Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/323830343a346331303a3a2f33322d3336203d3e20323637333437.roa
File: 323830343a346331303a3a2f33322d3336203d3e20323637333437.roa (raw, json)
Hash identifier: Oc3ZRqfb4OKd0nj9dkr6EXXmVriv8a8rEB1Dfj+rpwQ=
Subject key identifier: C7:6D:8F:7C:CC:98:76:64:60:9F:43:90:0E:64:18:76:47:B0:D1:6A
Certificate issuer: /CN=BCAFA73B9C61B93E7B0F8561B206E90BD6B2F8AB
Certificate serial: 3C956E7E846BDC82E69CE439A79C43BF2F0DF81E
Authority key identifier: BC:AF:A7:3B:9C:61:B9:3E:7B:0F:85:61:B2:06:E9:0B:D6:B2:F8:AB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCAFA73B9C61B93E7B0F8561B206E90BD6B2F8AB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/323830343a346331303a3a2f33322d3336203d3e20323637333437.roa
Signing time: Fri 21 Jun 2024 16:36:55 +0000
ROA not before: Fri 21 Jun 2024 16:31:55 +0000
ROA not after: Fri 20 Jun 2025 16:36:55 +0000
asID: 267347
IP address blocks: 2804:4c10::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:95:6e:7e:84:6b:dc:82:e6:9c:e4:39:a7:9c:43:bf:2f:0d:f8:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCAFA73B9C61B93E7B0F8561B206E90BD6B2F8AB
Validity
Not Before: Jun 21 16:31:55 2024 GMT
Not After : Jun 20 16:36:55 2025 GMT
Subject: CN=C76D8F7CCC987664609F43900E64187647B0D16A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d2:ef:db:e9:0b:97:0b:b8:33:d3:65:71:0b:
f8:ce:4b:c0:5c:d8:7d:45:ef:c6:42:bd:07:c3:95:
b7:8b:3f:40:43:4d:27:ef:37:c3:0f:58:95:42:97:
6c:36:81:5c:68:e0:99:eb:16:d8:7c:ba:57:ac:7d:
f2:73:df:d0:7c:70:be:51:85:77:64:9f:ba:9a:ea:
cc:48:0d:bd:e7:5a:13:8a:0d:78:9b:5a:9a:5f:c5:
1f:2a:fe:d7:d4:57:d2:e3:73:90:b1:b5:5b:9f:c6:
e9:76:ce:c7:6d:5c:7c:1e:20:f1:7f:8c:c7:06:95:
e9:23:6d:ef:db:98:39:39:7a:c5:44:9a:ca:ff:d4:
82:6d:0b:49:c2:3e:7d:bc:6a:d3:91:24:15:7e:26:
0c:20:64:4a:de:0c:e4:6a:17:aa:43:b1:79:3d:9e:
da:12:00:8b:60:32:13:05:d6:4b:a8:19:de:0a:d6:
dd:3a:2a:21:fc:04:ca:b8:34:b9:73:78:54:1e:69:
be:dc:0b:92:bd:1c:40:a4:a4:4e:77:56:ec:7a:8a:
fd:47:2f:36:e4:c3:4b:82:a8:95:47:1d:32:c3:65:
1b:be:9a:05:c8:d8:94:ff:4c:b5:68:67:e6:ac:88:
f2:df:41:83:20:35:7c:83:7a:6c:be:69:05:7c:ce:
65:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6D:8F:7C:CC:98:76:64:60:9F:43:90:0E:64:18:76:47:B0:D1:6A
X509v3 Authority Key Identifier:
keyid:BC:AF:A7:3B:9C:61:B9:3E:7B:0F:85:61:B2:06:E9:0B:D6:B2:F8:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/BCAFA73B9C61B93E7B0F8561B206E90BD6B2F8AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCAFA73B9C61B93E7B0F8561B206E90BD6B2F8AB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/323830343a346331303a3a2f33322d3336203d3e20323637333437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4c10::/32
Signature Algorithm: sha256WithRSAEncryption
9c:a9:55:be:7f:61:5f:34:30:ec:7a:8c:ed:cd:c2:e9:15:ee:
4b:ea:3d:83:85:2e:44:83:59:49:e0:f2:b7:a2:02:8a:84:b9:
5d:74:62:9c:ff:f7:fb:f8:f2:12:3a:79:4a:53:91:21:3d:b7:
bd:7e:b6:61:74:53:ea:66:f1:20:9f:12:82:a9:b2:c2:b9:c5:
ad:7e:4d:78:f0:4b:9c:61:0a:df:d5:4a:15:76:da:e6:f5:97:
1e:cf:48:8c:39:1c:2d:64:b2:d8:52:f4:b4:5d:5a:26:ca:c0:
e6:a6:e0:6a:d0:35:21:23:71:f5:6a:7b:5a:4f:cc:d9:a5:62:
8a:66:ce:32:69:02:b4:3e:d8:bf:b1:4c:27:95:4b:f9:ab:aa:
92:c4:76:9a:dd:6c:59:ed:f8:be:d5:63:0e:70:0d:ef:bc:38:
45:5e:fd:08:6e:3d:a7:e0:db:84:ad:c1:27:46:8c:ad:a1:58:
6e:93:5a:c7:bd:ef:dd:e1:3c:0f:56:87:c8:63:9b:bc:69:14:
26:f7:d1:86:9b:7e:82:d8:1c:08:68:33:b5:20:d4:52:f6:e9:
1d:e0:d3:29:85:09:e0:73:ce:e4:02:04:ad:f8:d9:11:01:ae:
63:70:3c:22:9d:9c:9a:44:85:8f:9d:10:5b:63:60:67:52:c9:
56:ee:a7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:54 2025 by rpki-client