Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/323830343a363862633a383030303a3a2f33342d3334203d3e20323639373132.roa
File: 323830343a363862633a383030303a3a2f33342d3334203d3e20323639373132.roa (raw, json)
Hash identifier: eDMbu5JgJXPFn5bZeUP4M+4QMk6n3WlnaYEHDfJu8CE=
Subject key identifier: 9C:D0:D0:0C:D9:D2:B9:1D:88:2B:73:7F:91:52:1E:39:CC:8C:07:C9
Certificate issuer: /CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2
Certificate serial: 7B5D61BE7F7DD023CC75154A6A3720FB78CFB389
Authority key identifier: 9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/323830343a363862633a383030303a3a2f33342d3334203d3e20323639373132.roa
Signing time: Mon 24 Feb 2025 17:22:55 +0000
ROA not before: Mon 24 Feb 2025 17:17:55 +0000
ROA not after: Mon 23 Feb 2026 17:22:55 +0000
asID: 269712
IP address blocks: 2804:68bc:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:5d:61:be:7f:7d:d0:23:cc:75:15:4a:6a:37:20:fb:78:cf:b3:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2
Validity
Not Before: Feb 24 17:17:55 2025 GMT
Not After : Feb 23 17:22:55 2026 GMT
Subject: CN=9CD0D00CD9D2B91D882B737F91521E39CC8C07C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7f:21:11:89:5a:bf:b1:28:ee:b5:bc:7e:c4:
d2:c7:56:66:44:85:c5:ed:49:e4:5c:d2:31:1c:2d:
0b:72:41:2d:40:e9:fa:b7:ab:6f:2b:31:6f:c3:86:
bf:17:f7:b1:df:b1:c0:99:d7:ce:ad:78:8f:2f:fb:
12:9f:3b:d1:61:5c:21:53:b0:26:bb:d9:18:fa:fa:
4f:b2:78:23:08:3a:7b:da:53:73:2f:3e:c9:f0:09:
69:e8:3c:14:16:63:e4:64:03:c1:52:e4:1d:7b:18:
ea:c0:ea:8a:82:28:b5:b1:88:67:98:d3:e1:12:dd:
a6:9c:9b:e7:91:32:78:52:1c:a8:aa:df:a3:9e:8c:
f2:76:3e:ad:57:a7:6e:c9:4c:5c:47:f8:ea:79:8a:
42:f9:e7:e7:7f:2b:1d:d2:73:1c:ca:a9:bd:d0:9c:
f5:87:fa:4d:7e:02:8c:5b:81:8f:da:34:ed:08:dd:
05:60:9c:cf:a8:fb:ad:bc:ee:ed:fd:ba:25:a3:4c:
a0:8c:33:6f:6e:19:a1:e5:27:d2:07:90:fb:8a:ec:
28:73:7a:2c:33:9f:73:88:eb:70:0c:27:37:e8:90:
00:10:50:23:18:04:63:a3:55:55:fe:14:ea:78:60:
2f:47:56:0c:8e:63:24:ce:d3:e9:bd:66:7d:8b:37:
f1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D0:D0:0C:D9:D2:B9:1D:88:2B:73:7F:91:52:1E:39:CC:8C:07:C9
X509v3 Authority Key Identifier:
keyid:9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/323830343a363862633a383030303a3a2f33342d3334203d3e20323639373132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:68bc:8000::/34
Signature Algorithm: sha256WithRSAEncryption
bd:f8:34:be:21:b1:2a:8a:03:a1:43:06:7f:7e:4e:cd:61:d6:
ff:12:6a:2a:67:9b:fe:e4:56:21:e0:b7:43:96:e1:09:77:5f:
02:1f:0a:72:b1:42:70:e3:d8:c3:8d:d8:d9:fd:37:93:e1:bc:
35:93:f9:51:b3:f2:49:0f:fe:67:54:4e:3d:1c:31:3a:32:16:
bd:c0:9c:7e:d1:d5:63:81:23:65:4a:1d:cf:ad:66:21:ae:21:
30:ca:10:5e:36:5b:c9:a7:41:ee:7e:75:2e:62:40:b3:87:89:
9f:e7:85:9f:54:93:78:eb:8c:4b:b4:12:2e:c5:db:6a:58:c3:
a7:55:80:7f:22:ae:53:2a:52:8b:51:1f:31:fd:88:f6:17:9f:
63:3a:1b:90:f9:85:29:da:a2:99:c4:6c:02:bc:a5:75:52:db:
d9:62:ba:70:74:70:93:f9:6d:81:07:9e:14:3a:09:06:4d:9e:
26:e8:06:14:0a:27:bd:6a:0d:84:ec:40:42:23:aa:c1:49:e6:
90:e5:09:b2:c8:ca:ff:29:bf:76:bc:cf:b6:d5:29:1a:57:90:
41:1a:b1:08:dd:5f:49:dc:c5:46:56:dd:9a:fe:f5:b7:f1:20:
c5:86:a2:4e:b7:fc:12:22:87:67:30:fe:6c:1a:dd:9c:89:9e:
20:c9:f2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:34:39 2025 by rpki-client