Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/323830343a323563303a3a2f33322d3332203d3e20323634333030.roa
File: 323830343a323563303a3a2f33322d3332203d3e20323634333030.roa (raw, json)
Hash identifier: gehwMNPkrVhq3Uo2GupmKLI1a4h5herKfI1oJfHMfOI=
Subject key identifier: C0:AA:43:4A:F4:E2:18:5C:83:84:50:21:96:87:1E:BB:5B:10:F2:D3
Certificate issuer: /CN=9BAD7480D68EE59406D3FBBE7F30557285587474
Certificate serial: 683AB71B872EB947B052BE0B8FB6A2288439C45A
Authority key identifier: 9B:AD:74:80:D6:8E:E5:94:06:D3:FB:BE:7F:30:55:72:85:58:74:74
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BAD7480D68EE59406D3FBBE7F30557285587474.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/323830343a323563303a3a2f33322d3332203d3e20323634333030.roa
Signing time: Thu 04 Apr 2024 05:22:21 +0000
ROA not before: Thu 04 Apr 2024 05:17:21 +0000
ROA not after: Thu 03 Apr 2025 05:22:21 +0000
asID: 264300
IP address blocks: 2804:25c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:3a:b7:1b:87:2e:b9:47:b0:52:be:0b:8f:b6:a2:28:84:39:c4:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BAD7480D68EE59406D3FBBE7F30557285587474
Validity
Not Before: Apr 4 05:17:21 2024 GMT
Not After : Apr 3 05:22:21 2025 GMT
Subject: CN=C0AA434AF4E2185C8384502196871EBB5B10F2D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:82:17:91:ce:a0:06:10:3c:f2:cc:16:c4:13:
75:fa:56:01:e8:f3:4d:28:a7:1b:7f:d0:ff:72:6e:
7c:07:81:6f:e4:69:c1:90:ba:9e:a1:59:9d:3e:9f:
2b:0e:cd:4a:07:1e:93:97:13:88:b9:94:a2:57:d0:
0f:bb:36:cb:d5:6c:8e:4b:bf:b1:7d:35:3d:e2:db:
53:37:45:59:9a:ed:96:20:cd:0f:3a:c7:04:fa:49:
f5:af:25:80:a4:e5:3a:df:d0:ad:fc:25:4f:e9:24:
c7:ce:fa:2a:fe:75:54:f4:d8:96:70:58:6b:88:7f:
3d:2a:1c:6d:3c:4b:3c:cd:97:b3:37:c4:14:14:ef:
7d:cc:7a:a4:56:76:d6:9c:ac:c3:d3:f9:50:55:75:
6d:ed:84:c8:2f:ff:d4:70:a2:88:c1:6d:21:e7:bd:
d0:ad:d0:46:b8:1e:55:76:0a:ed:3d:84:c8:ed:a5:
f0:59:98:29:33:56:21:b1:ce:bd:69:cf:0e:7a:5c:
56:60:31:d1:95:ff:ae:d2:a7:07:be:f8:c2:c2:1b:
f3:43:f5:e3:23:c4:69:00:36:a6:68:5f:63:bd:1c:
38:af:fb:a8:79:09:1c:97:e1:9d:c3:d5:92:68:d1:
14:97:7a:67:9e:8a:1b:03:b2:c6:3c:f7:79:46:8b:
eb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:AA:43:4A:F4:E2:18:5C:83:84:50:21:96:87:1E:BB:5B:10:F2:D3
X509v3 Authority Key Identifier:
keyid:9B:AD:74:80:D6:8E:E5:94:06:D3:FB:BE:7F:30:55:72:85:58:74:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/9BAD7480D68EE59406D3FBBE7F30557285587474.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BAD7480D68EE59406D3FBBE7F30557285587474.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/323830343a323563303a3a2f33322d3332203d3e20323634333030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:25c0::/32
Signature Algorithm: sha256WithRSAEncryption
24:1f:b6:b5:aa:40:8e:61:60:c8:ae:12:b6:c9:87:52:b1:9e:
b2:1f:f3:bc:58:8a:3e:f5:74:9c:61:ae:73:8b:e8:5d:52:04:
87:cc:9f:e6:e7:f6:73:dc:4f:fe:40:3d:e1:ec:0c:0a:b2:af:
2a:c9:4e:75:94:06:03:b5:d4:cf:4e:4e:f4:cd:49:ec:6d:bb:
51:b0:90:ee:37:a2:78:32:4f:9a:c4:1f:6b:8d:f5:d5:5d:f6:
85:c2:d3:ba:15:2b:03:30:bb:1d:6e:fd:d6:c5:6f:33:04:5a:
9a:a5:c9:8b:2e:8f:aa:45:11:ae:50:d4:01:83:64:7f:09:2d:
1c:c6:26:17:cd:cf:1f:bf:4e:15:15:80:21:30:a7:9a:c1:e4:
2b:5b:5c:35:f8:d2:92:f6:dd:13:e0:d0:ac:1f:27:d3:2b:24:
bd:2a:19:ff:12:87:31:08:10:79:c3:c4:6b:a9:1b:e1:96:b6:
39:bd:2c:3b:2b:80:13:bd:8f:cb:e1:aa:79:99:bf:60:32:d4:
81:ef:10:c8:ca:50:33:27:0f:b0:8c:9a:0a:83:2d:e2:d3:4d:
eb:cb:8f:e2:99:56:60:85:a7:87:da:ac:e4:96:fd:36:7e:9f:
24:2b:63:69:1b:40:ff:33:cb:7e:8a:84:85:59:41:d4:30:28:
19:3d:ea:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:53:11 2025 by rpki-client