Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9i4NKEVji1s5E4pp6hdsjwno4Ca44HmZh5XWc1iJKsfQ/0/323830343a356635303a3a2f33322d3332203d3e20323639303931.roa
File: 323830343a356635303a3a2f33322d3332203d3e20323639303931.roa (raw, json)
Hash identifier: JjfpvZ/a8rn6RTfBN/eKydi2OqnLDF2aPd2lyChWMm4=
Subject key identifier: 73:C0:4C:88:12:58:32:EA:F2:56:5A:36:0B:1E:44:57:BC:BA:B4:3C
Certificate issuer: /CN=BD1D92CC61E951D8FC0BC47254B3C399B04418ED
Certificate serial: 5B1F71A3ABA507A1B86F6CFAA1FC80991C58B0EF
Authority key identifier: BD:1D:92:CC:61:E9:51:D8:FC:0B:C4:72:54:B3:C3:99:B0:44:18:ED
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1D92CC61E951D8FC0BC47254B3C399B04418ED.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9i4NKEVji1s5E4pp6hdsjwno4Ca44HmZh5XWc1iJKsfQ/0/323830343a356635303a3a2f33322d3332203d3e20323639303931.roa
Signing time: Tue 04 Feb 2025 13:00:23 +0000
ROA not before: Tue 04 Feb 2025 12:55:23 +0000
ROA not after: Tue 03 Feb 2026 13:00:23 +0000
asID: 269091
IP address blocks: 2804:5f50::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:1f:71:a3:ab:a5:07:a1:b8:6f:6c:fa:a1:fc:80:99:1c:58:b0:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD1D92CC61E951D8FC0BC47254B3C399B04418ED
Validity
Not Before: Feb 4 12:55:23 2025 GMT
Not After : Feb 3 13:00:23 2026 GMT
Subject: CN=73C04C88125832EAF2565A360B1E4457BCBAB43C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f5:80:da:d9:00:1d:ea:b1:b1:15:13:8f:06:
7f:1c:fb:61:0e:ad:ac:40:63:aa:3f:48:18:cd:f9:
19:60:26:62:72:37:15:18:ce:02:82:c6:b1:44:31:
d5:5e:80:c5:86:9f:0c:d9:05:7c:c8:ac:5e:59:d3:
78:9b:4b:77:5e:e9:0a:93:d6:1f:28:fe:4d:f9:09:
b9:10:8d:78:8e:aa:d5:37:d3:04:33:16:78:07:43:
cc:b3:cb:5c:d0:25:f6:21:44:84:1c:ea:cb:8a:ba:
ca:e4:46:c7:42:34:dd:33:27:a2:31:4e:56:ad:70:
2e:71:3c:80:9d:46:38:f1:05:8a:ad:02:4d:21:23:
97:28:66:ca:f4:21:8c:c8:23:00:c1:c6:c9:f4:f2:
75:94:2c:f0:29:d3:a1:98:b9:24:b7:06:cd:df:1a:
27:b0:91:d1:6b:24:e8:22:c1:62:ca:83:d1:87:19:
ca:4d:fb:8a:54:2b:67:43:0c:5b:bc:66:97:12:0f:
d9:bd:ef:b1:e5:75:f5:4b:3c:79:5b:a1:0f:7e:2d:
90:ca:7f:06:b0:10:f9:76:d2:8b:bb:3b:e4:64:2d:
00:42:56:97:74:aa:67:4a:1b:e0:73:14:10:2a:aa:
fe:c0:1b:6e:2b:13:7d:2e:7d:8e:e6:11:95:0f:94:
c0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C0:4C:88:12:58:32:EA:F2:56:5A:36:0B:1E:44:57:BC:BA:B4:3C
X509v3 Authority Key Identifier:
keyid:BD:1D:92:CC:61:E9:51:D8:FC:0B:C4:72:54:B3:C3:99:B0:44:18:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9i4NKEVji1s5E4pp6hdsjwno4Ca44HmZh5XWc1iJKsfQ/0/BD1D92CC61E951D8FC0BC47254B3C399B04418ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1D92CC61E951D8FC0BC47254B3C399B04418ED.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9i4NKEVji1s5E4pp6hdsjwno4Ca44HmZh5XWc1iJKsfQ/0/323830343a356635303a3a2f33322d3332203d3e20323639303931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5f50::/32
Signature Algorithm: sha256WithRSAEncryption
8d:46:0c:27:e8:1b:a4:bb:d4:5e:45:f8:96:dc:6b:e4:e5:70:
77:42:4e:5c:8c:b6:1c:1a:1b:03:c8:9a:2b:0d:c1:6f:b3:d5:
29:b9:97:96:d7:fb:82:8f:49:d1:d3:10:98:b9:1f:68:25:ec:
1f:55:0e:80:95:37:8a:2b:31:f4:ab:47:e7:2d:ab:0e:4d:f7:
b4:6d:57:0a:28:62:00:9d:ac:27:13:a4:b6:89:9d:94:08:55:
eb:4f:29:72:32:2d:44:9c:64:24:44:ac:ea:62:0f:84:cb:63:
da:ec:a7:e1:ce:b4:28:14:8d:94:14:90:55:28:01:79:33:bb:
8f:00:ea:f0:a4:3b:b4:37:81:4c:34:2d:bb:52:b8:18:ab:ff:
2a:0c:09:77:77:a0:90:24:13:3f:09:5e:5d:52:57:f2:4e:cd:
fd:c5:b2:a3:85:78:e2:9c:2c:ea:fb:90:37:01:8b:bd:f8:b7:
36:bc:32:eb:e9:5d:7e:6d:08:90:c4:f9:2a:c4:9f:f9:12:50:
63:71:5f:0f:8f:45:ac:34:51:88:1a:67:f6:ac:71:05:3d:bf:
f2:4d:c6:95:49:83:8d:d5:83:e6:b7:27:29:86:86:09:9f:aa:
2f:47:f7:87:f1:a7:67:9a:42:a1:ca:c8:0a:a0:b3:fe:0e:60:
5b:82:7e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:01:46 2025 by rpki-client