Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/323830343a373238343a3a2f33322d3438203d3e20323730383538.roa
File: 323830343a373238343a3a2f33322d3438203d3e20323730383538.roa (raw, json)
Hash identifier: Qf0CNrjUsbdmhkKNMoXyxia+P1lU4AOdZ8UxLSukBGM=
Subject key identifier: B4:A9:1D:CA:6F:AA:7A:8E:E3:88:E5:BA:9B:9F:E4:F5:22:2C:1B:1F
Certificate issuer: /CN=B52B3B295A50F506C0AFD91CEFEC2C83C3DA0201
Certificate serial: 4B955911C763985B5C7FA4CC362262BC07E0A1E5
Authority key identifier: B5:2B:3B:29:5A:50:F5:06:C0:AF:D9:1C:EF:EC:2C:83:C3:DA:02:01
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B52B3B295A50F506C0AFD91CEFEC2C83C3DA0201.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/323830343a373238343a3a2f33322d3438203d3e20323730383538.roa
Signing time: Fri 15 Nov 2024 14:01:33 +0000
ROA not before: Fri 15 Nov 2024 13:56:33 +0000
ROA not after: Fri 14 Nov 2025 14:01:33 +0000
asID: 270858
IP address blocks: 2804:7284::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:95:59:11:c7:63:98:5b:5c:7f:a4:cc:36:22:62:bc:07:e0:a1:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B52B3B295A50F506C0AFD91CEFEC2C83C3DA0201
Validity
Not Before: Nov 15 13:56:33 2024 GMT
Not After : Nov 14 14:01:33 2025 GMT
Subject: CN=B4A91DCA6FAA7A8EE388E5BA9B9FE4F5222C1B1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8d:d9:fa:12:96:bb:ed:f9:42:ae:03:99:cd:
d3:c6:73:47:56:1a:0f:32:49:0d:a0:2f:07:58:40:
6d:05:7c:47:3f:7c:87:46:7e:82:7a:7c:a1:8a:00:
89:31:16:0b:1e:f6:94:d7:7e:02:04:2c:3c:35:98:
19:ba:12:66:43:ab:80:c0:00:74:8c:43:47:dd:bd:
f0:11:d4:c9:54:8c:6e:82:c7:62:dc:40:9a:67:ab:
53:8e:ae:b7:48:94:b3:21:8e:bf:f0:40:6a:e8:8c:
ad:f0:85:3d:38:6b:7e:19:9c:51:8c:10:4c:7d:b5:
94:51:65:53:57:82:2d:aa:a6:98:ed:2e:1b:f0:2a:
a0:d3:df:c8:72:0d:61:b9:99:c3:6e:cb:4d:3f:63:
47:f6:bf:42:13:10:a1:91:9c:65:92:22:92:5e:23:
9f:ad:8f:ba:0a:4b:dc:85:a9:df:d8:62:1a:9c:26:
b8:d2:3f:10:c6:26:3b:f5:ea:d9:55:f5:bf:db:a6:
eb:91:89:d8:ec:7b:c4:79:ec:70:97:97:c5:a5:52:
c4:27:c5:a7:f0:90:13:fe:d6:57:f5:4b:59:b6:34:
3b:28:65:ae:cd:70:79:26:66:af:5d:dc:8f:46:6a:
5f:91:fc:0e:a0:29:33:29:cd:42:ad:39:b8:6e:54:
cb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A9:1D:CA:6F:AA:7A:8E:E3:88:E5:BA:9B:9F:E4:F5:22:2C:1B:1F
X509v3 Authority Key Identifier:
keyid:B5:2B:3B:29:5A:50:F5:06:C0:AF:D9:1C:EF:EC:2C:83:C3:DA:02:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/B52B3B295A50F506C0AFD91CEFEC2C83C3DA0201.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B52B3B295A50F506C0AFD91CEFEC2C83C3DA0201.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/323830343a373238343a3a2f33322d3438203d3e20323730383538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7284::/32
Signature Algorithm: sha256WithRSAEncryption
53:74:27:4f:6f:16:c6:9e:9f:f9:dc:b7:0a:92:7e:a8:e5:70:
e5:78:0d:05:ac:90:d2:df:46:ef:c8:3d:2a:ba:e7:84:67:f2:
cb:c8:bc:f9:5c:c0:d9:47:04:e8:89:4a:f6:fc:20:42:94:e6:
33:df:b1:14:3e:cd:39:1e:96:04:59:d9:22:d9:44:82:d5:d5:
06:fb:58:52:c8:af:ab:75:bc:c2:71:15:bf:03:53:cd:7f:e4:
5b:37:35:de:6d:5b:8e:71:ea:d2:7a:ad:14:ae:f9:78:7a:50:
ac:b7:2b:c3:52:b4:01:aa:85:be:f1:43:fb:b9:ee:da:a4:30:
a7:72:be:51:56:27:2d:6a:4c:21:1e:4b:72:c8:53:b8:f7:a9:
93:26:c6:fb:a3:08:70:7a:ae:60:e0:17:63:20:80:c4:6f:87:
0e:f5:89:8d:da:54:19:f6:05:9d:b0:7c:70:15:48:59:b7:56:
d2:cc:ee:fe:38:9a:20:ec:0b:b8:04:e8:57:79:e5:af:d3:32:
62:ec:68:56:4b:38:21:19:da:6e:4e:05:08:64:23:a9:92:5d:
a4:32:b3:c1:57:92:0c:81:9e:23:86:b7:40:95:32:73:e3:98:
4d:85:31:81:46:9a:b7:64:b7:18:0a:38:05:a2:54:58:8e:6f:
4e:e2:3c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:15:26 2025 by rpki-client