Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a393a3a2f34382d3438203d3e203238323032.roa
File: 323830343a3837633a393a3a2f34382d3438203d3e203238323032.roa (raw, json)
Hash identifier: sFJLgr5nuCSSe/yjX5JZi82lGTyrMg6CuaWVf/vk10A=
Subject key identifier: 73:84:7A:B7:39:C5:55:7D:09:3C:15:D0:5E:66:FD:48:20:59:67:F3
Certificate issuer: /CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
Certificate serial: 4CFC9E723AB4BE4B265C6E49E17593ABD21FBCE4
Authority key identifier: BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a393a3a2f34382d3438203d3e203238323032.roa
Signing time: Mon 13 Jan 2025 13:32:35 +0000
ROA not before: Mon 13 Jan 2025 13:27:35 +0000
ROA not after: Mon 12 Jan 2026 13:32:35 +0000
asID: 28202
IP address blocks: 2804:87c:9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:fc:9e:72:3a:b4:be:4b:26:5c:6e:49:e1:75:93:ab:d2:1f:bc:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
Validity
Not Before: Jan 13 13:27:35 2025 GMT
Not After : Jan 12 13:32:35 2026 GMT
Subject: CN=73847AB739C5557D093C15D05E66FD48205967F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cb:72:31:50:63:11:af:83:27:28:5c:24:78:
25:78:5d:59:02:ab:ee:65:a6:b9:a0:cf:77:3d:c9:
ea:d4:cd:56:7b:4f:2d:ee:48:22:54:9f:f2:13:50:
e1:34:f0:31:50:47:51:27:5f:ae:83:5b:e1:4b:d6:
9a:e3:24:ba:23:1a:a0:7e:54:f4:4e:79:71:bf:35:
68:2e:33:44:06:b1:82:12:49:4d:65:91:fa:31:6a:
3c:2f:35:eb:57:3e:5c:fd:a0:64:51:84:73:b3:65:
2d:d0:c2:8e:2e:d9:c1:72:2d:7b:26:36:0f:cc:b3:
f9:34:df:40:6d:19:c9:d6:bd:a0:15:58:c1:2b:af:
7f:74:ef:54:be:49:90:22:27:26:a4:fe:77:be:a4:
1c:41:8c:d3:13:b2:d8:27:b5:28:37:f3:00:73:50:
58:80:30:40:7f:06:b7:81:10:09:d2:9d:76:0c:85:
69:45:27:9e:64:5d:e8:ed:e8:c1:81:97:f4:99:fb:
47:d2:48:72:3c:62:b4:ee:d0:7c:ea:71:1c:a8:94:
98:c6:b8:25:3c:7c:0d:2e:d5:c8:9b:9a:3d:dc:fb:
45:ff:6d:40:26:93:c8:d1:f4:13:4f:79:15:79:ce:
47:35:7f:48:51:0a:e2:9f:56:16:04:68:0b:86:95:
c0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:84:7A:B7:39:C5:55:7D:09:3C:15:D0:5E:66:FD:48:20:59:67:F3
X509v3 Authority Key Identifier:
keyid:BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a393a3a2f34382d3438203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:87c:9::/48
Signature Algorithm: sha256WithRSAEncryption
33:ba:16:de:56:c0:2f:33:be:c2:2a:fe:8c:73:67:8d:03:eb:
20:34:e4:40:0b:93:85:f6:fd:90:f3:ea:8f:35:7f:f2:7d:78:
81:61:8b:9d:e2:f3:f8:c5:f5:7d:e0:c6:fa:c3:dc:63:bb:3e:
27:4a:18:6b:67:bf:7d:a5:80:dd:97:31:a6:96:c8:5e:9b:e5:
1a:78:eb:fb:9f:80:ef:10:f0:bb:f4:c2:76:50:ec:2a:c5:ff:
f8:55:e3:1e:f4:05:b6:a9:75:00:80:a9:6f:b3:c2:3f:3c:fe:
7b:0b:f1:b4:02:64:da:09:93:5f:6b:b8:a2:1f:bf:a3:ce:d3:
ae:9f:7b:31:99:b6:fc:54:fe:28:56:d7:e6:c3:5b:e8:e4:5f:
6d:d6:a0:f8:b0:e9:fb:13:d4:f8:50:1f:8a:49:4d:67:9e:6d:
7a:df:19:6c:8a:7e:d0:17:d1:33:10:3b:1a:6f:96:d6:d0:64:
0b:08:e1:2f:ed:b1:bc:93:b7:85:dd:af:31:bc:e6:b8:cb:ea:
de:71:16:11:57:29:46:e5:e7:06:65:8d:71:3f:3e:0e:11:f2:
21:48:25:98:4e:ad:12:f9:9f:a1:89:71:f3:cb:46:6c:e9:08:
08:c2:fa:9c:ed:8b:9a:4a:33:2a:92:ee:56:d9:45:5e:47:db:
89:6a:4e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:20:29 2025 by rpki-client