Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373030323a3a2f34382d3438203d3e20323639313934.roa
File: 323830343a363064343a373030323a3a2f34382d3438203d3e20323639313934.roa (raw, json)
Hash identifier: quygaOMySrlVu0BvWm1zYRXcRWxJcIGTyGe0TB1UIMk=
Subject key identifier: 7A:AB:17:14:09:06:52:6C:9D:11:2C:42:87:EA:71:1B:8C:10:25:94
Certificate issuer: /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial: 0D0A44D9B55D538D62FA5CC61E85FB3E53D59986
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373030323a3a2f34382d3438203d3e20323639313934.roa
Signing time: Mon 19 Feb 2024 00:05:10 +0000
ROA not before: Mon 19 Feb 2024 00:00:10 +0000
ROA not after: Mon 17 Feb 2025 00:05:10 +0000
asID: 269194
IP address blocks: 2804:60d4:7002::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:0a:44:d9:b5:5d:53:8d:62:fa:5c:c6:1e:85:fb:3e:53:d5:99:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Validity
Not Before: Feb 19 00:00:10 2024 GMT
Not After : Feb 17 00:05:10 2025 GMT
Subject: CN=7AAB17140906526C9D112C4287EA711B8C102594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5f:7a:7b:c5:78:a1:1d:bf:84:f3:80:17:d8:
ed:53:13:33:6d:e6:84:21:59:7f:57:bd:2d:38:35:
4a:7f:a6:d6:73:74:3c:78:8b:ab:c9:94:39:08:7f:
f4:3d:3b:3c:ef:e2:98:ce:77:82:dd:75:46:9b:b9:
7a:ed:11:b3:90:14:ba:a1:35:13:d3:d9:c1:d6:4b:
2b:5a:d5:31:40:76:49:bd:eb:3b:02:3e:cc:0e:b6:
da:af:fa:7b:3b:fd:e9:9c:8b:c6:00:fc:85:77:6b:
c7:17:68:a5:3a:1d:62:82:f7:da:ce:7c:fe:b4:2e:
79:9c:1c:04:7a:9b:4e:36:8d:74:82:3d:e7:fb:40:
ef:77:05:77:a3:1f:27:da:8a:ad:6a:46:72:af:77:
8a:11:ee:c4:a1:81:ac:dd:89:9b:13:a9:b8:f1:01:
34:fc:a9:79:e9:6e:e4:a2:b7:2b:d6:df:a9:26:57:
75:eb:b6:ef:10:2b:23:4b:6d:11:6c:5a:3f:95:ae:
23:5f:ec:77:62:0a:f6:dd:6d:08:55:13:34:d6:8f:
01:be:e4:76:77:b1:d8:89:6f:4c:15:68:dc:32:69:
e0:55:a9:10:f5:06:f2:56:de:5c:a3:86:80:7e:a1:
10:35:05:f1:bf:d9:f8:a6:4a:35:b7:49:54:88:e3:
48:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AB:17:14:09:06:52:6C:9D:11:2C:42:87:EA:71:1B:8C:10:25:94
X509v3 Authority Key Identifier:
keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373030323a3a2f34382d3438203d3e20323639313934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:60d4:7002::/48
Signature Algorithm: sha256WithRSAEncryption
d3:d5:34:1f:c2:1a:ca:2e:82:f3:79:77:ec:a2:6d:c0:c3:be:
ce:3e:11:f1:66:0f:80:ec:24:d4:9b:7f:6c:c7:5d:83:00:81:
92:a9:3d:2d:95:48:39:83:45:77:87:1f:9e:33:e0:63:bb:ad:
c2:e3:b5:a1:0d:f0:65:23:58:19:f1:c9:e6:d2:93:49:fb:80:
08:29:e7:f1:cc:0f:27:6b:fe:bc:b2:c3:97:5c:6f:9c:1e:57:
ee:48:41:a8:52:41:9b:f6:e8:ad:b8:f3:95:94:39:3f:f3:34:
8a:5b:16:f9:9a:a9:cf:3f:44:61:5d:af:05:2e:cd:82:6a:b5:
62:78:02:8b:ee:63:7f:f3:18:05:e5:b3:49:36:61:9a:07:db:
27:a7:5b:d6:2d:a8:2e:02:11:0d:27:13:40:c9:64:22:4b:ab:
b7:af:69:ad:34:ef:b4:3e:45:20:29:f9:80:a4:e8:47:29:4a:
3d:52:f0:f6:bd:b9:2d:a0:d1:3a:54:7d:98:77:b8:cf:96:96:
ab:1c:5a:c6:3a:e1:89:ba:9f:f8:0d:05:a2:6e:64:8c:44:d7:
a2:5b:df:e3:3c:b6:97:14:36:8d:81:97:4c:1a:7b:ff:28:ff:
02:8f:df:3d:1b:d8:7f:e6:89:0a:63:49:f9:48:68:4f:c9:32:
16:9b:91:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:28:13 2025 by rpki-client