Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/323830343a6131383a3a2f33332d3334203d3e20323633303232.roa
File: 323830343a6131383a3a2f33332d3334203d3e20323633303232.roa (raw, json)
Hash identifier: QGn1e741uH3SxLWvJiXHqYPk6n/umppkhESLNY0qUs8=
Subject key identifier: F1:B0:C7:5A:45:06:BA:0E:BB:6F:E4:85:2C:6B:A6:CB:CD:BA:73:6F
Certificate issuer: /CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
Certificate serial: 12967E0AFCA137B6A452F64E9AE4894DFA2848A2
Authority key identifier: BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/323830343a6131383a3a2f33332d3334203d3e20323633303232.roa
Signing time: Wed 19 Mar 2025 03:54:02 +0000
ROA not before: Wed 19 Mar 2025 03:49:02 +0000
ROA not after: Wed 18 Mar 2026 03:54:02 +0000
asID: 263022
IP address blocks: 2804:a18::/33 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:96:7e:0a:fc:a1:37:b6:a4:52:f6:4e:9a:e4:89:4d:fa:28:48:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
Validity
Not Before: Mar 19 03:49:02 2025 GMT
Not After : Mar 18 03:54:02 2026 GMT
Subject: CN=F1B0C75A4506BA0EBB6FE4852C6BA6CBCDBA736F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9c:36:e7:2c:d3:f4:38:61:8c:6f:9c:56:98:
e1:06:59:a2:fb:6a:c5:0d:2f:82:2a:db:95:5f:cc:
d0:22:c3:08:15:51:6e:60:08:2e:2f:5c:33:77:16:
d5:b9:5f:eb:ed:a1:2d:a7:de:0b:11:e0:e4:05:f2:
71:c1:bb:91:f2:4c:3c:6e:0e:13:eb:b9:9e:27:fc:
ab:ca:9d:17:ec:3e:d7:9a:c0:5d:7e:02:21:77:cb:
ae:13:f9:16:30:d3:ed:e1:b7:58:8f:8e:10:a7:59:
76:22:e4:fc:22:69:50:db:44:68:8c:ce:27:5a:9f:
bb:2c:c5:67:d3:f6:32:0d:11:ea:fe:85:d7:52:24:
b1:ba:76:3a:0d:e9:5a:74:5b:ac:62:15:9c:e0:e4:
c1:3d:49:27:03:27:4d:6d:98:4d:8b:36:30:d2:b2:
e5:cb:65:1c:63:1c:2b:be:35:86:4a:c7:4c:42:e0:
62:ba:ac:ac:5f:c1:00:4a:0b:53:b3:e9:be:0e:21:
93:0c:a9:aa:5e:fc:72:e3:1b:23:bc:30:09:d6:ee:
17:c7:2e:9e:0b:ec:b5:ba:47:12:63:62:a1:a5:a6:
2c:94:90:be:a8:43:41:b9:04:75:19:1a:53:fc:2e:
1e:d7:83:b0:d7:a0:aa:e1:93:c3:fd:c3:21:d0:74:
3a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B0:C7:5A:45:06:BA:0E:BB:6F:E4:85:2C:6B:A6:CB:CD:BA:73:6F
X509v3 Authority Key Identifier:
keyid:BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/323830343a6131383a3a2f33332d3334203d3e20323633303232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:a18::/33
Signature Algorithm: sha256WithRSAEncryption
20:7b:0c:72:73:9c:63:5a:6c:57:d4:be:f1:3a:a2:11:43:68:
af:56:55:8d:24:7e:c4:54:c4:6c:f5:41:03:3f:78:40:e5:e1:
0f:bd:15:6f:8e:0a:69:47:86:1f:3a:5b:fc:09:6c:a6:6d:2c:
33:ef:81:68:be:dc:16:e0:e5:00:17:d9:46:be:fa:1b:f9:e7:
3c:05:8f:6d:fa:d5:8f:f0:77:1a:e8:44:a1:96:a3:1e:4e:10:
66:18:8b:45:b8:35:c5:fa:31:37:6a:c4:1d:4d:a7:e7:bc:8a:
fc:d4:c8:87:8c:cd:e9:f8:fc:2f:75:da:59:37:50:5e:f2:32:
fd:5a:7a:34:ba:bd:af:b2:70:d3:b5:9f:37:7e:b6:ba:dc:de:
d6:09:2e:c4:db:ab:11:5f:5d:a3:52:0a:e8:70:1f:92:88:6e:
e6:36:f5:a2:88:7b:29:b2:36:e8:7f:36:fd:65:0f:02:40:ed:
27:c9:4a:31:f2:3a:34:8f:90:ca:d5:09:e4:04:1b:b8:4d:86:
8e:5c:43:fe:0f:9f:cb:27:f3:e7:2f:46:fb:52:d0:23:15:ba:
0e:59:66:7d:51:92:7d:70:a5:f5:83:02:04:30:ff:8e:e6:37:
a1:eb:c3:0f:e4:42:4e:b5:be:c6:15:c9:8c:42:11:e7:39:25:
05:c9:55:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:52:23 2025 by rpki-client