Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BTx2dB5PiTNWxBo5Y6Gsgv5DB5gRy3i8DJQYJWwLP1BZ/0/323830343a386434343a3a2f33322d3333203d3e20323733333436.roa
File: 323830343a386434343a3a2f33322d3333203d3e20323733333436.roa (raw, json)
Hash identifier: w7Joe0bYKksycT+//o1DwO22oMaFtYUmCepqNkaI/P0=
Subject key identifier: 1C:E3:20:5D:34:32:E9:F3:7B:45:CC:3B:D6:62:7C:16:63:23:2A:26
Certificate issuer: /CN=43DCC657FEB7D4DEBBD5465808D22DB6E74B004D
Certificate serial: 680656380F3A875152BFB6D30707DEE8D83BD11B
Authority key identifier: 43:DC:C6:57:FE:B7:D4:DE:BB:D5:46:58:08:D2:2D:B6:E7:4B:00:4D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43DCC657FEB7D4DEBBD5465808D22DB6E74B004D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BTx2dB5PiTNWxBo5Y6Gsgv5DB5gRy3i8DJQYJWwLP1BZ/0/323830343a386434343a3a2f33322d3333203d3e20323733333436.roa
Signing time: Wed 12 Feb 2025 12:31:11 +0000
ROA not before: Wed 12 Feb 2025 12:26:11 +0000
ROA not after: Wed 11 Feb 2026 12:31:11 +0000
asID: 273346
IP address blocks: 2804:8d44::/32 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:06:56:38:0f:3a:87:51:52:bf:b6:d3:07:07:de:e8:d8:3b:d1:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43DCC657FEB7D4DEBBD5465808D22DB6E74B004D
Validity
Not Before: Feb 12 12:26:11 2025 GMT
Not After : Feb 11 12:31:11 2026 GMT
Subject: CN=1CE3205D3432E9F37B45CC3BD6627C1663232A26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d2:81:01:95:8e:32:35:a6:2a:20:2c:3d:25:
c8:2c:de:6b:f3:8e:9f:ae:fd:2e:d1:05:59:43:22:
30:e5:94:ce:a9:9d:50:a2:3f:35:39:16:6f:78:9e:
50:a8:d9:77:4a:4a:13:66:9c:0c:6a:a7:b3:80:e2:
e1:dd:8e:8d:17:2e:e7:e6:e2:7a:42:fb:02:ef:2f:
11:8f:27:52:ce:5b:d7:0a:89:7e:bb:9b:5e:f0:d7:
38:69:f5:42:ae:d9:d7:7d:f6:47:fa:5d:06:32:a9:
80:a3:33:e2:08:f3:06:fd:28:0a:d3:30:73:ca:11:
fb:b6:40:cd:0f:43:46:6a:55:ba:ff:d5:8e:14:21:
cc:05:39:d5:e3:65:c2:d0:44:b6:42:ac:c3:d4:5b:
01:63:fe:ba:5c:69:a2:e9:e8:03:f5:9a:30:70:04:
8a:5e:a2:fc:9b:d7:47:e5:b1:af:c4:b9:17:ff:46:
42:37:58:1e:68:58:c5:23:66:12:c8:96:c7:28:29:
c3:37:29:29:3b:cf:52:d2:82:e5:17:26:7b:cd:ef:
29:84:ab:c8:97:93:e2:c9:5f:94:67:a4:73:77:92:
48:3e:fe:81:4f:ec:9a:cf:bf:ad:3a:a0:9f:97:8f:
1f:c4:7a:16:4d:24:63:55:0b:36:85:3e:7e:17:f6:
bd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E3:20:5D:34:32:E9:F3:7B:45:CC:3B:D6:62:7C:16:63:23:2A:26
X509v3 Authority Key Identifier:
keyid:43:DC:C6:57:FE:B7:D4:DE:BB:D5:46:58:08:D2:2D:B6:E7:4B:00:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BTx2dB5PiTNWxBo5Y6Gsgv5DB5gRy3i8DJQYJWwLP1BZ/0/43DCC657FEB7D4DEBBD5465808D22DB6E74B004D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43DCC657FEB7D4DEBBD5465808D22DB6E74B004D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTx2dB5PiTNWxBo5Y6Gsgv5DB5gRy3i8DJQYJWwLP1BZ/0/323830343a386434343a3a2f33322d3333203d3e20323733333436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8d44::/32
Signature Algorithm: sha256WithRSAEncryption
b1:2d:c8:b5:e7:dc:8f:e0:29:75:6e:d4:61:48:20:fe:1f:3b:
0b:6a:60:24:2a:cb:ee:ed:31:7b:1c:5e:ed:38:bd:13:9b:5e:
b4:4a:01:e5:12:61:4d:75:cf:c1:c5:5c:aa:4b:41:b4:95:f5:
63:a2:15:ea:bd:7f:ec:8d:93:f0:3f:80:6d:01:13:bf:f6:bb:
00:1a:30:89:ad:33:93:77:48:15:71:03:d4:e2:2d:68:c9:1d:
af:87:5c:8a:4a:3e:e5:21:19:b8:a2:0d:2f:b4:48:4e:74:b5:
ce:6f:57:16:09:98:8a:12:65:ae:b4:19:08:88:d7:bc:fe:d7:
59:d1:e3:33:0c:84:b4:d7:e6:cb:4c:34:4f:27:ce:48:03:d0:
67:dd:b9:27:a9:7a:55:bd:2e:2d:65:c6:04:2d:20:55:73:a9:
34:42:00:f9:fb:e9:9a:08:3d:12:d0:2e:90:83:e6:cf:bf:39:
33:17:d2:07:e8:9f:c1:43:3f:05:b5:70:d1:dd:aa:42:5a:62:
5f:fd:a9:02:c9:7b:9d:a6:99:8b:51:38:b5:c6:2e:2e:6e:77:
a4:c5:04:13:3f:72:3d:82:8d:fa:53:a0:bb:7d:e1:56:2e:4e:
f0:93:8a:7e:37:82:07:b2:aa:70:ea:57:56:ef:e2:38:e3:58:
33:db:bc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:29:14 2025 by rpki-client