
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a3a2f33322d3332203d3e20323638373933.roa
File: 323830343a356163303a3a2f33322d3332203d3e20323638373933.roa (raw, json)
Hash identifier: yfnfVddyHbULbaFzeKqPGmmLokmuA5/qlfdOo+93P1Y=
Subject key identifier: 06:3D:7B:1F:2B:A4:6F:C7:F0:1B:A3:C9:21:16:61:9F:E6:03:0D:E6
Certificate issuer: /CN=62542D04D7B086689C6E3FE7D77F27061824D478
Certificate serial: 12BEECD1DE070B796BE4DB82BF90175C882F2E10
Authority key identifier: 62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a3a2f33322d3332203d3e20323638373933.roa
Signing time: Tue 17 Dec 2024 12:47:32 +0000
ROA not before: Tue 17 Dec 2024 12:42:32 +0000
ROA not after: Tue 16 Dec 2025 12:47:32 +0000
asID: 268793
IP address blocks: 2804:5ac0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:be:ec:d1:de:07:0b:79:6b:e4:db:82:bf:90:17:5c:88:2f:2e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62542D04D7B086689C6E3FE7D77F27061824D478
Validity
Not Before: Dec 17 12:42:32 2024 GMT
Not After : Dec 16 12:47:32 2025 GMT
Subject: CN=063D7B1F2BA46FC7F01BA3C92116619FE6030DE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f2:1a:11:5e:89:60:3c:c4:c2:f0:17:39:3b:
32:80:4c:71:f5:6d:7e:3f:f9:f4:aa:50:d6:d9:d4:
e4:7b:ca:40:69:6f:6c:2a:d6:c3:93:95:2f:d9:62:
db:72:4f:9c:ef:df:cb:67:da:6b:4f:78:a8:bd:c9:
af:21:e7:c6:5e:23:b0:2c:28:dc:97:b7:50:5d:17:
88:87:42:40:68:ee:a0:2a:a9:29:b1:58:79:87:cb:
5f:f3:23:fb:30:37:e7:86:74:5f:41:c4:5c:87:b4:
b6:fb:40:97:bc:31:c3:fe:06:2d:94:bb:96:41:63:
5d:66:d4:88:2f:d8:c6:42:06:bc:b1:84:d5:39:4e:
10:b3:5f:6a:ab:2e:ae:e5:c1:c6:95:ab:4d:a6:88:
18:6d:17:18:03:c6:45:75:e3:29:b2:4f:3a:e6:7f:
59:77:2d:17:03:e3:7c:f3:fa:97:90:40:2f:2f:f4:
60:59:7d:8f:d0:24:ea:8e:ad:3c:71:df:4e:e9:40:
0d:b0:76:23:c0:60:6c:75:ba:8e:6e:bd:df:d3:7d:
d6:4e:ed:a9:55:9a:8e:2c:88:10:3f:88:b4:44:5a:
43:24:c9:eb:ae:d9:81:c7:85:e0:34:e5:8c:0f:3d:
8e:19:0a:cb:62:ec:52:b5:98:7c:04:97:0b:e5:8a:
23:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3D:7B:1F:2B:A4:6F:C7:F0:1B:A3:C9:21:16:61:9F:E6:03:0D:E6
X509v3 Authority Key Identifier:
keyid:62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a3a2f33322d3332203d3e20323638373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5ac0::/32
Signature Algorithm: sha256WithRSAEncryption
27:d4:0a:6b:24:4b:2f:fb:4e:8d:4b:ad:33:e0:9a:a6:be:f6:
e4:7c:ee:79:93:6d:10:51:2a:07:3c:5d:81:82:95:c6:16:67:
bf:2c:25:d6:60:ba:2e:cf:9c:5a:bb:05:47:e3:57:1d:6f:22:
5a:29:d1:d4:e7:5a:59:c5:24:e4:8d:2b:cf:ba:69:81:9a:15:
38:a5:63:66:4e:01:9c:90:12:c1:e3:45:67:bd:e1:0c:e4:7e:
51:fb:8f:83:43:c7:6e:09:0b:2e:9b:84:a3:61:c8:34:e7:47:
7e:9b:22:d5:ed:ea:29:f2:c4:aa:b1:9f:66:3d:49:51:e2:15:
cb:89:de:a6:c9:ce:ba:9c:b2:07:f0:00:df:94:a2:3e:ee:9a:
91:13:8e:5e:aa:86:30:c9:01:10:a3:95:2e:e5:97:24:bb:35:
7d:f5:9a:e1:f1:bb:3b:08:d9:5f:44:1a:01:63:90:ed:d9:96:
4a:eb:0f:a5:f7:49:de:ed:ad:e8:d1:c3:83:a2:2a:85:bd:05:
44:48:23:4a:31:ad:99:53:cd:e2:e1:86:78:48:0a:01:6f:40:
bd:2c:02:c0:70:8e:d8:06:e3:da:f7:c9:18:b3:f7:93:2a:7a:
bd:12:be:c7:ce:ac:95:b0:b9:c9:c6:b3:cb:1c:f1:12:0a:ab:
9b:d7:6c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:10:52 2025 by rpki-client