a:5b:2f:
28:15:16:88:0b:75:f2:50:b1:5e:7d:44:42:c0:c5:
dd:64:6f:60:7b:11:7a:50:05:46:d2:5c:ed:0f:78:
66:57:e8:c1:b3:2f:c1:f0:94:9d:2f:73:8d:bd:9f:
f1:1f:2a:fb:44:18:b9:40:0e:e3:36:59:fd:68:f3:
b2:37:4a:63:16:f4:33:67:60:93:25:8b:c2:93:3d:
c2:9e:f4:fa:80:94:11:49:3a:0e:27:27:a1:5b:35:
a4:f0:a2:e3:b2:8c:ab:f7:1b:99:5b:b5:2e:85:a7:
79:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C8:69:B8:EF:95:F9:F8:65:4F:D4:59:FB:A5:16:51:1F:33:46:22
X509v3 Authority Key Identifier:
keyid:BD:0B:43:86:0A:08:89:12:5E:AC:64:7F:BE:97:12:DB:5C:D7:80:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/BD0B43860A0889125EAC647FBE9712DB5CD78027.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD0B43860A0889125EAC647FBE9712DB5CD78027.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a633030303a3a2f33342d3334203d3e20323638313331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5878:c000::/34
Signature Algorithm: sha256WithRSAEncryption
8c:91:b6:d6:9e:89:3c:12:a0:2b:73:5c:55:21:31:fc:a6:02:
4a:dc:0b:63:dc:c4:61:ad:c1:57:b4:af:89:cd:0b:cc:4f:34:
a4:c3:fa:cc:ab:8e:8e:d5:94:7c:eb:fb:7b:7d:96:f8:79:79:
bf:88:84:46:9b:1d:8b:10:1f:df:8f:32:03:ae:51:79:2a:bf:
d1:ad:dd:57:9f:d7:1f:e6:96:a1:18:7c:c7:db:bf:1e:34:af:
b4:51:ce:ee:48:3b:6a:81:ef:d5:e6:a9:a9:1c:0d:b6:5d:26:
c2:d4:24:17:39:48:ad:8b:da:e3:32:89:a8:8f:f9:00:26:a5:
a9:77:1c:d5:27:44:30:b1:6c:8f:7d:cd:69:4d:01:14:07:b9:
49:05:e3:9b:bf:3f:a2:c9:94:f9:d9:2e:f7:93:47:ce:97:d3:
a7:eb:e0:e5:b0:13:ca:0d:b3:a5:1e:af:53:c4:d1:9f:ba:02:
e7:4a:5f:ce:56:24:24:5a:cc:f9:e0:39:93:cb:5d:e4:64:11:
2c:1a:97:76:f2:8e:51:4e:55:6f:48:c3:b0:f8:97:53:f6:a3:
21:14:cc:d7:99:d3:35:f4:f9:3c:78:14:90:7c:a9:4f:ab:41:
a3:ad:e1:f6:dc:a2:84:bd:5a:1d:21:43:5d:03:0a:ae:1b:53:
b0:d6:0d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:41:57 2025 by rpki-client