Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/323830343a373233303a3a2f33322d3438203d3e20323730383338.roa
File: 323830343a373233303a3a2f33322d3438203d3e20323730383338.roa (raw, json)
Hash identifier: 8Q0j1lTtgEWTeidT42m/MaKKKMdbqnM2l9pI0A3eweM=
Subject key identifier: 06:BB:41:A6:6D:AC:8E:DE:F7:B2:DC:7A:AF:B7:AB:3D:07:BD:1F:B9
Certificate issuer: /CN=3A5A1FBDFBAC3B0E471D8073BA4635F17B266048
Certificate serial: 76F395B1B2494D9D5C6DF934F08FF067330EEF7B
Authority key identifier: 3A:5A:1F:BD:FB:AC:3B:0E:47:1D:80:73:BA:46:35:F1:7B:26:60:48
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/323830343a373233303a3a2f33322d3438203d3e20323730383338.roa
Signing time: Fri 21 Mar 2025 11:51:28 +0000
ROA not before: Fri 21 Mar 2025 11:46:28 +0000
ROA not after: Fri 20 Mar 2026 11:51:28 +0000
asID: 270838
IP address blocks: 2804:7230::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:f3:95:b1:b2:49:4d:9d:5c:6d:f9:34:f0:8f:f0:67:33:0e:ef:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A5A1FBDFBAC3B0E471D8073BA4635F17B266048
Validity
Not Before: Mar 21 11:46:28 2025 GMT
Not After : Mar 20 11:51:28 2026 GMT
Subject: CN=06BB41A66DAC8EDEF7B2DC7AAFB7AB3D07BD1FB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bb:0c:11:32:65:d7:63:88:7b:eb:bc:ce:05:
05:c7:d9:9b:c1:51:ba:b7:fa:c9:d7:d2:7d:60:04:
97:01:bb:b6:b8:6f:96:53:cd:f2:84:8f:bf:d6:6b:
4f:1d:10:e9:09:e0:9c:c1:d6:02:b2:eb:0c:4b:ea:
a1:6d:82:c7:d0:4e:7a:c4:4e:fe:f2:e7:97:9f:dd:
d6:c6:5f:a3:c8:c0:9d:f9:49:05:b7:13:67:3b:33:
17:c3:59:38:69:a1:85:dc:90:85:2a:59:96:67:25:
96:e3:ec:c0:b3:cc:f2:ab:9c:5a:72:86:3f:f7:eb:
c9:09:3c:32:08:b4:a8:d2:c3:9c:d9:99:0e:25:eb:
cd:df:75:4f:01:e1:d2:d1:4b:d7:89:96:58:ef:18:
56:0f:73:c3:bd:93:20:38:d7:4b:bc:52:68:b5:92:
23:27:df:d1:3d:99:6b:a6:5c:3e:e7:d6:15:2b:96:
c7:d2:1a:14:f3:e1:31:9f:b3:bd:12:44:8e:58:dd:
4f:ac:87:3e:21:fd:ee:88:c1:49:c1:fa:7d:54:62:
09:99:74:d4:ff:95:01:59:06:dc:8e:c7:08:ff:a5:
8e:cc:9b:4e:6f:d7:c0:de:b8:43:bd:59:80:bf:56:
89:59:94:ea:ab:8f:3a:60:d4:10:24:f3:15:5b:3f:
56:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BB:41:A6:6D:AC:8E:DE:F7:B2:DC:7A:AF:B7:AB:3D:07:BD:1F:B9
X509v3 Authority Key Identifier:
keyid:3A:5A:1F:BD:FB:AC:3B:0E:47:1D:80:73:BA:46:35:F1:7B:26:60:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/323830343a373233303a3a2f33322d3438203d3e20323730383338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7230::/32
Signature Algorithm: sha256WithRSAEncryption
76:bb:28:e9:0e:7c:97:72:24:ff:36:76:55:96:fe:a0:d4:48:
03:60:7e:3a:37:34:e6:4c:fa:90:ee:7a:91:23:5a:4a:f0:2a:
41:18:43:69:db:dd:f3:bf:1e:49:f9:62:ef:a8:ba:bb:51:93:
fd:95:4a:2d:34:a5:f4:55:86:b3:1a:ae:20:03:12:5b:47:a7:
bf:f7:1e:df:52:38:3b:bf:86:5c:2b:30:1e:69:9c:be:80:7a:
ef:1c:95:dd:f4:c2:85:55:87:3b:16:25:05:92:42:7f:40:17:
f0:6d:7c:05:4c:6a:8d:7e:57:32:4a:9a:9e:8e:68:93:8f:6f:
b2:4b:fe:18:bf:c6:04:8a:a4:15:5b:46:23:bf:74:18:0c:28:
cb:a3:63:a9:7e:54:2d:1a:42:91:0c:da:67:b0:16:1d:f4:9b:
79:ab:63:62:17:d5:ec:ca:fc:2c:f0:4f:f3:12:27:09:62:ac:
77:2d:18:21:57:f6:d7:26:0b:35:90:8a:5c:e3:4b:aa:59:bb:
0b:6e:79:61:00:80:fa:35:95:64:f1:c1:41:64:fe:5b:1d:c8:
d0:b0:ad:36:93:4f:26:41:1d:9a:bd:a7:eb:6c:6c:7e:aa:83:
1f:2f:17:86:69:37:73:e9:f6:90:2a:09:95:ec:84:8b:f7:51:
64:49:5f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:35:28 2025 by rpki-client