Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a323a3a2f34382d3438203d3e203238323032.roa
File: 323830343a3837633a323a3a2f34382d3438203d3e203238323032.roa (raw, json)
Hash identifier: 9sTzGok3de12G9jcRSFh6FHEt6/tFYdPqLkX5BKuEX4=
Subject key identifier: FD:27:07:53:9C:4D:A1:7A:1B:36:B5:A9:88:A9:9D:F8:A6:EA:40:7E
Certificate issuer: /CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
Certificate serial: 29A8271AAED4D1A7CB173800719DB8F907A5481E
Authority key identifier: BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a323a3a2f34382d3438203d3e203238323032.roa
Signing time: Mon 13 Jan 2025 13:32:29 +0000
ROA not before: Mon 13 Jan 2025 13:27:29 +0000
ROA not after: Mon 12 Jan 2026 13:32:29 +0000
asID: 28202
IP address blocks: 2804:87c:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:a8:27:1a:ae:d4:d1:a7:cb:17:38:00:71:9d:b8:f9:07:a5:48:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
Validity
Not Before: Jan 13 13:27:29 2025 GMT
Not After : Jan 12 13:32:29 2026 GMT
Subject: CN=FD2707539C4DA17A1B36B5A988A99DF8A6EA407E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:52:55:c5:ce:51:4c:35:bd:ce:9a:12:91:d4:
92:ef:8c:1b:4f:33:a3:b9:c8:0f:22:82:dc:45:e4:
3a:d1:07:ef:7e:d0:b1:fd:57:80:7e:5e:0e:6b:6d:
1c:bf:8a:eb:ea:cc:d1:f1:53:7e:dc:a3:ca:b9:0b:
c6:e2:c1:c7:b7:d4:be:81:de:79:6d:40:3a:02:b1:
c7:a0:e3:b2:48:ed:69:0f:f9:64:56:14:4c:7b:8b:
cb:e4:c6:57:51:10:0f:20:c5:aa:84:40:4b:dd:ae:
1d:7e:e5:bd:c4:a7:d3:b3:98:ba:20:72:61:43:5a:
ac:4a:91:04:4d:11:cc:c1:66:50:fc:e8:62:86:71:
fc:dc:14:b6:d7:af:2b:e2:c8:e7:f2:4b:2b:b2:0a:
34:a6:32:b6:a6:3c:bd:22:aa:78:4e:48:b1:6d:f2:
36:cd:bc:ce:7b:e0:a9:d4:ae:7a:d4:b8:54:c5:d8:
d1:04:98:b0:fe:85:2e:9c:87:88:43:2a:e5:2c:19:
2a:50:2e:79:6a:a4:46:aa:6a:15:e5:de:2c:6d:6d:
25:da:49:de:9e:f8:74:cb:57:47:4d:6a:31:03:83:
4e:4f:a1:9f:97:5b:63:58:9f:20:27:f4:ce:81:07:
d2:07:18:11:ba:8b:b7:c9:38:6c:75:a9:f1:2c:12:
e6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:27:07:53:9C:4D:A1:7A:1B:36:B5:A9:88:A9:9D:F8:A6:EA:40:7E
X509v3 Authority Key Identifier:
keyid:BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a323a3a2f34382d3438203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:87c:2::/48
Signature Algorithm: sha256WithRSAEncryption
a5:b2:f9:81:9a:66:20:71:91:80:01:cb:00:a5:8f:fe:20:e2:
4e:d3:e3:51:d7:ac:a0:ec:57:98:36:8c:f8:e8:41:c9:e3:71:
ae:57:54:a5:93:64:35:d4:29:b4:e9:81:49:77:4c:b4:64:23:
