Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FkdN4of55Td56823ezTUWcYoAY1cFCYYcNiNU6DR6o7o/0/323830343a393232303a3a2f33322d3438203d3e203631363232.roa
File: 323830343a393232303a3a2f33322d3438203d3e203631363232.roa (raw, json)
Hash identifier: 23ZMBw0BJjYGqo5LUU66VyvCya/qKO28TRRWyQay4XY=
Subject key identifier: 44:DA:B3:7B:34:6B:7C:B1:AE:66:D8:78:A1:3D:51:E7:A8:86:7A:6D
Certificate issuer: /CN=BF721585EB3D386DE6352D443D873C600B80CD69
Certificate serial: 0B3F5CBD0838E5150CEC0D73E2C7746B7EDBF345
Authority key identifier: BF:72:15:85:EB:3D:38:6D:E6:35:2D:44:3D:87:3C:60:0B:80:CD:69
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF721585EB3D386DE6352D443D873C600B80CD69.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FkdN4of55Td56823ezTUWcYoAY1cFCYYcNiNU6DR6o7o/0/323830343a393232303a3a2f33322d3438203d3e203631363232.roa
Signing time: Thu 26 Dec 2024 06:46:29 +0000
ROA not before: Thu 26 Dec 2024 06:41:29 +0000
ROA not after: Thu 25 Dec 2025 06:46:29 +0000
asID: 61622
IP address blocks: 2804:9220::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:3f:5c:bd:08:38:e5:15:0c:ec:0d:73:e2:c7:74:6b:7e:db:f3:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF721585EB3D386DE6352D443D873C600B80CD69
Validity
Not Before: Dec 26 06:41:29 2024 GMT
Not After : Dec 25 06:46:29 2025 GMT
Subject: CN=44DAB37B346B7CB1AE66D878A13D51E7A8867A6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0c:41:0a:d1:c8:a7:cb:f0:f0:ad:91:92:1f:
75:ba:65:36:a1:df:ef:6e:15:90:65:e7:ce:e0:14:
da:c8:64:fb:dc:7f:47:46:4e:19:ec:92:dd:e0:63:
06:9e:80:f0:d1:5b:d6:4c:4b:8e:2d:d8:e2:16:e9:
b9:44:e0:fb:00:db:69:06:d4:cc:e9:f5:c2:59:b7:
ef:83:65:61:92:df:ec:eb:72:f3:34:bd:9d:30:a7:
1d:4a:c4:78:3a:54:c8:f0:2f:fe:8d:01:a7:d9:b1:
29:74:62:60:de:75:28:23:29:a5:66:f8:ed:bc:e0:
40:e0:74:99:2c:11:23:84:ed:46:03:e6:54:6b:dd:
3d:29:bd:80:ca:92:cd:dc:76:17:75:9f:f9:ba:10:
75:fd:33:c3:30:a0:35:a1:71:5a:1f:38:40:f3:af:
61:88:e3:b2:3a:cf:21:7b:d3:16:0d:23:3a:88:a7:
95:d1:04:bd:50:17:61:66:64:96:aa:80:16:4e:24:
4f:7f:34:9b:20:2a:f1:e0:9d:a6:3a:d4:04:d7:0f:
d9:8c:d6:66:1f:8c:09:5d:b2:7f:ba:00:9b:99:2b:
2a:79:1f:ca:ad:63:b1:e7:78:30:e6:a2:87:b4:a4:
b2:a4:16:b1:4f:74:ff:b9:c2:a7:03:d9:ed:6e:87:
90:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:DA:B3:7B:34:6B:7C:B1:AE:66:D8:78:A1:3D:51:E7:A8:86:7A:6D
X509v3 Authority Key Identifier:
keyid:BF:72:15:85:EB:3D:38:6D:E6:35:2D:44:3D:87:3C:60:0B:80:CD:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FkdN4of55Td56823ezTUWcYoAY1cFCYYcNiNU6DR6o7o/0/BF721585EB3D386DE6352D443D873C600B80CD69.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF721585EB3D386DE6352D443D873C600B80CD69.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FkdN4of55Td56823ezTUWcYoAY1cFCYYcNiNU6DR6o7o/0/323830343a393232303a3a2f33322d3438203d3e203631363232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:9220::/32
Signature Algorithm: sha256WithRSAEncryption
a2:92:8c:cb:df:fe:ee:3e:83:b0:6e:c1:3f:33:10:8a:88:15:
d0:9a:b0:75:ae:34:89:8d:90:e8:de:24:2e:3d:67:8e:54:42:
c1:a6:f4:c3:56:cb:4b:da:94:e0:c7:31:5b:3b:79:7b:6f:84:
10:5c:53:cc:f4:e6:78:b0:fe:63:4a:ab:0b:52:43:63:bc:5c:
73:92:98:1f:ff:d1:d5:9d:36:b9:e7:09:73:92:c1:db:fb:b5:
14:31:1a:60:ba:00:fe:01:81:88:49:95:dc:52:fd:ba:58:a2:
d5:17:76:03:c7:4f:79:15:e9:a9:5d:b3:66:8c:1f:86:e2:9e:
a5:f2:07:f9:fb:ab:a0:01:64:b2:9c:06:60:05:c5:23:4b:b4:
7f:6d:b7:a1:e0:50:95:ce:d7:a5:55:f2:92:55:ab:e9:8c:55:
aa:1f:75:ce:3c:87:09:61:ac:f6:33:72:16:1a:8b:55:35:1f:
30:60:ee:94:04:44:89:56:1f:47:01:77:9d:82:d2:7b:87:af:
79:bd:d2:57:23:a2:9d:cc:8e:92:08:ca:e1:f7:25:21:7e:ed:
6b:b7:3c:6d:e6:8a:67:f7:5a:d0:6c:b0:94:70:0f:42:dd:b5:
e6:9b:cd:9e:ab:3e:5b:ac:56:73:4c:26:10:e6:2b:61:f7:bc:
ae:a5:c0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:34:19 2025 by rpki-client