Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/323830343a343330303a3a2f33322d3332203d3e20323637353432.roa
File: 323830343a343330303a3a2f33322d3332203d3e20323637353432.roa (raw, json)
Hash identifier: tkDsUCaLqwHwe6ULCaF5Q1JfquPcF5Bcw3ECyhgtg5s=
Subject key identifier: 0C:62:67:3A:29:11:B1:09:71:88:76:AB:AC:A3:DC:58:F1:E0:6B:A3
Certificate issuer: /CN=BDE43E626C927270D334976A9B665C443892DF57
Certificate serial: 6392CEC1816E0B36BE0AD40F3827795F93ACF12F
Authority key identifier: BD:E4:3E:62:6C:92:72:70:D3:34:97:6A:9B:66:5C:44:38:92:DF:57
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE43E626C927270D334976A9B665C443892DF57.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/323830343a343330303a3a2f33322d3332203d3e20323637353432.roa
Signing time: Sat 30 Nov 2024 23:40:05 +0000
ROA not before: Sat 30 Nov 2024 23:35:05 +0000
ROA not after: Sat 29 Nov 2025 23:40:05 +0000
asID: 267542
IP address blocks: 2804:4300::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:92:ce:c1:81:6e:0b:36:be:0a:d4:0f:38:27:79:5f:93:ac:f1:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDE43E626C927270D334976A9B665C443892DF57
Validity
Not Before: Nov 30 23:35:05 2024 GMT
Not After : Nov 29 23:40:05 2025 GMT
Subject: CN=0C62673A2911B109718876ABACA3DC58F1E06BA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0b:c9:b4:d9:41:cf:8b:53:9c:04:2d:02:71:
f0:6b:bd:a3:0f:6a:cf:1e:80:1c:c3:f1:06:7c:aa:
a5:13:b9:98:4e:87:11:ab:91:af:a4:3a:50:89:4d:
c4:8c:49:41:e7:3d:f0:47:80:22:88:7e:4a:ff:4d:
f1:70:a3:3f:61:97:95:d5:d8:bc:53:88:bc:e9:f5:
2c:d5:67:a4:d0:87:ed:94:d8:2f:53:01:7c:1c:97:
20:1c:ca:89:e4:a1:f6:15:ee:38:cc:61:74:89:50:
d2:89:25:d5:d0:5a:41:de:14:c7:5b:6a:59:e3:52:
06:09:8f:f5:64:44:54:5e:ce:db:ba:e6:18:8c:61:
53:aa:7c:ca:fa:74:8d:4b:ef:2e:06:09:2e:92:84:
51:ca:c9:bd:83:a9:1e:83:90:53:e6:6f:e9:f0:61:
22:16:f8:9c:26:f4:46:99:d7:c5:a5:15:95:ac:49:
45:89:98:3e:89:33:8c:2b:4b:37:25:d2:83:1d:b1:
66:bc:c5:e6:bb:45:46:28:42:03:cf:f8:b7:bc:19:
be:f6:f5:2f:1f:c6:cf:e4:6b:17:da:9f:41:17:1d:
29:f4:fc:52:94:37:b7:1e:16:6b:88:a4:55:eb:e8:
24:22:37:09:14:41:f9:88:44:61:a0:8a:f0:ed:4a:
e6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:62:67:3A:29:11:B1:09:71:88:76:AB:AC:A3:DC:58:F1:E0:6B:A3
X509v3 Authority Key Identifier:
keyid:BD:E4:3E:62:6C:92:72:70:D3:34:97:6A:9B:66:5C:44:38:92:DF:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/BDE43E626C927270D334976A9B665C443892DF57.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE43E626C927270D334976A9B665C443892DF57.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/323830343a343330303a3a2f33322d3332203d3e20323637353432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4300::/32
Signature Algorithm: sha256WithRSAEncryption
b9:eb:3a:30:13:98:db:49:66:08:49:28:87:5a:70:2d:23:b0:
60:e5:f8:b0:88:4a:6d:ab:a0:b2:3b:df:94:f0:1b:e0:99:94:
bc:8b:56:ba:b1:4f:c4:45:94:16:80:8a:f1:a4:2d:bb:7e:d6:
6b:07:85:cd:b1:0c:ca:52:9a:86:fe:60:4e:e8:98:5d:c5:ff:
42:56:e7:7b:e7:79:52:17:51:21:12:15:14:d3:51:3c:e3:ec:
cc:d9:8e:18:e2:cb:7e:8e:a1:a0:6b:47:97:16:51:47:54:40:
fb:5c:37:85:a9:83:bd:91:e8:0c:11:d2:93:9a:16:f3:79:26:
b9:09:31:ac:72:c9:78:eb:72:c4:b1:59:b7:ce:2f:39:42:fd:
1e:3d:10:d7:78:91:56:17:8f:37:e2:72:c1:36:f0:29:15:4c:
4c:26:9d:3e:a2:b4:54:29:d5:a2:a0:3d:64:96:56:2d:b6:61:
65:01:c1:5a:f6:fa:12:b8:0a:6b:6f:37:01:a2:3e:b1:e8:ed:
f2:ec:c6:5d:9d:2d:d8:72:47:4f:5c:4a:df:c5:8f:9a:1d:b1:
e7:52:e8:d0:ce:87:6a:0e:87:8e:ad:d9:fd:f1:fb:01:b9:82:
e4:24:9a:72:1c:49:b2:a3:30:e6:cf:83:50:25:fa:44:b3:10:
1f:a2:1d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:41:29 2025 by rpki-client