Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a303a383a3a2f36342d3634203d3e203238323032.roa
File: 323830343a3837633a303a383a3a2f36342d3634203d3e203238323032.roa (raw, json)
Hash identifier: eB4+0/KL9oQb/qtgAX2J6LjXp249WajHIiLr7PkgelY=
Subject key identifier: D8:C9:C9:47:4F:C6:E4:C5:EF:17:16:B7:1E:C1:45:8D:BD:55:A3:D4
Certificate issuer: /CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
Certificate serial: 4474E6762F53A360CA800D8A249E5BD2AD0C5768
Authority key identifier: BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a303a383a3a2f36342d3634203d3e203238323032.roa
Signing time: Mon 13 Jan 2025 13:32:37 +0000
ROA not before: Mon 13 Jan 2025 13:27:37 +0000
ROA not after: Mon 12 Jan 2026 13:32:37 +0000
asID: 28202
IP address blocks: 2804:87c:0:8::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:74:e6:76:2f:53:a3:60:ca:80:0d:8a:24:9e:5b:d2:ad:0c:57:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
Validity
Not Before: Jan 13 13:27:37 2025 GMT
Not After : Jan 12 13:32:37 2026 GMT
Subject: CN=D8C9C9474FC6E4C5EF1716B71EC1458DBD55A3D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7e:48:fb:02:df:16:0e:78:90:5a:19:5c:30:
97:09:c3:c2:ca:a2:80:9e:98:0e:2b:1e:a0:89:1e:
b6:59:00:97:3f:30:70:57:16:cc:82:74:20:11:da:
8c:9a:6a:f0:63:29:5e:2a:b3:c1:46:19:d2:50:7b:
b5:b8:1b:5b:8f:f6:3c:8c:d8:53:d9:3f:ed:d7:0b:
ec:bb:e2:ae:36:99:8b:be:e0:ce:cd:c2:f4:8b:66:
8e:1d:ee:7c:f5:fb:1f:34:42:9d:d7:7b:50:3d:56:
b3:fb:fa:99:29:7d:04:46:5f:fd:2e:41:68:08:17:
9c:d3:9b:d8:4a:cb:1f:99:25:d0:f6:10:7f:a4:64:
5e:44:b9:ea:2e:72:d6:22:eb:07:9c:74:e2:df:5b:
13:04:35:1b:62:f6:27:b4:01:aa:be:f0:a0:92:0b:
f0:1b:45:55:4a:2c:d4:a5:5e:cb:73:fc:29:80:d2:
39:fe:af:66:07:c9:fc:53:f6:e1:69:fd:c5:4c:79:
42:bf:f7:79:5c:f8:0c:a0:27:c3:b2:fc:6d:0b:2c:
f2:d1:2c:3b:d3:ef:76:94:ae:f7:0e:4a:16:ca:04:
c1:52:49:87:78:cb:98:eb:c6:65:8d:76:86:0f:37:
eb:44:9b:e9:ad:63:71:4a:f9:02:43:a3:34:0a:c6:
03:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C9:C9:47:4F:C6:E4:C5:EF:17:16:B7:1E:C1:45:8D:BD:55:A3:D4
X509v3 Authority Key Identifier:
keyid:BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a303a383a3a2f36342d3634203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:87c:0:8::/64
Signature Algorithm: sha256WithRSAEncryption
94:59:72:a0:ae:57:3b:20:ce:45:26:9c:11:3c:90:f7:03:c5:
a9:ea:ed:74:92:e2:b2:b9:f8:dd:63:29:fc:e1:62:0a:51:89:
5d:4e:76:23:96:b7:63:8b:c6:5c:07:98:70:9a:f0:7d:12:9e:
ec:4b:09:6a:72:83:18:b0:96:a2:f4:cc:db:00:00:b1:d6:cb:
fd:e8:40:e9:32:f2:31:90:1b:08:1e:40:9f:6a:a7:b2:57:3d:
e4:fb:91:b1:39:4f:7c:76:08:86:c9:a4:7d:4b:72:e2:61:40:
8d:f3:e0:02:2a:31:d2:8f:1a:04:96:c2:1e:fa:96:be:62:81:
4e:16:2a:6c:ba:ec:bb:f1:5d:83:10:be:df:a6:c6:8a:c6:b2:
cc:d3:4a:a9:f5:a1:ad:98:a2:2a:95:af:50:92:4e:72:1b:dc:
be:a9:73:38:c3:57:b7:9b:d2:6b:ad:a9:22:05:02:10:cf:5d:
d0:c2:93:8b:9a:24:3d:41:07:35:91:6b:45:0e:41:c8:d9:b6:
5d:48:09:77:ce:ca:0b:39:11:d2:4c:ea:2f:5d:9d:19:3d:0d:
8f:15:10:d3:4a:1f:d2:e4:be:af:f3:a4:0d:b1:55:7a:e8:8c:
0c:2c:2b:23:5a:9c:36:36:f4:b9:54:9a:b1:11:53:26:e5:21:
80:a6:f2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:18:58 2025 by rpki-client