Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a313a3a2f34382d3438203d3e203238323032.roa
File: 323830343a3837633a313a3a2f34382d3438203d3e203238323032.roa (raw, json)
Hash identifier: 24UYO7XGbSAP95TZh4SoJ0uUgvGGxUskS5uMviGEh3Y=
Subject key identifier: AA:96:35:AC:6A:AF:DA:63:86:09:02:7D:FA:E3:84:04:FF:61:92:59
Certificate issuer: /CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
Certificate serial: 7B5A23A72F7D0039FDC63103606E5AC623797F58
Authority key identifier: BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a313a3a2f34382d3438203d3e203238323032.roa
Signing time: Mon 13 Jan 2025 13:32:22 +0000
ROA not before: Mon 13 Jan 2025 13:27:22 +0000
ROA not after: Mon 12 Jan 2026 13:32:22 +0000
asID: 28202
IP address blocks: 2804:87c:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:5a:23:a7:2f:7d:00:39:fd:c6:31:03:60:6e:5a:c6:23:79:7f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
Validity
Not Before: Jan 13 13:27:22 2025 GMT
Not After : Jan 12 13:32:22 2026 GMT
Subject: CN=AA9635AC6AAFDA638609027DFAE38404FF619259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:45:b6:6b:5b:ba:ab:14:24:e8:52:4b:42:c8:
be:2d:64:1c:9e:17:df:06:8b:ca:58:17:11:8e:dc:
80:e8:1e:9c:ba:59:d4:5e:49:29:58:50:8b:c6:9f:
bc:f1:04:85:91:b4:a4:09:bc:46:eb:df:19:3c:1b:
04:04:bb:20:7a:e3:7b:41:99:6c:10:03:22:90:eb:
1a:00:68:17:1b:23:f3:c0:32:23:d5:61:67:40:24:
c5:78:fc:b9:eb:40:27:85:ed:94:23:e1:d9:33:79:
0e:6f:ae:91:20:da:61:38:60:dc:e0:22:e6:56:d4:
93:09:19:49:19:5e:0b:d6:4f:25:f5:0c:cc:ac:08:
42:cc:d2:30:90:76:8f:d6:f1:9a:8d:6d:ef:1e:62:
41:b3:21:c7:eb:3f:65:a2:d2:58:8b:64:27:e9:70:
f1:f9:20:7c:d4:94:f3:fd:29:d3:4d:ed:63:0b:d4:
48:d6:2f:11:e9:10:07:75:5c:18:78:29:ad:52:6f:
1d:40:5d:eb:ad:f5:66:67:87:cb:de:6a:cb:14:c5:
71:e7:15:fc:f2:a9:db:ef:3c:50:97:74:d1:16:d6:
89:91:6c:e9:c0:21:81:c2:db:16:ab:74:2f:b9:f7:
65:50:a8:55:b7:37:42:5e:02:a0:30:c2:40:e7:ff:
67:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:96:35:AC:6A:AF:DA:63:86:09:02:7D:FA:E3:84:04:FF:61:92:59
X509v3 Authority Key Identifier:
keyid:BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a313a3a2f34382d3438203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:87c:1::/48
Signature Algorithm: sha256WithRSAEncryption
7b:78:be:b8:08:08:eb:b0:e4:2f:eb:d5:96:09:8e:72:37:f6:
a6:12:0e:4e:69:3c:50:fa:c7:2d:09:88:b3:c9:e7:79:3c:2a:
a3:70:30:bb:91:42:d2:da:45:eb:dd:71:ca:8b:70:be:55:8f:
9d:6f:39:bf:90:46:38:9a:59:e7:22:a9:24:d6:9e:ab:ca:30:
a4:0f:42:73:3d:d0:7b:8c:82:1c:db:58:e4:ea:24:9a:6f:a7:
8f:c6:35:7a:1d:ed:77:8d:50:ab:80:9a:0c:ca:a0:6c:cf:06:
0f:3b:3a:b3:1f:82:52:1b:91:79:9d:72:e6:82:97:05:bd:b7:
2a:bd:b0:0e:c1:9f:31:cc:a3:c1:d9:36:00:66:39:9a:d7:75:
a0:ce:82:4b:53:0f:a0:1d:7f:14:35:e6:a2:33:dd:88:b2:74:
09:c9:c7:7c:9a:c6:06:b0:de:c4:01:61:ab:66:c9:7e:77:fc:
1d:95:ed:6a:1d:95:4f:9e:f0:68:cd:01:fe:fd:01:71:27:ed:
43:9d:0d:ca:09:a8:f2:03:47:03:2f:43:3b:47:db:7f:46:96:
9a:d2:ee:2c:9a:8d:46:0f:32:de:c0:69:f6:2f:65:2c:f8:7a:
46:1a:cf:00:c1:25:00:e9:01:39:f7:ff:d3:25:02:dd:c4:64:
1e:d0:30:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:17:58 2025 by rpki-client