Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/323830343a346132633a3a2f33322d3438203d3e20323637323232.roa
File: 323830343a346132633a3a2f33322d3438203d3e20323637323232.roa (raw, json)
Hash identifier: JJYdZy5ZTEBzcPhZYx2vLYFFpfk9V3AglQSY26FPB3I=
Subject key identifier: BD:02:33:9D:02:D5:13:E0:61:C8:3B:74:F8:14:BD:93:42:05:4D:F4
Certificate issuer: /CN=433BD4694845BA65CA4AE1BF622A1C599CB53F72
Certificate serial: 5BB45EA81A65B6510B54ECA9D21A217C25A7A560
Authority key identifier: 43:3B:D4:69:48:45:BA:65:CA:4A:E1:BF:62:2A:1C:59:9C:B5:3F:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/323830343a346132633a3a2f33322d3438203d3e20323637323232.roa
Signing time: Thu 04 Apr 2024 09:21:25 +0000
ROA not before: Thu 04 Apr 2024 09:16:25 +0000
ROA not after: Thu 03 Apr 2025 09:21:25 +0000
asID: 267222
IP address blocks: 2804:4a2c::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:b4:5e:a8:1a:65:b6:51:0b:54:ec:a9:d2:1a:21:7c:25:a7:a5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=433BD4694845BA65CA4AE1BF622A1C599CB53F72
Validity
Not Before: Apr 4 09:16:25 2024 GMT
Not After : Apr 3 09:21:25 2025 GMT
Subject: CN=BD02339D02D513E061C83B74F814BD9342054DF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bf:d2:0f:92:a2:f1:e3:0a:b8:82:1b:76:23:
44:85:37:ac:5f:e4:e3:7c:16:aa:00:ba:22:71:d4:
1b:d6:8e:99:b5:12:82:c7:e2:37:5b:16:60:60:3c:
38:64:e3:bf:0c:23:b3:32:3b:93:44:28:aa:82:23:
1c:4d:86:9f:71:38:95:3a:b6:82:84:b0:cb:2e:ea:
b2:a9:d3:c9:bd:30:a1:c8:4a:77:ed:26:79:97:8c:
2c:13:45:53:fe:41:58:51:36:a2:39:b0:15:e9:d8:
d2:9c:4a:9c:18:da:3c:12:b8:fc:d9:92:b2:17:5d:
ef:84:8d:d6:f0:75:d4:99:21:b3:e5:d0:87:df:5e:
c2:92:08:91:72:92:53:d1:2c:a4:ed:07:b7:7e:e7:
e6:b1:57:55:db:41:cf:fa:02:13:cb:ca:62:71:3b:
71:b1:47:f7:18:a3:ef:cd:b9:bd:d4:4c:87:69:4f:
60:90:96:e4:a4:a5:74:c9:f9:f4:27:9d:7c:23:f1:
2d:25:fa:cb:9e:05:9b:b2:8a:fe:ca:a5:02:e8:59:
f0:31:c5:9d:bb:2a:68:dd:98:1e:92:aa:16:50:4c:
4b:af:81:d1:06:bf:27:14:59:86:4e:da:d3:a3:06:
f5:55:c4:bd:a2:79:77:cb:b8:89:05:b9:ad:b0:ef:
16:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:02:33:9D:02:D5:13:E0:61:C8:3B:74:F8:14:BD:93:42:05:4D:F4
X509v3 Authority Key Identifier:
keyid:43:3B:D4:69:48:45:BA:65:CA:4A:E1:BF:62:2A:1C:59:9C:B5:3F:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/323830343a346132633a3a2f33322d3438203d3e20323637323232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4a2c::/32
Signature Algorithm: sha256WithRSAEncryption
8f:d1:79:60:5e:da:0d:fe:a4:3e:de:e7:1e:64:a4:5b:8e:02:
28:11:30:3b:dc:4e:1f:6e:76:bc:57:04:a7:19:5b:e5:e7:5d:
48:49:66:dc:f0:f9:12:ef:93:cc:f2:0d:75:40:3d:df:53:7c:
e8:4e:95:75:6b:90:fe:85:9a:75:1a:3c:6f:19:04:ec:85:42:
8f:11:51:b5:dd:3c:c2:f0:c6:eb:78:e5:a1:c9:2a:fa:43:f0:
59:5c:98:b3:20:de:f2:97:7d:84:e8:7e:02:94:be:a2:66:88:
63:c2:13:3f:cf:93:2d:0e:84:81:21:59:a1:2a:e8:a3:77:ab:
78:2a:af:d6:19:d8:34:c4:2c:a2:b3:67:18:d8:fe:28:1c:02:
46:db:49:fa:3d:3d:1a:03:6b:ea:d9:b6:dd:74:fd:db:74:39:
a3:c3:cd:d3:ca:9d:cd:b5:7a:30:f9:51:25:0a:f4:10:e7:40:
40:1b:ce:5b:df:87:24:e8:8d:9f:70:27:b1:59:52:fb:1f:d6:
db:86:69:3e:e6:8d:f6:cb:8a:ab:90:b3:f9:f7:df:65:43:b9:
08:ba:f0:bd:a7:73:f9:47:28:ab:ef:77:c1:28:cc:e1:07:20:
0d:87:3a:3b:25:c7:a5:3e:27:d3:3e:24:41:fd:36:ef:18:b0:
a9:24:c6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:59:38 2025 by rpki-client