Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/323830343a313330633a3a2f33322d3332203d3e20323633353132.roa
File: 323830343a313330633a3a2f33322d3332203d3e20323633353132.roa (raw, json)
Hash identifier: KTGJxYfz0q8lanop8ylhgubroTr2FtE6BMhu8F1u3+A=
Subject key identifier: BB:55:81:62:CA:7F:EC:0B:B6:F4:E0:60:A5:71:C0:21:D9:70:F6:6E
Certificate issuer: /CN=280DBCE26C80C869FE8BD73477199ADD10E444A2
Certificate serial: 7FB0F9FF1F06BFB25A325844542976A9F031AECD
Authority key identifier: 28:0D:BC:E2:6C:80:C8:69:FE:8B:D7:34:77:19:9A:DD:10:E4:44:A2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/323830343a313330633a3a2f33322d3332203d3e20323633353132.roa
Signing time: Wed 05 Mar 2025 19:00:05 +0000
ROA not before: Wed 05 Mar 2025 18:55:05 +0000
ROA not after: Wed 04 Mar 2026 19:00:05 +0000
asID: 263512
IP address blocks: 2804:130c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:b0:f9:ff:1f:06:bf:b2:5a:32:58:44:54:29:76:a9:f0:31:ae:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=280DBCE26C80C869FE8BD73477199ADD10E444A2
Validity
Not Before: Mar 5 18:55:05 2025 GMT
Not After : Mar 4 19:00:05 2026 GMT
Subject: CN=BB558162CA7FEC0BB6F4E060A571C021D970F66E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ec:4b:27:a2:0a:3a:77:f9:19:b6:6c:2b:eb:
0a:1f:c7:99:0e:26:3d:22:e8:20:99:9c:1a:28:df:
6d:4d:95:60:ae:cc:76:92:78:74:46:a6:8a:8b:89:
54:b4:ba:c1:ab:41:a0:55:d0:50:d1:d3:4f:54:28:
4f:56:e5:c9:b6:60:75:0d:4a:5e:2f:c6:fe:f2:ae:
a1:cc:27:d3:14:7e:82:8d:53:9a:cd:ce:b9:ff:74:
eb:69:90:45:8f:05:18:74:8a:40:f2:c2:37:1d:5f:
6f:df:0a:eb:99:ec:40:63:06:6c:70:70:ff:dc:0a:
30:65:53:75:3a:34:1b:81:ec:84:9e:e3:9d:b4:77:
b9:9a:9c:ec:ed:6b:50:14:f9:8c:c0:2c:c2:de:7a:
2b:69:62:60:dd:7a:20:de:9b:70:30:79:4c:f5:0b:
49:ee:e7:87:e0:4d:32:5e:23:58:da:af:0d:70:2c:
1d:10:63:ec:71:a1:ff:d1:2b:9c:dc:11:9c:8c:0e:
79:f1:4c:fc:d8:9b:55:45:7a:82:0e:1d:e5:6e:fc:
2b:d8:74:93:1b:3a:5b:65:42:7c:ff:7d:13:28:37:
f9:20:57:df:57:27:9a:ee:a9:98:29:dd:9f:a6:8b:
ad:3c:cf:3a:ec:76:73:9c:50:59:0a:63:bb:05:4c:
f6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:55:81:62:CA:7F:EC:0B:B6:F4:E0:60:A5:71:C0:21:D9:70:F6:6E
X509v3 Authority Key Identifier:
keyid:28:0D:BC:E2:6C:80:C8:69:FE:8B:D7:34:77:19:9A:DD:10:E4:44:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/323830343a313330633a3a2f33322d3332203d3e20323633353132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:130c::/32
Signature Algorithm: sha256WithRSAEncryption
65:e5:c7:ad:5e:54:ad:54:03:be:84:05:9c:fc:47:62:7c:58:
92:90:0d:5f:41:ec:25:fe:e9:49:64:b3:7c:83:bd:82:10:01:
39:09:cc:c0:ff:40:f8:30:8f:1a:32:16:8b:50:68:f0:2b:1b:
8d:19:09:68:6d:69:00:fc:ae:3a:88:cb:69:d1:12:7a:c4:21:
a0:8a:d0:af:d9:54:06:a2:f7:44:8c:1a:05:2a:72:bd:e0:f7:
4d:1a:28:65:cf:c3:ac:93:ed:92:01:23:7f:ab:04:1e:a3:51:
2c:24:79:70:47:c2:21:89:9a:42:f4:86:a8:f1:fb:62:3a:63:
52:9d:b3:ab:ac:41:9b:55:4f:52:d6:1e:0e:3a:66:33:00:97:
e2:c9:43:02:fb:50:94:f3:d8:9a:d0:bf:30:83:90:3b:5d:00:
b3:ce:44:40:13:7b:18:44:ab:2c:2a:b4:c4:aa:bd:e0:03:51:
fb:2d:ac:5f:ea:4d:99:09:5c:46:cc:aa:03:37:a1:fe:48:b5:
cd:98:2b:24:0a:76:b2:85:71:a8:86:64:03:fc:0d:c7:d5:42:
ea:32:82:a8:e1:0f:07:dc:be:1b:db:dd:5c:6f:5e:2b:73:49:
fc:df:f3:30:3b:1c:24:24:f3:06:30:0e:8f:87:53:22:36:4b:
42:65:bf:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:46:57 2025 by rpki-client