Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/323830343a346265303a383030303a3a2f33332d3333203d3e20323637333334.roa
File: 323830343a346265303a383030303a3a2f33332d3333203d3e20323637333334.roa (raw, json)
Hash identifier: YGsG21UwYvg7OJLZ3+MUihQTniRG8fkS3ihHyc9pRAQ=
Subject key identifier: DC:86:43:F9:40:6F:8E:A0:EE:AD:F6:01:65:5E:57:FE:EF:CF:A9:2F
Certificate issuer: /CN=D2FC8637672F6995F171A261D51674A50FE454A6
Certificate serial: 7B8FD2BF8574CB96C2DC695B46455F7AC55C5105
Authority key identifier: D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/323830343a346265303a383030303a3a2f33332d3333203d3e20323637333334.roa
Signing time: Wed 03 Apr 2024 18:30:15 +0000
ROA not before: Wed 03 Apr 2024 18:25:15 +0000
ROA not after: Wed 02 Apr 2025 18:30:15 +0000
asID: 267334
IP address blocks: 2804:4be0:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:8f:d2:bf:85:74:cb:96:c2:dc:69:5b:46:45:5f:7a:c5:5c:51:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2FC8637672F6995F171A261D51674A50FE454A6
Validity
Not Before: Apr 3 18:25:15 2024 GMT
Not After : Apr 2 18:30:15 2025 GMT
Subject: CN=DC8643F9406F8EA0EEADF601655E57FEEFCFA92F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:12:01:7f:c2:ac:ca:8c:4c:48:4a:27:8d:6f:
3f:80:2f:83:c1:4f:b5:97:ce:37:41:dc:66:3a:16:
4c:1b:92:b9:57:77:33:17:5e:39:62:13:e6:98:0a:
6d:81:19:79:00:4d:fb:d2:85:a7:0c:ec:52:35:54:
0c:63:c2:cb:7b:b0:fc:f6:30:53:55:5f:8a:3b:47:
00:f0:49:cf:8a:b2:4b:24:ef:9e:64:be:cc:52:c5:
e7:87:de:76:e4:dc:e0:2d:7c:88:d9:4b:c1:6b:c6:
99:92:86:6d:75:a2:e0:e1:3e:15:8d:41:ec:0a:69:
03:af:b1:1e:e0:7f:55:d2:ff:d5:f6:c1:7d:9d:04:
d4:7d:a1:14:80:8d:ed:34:74:11:01:d9:8f:9e:d5:
de:2c:b9:44:94:c8:09:3a:db:94:6c:78:f5:67:c5:
b3:0a:e2:fb:14:72:31:82:7f:c3:28:b2:31:7f:dd:
38:87:8e:9c:79:69:f9:86:28:f7:d7:90:ab:a8:ce:
32:3a:d6:29:8a:ec:1b:40:45:ae:9d:37:96:fe:2b:
56:5c:3f:52:e6:b8:b9:ce:46:2b:cd:d7:60:c3:67:
15:54:bf:be:fe:6f:33:ee:88:7a:8b:c7:0a:c0:0b:
81:9e:98:0c:9f:be:95:71:07:51:92:00:85:80:bd:
e1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:86:43:F9:40:6F:8E:A0:EE:AD:F6:01:65:5E:57:FE:EF:CF:A9:2F
X509v3 Authority Key Identifier:
keyid:D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/323830343a346265303a383030303a3a2f33332d3333203d3e20323637333334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4be0:8000::/33
Signature Algorithm: sha256WithRSAEncryption
70:b0:d8:38:a1:9d:0a:62:d6:16:10:a6:4c:5c:9a:5e:f2:ef:
b4:1e:0c:e9:4d:e0:15:ee:35:f9:be:7e:6d:39:8d:0d:31:47:
e0:e1:44:12:df:89:7d:d2:48:b3:6e:a0:54:eb:e7:f7:fe:eb:
b0:d8:c5:d1:10:c2:8e:2f:66:64:00:c7:a6:30:ed:28:2f:d8:
f3:49:f3:fa:d6:df:8f:9d:35:23:32:bf:9d:7a:ec:3c:cc:b6:
10:6f:d4:bf:c8:e8:70:54:5b:46:a3:48:d7:d4:e0:49:21:d2:
51:43:4a:88:db:86:a9:e8:10:ce:44:65:33:19:fe:7a:b4:33:
50:c7:77:1e:57:ba:c8:7f:d0:53:78:33:de:d2:c7:c3:35:b9:
9d:65:40:03:f3:57:58:90:97:fb:d6:b0:fe:06:46:70:8a:d0:
62:c3:0a:7b:8b:58:3a:24:ba:04:ed:96:d3:45:92:75:8b:49:
f2:ce:e1:c6:b7:7d:bc:2f:f9:10:82:fc:f9:e7:72:dd:1f:dc:
c5:c5:f4:57:3a:fc:a2:d2:38:c2:03:25:f5:d8:bb:5b:8b:ce:
d4:44:7c:df:91:31:5e:9b:e1:d1:40:45:70:59:1f:27:b4:57:
6e:6d:95:a5:74:9b:c5:3f:c8:a1:a0:a4:40:b5:2c:5e:22:ca:
25:d6:88:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:54:54 2025 by rpki-client