Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/323830343a353264633a3a2f33322d3438203d3e20323638353436.roa
File: 323830343a353264633a3a2f33322d3438203d3e20323638353436.roa (raw, json)
Hash identifier: XVdHhkRBfW6ySiIgI5r1CNRC97iz0lUoVli4Jb4QEVc=
Subject key identifier: 0C:84:7D:AC:AD:08:6A:84:ED:BB:3C:FD:DB:E8:9C:78:82:85:30:5B
Certificate issuer: /CN=37CA3286264D504D79210CC12A74E15D2E230251
Certificate serial: 28E4591D13AE8EFAD1AC941FE4F773520F499B42
Authority key identifier: 37:CA:32:86:26:4D:50:4D:79:21:0C:C1:2A:74:E1:5D:2E:23:02:51
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37CA3286264D504D79210CC12A74E15D2E230251.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/323830343a353264633a3a2f33322d3438203d3e20323638353436.roa
Signing time: Mon 12 Aug 2024 13:18:03 +0000
ROA not before: Mon 12 Aug 2024 13:13:03 +0000
ROA not after: Mon 11 Aug 2025 13:18:03 +0000
asID: 268546
IP address blocks: 2804:52dc::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:e4:59:1d:13:ae:8e:fa:d1:ac:94:1f:e4:f7:73:52:0f:49:9b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37CA3286264D504D79210CC12A74E15D2E230251
Validity
Not Before: Aug 12 13:13:03 2024 GMT
Not After : Aug 11 13:18:03 2025 GMT
Subject: CN=0C847DACAD086A84EDBB3CFDDBE89C788285305B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3e:8e:cd:d0:0d:38:e7:e5:56:06:0b:f2:00:
0a:18:c7:7f:e2:38:dc:9e:19:c3:d8:13:91:d5:67:
a4:2e:29:36:04:4f:91:2e:3e:13:7a:e5:f7:06:f3:
52:12:1b:9b:6a:b1:8c:04:4a:a6:4c:5c:6a:55:16:
74:d6:2e:04:ff:bf:16:9e:29:dd:6e:a2:1a:5d:3c:
f4:28:e9:d2:24:08:e9:15:5e:62:a3:95:f9:6c:9b:
de:bc:6b:02:ee:49:dc:6f:9e:b7:25:e8:a1:b6:43:
3c:97:08:08:3d:02:dc:18:dc:4e:d9:5e:e2:3d:3d:
aa:a6:9c:07:a2:62:3f:58:70:9a:ed:ca:76:83:b5:
89:32:41:a6:26:eb:69:43:ee:e7:b4:06:6f:31:99:
91:3c:8e:43:5c:5e:3d:f0:72:0c:5d:fc:b8:33:50:
f1:e1:68:90:8c:21:2e:c5:dd:63:50:9f:bc:74:d7:
ae:3d:f0:72:b4:02:98:53:4b:96:cf:a8:a3:c7:3d:
9f:e6:65:7a:c4:d9:5e:ed:a8:ba:8f:de:f8:57:5b:
64:a2:1b:14:96:d6:80:59:88:30:11:4c:41:25:3f:
73:cb:60:bf:de:79:5e:e1:c0:d7:23:c4:9b:d3:aa:
15:a1:f1:a3:12:90:7b:05:6b:13:22:f8:87:53:e3:
b1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:84:7D:AC:AD:08:6A:84:ED:BB:3C:FD:DB:E8:9C:78:82:85:30:5B
X509v3 Authority Key Identifier:
keyid:37:CA:32:86:26:4D:50:4D:79:21:0C:C1:2A:74:E1:5D:2E:23:02:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/37CA3286264D504D79210CC12A74E15D2E230251.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37CA3286264D504D79210CC12A74E15D2E230251.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/323830343a353264633a3a2f33322d3438203d3e20323638353436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:52dc::/32
Signature Algorithm: sha256WithRSAEncryption
1e:9c:5b:3e:c9:b2:ab:5e:02:14:1e:a7:91:8f:46:a7:29:7a:
d4:7e:44:1f:2c:53:5c:fe:96:94:31:fa:7a:cc:ba:23:5d:5e:
e6:a7:c5:74:ca:e3:b8:02:f3:46:ba:e8:52:01:5f:ac:34:c7:
cd:d7:2f:7d:8a:72:87:05:34:8e:73:6e:05:d3:ca:bc:fd:73:
0f:25:17:22:e3:0a:0b:d0:be:33:9a:75:ff:ea:eb:ec:da:2e:
ab:b9:e7:23:0f:b7:66:e1:e0:fe:25:0d:d8:d8:97:14:3c:83:
d4:40:15:fb:69:87:3a:63:29:80:27:cf:3d:be:6e:1b:74:ee:
49:78:40:84:0e:38:bf:20:33:e8:23:24:76:b3:df:b6:c5:e7:
cf:4d:f1:08:df:b9:b3:20:1a:e0:b3:17:d6:c4:71:7a:b0:ce:
c4:23:59:a4:e3:eb:44:d1:15:6f:4e:b7:22:83:fc:50:f9:51:
44:f9:e5:63:6d:be:ce:7d:af:fe:b2:e3:aa:7d:a0:d3:04:23:
8c:e8:44:f4:4f:be:a1:e7:74:9b:eb:a8:e6:29:f5:5c:22:90:
9d:c9:4c:3c:e3:8b:66:c0:90:fa:fa:a7:a5:13:be:12:6d:3e:
c7:b3:38:f5:ef:95:3a:1b:68:cf:61:2e:7f:ab:b2:a4:5e:bd:
6b:18:e0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:19:48 2025 by rpki-client