Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/aTvUFQgCsqhBoFivznUNMLiqhrgNuuQysHptTnED3mF/0/323830343a3533303a3a2f33322d3438203d3e203533303032.roa
File: 323830343a3533303a3a2f33322d3438203d3e203533303032.roa (raw, json)
Hash identifier: AlvhVPrl3vJuHBTPy0GOWYz7QdygRzq7yYHuLh49Os0=
Subject key identifier: BF:4F:EB:19:58:2E:05:DE:C1:B4:80:A3:2E:A1:DA:D4:86:6B:50:D1
Certificate issuer: /CN=BDC75F483C9D6BDF3F8C2B8820E17A0D192D96E4
Certificate serial: 310BA9EE4DEE384CB3BB461425519ABB85640933
Authority key identifier: BD:C7:5F:48:3C:9D:6B:DF:3F:8C:2B:88:20:E1:7A:0D:19:2D:96:E4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDC75F483C9D6BDF3F8C2B8820E17A0D192D96E4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/aTvUFQgCsqhBoFivznUNMLiqhrgNuuQysHptTnED3mF/0/323830343a3533303a3a2f33322d3438203d3e203533303032.roa
Signing time: Thu 12 Jan 2023 20:02:58 +0000
ROA not before: Thu 12 Jan 2023 19:57:58 +0000
ROA not after: Thu 11 Jan 2024 20:02:58 +0000
asID: 53002
IP address blocks: 2804:530::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:0b:a9:ee:4d:ee:38:4c:b3:bb:46:14:25:51:9a:bb:85:64:09:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDC75F483C9D6BDF3F8C2B8820E17A0D192D96E4
Validity
Not Before: Jan 12 19:57:58 2023 GMT
Not After : Jan 11 20:02:58 2024 GMT
Subject: CN=BF4FEB19582E05DEC1B480A32EA1DAD4866B50D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0e:61:4a:f2:c8:82:7b:a2:db:f8:75:ba:62:
cf:9c:04:df:fa:b7:27:68:45:01:ef:af:08:28:32:
72:12:ad:5f:f8:60:f2:2c:22:f4:a5:3e:4a:4a:35:
55:82:02:2a:ef:5b:fb:22:17:92:51:38:8b:28:4b:
69:2e:05:4a:0e:70:90:ca:7c:cc:5b:9b:75:04:8a:
5d:33:cb:c8:41:ed:41:8a:ed:00:7e:4e:bf:ec:67:
64:77:2b:77:9f:07:49:89:0e:87:74:04:2f:05:a0:
4a:cb:b7:ec:ec:bd:6d:ad:23:5a:f3:7b:d0:3c:f2:
d9:fb:15:6a:8c:59:ca:fc:b2:70:48:49:66:a6:67:
22:0a:73:16:70:d1:71:f3:4f:c4:d5:9b:12:90:d6:
66:da:e6:b6:cb:76:75:e7:3a:b3:ad:8e:f8:d5:99:
25:a5:4a:ac:b2:b8:98:4c:be:b3:4c:0d:a2:52:04:
f6:e5:94:14:e5:22:9c:6b:48:45:4c:50:61:25:20:
f3:35:10:10:50:e5:02:ff:93:cd:dd:53:e8:f1:45:
f0:14:e0:cc:0b:5d:03:6a:ef:0a:00:96:7e:54:71:
1e:bd:cf:27:3e:43:e0:7d:0e:87:da:97:8d:93:5e:
ca:63:86:3b:1a:2b:7f:c6:f2:44:67:99:f1:7d:32:
6d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4F:EB:19:58:2E:05:DE:C1:B4:80:A3:2E:A1:DA:D4:86:6B:50:D1
X509v3 Authority Key Identifier:
keyid:BD:C7:5F:48:3C:9D:6B:DF:3F:8C:2B:88:20:E1:7A:0D:19:2D:96:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/aTvUFQgCsqhBoFivznUNMLiqhrgNuuQysHptTnED3mF/0/BDC75F483C9D6BDF3F8C2B8820E17A0D192D96E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDC75F483C9D6BDF3F8C2B8820E17A0D192D96E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/aTvUFQgCsqhBoFivznUNMLiqhrgNuuQysHptTnED3mF/0/323830343a3533303a3a2f33322d3438203d3e203533303032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:530::/32
Signature Algorithm: sha256WithRSAEncryption
5b:3f:2a:40:f4:ee:20:d4:31:4b:c9:be:c0:81:0d:e7:a5:c7:
ab:e9:bb:f2:e6:0f:65:e4:58:fb:31:5e:5a:07:c6:f8:18:19:
2d:51:26:f3:8e:c8:6b:2e:a5:ad:d5:a4:64:7a:fd:6c:7a:cb:
2e:77:94:65:2a:e3:bd:75:74:ef:aa:da:8a:78:68:21:48:67:
0f:a8:e8:ba:70:04:e1:a7:35:1e:1f:5a:d7:01:1e:d5:91:26:
e4:ba:5b:42:cd:55:0e:4c:43:7f:4e:35:cc:2b:da:7e:db:a4:
2e:28:b1:e8:b4:ac:e9:9b:5b:8b:2c:9c:0f:f8:01:13:31:3e:
25:d3:38:a3:d3:56:b5:42:b7:61:85:0c:f1:57:31:a7:91:e6:
be:e2:f3:69:9c:b9:fd:a2:bf:b2:83:97:7d:80:17:58:96:be:
49:27:0d:71:6f:fe:ef:ba:28:01:e7:13:de:6d:b4:e6:10:7f:
cc:b8:35:48:d6:f4:0b:9d:72:f5:af:40:d2:a2:fb:94:ac:03:
bf:16:5f:44:2c:0a:c4:b6:93:49:4a:93:97:2c:f3:52:99:8e:
2a:96:cb:a5:c4:88:66:9a:d4:fe:27:20:d8:ed:35:ae:a7:1a:
02:8c:c5:82:d0:ac:ef:d2:e3:f4:3b:0c:53:31:a9:83:02:1f:
6d:c1:f1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:49:08 2025 by rpki-client