Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/323830343a363065303a3a2f33322d3336203d3e20323639313937.roa
File: 323830343a363065303a3a2f33322d3336203d3e20323639313937.roa (raw, json)
Hash identifier: QidbNHqjD97FTP1O6Wf86WnfqLTi+TXeoPlQNizMPfQ=
Subject key identifier: 43:CF:5C:BE:01:D4:5F:CE:7C:BA:25:2E:DA:87:27:BF:8B:2A:4F:49
Certificate issuer: /CN=F2F3137FF0D447CA8693B97D01EE89634AEFD6ED
Certificate serial: 6853DEC30441CDC674F440C8853FD4EAD9AF54CF
Authority key identifier: F2:F3:13:7F:F0:D4:47:CA:86:93:B9:7D:01:EE:89:63:4A:EF:D6:ED
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2F3137FF0D447CA8693B97D01EE89634AEFD6ED.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/323830343a363065303a3a2f33322d3336203d3e20323639313937.roa
Signing time: Wed 13 Mar 2024 18:16:40 +0000
ROA not before: Wed 13 Mar 2024 18:11:40 +0000
ROA not after: Wed 12 Mar 2025 18:16:40 +0000
asID: 269197
IP address blocks: 2804:60e0::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:53:de:c3:04:41:cd:c6:74:f4:40:c8:85:3f:d4:ea:d9:af:54:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2F3137FF0D447CA8693B97D01EE89634AEFD6ED
Validity
Not Before: Mar 13 18:11:40 2024 GMT
Not After : Mar 12 18:16:40 2025 GMT
Subject: CN=43CF5CBE01D45FCE7CBA252EDA8727BF8B2A4F49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a3:2e:56:ef:a2:5c:d6:85:d9:f0:77:d4:c6:
11:b6:70:77:22:bd:d0:9a:f1:8b:66:14:94:9c:3d:
6a:0c:a9:2a:ef:d4:75:8d:4a:30:d3:5f:0b:1b:e8:
e1:0b:3d:35:da:47:2d:ad:53:73:b6:70:87:67:2d:
2c:0f:8f:87:9f:31:f5:3a:5b:a7:67:1c:e9:d8:b0:
58:c5:c5:89:86:22:ed:ba:be:6f:fc:b1:83:f6:cb:
f0:d9:89:fd:27:05:4b:1d:0e:ac:5a:8f:28:f1:71:
f4:4c:dd:2b:80:35:e9:2c:69:5d:ae:0c:ba:03:4c:
20:0d:04:6b:77:63:e9:e4:60:e6:4d:88:90:dd:37:
16:97:be:26:d6:30:6f:31:95:65:bf:55:0f:a0:6c:
e9:7f:e0:64:0b:04:d3:59:9b:48:e2:1e:6b:47:06:
3c:f4:15:87:dd:78:87:c2:c5:f5:93:a2:42:73:b5:
af:a5:04:77:3c:2e:f0:6c:67:aa:5d:50:fd:91:1f:
ad:df:86:fb:ef:bc:54:9b:34:f8:b0:f3:85:0b:19:
ee:a9:dc:a4:fc:eb:1b:06:1d:bf:bf:c6:aa:a8:cb:
4b:e2:31:be:64:a3:2b:0f:56:6d:d5:24:ea:70:af:
0c:5c:a4:fa:82:ba:2e:71:e8:5e:98:ee:39:04:9b:
82:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CF:5C:BE:01:D4:5F:CE:7C:BA:25:2E:DA:87:27:BF:8B:2A:4F:49
X509v3 Authority Key Identifier:
keyid:F2:F3:13:7F:F0:D4:47:CA:86:93:B9:7D:01:EE:89:63:4A:EF:D6:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/F2F3137FF0D447CA8693B97D01EE89634AEFD6ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2F3137FF0D447CA8693B97D01EE89634AEFD6ED.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/323830343a363065303a3a2f33322d3336203d3e20323639313937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:60e0::/32
Signature Algorithm: sha256WithRSAEncryption
09:59:b6:6e:37:b2:9c:4b:d2:10:02:de:31:d2:b7:cb:6b:52:
47:dd:0b:5c:bf:2b:3a:bc:73:c4:00:ad:75:3b:7f:8b:f4:c4:
1b:e6:c6:5a:50:18:28:2a:12:5b:ea:6a:b0:71:36:67:6c:7b:
6f:2c:ce:78:ea:31:04:cd:4e:a0:31:ab:fc:b1:3b:6c:88:b7:
9d:66:26:73:2b:0e:fc:08:ab:7b:98:41:ff:38:20:80:4f:cd:
d4:d5:f9:5b:a1:42:af:db:3c:d2:17:0b:6f:c2:40:12:70:f3:
8d:e5:08:a7:84:c3:42:9c:e7:87:ea:3f:a1:9d:27:37:9c:55:
df:f5:57:a5:1f:df:fe:47:20:cb:cc:8f:75:72:4c:19:43:69:
f6:c5:d9:e2:e6:95:98:8e:a4:1d:f9:45:e2:19:ab:6e:b5:c7:
93:ec:81:fc:01:07:98:da:85:59:e3:db:4b:f5:1a:9b:60:f3:
3b:c4:70:5d:13:d5:a2:ed:fd:f2:02:9c:71:b1:49:02:15:82:
f9:4c:7f:de:fe:93:a0:fc:26:cb:37:0d:56:14:3d:eb:cc:2e:
59:68:aa:56:d1:e6:7b:72:50:16:f4:92:2f:10:aa:29:98:a9:
da:a5:b1:a8:03:04:09:6b:c9:29:c9:73:4b:62:25:2f:a7:2c:
d3:62:de:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:30:34 2025 by rpki-client