Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/323830343a373066343a3a2f33322d313238203d3e20323730373538.roa
File: 323830343a373066343a3a2f33322d313238203d3e20323730373538.roa (raw, json)
Hash identifier: zM8SRvl4nlgpZnfIrzQ7aoXHJ4/1rgKYCVyZX6Zfjro=
Subject key identifier: 73:11:48:C0:D8:B0:82:29:37:9F:5C:A0:3C:30:3E:47:49:3E:CF:4C
Certificate issuer: /CN=BFFAD8E7BC7C5AE17F8CA4AB38216E8FC27AEC39
Certificate serial: 1DC473FD56C77F3B583CA7AFDEE6D50E0F3521D6
Authority key identifier: BF:FA:D8:E7:BC:7C:5A:E1:7F:8C:A4:AB:38:21:6E:8F:C2:7A:EC:39
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFFAD8E7BC7C5AE17F8CA4AB38216E8FC27AEC39.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/323830343a373066343a3a2f33322d313238203d3e20323730373538.roa
Signing time: Fri 31 Jan 2025 15:34:37 +0000
ROA not before: Fri 31 Jan 2025 15:29:37 +0000
ROA not after: Fri 30 Jan 2026 15:34:37 +0000
asID: 270758
IP address blocks: 2804:70f4::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:c4:73:fd:56:c7:7f:3b:58:3c:a7:af:de:e6:d5:0e:0f:35:21:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFFAD8E7BC7C5AE17F8CA4AB38216E8FC27AEC39
Validity
Not Before: Jan 31 15:29:37 2025 GMT
Not After : Jan 30 15:34:37 2026 GMT
Subject: CN=731148C0D8B08229379F5CA03C303E47493ECF4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e5:d3:6f:f1:89:fc:2d:ec:6d:eb:1d:59:a2:
b6:2c:d0:58:bd:c2:00:9a:c8:d4:62:e5:ac:ca:8f:
ec:1f:86:98:92:4a:bd:0f:ae:4a:93:f5:11:15:a3:
a7:b8:85:78:df:cd:26:6e:30:5b:26:2f:8b:34:92:
ff:92:2d:e8:14:94:77:a4:52:49:dd:72:86:77:ec:
11:00:ae:77:51:2c:2f:46:1c:35:9e:98:63:ba:39:
62:fa:68:c0:7f:71:5c:01:af:93:b0:cd:c9:6a:eb:
84:15:19:b0:34:23:a4:9b:47:50:c8:d1:36:fa:5a:
79:8c:23:df:f1:95:26:d3:8f:17:ae:8e:28:40:a6:
52:89:60:77:ff:fe:b0:74:41:7c:90:bb:d4:0a:93:
86:2e:ab:15:80:ea:e7:03:c3:01:c8:a3:11:b5:70:
84:c4:bc:fd:fd:59:2e:20:e2:ca:9a:bd:64:40:f0:
e3:ce:c3:cc:64:8d:3d:e0:b1:84:cb:ca:96:98:a1:
d6:08:96:5d:93:6b:95:5d:d8:53:d8:44:51:26:3b:
54:ca:8a:6e:84:6d:76:2c:4d:4e:fb:52:0f:6e:50:
3d:e5:38:5b:26:93:8d:38:83:53:f6:1c:b2:cf:3a:
8e:b9:c4:6a:5e:f9:ee:76:ca:53:28:4d:0e:b7:6f:
7f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:11:48:C0:D8:B0:82:29:37:9F:5C:A0:3C:30:3E:47:49:3E:CF:4C
X509v3 Authority Key Identifier:
keyid:BF:FA:D8:E7:BC:7C:5A:E1:7F:8C:A4:AB:38:21:6E:8F:C2:7A:EC:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/BFFAD8E7BC7C5AE17F8CA4AB38216E8FC27AEC39.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFFAD8E7BC7C5AE17F8CA4AB38216E8FC27AEC39.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/323830343a373066343a3a2f33322d313238203d3e20323730373538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:70f4::/32
Signature Algorithm: sha256WithRSAEncryption
68:7e:46:ee:d7:a3:57:fa:79:96:8a:e6:2e:41:36:2d:26:ff:
29:44:b2:6d:38:de:ad:a1:5c:7b:c1:39:bc:67:b6:1d:39:81:
be:e1:79:d6:ff:5b:11:3a:d3:b7:c5:4e:9e:49:47:31:4d:7b:
29:49:1b:56:0c:38:05:24:f5:b2:6b:22:75:76:ca:73:20:57:
ad:17:c3:08:f2:8c:a2:53:2f:11:50:be:22:2e:0a:35:6a:a5:
90:eb:62:19:71:42:f8:5a:a6:2b:3d:12:0a:57:cd:ac:7d:5a:
4d:7b:83:8c:cc:66:67:db:47:ef:02:a4:c5:21:e3:ad:2b:2a:
ff:31:ca:46:89:27:ec:39:eb:a2:cd:44:6e:41:e9:62:ca:46:
46:4d:73:76:f5:dc:8f:4c:af:6e:de:50:cd:55:89:c1:0b:c3:
c3:ad:3b:37:d3:3d:1b:5f:92:90:b8:2c:5a:78:49:53:17:a0:
42:6f:18:ea:54:1d:8e:87:18:d6:da:8c:87:61:9c:40:9e:6f:
21:f3:04:db:a1:19:31:14:5f:10:50:e7:88:ff:f7:07:2f:56:
b4:8a:0e:fe:53:c9:54:79:a3:41:0d:36:be:f1:ab:2e:5b:20:
a3:c7:0a:05:17:dc:bf:c3:04:cc:65:f6:59:9c:b8:59:c4:9d:
42:24:67:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:33:19 2025 by rpki-client