Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/323830343a363862633a3a2f33332d3333203d3e20323639373132.roa
File: 323830343a363862633a3a2f33332d3333203d3e20323639373132.roa (raw, json)
Hash identifier: iTBCz5d+r1yl9GxrApG+0Q07QV52IXQ9V+n1/n4ToQk=
Subject key identifier: 5B:92:05:FB:AB:AF:E8:6F:BF:AB:68:02:42:59:98:13:08:03:2A:D5
Certificate issuer: /CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2
Certificate serial: 1D416CBF8BBE7AC8C241B89B1BF0B832A774E585
Authority key identifier: 9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/323830343a363862633a3a2f33332d3333203d3e20323639373132.roa
Signing time: Mon 24 Feb 2025 17:20:09 +0000
ROA not before: Mon 24 Feb 2025 17:15:09 +0000
ROA not after: Mon 23 Feb 2026 17:20:09 +0000
asID: 269712
IP address blocks: 2804:68bc::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:41:6c:bf:8b:be:7a:c8:c2:41:b8:9b:1b:f0:b8:32:a7:74:e5:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2
Validity
Not Before: Feb 24 17:15:09 2025 GMT
Not After : Feb 23 17:20:09 2026 GMT
Subject: CN=5B9205FBABAFE86FBFAB68024259981308032AD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4c:24:ac:63:3a:5e:a0:27:fd:c9:51:2c:3e:
18:fd:8e:b8:e6:03:85:72:46:88:53:a4:63:37:ae:
11:0b:92:ec:3e:05:b8:89:9e:62:49:5d:fe:88:3d:
d1:ff:7a:8a:8f:14:d3:cb:67:bc:c2:32:b1:d9:05:
c5:5b:ff:a1:40:9f:ec:f4:70:1f:44:8b:f7:c9:90:
93:07:65:bc:f5:dd:00:cc:ab:9a:de:64:6e:ff:b4:
23:6f:89:7a:a5:1b:ab:68:ef:86:85:a1:97:98:26:
ef:04:9d:34:25:6d:88:1c:53:e2:ec:61:51:0e:0e:
46:9e:e8:4c:59:66:12:ea:dc:38:1b:7b:38:10:1b:
cc:59:5f:ca:64:7d:66:a6:b0:f6:a3:42:7b:64:3b:
18:a0:05:fa:0c:4d:e6:4d:17:56:33:97:da:98:7c:
83:e2:83:0f:26:f6:fe:2b:48:c5:0c:55:fb:44:1e:
20:18:fe:ac:47:f9:ef:53:eb:af:be:7c:c9:8a:55:
16:f5:e3:72:8f:19:26:19:a7:03:a2:5c:b7:63:2f:
63:53:83:fc:d1:52:ab:bb:6d:d9:06:26:16:3e:be:
e1:e6:53:95:e5:fb:04:5d:9a:bb:f9:cf:e7:d0:2f:
69:03:c5:b5:13:3a:d8:fd:49:47:8b:4b:b1:99:f4:
d8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:92:05:FB:AB:AF:E8:6F:BF:AB:68:02:42:59:98:13:08:03:2A:D5
X509v3 Authority Key Identifier:
keyid:9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/323830343a363862633a3a2f33332d3333203d3e20323639373132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:68bc::/33
Signature Algorithm: sha256WithRSAEncryption
5c:bb:2d:af:7f:a0:2e:7e:27:0a:50:4c:bd:b6:9a:eb:a4:22:
ff:73:c0:89:57:43:d0:93:3a:1f:02:a5:01:49:3a:af:e9:87:
a2:85:49:8e:15:63:87:8b:77:3a:c8:66:2f:69:ab:7d:59:dd:
0a:d3:0d:1a:fc:7f:54:dd:96:56:9e:ab:85:1d:f6:66:d5:12:
97:5d:f9:96:89:14:d5:9c:ff:29:db:28:86:04:6b:10:d6:14:
06:59:5e:01:c8:52:c1:a4:34:73:20:1e:33:5d:a1:9b:30:5a:
65:36:8b:c8:cc:e4:0f:9e:9c:6c:41:15:04:b9:6f:f6:f3:6a:
31:c4:c5:c6:6e:47:c9:28:28:7b:52:44:9e:8a:cc:c1:99:73:
7e:41:cd:42:60:c2:3c:04:64:2c:c0:3c:bb:ab:0a:27:73:a7:
39:c9:c4:7a:c5:1b:33:cb:1d:70:bb:f3:2b:81:78:6c:78:dd:
a5:a9:56:99:6d:cf:3d:47:89:27:46:f5:3b:e2:c1:71:84:30:
53:f7:6c:b9:f0:ed:06:1c:8a:ee:14:8c:86:77:4b:fb:f6:6a:
23:a0:23:7d:9b:62:41:f9:75:d3:c8:40:85:78:e8:c3:48:d5:
c6:ce:0d:2e:d1:0d:da:ec:17:1b:41:0e:20:58:7f:44:89:a8:
a8:c3:1b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:32:19 2025 by rpki-client