a7:28:22:c0:a5:e5:5d:cc:a9:7e:60:55:8c:5b:6f:7e:db:bc:
9f:9e:7c:34:af:3d:d4:d7:e7:2e:be:27:57:c4:e7:91:bd:7b:
aa:e9:17:be:26:a1:52:ac:52:34:f0:48:0c:1e:fd:c5:59:94:
33:2b:4d:28:c8:25:a7:18:9b:b5:4d:1e:90:5e:53:9f:7d:d5:
5d:55:59:50:24:bb:25:38:ff:8a:1e:72:c4:9a:7e:61:2e:65:
8f:0d:72:7a:df:a0:8e:ec:14:68:4a:8f:67:ec:56:34:d7:7e:
a6:2d:00:b7:b8:9a:fc:75:74:5e:92:6f:19:ab:00:64:d5:2f:
ee:8b:80:7c:90:39:d7:28:ef:0a:cb:b9:07:16:57:d2:d3:40:
73:30:62:08:27:24:c3:55:bc:2f:14:a2:ea:b3:69:02:2d:eb:
65:44:34:77:4e:0c:c1:6b:22:47:84:22:81:88:00:a7:56:74:
60:af:a4:fa:21:96:9a:b2:8e:00:e8:e2:aa:81:73:16:a4:2c:
9a:25:5c:b1
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUKagnGq7U0afLFzgAcZ24+QelSB4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkU4NjcxMzRERDU3NkFBNDREQTc3QTFDNUQ3MTREQjM4
NEZFQzA4MzAeFw0yNTAxMTMxMzI3MjlaFw0yNjAxMTIxMzMyMjlaMDMxMTAvBgNV
BAMTKEZEMjcwNzUzOUM0REExN0ExQjM2QjVBOTg4QTk5REY4QTZFQTQwN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTUlXFzlFMNb3OmhKR1JLvjBtP
M6O5yA8igtxF5DrRB+9+0LH9V4B+Xg5rbRy/iuvqzNHxU37co8q5C8biwce31L6B
3nltQDoCsceg47JI7WkP+WRWFEx7i8vkxldREA8gxaqEQEvdrh1+5b3Ep9OzmLog
cmFDWqxKkQRNEczBZlD86GKGcfzcFLbXryviyOfySyuyCjSmMramPL0iqnhOSLFt
8jbNvM574KnUrnrUuFTF2NEEmLD+hS6ch4hDKuUsGSpQLnlqpEaqahXl3ixtbSXa
Sd6e+HTLV0dNajEDg05PoZ+XW2NYnyAn9M6BB9IHGBG6i7fJOGx1qfEsEuYPAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU/ScHU5xNoXobNrWpiKmd+KbqQH4wHwYDVR0j
BBgwFoAUvoZxNN1XaqRNp3ocXXFNs4T+wIMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGRQN05GMUJkM3ZBekdEY2o3dm1RVlc5ZmtyQVE3UHltUDl1eE04Qk1V
V00vMC9CRTg2NzEzNERENTc2QUE0NERBNzdBMUM1RDcxNERCMzg0RkVDMDgzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFODY3MTM0REQ1NzZBQTQ0
REE3N0ExQzVENzE0REIzODRGRUMwODMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRkUDdORjFCZDN2QXpHRGNqN3ZtUVZXOWZrckFRN1B5bVA5dXhNOEJNVVdNLzAv
MzIzODMwMzQzYTM4Mzc2MzNhMzIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM4
MzIzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcAKAQIfAACMA0GCSqGSIb3DQEBCwUAA4IBAQClsvmB
mmYgcZGAAcsApY/+IOJO0+NR16yg7FeYNoz46EHJ43GuV1Slk2Q11Cm06YFJd0y0
ZCOnKCLApeVdzKl+YFWMW29+27yfnnw0rz3U1+cuvidXxOeRvXuq6Re+JqFSrFI0
8EgMHv3FWZQzK00oyCWnGJu1TR6QXlOffdVdVVlQJLslOP+KHnLEmn5hLmWPDXJ6
36CO7BRoSo9n7FY0136mLQC3uJr8dXRekm8ZqwBk1S/ui4B8kDnXKO8Ky7kHFlfS
00BzMGIIJyTDVbwvFKLqs2kCLetlRDR3TgzBayJHhCKBiACnVnRgr6T6IZaaso4A
6OKqgXMWpCyaJVyx
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:23:02 2025 by rpki-client