Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a3a2f33322d3332203d3e20323638383738.roa
File: 323830343a356266303a3a2f33322d3332203d3e20323638383738.roa (raw, json)
Hash identifier: M8QdCmCZ2nO+QaOKL/SmyLoTX8bAHqo9M9egvScytuw=
Subject key identifier: D7:92:63:85:DC:3B:1B:0F:16:3A:D2:CC:7B:D9:D2:1B:7D:44:A8:A9
Certificate issuer: /CN=BFB590FA7A04C15A07E802593C4472D77FAB7820
Certificate serial: 223819FD5AAFDB9C0916AA1924CA0969C7B3C72A
Authority key identifier: BF:B5:90:FA:7A:04:C1:5A:07:E8:02:59:3C:44:72:D7:7F:AB:78:20
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer
Subject info access: rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a3a2f33322d3332203d3e20323638383738.roa
Signing time: Wed 25 Dec 2024 09:58:29 +0000
ROA not before: Wed 25 Dec 2024 09:53:29 +0000
ROA not after: Wed 24 Dec 2025 09:58:29 +0000
asID: 268878
IP address blocks: 2804:5bf0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:38:19:fd:5a:af:db:9c:09:16:aa:19:24:ca:09:69:c7:b3:c7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFB590FA7A04C15A07E802593C4472D77FAB7820
Validity
Not Before: Dec 25 09:53:29 2024 GMT
Not After : Dec 24 09:58:29 2025 GMT
Subject: CN=D7926385DC3B1B0F163AD2CC7BD9D21B7D44A8A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:17:95:4e:d4:34:a0:cb:f6:d4:be:36:9d:d8:
ef:13:6d:be:fc:77:54:b1:3e:ad:e2:61:84:9a:f8:
16:0c:cf:eb:e2:0b:97:c9:5d:7c:b9:f6:d9:5d:2a:
d9:28:a9:7a:1c:90:04:32:58:58:96:78:fc:49:1c:
c9:2f:b2:e3:af:47:2f:ee:e2:be:05:ea:b6:eb:58:
08:b2:7e:42:b7:f8:6a:93:2a:f7:f6:2c:6e:c4:cc:
8d:e3:90:7a:74:17:8f:9f:6b:7d:89:88:8a:25:4f:
f6:7f:9b:d5:9e:b9:2a:72:04:ae:3d:3a:b6:06:4f:
9e:c4:ca:72:4f:e9:64:04:d6:6d:78:9c:9b:83:09:
cc:d7:32:a5:fb:c2:b9:16:d9:77:02:6d:da:82:b4:
b4:65:dc:32:b0:48:12:c5:a2:3d:82:cd:7b:6f:19:
c7:9b:84:c8:f4:24:00:0a:c6:bb:61:c2:dd:c9:63:
6f:a1:ff:b4:e1:3c:1f:a1:aa:a2:b1:42:cc:b0:2b:
18:7a:4f:77:13:2c:3b:ed:80:a8:bb:cd:c3:08:96:
fd:d8:5d:14:ac:8e:8a:6b:6f:fb:a5:1c:42:88:1a:
2e:c8:42:30:ae:6d:9c:e7:4f:a4:ae:b6:cc:56:72:
f3:fa:63:38:c2:13:f3:f7:7a:a5:b9:42:93:5c:44:
e2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:92:63:85:DC:3B:1B:0F:16:3A:D2:CC:7B:D9:D2:1B:7D:44:A8:A9
X509v3 Authority Key Identifier:
keyid:BF:B5:90:FA:7A:04:C1:5A:07:E8:02:59:3C:44:72:D7:7F:AB:78:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a3a2f33322d3332203d3e20323638383738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5bf0::/32
Signature Algorithm: sha256WithRSAEncryption
14:62:47:7e:c7:3c:d9:35:a2:6c:1f:20:1c:15:d6:fc:91:60:
23:8d:a0:ae:d8:17:25:7f:c5:ac:64:65:2d:81:ce:cc:5a:53:
19:08:34:2d:fe:7f:38:2b:8b:8b:1b:d5:b0:0f:af:60:4a:07:
2b:72:5a:bd:44:e9:70:13:4f:9a:0c:5f:7f:16:6d:65:4b:3a:
e6:1f:0a:16:0c:25:f7:09:d0:6a:e8:64:a4:b4:2d:10:db:c0:
d6:01:30:c5:05:e7:9a:f5:1e:91:e2:a8:03:cd:94:56:7a:50:
c9:27:48:5b:f8:92:2e:e4:46:1c:ba:0d:05:c7:c4:c3:43:e1:
16:5d:6a:99:87:cd:6c:eb:5e:69:e9:fd:7d:5e:04:6a:b3:f9:
ee:04:8f:9f:2e:ff:0b:8d:ae:9b:d6:8e:82:44:67:35:9c:09:
90:bf:29:a6:b2:09:89:1a:57:bf:5d:be:0a:13:5b:10:59:3b:
32:57:10:54:87:e3:3e:03:47:14:2d:80:32:aa:eb:52:5e:49:
f4:09:4c:86:a1:35:8e:bf:76:81:66:b5:9c:17:2a:3a:50:8c:
6e:d5:b4:a6:a3:29:f3:ed:21:cd:8b:96:b2:ed:20:06:29:be:
71:b0:3c:31:7e:47:63:7c:af:da:3f:b7:02:19:cc:38:6a:5d:
f1:19:12:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:23:17 2025 by rpki-client