Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/323830343a346437343a383030303a3a2f33332d3333203d3e20323638313937.roa
File: 323830343a346437343a383030303a3a2f33332d3333203d3e20323638313937.roa (raw, json)
Hash identifier: oOCNCf2gNIfkG7P2jMIvu0eo1+pqRaq+meHULlPSYyY=
Subject key identifier: B3:9F:75:83:1C:B7:ED:64:C9:EC:B3:43:DE:8E:AF:51:9E:53:D8:8E
Certificate issuer: /CN=BDFF256F0AD0E81FD186456828CFF572637DF2E5
Certificate serial: 759DD9D819FCDFD91A95154ED8C0F27E5B6BFAB7
Authority key identifier: BD:FF:25:6F:0A:D0:E8:1F:D1:86:45:68:28:CF:F5:72:63:7D:F2:E5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDFF256F0AD0E81FD186456828CFF572637DF2E5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/323830343a346437343a383030303a3a2f33332d3333203d3e20323638313937.roa
Signing time: Mon 02 Dec 2024 22:55:58 +0000
ROA not before: Mon 02 Dec 2024 22:50:58 +0000
ROA not after: Mon 01 Dec 2025 22:55:58 +0000
asID: 268197
IP address blocks: 2804:4d74:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:9d:d9:d8:19:fc:df:d9:1a:95:15:4e:d8:c0:f2:7e:5b:6b:fa:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDFF256F0AD0E81FD186456828CFF572637DF2E5
Validity
Not Before: Dec 2 22:50:58 2024 GMT
Not After : Dec 1 22:55:58 2025 GMT
Subject: CN=B39F75831CB7ED64C9ECB343DE8EAF519E53D88E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:67:3d:80:56:4f:89:25:48:23:3d:cc:ae:1c:
10:6f:c0:e6:fb:28:69:06:ec:52:6f:b8:ae:0d:a5:
30:19:fc:3b:8f:e0:6d:3a:ec:65:42:11:38:89:ea:
02:62:4d:e0:50:81:93:bc:d3:18:b9:a7:62:de:34:
41:61:5a:fb:5c:b5:2b:e5:6a:9a:aa:28:74:e7:8a:
f4:bf:d9:70:1a:c0:07:88:a7:b3:0f:d6:65:38:92:
82:91:a9:f5:22:d1:5a:b2:51:a5:7e:6d:4f:35:40:
5c:46:6d:c0:75:b3:e7:ea:0e:9c:9f:0c:24:f9:12:
00:f5:10:38:ba:e0:73:21:fd:85:fc:51:72:f5:ab:
b8:d7:bb:62:50:b8:52:b8:ed:6f:d3:77:af:3d:08:
b5:a4:b8:b0:98:84:f9:31:6c:9b:0e:f2:c0:8d:a2:
e6:32:5e:09:96:55:06:e2:85:e5:54:2d:0f:79:53:
44:b1:ea:f8:a6:d6:cb:19:51:ac:7c:bb:1c:d2:09:
af:f9:54:76:bd:20:ac:e1:38:7c:66:09:15:e4:76:
b8:d5:c1:3b:5b:92:a6:d6:cb:cc:72:c8:0c:9a:c3:
a4:a0:90:80:c6:c6:51:20:84:1b:13:13:d6:2e:a2:
66:3d:2f:3f:fc:b2:95:23:50:f8:69:ef:67:8a:09:
a5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:9F:75:83:1C:B7:ED:64:C9:EC:B3:43:DE:8E:AF:51:9E:53:D8:8E
X509v3 Authority Key Identifier:
keyid:BD:FF:25:6F:0A:D0:E8:1F:D1:86:45:68:28:CF:F5:72:63:7D:F2:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/BDFF256F0AD0E81FD186456828CFF572637DF2E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDFF256F0AD0E81FD186456828CFF572637DF2E5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/323830343a346437343a383030303a3a2f33332d3333203d3e20323638313937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4d74:8000::/33
Signature Algorithm: sha256WithRSAEncryption
bd:c3:43:f0:f6:9d:1f:65:a6:55:b0:01:30:f2:c8:bd:a3:bd:
e3:b7:40:08:d1:7d:a7:16:15:d6:f7:cc:64:77:d3:0b:20:9b:
d5:06:49:cb:dc:cb:44:d1:f9:ed:df:c2:45:d7:05:ba:07:f0:
54:df:3c:b4:21:ab:a5:c6:9e:55:29:14:f2:2f:f9:a0:b9:a9:
4e:96:b8:47:b4:6f:31:43:08:0c:56:12:f5:96:66:9c:6f:d4:
a0:b9:72:69:41:e9:c4:6a:9f:1f:16:85:1e:e0:a3:8e:ea:16:
71:15:32:33:35:09:80:a1:d8:63:f1:ff:7e:10:21:21:9d:95:
75:17:76:e4:95:7d:a7:1d:76:f2:93:d3:d7:cc:49:08:dc:e9:
bf:3f:7a:ab:ae:a3:98:89:73:69:89:14:5d:a9:01:bd:b5:84:
59:41:b7:0e:48:6b:0f:ae:99:ef:b8:69:5e:97:e6:ce:31:d2:
24:aa:18:2d:10:52:80:20:88:c3:d5:6f:58:d2:89:e0:13:5a:
29:00:d8:05:72:54:44:6a:9d:cf:30:95:7d:68:6d:db:ef:a7:
43:ac:0f:30:d3:85:cb:1e:6b:c6:b2:36:e2:c1:3f:db:59:ac:
e5:f3:58:29:aa:9d:f8:18:5f:69:83:65:64:5b:37:cb:6d:65:
ff:71:34:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:41:13 2025 by rpki-client