Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/J6gXJQkj5JyozSnVVvxpHpqS4bNAVWBScTYfA1AS2vcR/0/323830343a383463343a3a2f33322d3333203d3e20323732323830.roa
File: 323830343a383463343a3a2f33322d3333203d3e20323732323830.roa (raw, json)
Hash identifier: ZGhejQL8VcIjV/mGnEyeY9PEeuYnuQpav5yBeyE/tsg=
Subject key identifier: D3:3C:3D:C5:88:13:3E:AC:12:46:9C:BB:03:74:65:22:54:89:E9:E2
Certificate issuer: /CN=BF98452FACDEF11AFC25407211E3CE4273C16E95
Certificate serial: 527BB7325121A8C011DCAB56628F20A6F3DBABBF
Authority key identifier: BF:98:45:2F:AC:DE:F1:1A:FC:25:40:72:11:E3:CE:42:73:C1:6E:95
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF98452FACDEF11AFC25407211E3CE4273C16E95.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J6gXJQkj5JyozSnVVvxpHpqS4bNAVWBScTYfA1AS2vcR/0/323830343a383463343a3a2f33322d3333203d3e20323732323830.roa
Signing time: Wed 15 Jan 2025 18:29:42 +0000
ROA not before: Wed 15 Jan 2025 18:24:42 +0000
ROA not after: Wed 14 Jan 2026 18:29:42 +0000
asID: 272280
IP address blocks: 2804:84c4::/32 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:7b:b7:32:51:21:a8:c0:11:dc:ab:56:62:8f:20:a6:f3:db:ab:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF98452FACDEF11AFC25407211E3CE4273C16E95
Validity
Not Before: Jan 15 18:24:42 2025 GMT
Not After : Jan 14 18:29:42 2026 GMT
Subject: CN=D33C3DC588133EAC12469CBB037465225489E9E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9c:14:b3:a3:aa:39:03:25:65:fd:05:61:5d:
e2:d4:c0:49:45:2b:48:b5:94:5b:85:27:f5:97:03:
8e:13:c1:f0:6a:9d:4f:95:3f:0c:c0:fd:fd:11:4c:
98:0e:e3:b0:6f:fc:10:95:cf:df:af:69:dd:a4:eb:
8f:38:6a:82:13:cb:17:9d:c1:3c:75:90:a8:8a:86:
82:42:6e:73:03:96:68:c2:7b:95:96:e3:4c:b7:37:
46:76:36:1a:5f:54:51:05:7c:53:2e:56:eb:ca:9b:
36:54:87:78:e4:32:80:62:08:ec:c0:5b:40:41:14:
a2:8a:2a:f0:b1:80:9a:f6:a6:b7:c0:57:c4:bd:48:
4c:1c:07:15:90:5f:03:59:fb:7e:e9:43:b8:7b:8b:
26:58:7a:2e:25:39:7a:16:1a:dc:f0:85:fc:47:e4:
dc:da:ad:64:cd:c4:4b:fe:25:e6:83:41:34:6e:4a:
fc:e7:43:47:5e:9c:34:fc:3a:5c:89:d1:c6:3e:32:
de:74:c3:b2:4a:95:f4:1e:ff:3e:0a:aa:f8:85:7e:
fd:9a:96:4b:61:ce:c3:ff:b2:e3:49:1b:64:57:c2:
ba:f6:d2:d8:44:e6:fb:ae:c7:b7:cd:a6:e3:a5:ee:
14:ed:4a:91:97:09:62:2f:2f:28:5f:a9:3c:ad:16:
35:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3C:3D:C5:88:13:3E:AC:12:46:9C:BB:03:74:65:22:54:89:E9:E2
X509v3 Authority Key Identifier:
keyid:BF:98:45:2F:AC:DE:F1:1A:FC:25:40:72:11:E3:CE:42:73:C1:6E:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J6gXJQkj5JyozSnVVvxpHpqS4bNAVWBScTYfA1AS2vcR/0/BF98452FACDEF11AFC25407211E3CE4273C16E95.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF98452FACDEF11AFC25407211E3CE4273C16E95.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J6gXJQkj5JyozSnVVvxpHpqS4bNAVWBScTYfA1AS2vcR/0/323830343a383463343a3a2f33322d3333203d3e20323732323830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:84c4::/32
Signature Algorithm: sha256WithRSAEncryption
3d:b8:46:bf:96:b8:31:69:1c:07:28:62:d2:62:d2:aa:82:3f:
cf:37:37:c9:f2:4c:b2:e0:4d:be:0d:af:54:57:ee:45:7e:4a:
03:6b:6c:89:cb:d9:37:c9:16:13:b0:6e:99:3b:a8:3a:c5:c3:
4b:84:e8:d0:92:70:d7:33:90:8c:2e:a9:54:06:bd:0c:56:07:
38:e6:3f:6f:cb:f6:17:91:0b:20:35:27:77:60:5c:4b:d1:e6:
31:73:81:30:3f:44:a3:2d:e1:50:8b:88:5e:21:0f:4e:44:77:
a5:a3:3c:06:76:07:85:56:32:ef:b2:e1:32:38:71:88:7b:53:
6e:b2:51:b6:4d:f7:cb:b5:ed:c1:0f:37:73:5e:52:f5:03:8e:
0d:84:36:53:96:5b:ed:79:b2:41:7f:fa:dc:89:68:98:bf:93:
20:e3:5b:29:2a:ae:f5:36:21:e9:d2:ab:8e:c6:f3:fd:16:cc:
c2:9d:bd:df:c4:d8:7f:d8:57:c0:7b:6f:84:9b:74:4f:06:25:
ae:ff:eb:a0:9f:69:da:83:80:25:52:e4:37:1a:02:e5:df:e1:
5e:88:a1:c1:58:2b:29:9b:91:79:65:4b:47:db:ef:28:14:4e:
c7:66:32:d0:dd:9a:9c:97:12:9c:1f:07:ea:c2:78:52:f4:6f:
14:bb:dd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:01:39 2025 by rpki-client