Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/323830343a373762303a3a2f33322d3438203d3e20323731313933.roa
File: 323830343a373762303a3a2f33322d3438203d3e20323731313933.roa (raw, json)
Hash identifier: o0FHImv9LUH/T55C8f/BLhV4F+VJ673oDOT8yfUtLok=
Subject key identifier: 34:BA:D3:01:B3:B3:B4:DA:BC:4F:41:8A:0E:05:72:26:08:76:88:80
Certificate issuer: /CN=BF45F5442049793490E484E18AD1516C8FDC8087
Certificate serial: 193F7D91C583C0017A1B2F2F10AE60D3ED2DCF7F
Authority key identifier: BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/323830343a373762303a3a2f33322d3438203d3e20323731313933.roa
Signing time: Wed 05 Mar 2025 23:58:49 +0000
ROA not before: Wed 05 Mar 2025 23:53:49 +0000
ROA not after: Wed 04 Mar 2026 23:58:49 +0000
asID: 271193
IP address blocks: 2804:77b0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:3f:7d:91:c5:83:c0:01:7a:1b:2f:2f:10:ae:60:d3:ed:2d:cf:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF45F5442049793490E484E18AD1516C8FDC8087
Validity
Not Before: Mar 5 23:53:49 2025 GMT
Not After : Mar 4 23:58:49 2026 GMT
Subject: CN=34BAD301B3B3B4DABC4F418A0E05722608768880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8f:6b:2c:ff:1a:c0:96:00:eb:34:e4:96:3f:
1f:2e:58:ed:77:4b:c7:45:a4:61:f0:b5:a5:84:cd:
81:e2:38:7e:ff:12:c8:20:e0:d8:78:2f:28:53:c8:
96:47:45:5c:10:a8:c1:ae:ce:f3:cf:37:c7:d0:e1:
97:dd:f1:ec:72:fc:44:c0:6a:56:c4:9b:34:00:ea:
53:02:00:ef:55:9a:37:1f:bd:d8:14:b2:ba:d1:77:
3b:db:1d:bb:83:75:4a:d3:6a:b2:51:43:0d:92:03:
3c:3c:f0:94:e2:81:3c:d6:5d:a6:b0:9e:a4:98:9b:
9d:52:95:b4:78:ea:ac:8d:55:48:70:fd:be:c7:29:
9e:f3:b0:17:55:bc:d5:1b:39:46:a8:b4:30:bf:a5:
58:4d:98:90:f2:a9:27:cb:a4:f2:73:2e:c0:4e:af:
06:a0:6f:32:dc:53:f0:45:a0:94:aa:80:e3:95:00:
a6:ef:2d:6d:2f:6e:9c:f1:99:3c:68:24:45:69:f2:
16:3d:16:47:44:ae:26:de:4c:81:c4:ae:96:0f:f4:
d4:18:77:a7:03:d6:94:00:d9:0b:ef:db:e0:84:03:
14:c6:08:d1:d9:81:06:d2:62:77:4b:d5:54:f2:af:
bc:ce:df:e4:a5:dd:f7:02:2e:6f:2b:0e:7c:ec:44:
fb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BA:D3:01:B3:B3:B4:DA:BC:4F:41:8A:0E:05:72:26:08:76:88:80
X509v3 Authority Key Identifier:
keyid:BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/323830343a373762303a3a2f33322d3438203d3e20323731313933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:77b0::/32
Signature Algorithm: sha256WithRSAEncryption
6f:d3:d3:f8:25:3a:ba:e8:eb:4c:6d:40:e2:a2:e7:c5:1d:7a:
dd:df:28:89:0b:f4:56:75:e6:0b:2a:c3:90:b5:cf:33:9b:35:
73:a9:6b:89:44:7a:bf:99:9f:d6:49:c4:a3:d9:7a:39:b6:30:
fe:a0:2f:c5:41:1b:da:14:96:19:54:5d:0b:bb:37:6f:c0:4c:
53:75:18:50:b0:ef:7f:92:f9:5f:ac:e4:52:91:7f:58:69:52:
45:ac:3e:ae:15:df:66:78:fb:8d:5a:d3:6b:bb:b3:03:12:1d:
61:8b:c1:ff:0a:2c:32:da:6b:d5:6a:ad:77:76:59:ae:78:7f:
1e:40:49:48:e0:fa:d3:ce:9b:f3:b4:59:69:a0:6f:e6:09:7c:
f4:48:3f:d7:50:22:d4:09:c8:d9:f7:15:71:b2:82:7d:38:45:
2d:1a:ea:b6:4d:b5:de:9e:79:ae:eb:5f:40:1d:e7:3f:12:71:
42:b9:a7:32:a1:f3:4c:64:0a:ee:76:92:4a:2d:68:2f:39:df:
5a:8b:52:ab:4e:c3:48:c2:1a:fd:d8:02:37:a4:9f:39:4f:65:
4d:16:d6:57:83:ff:bc:8e:37:6a:6d:b0:6c:da:81:ce:83:1a:
50:f9:e2:90:f4:59:11:7f:22:bf:b1:70:52:c0:18:fe:66:f2:
3e:9d:72:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:26:39 2025 by rpki-client