Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a323030303a3a2f33362d3336203d3e20323632373239.roa
File: 323830343a313664383a323030303a3a2f33362d3336203d3e20323632373239.roa (raw, json)
Hash identifier: Zbil8oLSqPih14E/n+7WStns3RIyPtJfkJ/ZHfieGqI=
Subject key identifier: BF:7C:D5:A3:68:31:89:E2:53:64:CE:FE:65:4E:F8:8E:F9:95:97:1E
Certificate issuer: /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial: 254C2D8239DD22954BEDFD7CAEA7B3D47EEDD636
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a323030303a3a2f33362d3336203d3e20323632373239.roa
Signing time: Mon 15 Jul 2024 13:42:26 +0000
ROA not before: Mon 15 Jul 2024 13:37:26 +0000
ROA not after: Mon 14 Jul 2025 13:42:26 +0000
asID: 262729
IP address blocks: 2804:16d8:2000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:4c:2d:82:39:dd:22:95:4b:ed:fd:7c:ae:a7:b3:d4:7e:ed:d6:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Validity
Not Before: Jul 15 13:37:26 2024 GMT
Not After : Jul 14 13:42:26 2025 GMT
Subject: CN=BF7CD5A3683189E25364CEFE654EF88EF995971E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e3:27:fa:45:cc:37:a2:9d:6d:9d:c0:30:fa:
5f:5e:96:a5:17:29:38:59:fc:a5:ba:d1:d6:ad:76:
95:c6:e0:19:de:ff:48:cd:c8:a2:db:74:36:d0:8d:
bc:a4:9a:1a:78:ad:05:57:e2:9a:b6:4b:3f:12:28:
e8:69:d5:c7:96:5e:aa:8d:85:cb:bb:8a:28:d8:0e:
23:2e:7c:51:37:38:c2:ab:97:2f:38:c4:72:f6:83:
f2:3f:61:68:0c:4b:ae:31:84:7d:c4:e0:be:5d:9c:
71:58:35:82:82:62:1f:e5:95:9d:ed:b2:2f:2d:64:
54:98:62:bb:4f:60:77:8f:e7:12:d8:61:39:e0:f8:
a5:60:bc:00:f8:3b:51:3e:92:fb:82:02:3d:56:b8:
7c:29:50:72:78:fb:8b:bd:ba:ce:ac:ad:b0:9b:5f:
e8:44:df:37:5b:5e:a7:5c:ff:7e:b7:24:12:b6:4d:
36:25:6c:19:62:44:91:8b:5b:0d:df:b3:c7:7c:3b:
ae:62:3d:46:97:f3:70:a3:f7:a2:76:d6:05:81:ab:
79:06:b4:c1:8f:d4:e7:d8:35:71:98:76:66:f7:b9:
c8:b8:ea:79:4a:ab:fd:4f:f3:79:42:57:41:2f:ec:
2e:09:ed:f2:e3:8b:20:00:3d:0f:40:09:db:96:69:
22:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:7C:D5:A3:68:31:89:E2:53:64:CE:FE:65:4E:F8:8E:F9:95:97:1E
X509v3 Authority Key Identifier:
keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a323030303a3a2f33362d3336203d3e20323632373239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:16d8:2000::/36
Signature Algorithm: sha256WithRSAEncryption
91:9d:ac:be:be:9b:b0:e1:40:fc:28:89:fa:fb:85:b3:2b:a8:
b3:7e:e7:a1:f3:53:10:a8:ea:ed:99:48:f8:8b:48:28:3f:7f:
39:58:07:38:47:bd:0d:9b:f1:0a:52:28:3b:40:9c:ba:d4:1b:
49:9d:fb:0d:0a:aa:5f:23:36:45:7b:5b:2b:9f:8b:28:66:9c:
a8:02:5a:ae:df:1d:17:52:c4:67:e0:43:77:80:b3:a8:e9:90:
de:1b:32:5b:d6:f3:4f:cb:a9:32:f3:9b:35:a0:b5:c9:10:51:
e1:c9:8d:f7:ea:29:56:41:d0:88:16:7f:26:dd:75:8c:b9:5b:
75:1c:91:0d:a2:35:66:ac:18:d1:e0:6c:53:6b:1a:dc:c1:1e:
70:22:43:04:fe:a0:30:3a:a2:99:56:54:15:42:88:d6:98:60:
b6:95:01:74:4b:48:65:5c:01:b1:c6:8d:f6:82:40:fa:1d:ea:
ed:cd:a2:6e:1c:15:46:15:0b:3a:d4:d5:b9:a6:9a:ea:5e:af:
9c:a2:aa:2f:42:79:5c:08:56:a2:5d:cb:e5:2f:e4:40:f4:0f:
25:92:b3:b3:a9:2c:fa:b0:ab:83:ac:50:d1:8b:83:24:68:71:
4b:81:6e:59:36:4e:5d:90:f7:4a:e4:6a:83:00:89:d6:28:62:
15:3c:c1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:28:14 2025 by rpki-client