Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/323830343a346430633a383030303a3a2f33332d3333203d3e20323637343039.roa
File: 323830343a346430633a383030303a3a2f33332d3333203d3e20323637343039.roa (raw, json)
Hash identifier: Z0536Ggh/mvj60PMb0jH9f1+3bIqL7x+zJQy73JyJ5o=
Subject key identifier: 98:01:51:D6:5D:22:D4:CD:4F:15:CD:BF:78:D2:4B:35:3A:F9:7F:22
Certificate issuer: /CN=914016D20FC6BF392388EBF2192D8F5AA78B8FD3
Certificate serial: 7FF518BF3389B6E4DC2CE880A8980AD0E30BAA49
Authority key identifier: 91:40:16:D2:0F:C6:BF:39:23:88:EB:F2:19:2D:8F:5A:A7:8B:8F:D3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/914016D20FC6BF392388EBF2192D8F5AA78B8FD3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/323830343a346430633a383030303a3a2f33332d3333203d3e20323637343039.roa
Signing time: Fri 21 Feb 2025 13:44:55 +0000
ROA not before: Fri 21 Feb 2025 13:39:55 +0000
ROA not after: Fri 20 Feb 2026 13:44:55 +0000
asID: 267409
IP address blocks: 2804:4d0c:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:f5:18:bf:33:89:b6:e4:dc:2c:e8:80:a8:98:0a:d0:e3:0b:aa:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914016D20FC6BF392388EBF2192D8F5AA78B8FD3
Validity
Not Before: Feb 21 13:39:55 2025 GMT
Not After : Feb 20 13:44:55 2026 GMT
Subject: CN=980151D65D22D4CD4F15CDBF78D24B353AF97F22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:11:5c:3d:02:1d:2f:43:ab:2f:17:18:22:7c:
02:d6:ab:4f:82:07:ea:75:08:64:78:a8:4e:25:6a:
3f:86:4a:1b:4c:4d:39:43:c3:86:2c:4b:2b:cf:1a:
c5:e2:a3:a5:08:a8:d1:99:7c:7f:78:66:f5:83:4e:
7d:a2:d6:39:87:27:ef:b1:5c:e4:b9:8e:f1:89:a6:
f3:25:3b:bb:cb:b1:3d:18:ce:6f:7e:42:e0:89:a2:
93:25:7c:7d:9a:11:fb:f1:9b:e9:8e:c5:7e:75:2a:
59:92:b9:be:78:3e:14:3e:57:ca:b5:05:ba:a4:43:
7a:fc:35:9b:c5:60:5d:d2:9b:4d:d5:82:44:6b:66:
5f:cc:cf:62:b1:c7:cb:25:61:51:15:74:49:37:54:
6d:00:fc:71:37:3d:a1:33:f0:c2:5a:57:2e:a2:ec:
9f:e2:b5:00:0c:45:44:6b:fc:17:1b:43:d7:e1:52:
dc:b5:6a:5a:f1:60:61:aa:8b:8e:72:3b:93:ed:d1:
06:17:47:11:39:6d:cc:08:e6:ef:cc:9e:38:1f:16:
28:3e:c4:30:8d:c6:91:fd:cb:a1:e6:ba:ad:d5:5b:
39:5f:b1:f7:48:a1:bc:71:f4:96:5c:9c:e4:96:9d:
6c:fc:ba:ed:4a:6d:b0:64:61:d3:35:30:4e:f4:00:
f7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:01:51:D6:5D:22:D4:CD:4F:15:CD:BF:78:D2:4B:35:3A:F9:7F:22
X509v3 Authority Key Identifier:
keyid:91:40:16:D2:0F:C6:BF:39:23:88:EB:F2:19:2D:8F:5A:A7:8B:8F:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/914016D20FC6BF392388EBF2192D8F5AA78B8FD3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/914016D20FC6BF392388EBF2192D8F5AA78B8FD3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/323830343a346430633a383030303a3a2f33332d3333203d3e20323637343039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4d0c:8000::/33
Signature Algorithm: sha256WithRSAEncryption
7b:08:97:23:4b:b3:a5:58:fb:32:08:21:d5:52:6e:db:d0:de:
09:5d:69:ad:5c:4a:32:f0:a0:67:99:d0:1c:02:27:6b:5d:2e:
e0:e5:18:a9:ac:1a:78:10:de:dd:bd:bf:b8:6f:6b:36:94:8f:
44:e6:6b:94:a1:9e:ec:6d:1c:cd:70:81:06:69:39:e8:5d:ca:
a9:d4:66:6f:32:0b:4e:65:e6:c1:56:86:54:ad:8f:7d:fa:21:
2c:19:0f:fb:4e:2e:80:9e:70:58:94:b0:33:79:c2:50:4f:4e:
79:15:0d:62:37:20:71:8a:b1:9d:ce:e6:a8:47:23:6a:48:f9:
21:b2:6d:3a:26:5e:aa:fc:aa:32:c9:ca:90:4c:62:cb:b8:7a:
f7:81:be:75:5f:6b:78:53:07:00:58:45:a7:03:64:b0:2d:f1:
ee:39:4b:09:07:3f:bc:11:aa:d1:bb:6c:de:00:59:41:b3:83:
c6:28:e5:04:03:e3:b0:e4:94:70:20:31:c2:8f:80:3c:02:98:
51:b5:f4:61:cf:b4:01:8a:b4:6d:2f:9f:17:32:64:69:7f:79:
df:a3:8c:88:8a:fe:ef:69:b1:13:fb:15:c5:97:62:5c:a6:eb:
fe:f6:05:79:f6:35:3e:ce:04:4c:0d:9b:8a:09:8a:75:24:34:
c5:a8:8f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:00:12 2025 by rpki-client