Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/323830343a323232633a3130303a3a2f34302d3434203d3e20323634353936.roa
File: 323830343a323232633a3130303a3a2f34302d3434203d3e20323634353936.roa (raw, json)
Hash identifier: dccJ0RTJgBkmoLXWoYtC/9gsEbtGwKwahHhDApG7+xY=
Subject key identifier: 7A:8D:DB:29:42:5A:B4:92:DC:58:33:81:4D:87:AE:08:FC:F5:4B:AA
Certificate issuer: /CN=D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7
Certificate serial: 2D03CF58973F65768ECAC53A1B75EBA560980DDA
Authority key identifier: D8:3B:D8:1B:DC:0A:01:D1:AE:F1:AF:D4:0B:C6:A4:E7:2C:94:11:F7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/323830343a323232633a3130303a3a2f34302d3434203d3e20323634353936.roa
Signing time: Thu 04 Apr 2024 17:33:58 +0000
ROA not before: Thu 04 Apr 2024 17:28:58 +0000
ROA not after: Thu 03 Apr 2025 17:33:58 +0000
asID: 264596
IP address blocks: 2804:222c:100::/40 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:03:cf:58:97:3f:65:76:8e:ca:c5:3a:1b:75:eb:a5:60:98:0d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7
Validity
Not Before: Apr 4 17:28:58 2024 GMT
Not After : Apr 3 17:33:58 2025 GMT
Subject: CN=7A8DDB29425AB492DC5833814D87AE08FCF54BAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2b:6a:64:e1:b0:31:e5:9c:ed:2a:7a:1a:78:
ec:5e:b7:7d:9a:b2:64:a9:df:4d:c2:5a:cf:df:6b:
55:6d:65:8b:75:ae:6d:c1:33:2e:c1:4e:3f:5f:24:
00:c9:6e:9f:64:1e:e0:ff:0f:47:ef:07:ac:40:d5:
0a:bc:a8:da:d5:ed:44:a1:1d:d9:e1:d2:88:0d:ec:
0f:dd:81:d3:f5:2b:1b:8f:74:01:c4:dc:3d:89:93:
17:50:45:5d:58:de:45:97:29:b2:a7:fd:36:e9:dc:
29:9e:2c:7e:cf:23:e7:68:b6:45:f9:a2:70:ab:c6:
50:30:28:a8:65:53:db:1a:15:4b:d9:8d:0f:ef:01:
71:f5:30:3a:87:b5:34:d0:f1:82:75:11:7a:31:1c:
da:72:c9:b6:cc:42:12:36:58:43:52:03:78:5f:a1:
bc:6b:4f:11:df:ef:95:1c:9e:15:a3:d5:a0:17:3f:
48:08:35:f1:e8:c5:04:6a:23:5a:3c:60:3a:f1:d0:
cb:b1:57:db:12:27:70:71:3d:a4:6c:e0:b5:bb:76:
f8:d0:6a:22:f9:39:93:7a:47:92:c1:74:bd:14:73:
da:bc:94:40:b5:c5:74:bc:b8:59:8f:48:dd:cb:04:
91:d3:6a:5e:80:57:df:10:7d:60:84:1f:4c:29:87:
e5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8D:DB:29:42:5A:B4:92:DC:58:33:81:4D:87:AE:08:FC:F5:4B:AA
X509v3 Authority Key Identifier:
keyid:D8:3B:D8:1B:DC:0A:01:D1:AE:F1:AF:D4:0B:C6:A4:E7:2C:94:11:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/323830343a323232633a3130303a3a2f34302d3434203d3e20323634353936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:222c:100::/40
Signature Algorithm: sha256WithRSAEncryption
24:be:b2:45:f5:f8:ab:c5:55:c4:60:6b:eb:76:03:ca:34:24:
a0:f7:4f:bd:a5:93:1a:54:52:12:08:53:e2:c5:ae:1e:90:04:
46:eb:dd:d4:df:a9:59:56:a2:46:ec:57:fa:3e:60:38:83:37:
f1:89:7e:06:a4:3a:61:39:18:ae:0c:1a:28:eb:94:74:be:7f:
eb:c1:46:5c:db:b6:e5:81:9a:11:e5:41:fd:3c:0c:49:0b:cc:
5c:6a:a9:3b:76:56:31:10:1b:87:b9:a9:0d:1c:2c:19:43:9f:
66:cf:80:a3:1a:58:07:3c:7c:53:3a:dd:61:9c:b0:39:f1:2f:
2c:6d:ba:df:c5:73:a4:7a:7f:53:88:5b:51:8f:2f:9a:0b:39:
91:5c:5e:47:30:24:f3:ce:ca:c3:f8:d1:c2:59:33:18:45:ec:
eb:92:87:46:3d:2c:6e:09:ea:ca:89:70:8c:c8:92:86:ba:37:
85:b8:e2:b8:34:8d:2b:b7:ff:ba:26:87:cc:e3:c6:84:69:63:
a9:65:7e:2c:e4:31:25:d6:65:76:34:79:8e:bc:5e:f0:63:5c:
0c:55:7f:e9:8e:ed:8f:33:ff:13:f0:eb:ec:99:d1:35:0f:48:
9a:b5:a9:29:a9:7e:dd:35:7f:14:f0:0c:4d:92:3f:70:b3:61:
ad:1a:c3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:36:55 2025 by rpki-client