Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a383a31303a3a2f36342d3634203d3e203238323032.roa
File: 323830343a3837633a383a31303a3a2f36342d3634203d3e203238323032.roa (raw, json)
Hash identifier: C0nyUQK4yCkIYlkG03+k4YLOtFawyZRvEwMwfAdTSSQ=
Subject key identifier: 82:CD:97:BA:1E:2B:60:A1:4D:08:5B:D8:C7:0B:CB:EF:5D:2F:D9:50
Certificate issuer: /CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
Certificate serial: 754DEE24772B2BA2A7847714C9D9DC433D0B2B06
Authority key identifier: BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a383a31303a3a2f36342d3634203d3e203238323032.roa
Signing time: Mon 13 Jan 2025 13:32:33 +0000
ROA not before: Mon 13 Jan 2025 13:27:33 +0000
ROA not after: Mon 12 Jan 2026 13:32:33 +0000
asID: 28202
IP address blocks: 2804:87c:8:10::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:4d:ee:24:77:2b:2b:a2:a7:84:77:14:c9:d9:dc:43:3d:0b:2b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
Validity
Not Before: Jan 13 13:27:33 2025 GMT
Not After : Jan 12 13:32:33 2026 GMT
Subject: CN=82CD97BA1E2B60A14D085BD8C70BCBEF5D2FD950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:32:d0:a0:bf:50:7f:94:f9:8f:60:31:4e:e9:
7c:5c:7e:02:ea:e6:ac:43:21:25:f8:05:d4:cf:62:
34:e2:8f:bf:a1:eb:4e:ee:45:c6:bd:e7:6b:f5:d3:
8e:fb:df:4f:15:71:d2:8b:d5:8c:1a:e2:bd:05:56:
21:a6:60:79:22:4d:d2:73:2b:87:f9:6e:b4:d4:81:
34:0c:a5:44:22:ba:e4:ca:22:75:95:a4:61:6e:72:
31:8b:ab:9b:8c:7a:68:23:7b:cb:cb:c6:72:1a:26:
92:b0:5b:7e:37:01:70:ec:9f:86:d7:67:e7:7f:e2:
b3:08:84:35:0c:3b:c8:33:ab:bc:f2:33:70:84:2a:
ab:ad:af:36:a6:fd:47:1d:20:b6:7a:b5:66:51:c6:
e9:41:ae:22:f8:38:a9:95:03:66:4e:82:8c:e3:6e:
02:11:fc:1e:3f:5c:ca:70:e6:7e:b7:93:e3:83:ef:
c4:6e:90:40:d6:78:58:99:ae:ab:ce:de:ea:44:f7:
0f:a8:74:ec:59:45:c0:87:05:4f:ca:26:03:e4:ca:
4d:ed:1d:de:b6:03:0c:2c:da:7c:67:48:d2:91:73:
44:d8:22:64:1c:e5:a2:8f:cd:32:f7:cd:db:e6:f2:
c4:0e:46:87:74:4c:28:48:da:05:52:93:45:17:d2:
6b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CD:97:BA:1E:2B:60:A1:4D:08:5B:D8:C7:0B:CB:EF:5D:2F:D9:50
X509v3 Authority Key Identifier:
keyid:BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a383a31303a3a2f36342d3634203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:87c:8:10::/64
Signature Algorithm: sha256WithRSAEncryption
09:d2:bb:58:ab:9f:52:cf:02:46:9b:b1:5c:b4:54:bc:c8:b9:
db:96:f4:1a:05:bb:2b:7a:40:59:3b:b7:36:8b:eb:5f:4f:d8:
53:2d:4d:6b:59:d4:6d:6e:26:5c:57:10:3a:8e:6a:16:d8:3a:
70:8f:7d:6b:1f:84:49:52:3b:2f:12:7f:f5:eb:b1:73:52:e1:
d3:a9:0d:b4:81:4f:a6:ad:97:3b:49:88:59:da:49:fb:81:b2:
62:16:b8:9b:a6:6e:35:97:9a:ce:89:b3:42:41:f6:4a:9f:ab:
f1:d4:aa:10:79:18:9f:e2:b3:30:3e:2b:6f:c8:bb:65:c8:97:
5f:4c:5c:93:66:65:c5:fd:d3:f4:f8:1a:0d:d1:fb:e2:7f:3a:
12:c6:56:4e:4c:51:e9:60:fd:77:40:e7:4a:b2:78:4f:46:2e:
8c:b3:f6:61:23:4f:22:6f:77:7d:4f:41:35:ef:90:60:c2:44:
5e:fa:38:d9:23:54:ab:98:2d:f1:7e:11:f4:f6:40:87:8c:1c:
f8:2e:aa:3e:78:07:cc:1a:4a:03:87:c6:67:08:2f:37:57:b5:
2b:2b:5b:0c:e4:20:b4:29:4f:ec:f4:81:5d:3a:a8:1b:89:ba:
90:bf:b5:db:f4:5f:f5:5b:14:86:2b:29:9e:23:0c:d4:ab:b4:
f7:9a:e3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:11:09 2025 by rpki-client