Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/323830343a346430633a3a2f33322d313238203d3e20323637343039.roa
File: 323830343a346430633a3a2f33322d313238203d3e20323637343039.roa (raw, json)
Hash identifier: Z/cIOWJ5eBP7lpXjelyxj5JgvviuGIIsXOhO73dNghg=
Subject key identifier: 03:71:04:5D:53:14:CA:FE:AA:11:27:4C:FC:F9:B7:BD:F0:E3:82:E6
Certificate issuer: /CN=52E3A728AE6CCA1CEB686AFD28166624B1529CF5
Certificate serial: 764DB6262BE70B313B586F0F79FE9D8C85A83341
Authority key identifier: 52:E3:A7:28:AE:6C:CA:1C:EB:68:6A:FD:28:16:66:24:B1:52:9C:F5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52E3A728AE6CCA1CEB686AFD28166624B1529CF5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/323830343a346430633a3a2f33322d313238203d3e20323637343039.roa
Signing time: Mon 17 Feb 2025 18:09:14 +0000
ROA not before: Mon 17 Feb 2025 18:04:14 +0000
ROA not after: Mon 16 Feb 2026 18:09:14 +0000
asID: 267409
IP address blocks: 2804:4d0c::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:4d:b6:26:2b:e7:0b:31:3b:58:6f:0f:79:fe:9d:8c:85:a8:33:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52E3A728AE6CCA1CEB686AFD28166624B1529CF5
Validity
Not Before: Feb 17 18:04:14 2025 GMT
Not After : Feb 16 18:09:14 2026 GMT
Subject: CN=0371045D5314CAFEAA11274CFCF9B7BDF0E382E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:42:25:d1:a3:25:51:68:a6:19:43:72:b2:14:
b2:69:c9:32:6b:3b:fa:60:01:1f:cd:45:3a:b3:67:
af:d1:3f:fa:14:f8:b4:23:73:ac:06:9b:59:fb:6b:
87:0d:1d:e3:ed:31:a3:3e:aa:e6:b4:8b:7f:ba:0d:
bb:2d:77:b3:d5:5d:9f:45:aa:9c:44:f5:67:05:42:
63:ff:7e:d2:d2:7b:bf:4c:7e:a9:fa:36:76:3e:ab:
da:7d:44:fb:ed:66:da:9c:63:b4:8f:37:78:a3:ae:
5c:bc:98:55:7a:7c:51:67:c8:13:0a:72:2c:db:7c:
a3:45:73:c5:61:54:ae:80:69:29:c0:2c:09:e5:61:
fc:91:0b:75:8b:6c:09:06:47:cd:1b:e3:8c:22:ed:
ac:62:97:43:13:b5:3f:ef:57:9c:fa:26:24:bf:88:
15:64:d4:d1:74:5d:5e:77:fc:89:d8:2e:0e:2f:93:
48:71:d2:9f:30:be:d2:50:5d:e3:db:12:c9:63:29:
31:cd:27:12:06:cf:81:fb:c1:35:74:3b:c1:9e:3d:
8c:e4:39:27:cc:a9:6d:62:df:05:ed:18:7d:3e:3a:
25:64:c7:60:a6:98:a0:4a:88:59:f1:6d:30:1c:c9:
24:6f:2e:64:49:a9:e2:4e:26:4e:45:66:84:92:8a:
3b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:71:04:5D:53:14:CA:FE:AA:11:27:4C:FC:F9:B7:BD:F0:E3:82:E6
X509v3 Authority Key Identifier:
keyid:52:E3:A7:28:AE:6C:CA:1C:EB:68:6A:FD:28:16:66:24:B1:52:9C:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/52E3A728AE6CCA1CEB686AFD28166624B1529CF5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52E3A728AE6CCA1CEB686AFD28166624B1529CF5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/323830343a346430633a3a2f33322d313238203d3e20323637343039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4d0c::/32
Signature Algorithm: sha256WithRSAEncryption
33:7e:2a:9c:c7:fa:c5:e1:81:12:c6:ac:9c:8c:c7:48:ad:66:
37:56:cc:02:c5:01:99:d3:3e:63:87:db:4f:88:4d:cb:9f:77:
00:11:b0:51:b9:d8:a0:8e:94:5a:ac:73:9a:50:18:36:25:d4:
ff:cf:14:e5:03:bf:e3:5b:12:c5:6e:aa:fa:7b:f7:80:e4:36:
76:9c:a9:c0:f3:96:42:16:83:30:06:51:66:5e:a9:59:3a:9d:
d1:a4:c5:f7:d7:15:78:27:07:9f:1c:80:35:ad:dd:13:c8:02:
e4:85:8b:95:7a:b2:cf:87:52:0a:fa:cd:5d:40:2f:eb:6d:f4:
48:3a:65:e5:3b:a2:d3:4f:04:f2:a6:e4:14:12:b5:1b:d0:a1:
90:c7:6b:3b:de:72:55:bc:3c:e7:6d:a6:3e:be:52:95:1e:1c:
70:68:54:1f:6e:ea:d2:07:5e:a8:61:31:fa:71:24:70:a2:62:
cf:bc:19:88:6c:87:cc:84:bb:d3:32:f4:35:b1:1a:85:ad:68:
9e:d4:8d:5b:06:e5:fa:c8:09:0c:db:7a:d8:30:be:2a:15:2f:
49:56:13:e3:96:97:10:a3:42:d9:06:ef:f6:4a:68:2f:af:4d:
f0:d8:ee:c5:33:53:dd:b8:17:fc:5a:5a:f3:d7:20:4f:91:e5:
a0:9d:e1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:24:42 2025 by rpki-client