Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/323830343a346437343a3a2f33322d3332203d3e20323638313937.roa
File: 323830343a346437343a3a2f33322d3332203d3e20323638313937.roa (raw, json)
Hash identifier: QiHXIPvyT6/IfpATWOEv0gh+8u76RPdZji0DpEitynk=
Subject key identifier: 35:B7:23:9C:83:B4:21:20:EE:57:8F:3E:72:94:AC:54:AC:F3:7F:6C
Certificate issuer: /CN=BDFF256F0AD0E81FD186456828CFF572637DF2E5
Certificate serial: 3D7E72D49F5882B46AF43661C2FD43855825D290
Authority key identifier: BD:FF:25:6F:0A:D0:E8:1F:D1:86:45:68:28:CF:F5:72:63:7D:F2:E5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDFF256F0AD0E81FD186456828CFF572637DF2E5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/323830343a346437343a3a2f33322d3332203d3e20323638313937.roa
Signing time: Mon 02 Dec 2024 22:55:54 +0000
ROA not before: Mon 02 Dec 2024 22:50:54 +0000
ROA not after: Mon 01 Dec 2025 22:55:54 +0000
asID: 268197
IP address blocks: 2804:4d74::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:7e:72:d4:9f:58:82:b4:6a:f4:36:61:c2:fd:43:85:58:25:d2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDFF256F0AD0E81FD186456828CFF572637DF2E5
Validity
Not Before: Dec 2 22:50:54 2024 GMT
Not After : Dec 1 22:55:54 2025 GMT
Subject: CN=35B7239C83B42120EE578F3E7294AC54ACF37F6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:83:6a:a2:da:58:e5:db:41:96:6e:6d:45:1c:
76:06:7b:d8:eb:98:a7:ff:30:ce:3d:87:7a:0c:65:
5e:ea:5b:13:b7:0b:fe:06:91:9d:60:94:f8:7e:45:
41:49:22:4f:0e:98:33:28:36:e8:11:e2:9f:a0:97:
9d:74:20:a7:3f:07:2f:e8:5d:55:59:de:16:7b:d1:
8b:3d:b7:c2:4b:c3:53:bc:ed:4f:80:d4:ba:37:7a:
44:c8:0b:ba:3a:c3:5a:e2:1c:1a:88:e0:84:94:37:
1c:0d:31:a1:df:b8:64:f0:a5:40:9a:ca:e0:95:4a:
cc:f5:07:26:d8:d0:2e:eb:31:88:e1:5d:02:7b:f5:
24:94:d6:8d:5c:b7:cd:f1:f6:2e:2c:a5:8e:ad:1c:
68:2b:89:8c:3f:2d:34:d9:d3:75:e1:13:7c:04:a3:
21:1f:9b:37:04:77:56:da:88:6b:7d:b3:2d:a4:15:
68:f6:28:f2:34:d0:42:64:2e:26:6a:28:95:39:25:
0c:b8:39:96:c9:ef:34:22:26:9a:ee:56:5c:aa:ac:
48:45:b4:df:b6:91:1b:8a:76:96:a4:ba:f9:35:eb:
fd:30:e9:cd:70:94:cf:f8:3e:12:39:87:5b:a0:2b:
1d:9e:db:37:13:0a:9b:3e:98:1e:cb:a1:4e:4b:14:
af:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B7:23:9C:83:B4:21:20:EE:57:8F:3E:72:94:AC:54:AC:F3:7F:6C
X509v3 Authority Key Identifier:
keyid:BD:FF:25:6F:0A:D0:E8:1F:D1:86:45:68:28:CF:F5:72:63:7D:F2:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/BDFF256F0AD0E81FD186456828CFF572637DF2E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDFF256F0AD0E81FD186456828CFF572637DF2E5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/323830343a346437343a3a2f33322d3332203d3e20323638313937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4d74::/32
Signature Algorithm: sha256WithRSAEncryption
ab:d8:0d:e4:f0:9c:70:0e:02:49:b6:b2:d0:14:a6:4b:1b:5e:
75:19:c1:73:f7:1b:43:ae:9e:2a:d9:57:6e:2c:0d:80:ea:8b:
46:23:9c:a6:b9:91:ea:15:52:c1:20:1c:0d:09:b2:3b:6f:03:
f4:94:a7:9b:ca:47:81:bf:90:2e:bd:eb:a3:af:d0:f5:ed:94:
c7:87:29:d3:d1:0b:db:f0:db:bb:8e:85:a0:bb:bb:e0:c0:9f:
06:fb:ec:d1:af:fa:00:c7:98:67:9c:72:b2:80:5b:c0:e4:37:
b4:07:a8:9c:c8:6c:d2:92:98:f2:a3:81:65:e8:ab:d7:2a:a3:
8f:06:f8:5b:e8:01:33:54:47:2a:8a:b4:31:22:2e:32:f9:41:
ed:4e:e2:34:dc:c8:9d:f0:09:55:e8:82:e8:87:07:6d:40:2a:
61:b4:86:de:1a:6b:d8:f1:82:be:17:ba:c3:2b:a2:cb:dc:fa:
d5:8d:26:e9:1d:51:f4:5a:9c:bf:2f:15:5e:c4:ea:e4:ba:f7:
76:e2:1d:87:84:23:1f:9b:a6:c4:3e:2a:dc:9d:2e:de:ed:03:
26:55:8e:f7:1c:07:de:e0:0b:4c:97:e1:c8:d5:24:a1:b6:18:
40:ca:40:b1:65:07:c4:ab:ed:82:e9:69:bb:9e:1d:45:f9:40:
0f:03:28:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 22:59:10 2025 by rpki-client