Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/1/323830343a353463383a3a2f33322d3438203d3e203631353935.roa
File: 323830343a353463383a3a2f33322d3438203d3e203631353935.roa (raw, json)
Hash identifier: 2eaxUpIWFPKUhsklddqOXEnCdPC3vS1xPUd0+7hfGZQ=
Subject key identifier: 5F:A3:2B:0E:E0:C5:01:CF:E5:0A:0E:20:05:E1:F7:A9:65:55:4C:7F
Certificate issuer: /CN=43B7A209600FE5F501BA3EDE0E72CB7CA35D8743
Certificate serial: 30BB90731384E9576A6B6C15F0BB67263A47C293
Authority key identifier: 43:B7:A2:09:60:0F:E5:F5:01:BA:3E:DE:0E:72:CB:7C:A3:5D:87:43
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43B7A209600FE5F501BA3EDE0E72CB7CA35D8743.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/1/323830343a353463383a3a2f33322d3438203d3e203631353935.roa
Signing time: Thu 04 Apr 2024 17:45:58 +0000
ROA not before: Thu 04 Apr 2024 17:40:58 +0000
ROA not after: Thu 03 Apr 2025 17:45:58 +0000
asID: 61595
IP address blocks: 2804:54c8::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:bb:90:73:13:84:e9:57:6a:6b:6c:15:f0:bb:67:26:3a:47:c2:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43B7A209600FE5F501BA3EDE0E72CB7CA35D8743
Validity
Not Before: Apr 4 17:40:58 2024 GMT
Not After : Apr 3 17:45:58 2025 GMT
Subject: CN=5FA32B0EE0C501CFE50A0E2005E1F7A965554C7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6e:b9:39:b0:43:4e:00:51:d6:8e:3b:bd:de:
9f:a5:d9:6d:c5:b6:af:92:4c:88:5a:91:29:84:df:
0c:4d:fd:ea:f9:72:cf:1b:56:73:81:09:3c:a8:60:
48:68:ef:33:8c:09:29:de:90:35:32:ec:92:32:94:
3c:e4:13:81:61:c4:ba:2e:c8:7a:b8:8f:10:51:3c:
68:a1:e3:11:e8:8a:0b:e5:2a:ea:ff:3b:40:5f:b8:
0c:04:16:ca:92:56:0f:99:da:5b:4f:fb:6b:c2:a6:
97:af:50:da:07:83:b8:2d:6f:7d:fe:60:ac:2b:2e:
a4:37:e1:49:51:7b:a5:79:9b:99:b1:ca:a7:00:bc:
e7:9f:65:5c:0b:ff:7b:bf:f5:a3:70:5d:74:83:1c:
e5:08:73:b6:bb:90:44:d9:93:f2:8f:fe:f7:b2:a3:
dd:2e:68:98:00:39:fb:aa:20:47:31:23:bb:50:87:
2f:2f:09:5c:0c:61:4e:76:64:fa:73:c8:34:11:0b:
a6:49:0d:a0:45:46:fb:26:0c:13:b6:cb:84:1b:7c:
68:cc:96:90:7d:d0:7d:d3:3d:4a:c8:1e:88:f4:aa:
af:a3:34:d0:72:bd:68:b8:0e:19:e3:66:9c:19:90:
91:3b:ae:f4:35:c8:8a:9c:e5:de:3d:fe:00:cd:ab:
bc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A3:2B:0E:E0:C5:01:CF:E5:0A:0E:20:05:E1:F7:A9:65:55:4C:7F
X509v3 Authority Key Identifier:
keyid:43:B7:A2:09:60:0F:E5:F5:01:BA:3E:DE:0E:72:CB:7C:A3:5D:87:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/1/43B7A209600FE5F501BA3EDE0E72CB7CA35D8743.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43B7A209600FE5F501BA3EDE0E72CB7CA35D8743.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/1/323830343a353463383a3a2f33322d3438203d3e203631353935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:54c8::/32
Signature Algorithm: sha256WithRSAEncryption
60:fd:68:46:16:a1:45:c9:3f:be:e3:2b:92:d0:f8:ed:fc:23:
d7:43:a9:f0:91:3d:85:5a:20:2a:e6:78:1b:12:12:d2:06:b6:
21:88:d7:fd:01:e2:eb:7d:b5:bd:06:7f:7d:78:ce:c5:85:28:
d4:94:32:21:78:0e:42:7d:4f:11:ac:8e:72:c4:fe:ac:02:a6:
af:9f:ed:35:56:14:ae:6d:53:7e:e7:7c:25:10:8d:16:54:cb:
96:0b:fc:31:8a:a3:3f:c5:2a:ec:42:cb:95:25:32:e3:b4:28:
fd:25:24:e1:1c:aa:bc:dd:48:d1:35:bf:7c:bd:aa:23:ea:06:
16:5f:8f:6d:04:a6:03:bb:bc:09:79:f1:80:e5:c8:e5:b2:a0:
aa:3f:e4:ea:93:0b:53:e7:8b:62:ec:e8:45:13:b8:52:b9:c1:
e0:2c:90:61:3d:0a:b6:e5:94:ee:c5:7d:14:e6:05:41:54:1f:
27:70:25:88:9b:b2:49:5a:2c:c2:0e:3b:58:b1:c4:5d:68:45:
52:3a:1d:d4:46:2a:11:28:98:c1:39:62:81:e9:f8:0f:3b:f1:
6e:80:29:25:66:10:0d:b2:e7:61:36:5f:ab:e0:7a:ae:18:0c:
d2:91:57:90:d0:b4:64:c8:58:f1:e7:69:16:e9:aa:4b:ab:9e:
53:bf:26:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:46:55 2025 by rpki-client