Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/323830343a313432343a3a2f33322d3438203d3e203532393430.roa
File: 323830343a313432343a3a2f33322d3438203d3e203532393430.roa (raw, json)
Hash identifier: FpPO+bcHUH1Fb/SRnwHuWn+Aa10Ff65OnOeVonoMJCw=
Subject key identifier: D1:47:96:F1:07:D4:FE:8A:41:0D:E4:26:D3:8B:EE:6C:C5:1D:B8:54
Certificate issuer: /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial: 131B6D3C6DEA74ABCCE1B18BAC17C7599A0BBAF1
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/323830343a313432343a3a2f33322d3438203d3e203532393430.roa
Signing time: Mon 25 Nov 2024 17:04:02 +0000
ROA not before: Mon 25 Nov 2024 16:59:02 +0000
ROA not after: Mon 24 Nov 2025 17:04:02 +0000
asID: 52940
IP address blocks: 2804:1424::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:1b:6d:3c:6d:ea:74:ab:cc:e1:b1:8b:ac:17:c7:59:9a:0b:ba:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Validity
Not Before: Nov 25 16:59:02 2024 GMT
Not After : Nov 24 17:04:02 2025 GMT
Subject: CN=D14796F107D4FE8A410DE426D38BEE6CC51DB854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2c:b4:0b:bd:a6:25:7c:19:c4:3d:a4:5d:9a:
f3:74:24:f7:9c:35:be:7a:66:ca:d3:a2:66:d0:3c:
24:f2:65:14:e3:45:fa:d1:4d:40:eb:5d:f7:73:04:
76:78:28:a5:61:5f:3e:5a:1d:74:fe:29:5a:f6:e7:
1e:1b:4e:ae:e5:ff:c1:37:6f:69:7c:f6:57:5a:7d:
7c:80:dd:30:9e:72:36:cf:70:1a:fd:48:d3:2a:fb:
c5:80:e1:5c:a9:a8:7a:a4:b6:48:6f:3a:fe:ce:97:
a8:11:a8:1a:4c:bf:c0:da:02:30:a0:30:e8:4a:a1:
ea:a7:49:b2:7e:aa:cb:c3:31:70:10:f3:ea:d9:ae:
eb:07:c7:b3:18:72:38:aa:c3:eb:c3:0d:5e:81:78:
62:47:2e:4a:a3:60:88:21:6b:39:be:ea:4c:95:c1:
23:38:82:57:1e:00:54:74:9e:7f:50:65:23:6f:04:
2d:cf:e6:9c:15:c9:16:52:c1:c6:c5:b5:64:80:88:
18:57:d5:17:c7:e1:0b:b3:cc:d6:9d:ea:6b:94:51:
7d:15:a0:82:99:04:a7:cb:a6:6e:26:f6:b6:83:56:
13:05:d3:e6:80:c4:d0:9a:b1:5b:a3:a9:78:b6:47:
6e:5f:73:d8:81:40:e6:6f:0c:b2:d7:ed:cd:80:7f:
0e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:47:96:F1:07:D4:FE:8A:41:0D:E4:26:D3:8B:EE:6C:C5:1D:B8:54
X509v3 Authority Key Identifier:
keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/323830343a313432343a3a2f33322d3438203d3e203532393430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1424::/32
Signature Algorithm: sha256WithRSAEncryption
12:8c:4d:79:8f:8b:f0:a2:81:a3:db:53:11:71:80:88:b5:64:
03:90:15:e0:30:7c:fd:3b:fa:ab:f8:24:f2:ec:75:99:92:56:
20:2d:0b:53:49:8c:2b:87:3d:61:7b:73:f8:cd:14:55:cf:7d:
60:bd:99:f9:7d:2d:c8:81:c1:30:12:f7:19:ec:fd:d5:fc:2c:
b6:7b:2a:9d:f3:83:4e:9c:9f:b6:3b:56:e0:78:85:df:91:e5:
54:e2:9b:ff:06:a7:7e:ea:94:16:a5:da:59:ef:18:2f:d8:94:
ad:0a:41:1f:a3:fa:42:06:1c:22:65:81:24:34:90:ff:0a:60:
00:95:5b:de:13:10:05:cb:7f:ca:15:1a:22:83:70:f6:ba:30:
1c:fa:54:05:23:9c:fe:3a:af:8a:60:62:aa:54:4f:4b:82:ef:
85:cf:e8:04:35:4d:16:eb:07:87:21:95:e7:f8:16:e4:11:f1:
e1:68:1f:7d:f6:c5:a8:ab:4f:c0:fc:f9:53:e0:62:41:f6:6c:
fd:71:8f:d8:ca:44:ee:a7:5f:5d:a0:68:97:88:46:d1:61:4c:
ef:e7:8c:ab:62:f9:b7:17:5a:39:ae:b3:2b:6c:3c:64:a0:35:
01:cd:af:da:55:5a:75:25:d2:f4:f5:36:4b:4c:f0:c9:8b:94:
68:a8:46:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:29:37 2025 by rpki-client