Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/323830343a336130383a3a2f33332d3333203d3e20323636303636.roa
File: 323830343a336130383a3a2f33332d3333203d3e20323636303636.roa (raw, json)
Hash identifier: PIMMH1INCgqPc0U+wz90eaoaJ6UfvriSgLRq2Tvfo/w=
Subject key identifier: 51:B9:72:F2:13:61:4E:52:5C:B1:DF:72:05:D4:F5:94:0A:1F:CE:E4
Certificate issuer: /CN=7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0
Certificate serial: 21AD209A075BED5C33EF766614E98DE15C482D3A
Authority key identifier: 7F:2F:B0:D3:B7:92:75:71:94:8A:2C:39:EF:13:D9:F9:C3:C3:23:F0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/323830343a336130383a3a2f33332d3333203d3e20323636303636.roa
Signing time: Mon 03 Mar 2025 22:11:50 +0000
ROA not before: Mon 03 Mar 2025 22:06:50 +0000
ROA not after: Mon 02 Mar 2026 22:11:50 +0000
asID: 266066
IP address blocks: 2804:3a08::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:ad:20:9a:07:5b:ed:5c:33:ef:76:66:14:e9:8d:e1:5c:48:2d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0
Validity
Not Before: Mar 3 22:06:50 2025 GMT
Not After : Mar 2 22:11:50 2026 GMT
Subject: CN=51B972F213614E525CB1DF7205D4F5940A1FCEE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f4:ec:84:cf:fa:0a:6b:e5:12:59:94:53:88:
da:93:39:4a:f9:9c:96:f1:58:13:25:a7:04:dc:d8:
2e:93:d2:e2:51:d5:4a:82:8c:1d:2d:88:46:2d:08:
fb:c6:9b:af:86:9d:a9:84:c0:b5:b3:96:0d:98:cd:
02:12:25:95:4d:40:ff:c4:e3:b3:70:59:6e:e0:0f:
ae:43:3e:5e:00:58:b8:4a:c7:a5:1c:da:1f:7a:26:
a7:93:ef:62:54:e9:a3:6a:9c:0b:2b:e8:ca:d5:8a:
de:13:0e:11:90:2d:a9:04:c6:fa:79:73:eb:97:05:
93:51:09:b9:24:8a:42:1e:b0:2e:5b:25:96:e1:b8:
bf:4d:6e:c6:da:d2:b0:51:06:f4:03:22:b4:cc:3b:
0b:ca:d9:bc:70:a0:a1:42:bb:89:89:4d:6f:29:0e:
f9:b4:b5:b7:89:9b:b9:89:d3:64:87:13:d8:11:70:
ea:d2:52:fd:46:27:2b:df:68:b2:86:d4:7a:07:b8:
bb:2a:0c:e2:99:37:e4:4e:54:a0:91:81:22:4d:40:
04:de:99:5f:a2:3f:24:87:48:f9:f3:00:bc:26:72:
d2:2e:b0:53:e1:d9:02:cd:e6:77:ea:37:e0:96:88:
9b:17:80:1f:41:26:68:e2:e3:cd:8d:64:6f:7e:72:
f4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B9:72:F2:13:61:4E:52:5C:B1:DF:72:05:D4:F5:94:0A:1F:CE:E4
X509v3 Authority Key Identifier:
keyid:7F:2F:B0:D3:B7:92:75:71:94:8A:2C:39:EF:13:D9:F9:C3:C3:23:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/323830343a336130383a3a2f33332d3333203d3e20323636303636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3a08::/33
Signature Algorithm: sha256WithRSAEncryption
65:25:08:c3:c4:b6:86:50:7c:44:2e:77:2a:0e:b8:c8:8f:c6:
99:f3:96:9f:9d:f5:f9:38:a8:74:9e:fa:b2:07:e1:6e:47:07:
d3:83:3a:77:d2:08:b4:19:c2:cc:b7:9a:16:c8:a3:cd:60:6c:
b5:96:26:3a:cf:bb:2b:f9:cc:51:06:f8:f8:fc:e5:dd:19:d9:
de:96:5c:3a:2d:c0:0e:de:94:54:e4:b9:f5:43:de:81:d3:13:
7a:02:a0:bd:3d:df:98:8f:15:76:5c:ba:9a:08:af:59:47:a8:
69:f6:37:ae:5a:67:99:50:51:a3:2f:80:f3:96:b2:b0:1f:7e:
c6:2e:45:c1:85:4b:d2:cf:f6:77:fb:72:66:34:49:a8:01:c9:
8b:10:d9:59:59:0e:ec:55:db:47:a8:79:2b:ff:48:26:42:7e:
fe:52:79:bd:53:cc:f2:fc:0f:43:f6:2d:82:31:84:33:c1:e8:
0f:c9:f4:26:ae:83:8b:78:ff:b1:b8:88:7b:b7:16:fd:d1:db:
2c:bf:69:59:ea:1a:4d:47:91:1c:00:5f:22:04:a7:ad:00:11:
16:ab:e7:29:27:3b:6e:84:d1:fc:a8:01:da:e6:43:f9:85:13:
41:3a:56:f7:47:be:ea:cc:ef:f1:57:c7:cd:27:a0:80:dc:e1:
33:b5:53:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:33:13 2025 by rpki-client