Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a383a383a3a2f36342d3634203d3e203238323032.roa
File: 323830343a3837633a383a383a3a2f36342d3634203d3e203238323032.roa (raw, json)
Hash identifier: 8EN2V+o0x0vrDYSOEzL9huLp+Dv62mAZhS8AR3PTmcQ=
Subject key identifier: 3F:49:E7:98:01:59:FF:B7:38:D6:CA:FD:5F:FA:68:43:E3:06:78:F8
Certificate issuer: /CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
Certificate serial: 4E3D6A8E090735840D69E4E44170DCB2AF8BEF9A
Authority key identifier: BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a383a383a3a2f36342d3634203d3e203238323032.roa
Signing time: Mon 13 Jan 2025 13:32:34 +0000
ROA not before: Mon 13 Jan 2025 13:27:34 +0000
ROA not after: Mon 12 Jan 2026 13:32:34 +0000
asID: 28202
IP address blocks: 2804:87c:8:8::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:3d:6a:8e:09:07:35:84:0d:69:e4:e4:41:70:dc:b2:af:8b:ef:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
Validity
Not Before: Jan 13 13:27:34 2025 GMT
Not After : Jan 12 13:32:34 2026 GMT
Subject: CN=3F49E7980159FFB738D6CAFD5FFA6843E30678F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1d:82:13:cf:7f:42:a9:e9:09:0b:bf:57:4d:
8f:c9:dc:1b:f6:61:8f:81:ec:86:d9:08:85:1f:79:
11:9b:8d:80:86:c6:07:d1:a7:e1:50:b8:08:1f:73:
58:7e:d0:9b:5c:1c:a4:3e:77:f2:bb:ae:9e:54:92:
1e:11:49:6a:12:73:fd:b4:fc:e5:f9:82:3e:cd:31:
3e:07:42:86:b5:64:23:e4:dc:31:81:93:7e:71:77:
5c:64:34:0a:cd:df:40:ce:0d:79:37:db:4d:5b:ec:
39:0e:60:3f:bd:5e:7a:35:4c:dc:43:f4:e4:01:a1:
b3:92:53:38:98:6e:55:65:96:ad:0e:a4:e8:90:4f:
5f:3f:c9:03:46:2e:23:18:4e:81:40:54:26:68:2c:
10:ff:f8:71:d1:2e:b1:65:2a:57:04:ee:c0:8a:c7:
1f:86:e1:65:0c:3e:8c:dd:1d:10:a3:ea:38:44:6b:
d6:e7:67:cc:68:18:82:28:92:37:e0:6f:f6:41:b2:
45:33:cb:90:1a:6d:ec:f1:ee:e2:12:5f:73:af:3f:
6b:3d:fd:da:fe:ec:64:05:0a:8d:b9:05:bc:b0:d9:
92:d5:c4:e6:c2:08:14:ee:c3:54:9c:be:2b:70:6a:
06:69:ce:43:63:a1:02:aa:64:ed:07:7b:86:ab:94:
66:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:49:E7:98:01:59:FF:B7:38:D6:CA:FD:5F:FA:68:43:E3:06:78:F8
X509v3 Authority Key Identifier:
keyid:BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a383a383a3a2f36342d3634203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:87c:8:8::/64
Signature Algorithm: sha256WithRSAEncryption
4b:7f:be:96:8c:30:be:51:73:7e:dd:21:19:e5:d2:41:ba:16:
de:04:79:1e:74:f5:59:6c:3c:85:d8:b3:43:34:fa:6c:c3:3c:
33:5e:71:95:e8:cb:69:5e:2e:25:f9:6e:88:f1:bc:45:4c:95:
87:44:4a:77:ff:1d:50:85:fc:b7:8a:c7:2e:b6:29:b5:e4:c1:
8e:dd:d8:07:46:46:d2:8d:07:b4:d5:45:6c:c5:08:9a:6f:c2:
b6:a3:1f:8e:36:6a:61:a1:0b:1a:1d:c4:fb:17:a2:52:cf:80:
b1:17:e6:ed:9b:1d:fa:ed:03:e5:28:58:3f:cc:7f:c0:8e:07:
52:ba:22:80:ce:42:62:dc:39:03:b2:0d:26:87:f9:8c:a6:90:
00:67:15:be:0a:93:84:91:a4:37:bf:cc:09:1b:82:36:9d:70:
0f:ae:ef:00:fc:c5:f9:65:65:0d:f0:c6:6e:31:e6:d2:34:fa:
be:c7:22:ef:6c:38:32:6e:72:6c:aa:e0:2f:76:63:54:06:6b:
52:75:32:c9:a8:9a:b6:9c:c7:0c:31:4f:d1:8e:e2:ff:14:fa:
9d:5e:e5:00:54:7a:36:84:37:af:5d:ba:ed:13:ba:7b:de:88:
fd:4a:ed:f7:5b:65:7b:e7:82:eb:cd:ad:07:81:71:72:8b:da:
5a:d5:c0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:23:12 2025 by rpki-client