Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a383a3a2f34382d3438203d3e203238323032.roa
File: 323830343a3837633a383a3a2f34382d3438203d3e203238323032.roa (raw, json)
Hash identifier: dulfHU8QSnwtQxi/HNvCHOdfMyYBKfAs9cipa2rq9r4=
Subject key identifier: A8:2B:BA:E0:92:0A:3F:C6:97:85:A6:8C:50:E5:5A:4C:EB:E3:4D:1C
Certificate issuer: /CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
Certificate serial: 730B35BEAA02F0BE313D374F86D782269FB57D10
Authority key identifier: BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a383a3a2f34382d3438203d3e203238323032.roa
Signing time: Mon 13 Jan 2025 13:32:30 +0000
ROA not before: Mon 13 Jan 2025 13:27:30 +0000
ROA not after: Mon 12 Jan 2026 13:32:30 +0000
asID: 28202
IP address blocks: 2804:87c:8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:0b:35:be:aa:02:f0:be:31:3d:37:4f:86:d7:82:26:9f:b5:7d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
Validity
Not Before: Jan 13 13:27:30 2025 GMT
Not After : Jan 12 13:32:30 2026 GMT
Subject: CN=A82BBAE0920A3FC69785A68C50E55A4CEBE34D1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4d:f8:b3:06:e8:f1:30:16:99:22:82:36:e0:
51:3d:69:ce:ea:17:f8:b8:f1:3b:64:95:1a:95:9f:
19:e6:1b:d1:9e:86:fb:4e:ed:81:72:a4:fc:6b:a9:
c6:75:92:70:c3:d2:2a:f2:ef:2e:07:d0:cc:a8:19:
1a:a2:ea:9b:a5:79:a9:b1:06:76:b8:2b:1d:27:e5:
04:7f:df:10:62:c5:2f:e2:8f:75:b5:29:6d:ae:ef:
25:a2:22:0f:46:7a:a1:3d:2c:e2:d9:84:d6:56:35:
89:55:57:87:e6:3d:93:28:7a:25:18:b6:09:17:8e:
be:b2:6f:b7:d9:35:8f:4f:41:f5:cd:d6:ee:f5:b0:
47:5a:3a:e3:b0:f5:d2:46:29:73:7a:61:cb:4c:14:
84:86:62:a0:5d:ba:44:6b:8d:64:46:dd:2a:8b:24:
fa:66:64:75:e1:ad:05:fb:09:97:67:5c:0c:8d:56:
1c:9b:e2:94:9e:8e:4b:d8:4d:ab:5b:2a:ac:c3:bf:
af:6e:e5:7d:95:3a:27:28:ee:fe:85:d4:51:b7:f1:
62:01:1b:74:55:9a:31:97:8a:dd:64:e5:6b:5f:ea:
1e:66:76:a7:0d:ef:74:52:99:4d:62:cb:51:1b:35:
77:3b:91:08:d9:75:ea:e8:56:8b:15:6b:fa:2b:c8:
65:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2B:BA:E0:92:0A:3F:C6:97:85:A6:8C:50:E5:5A:4C:EB:E3:4D:1C
X509v3 Authority Key Identifier:
keyid:BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a383a3a2f34382d3438203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:87c:8::/48
Signature Algorithm: sha256WithRSAEncryption
36:35:40:f6:4c:32:dc:00:d2:66:e5:2e:e5:b0:90:d3:b9:6e:
e1:87:d9:f7:85:b7:41:67:68:91:e3:f0:cf:b4:9f:13:00:6e:
fe:b4:5b:0c:37:c3:e1:91:92:5d:e2:a2:69:ab:a1:c5:ca:c4:
bb:a9:90:7a:7e:42:3f:e1:0e:3c:7f:01:69:7b:ec:4e:55:80:
33:79:59:71:88:02:ad:b8:6a:b7:df:58:81:a4:c7:b2:f5:16:
ba:5c:09:27:88:83:28:b6:a8:33:f0:65:4c:40:c1:3b:97:aa:
29:7a:4d:b8:90:7d:67:6b:40:81:96:17:e4:d6:7e:d9:25:17:
6c:09:66:70:2b:88:21:fc:b7:5d:81:73:ef:d5:c7:b2:ed:c3:
ca:64:1a:a9:21:c8:11:84:46:6d:82:bd:45:a9:e8:de:a7:eb:
cd:f4:d7:a7:aa:40:4b:31:07:4b:c8:31:45:82:a2:67:70:e0:
03:1f:a1:e6:5c:65:e5:db:15:b0:78:a7:92:1f:86:9a:5a:bc:
50:c8:77:af:a5:8b:48:c7:8b:09:f1:5e:e8:41:9e:cc:a8:c7:
bc:29:c5:2a:16:76:87:9d:90:30:b7:4e:76:0c:65:55:00:01:
df:13:5c:a7:30:5b:26:20:eb:b2:68:99:a0:16:d1:40:b5:f9:
2f:8e:2d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:23:11 2025 by rpki-client