Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a393a3a2f36342d3634203d3e203238323032.roa
File: 323830343a3837633a393a3a2f36342d3634203d3e203238323032.roa (raw, json)
Hash identifier: pdEIiK75ZOKjZNADdrSF+c7NTHJv8fEPKbYaIBYBZ7E=
Subject key identifier: 83:AA:34:B1:BE:9C:D9:D4:D5:72:4F:41:BF:A8:FB:69:01:61:A5:E6
Certificate issuer: /CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
Certificate serial: 5319F511CFC52685236491C5584EA21814B0F5C1
Authority key identifier: BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a393a3a2f36342d3634203d3e203238323032.roa
Signing time: Mon 13 Jan 2025 13:31:12 +0000
ROA not before: Mon 13 Jan 2025 13:26:12 +0000
ROA not after: Mon 12 Jan 2026 13:31:12 +0000
asID: 28202
IP address blocks: 2804:87c:9::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:19:f5:11:cf:c5:26:85:23:64:91:c5:58:4e:a2:18:14:b0:f5:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
Validity
Not Before: Jan 13 13:26:12 2025 GMT
Not After : Jan 12 13:31:12 2026 GMT
Subject: CN=83AA34B1BE9CD9D4D5724F41BFA8FB690161A5E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:70:fb:db:d2:b9:7d:f7:75:95:11:48:21:94:
29:f5:ad:f7:4d:aa:d5:6e:5f:31:19:c7:d0:29:0f:
5c:1d:0f:57:7f:e1:8f:5c:89:8e:23:51:90:c2:d8:
f5:b4:08:4c:5d:e6:c4:f5:71:74:7c:c5:db:65:bb:
37:51:75:99:5d:2e:2a:dc:00:0b:99:c7:7e:96:57:
08:3f:dd:9c:ce:75:3a:f3:0b:6a:e2:a4:ef:76:d6:
e8:cd:d2:09:a2:29:f1:83:2e:c0:fe:b7:35:b2:a4:
53:02:ee:03:c2:04:db:81:8d:9d:94:43:c3:4e:c3:
00:0e:db:77:72:a8:d5:cc:36:6d:2e:aa:fb:9e:cc:
34:5c:33:77:1b:96:90:18:24:aa:2d:c1:e4:d9:a6:
61:c9:dd:61:84:25:ed:b5:3c:f5:2f:39:87:06:0b:
c3:f5:85:1a:99:b6:dc:ee:9b:6a:e4:d7:84:62:57:
de:df:95:e1:70:d0:93:eb:c4:4d:3e:19:58:77:4b:
91:9b:76:b9:16:42:de:b3:ca:52:99:f0:fc:21:fc:
e9:61:b7:e0:5c:73:af:3c:b7:e9:a1:e9:7b:f4:41:
6d:db:f0:c5:9e:4f:83:33:5d:8f:23:21:22:b4:91:
4f:41:87:67:e1:e9:9b:37:a4:1c:74:93:62:8f:3e:
1c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AA:34:B1:BE:9C:D9:D4:D5:72:4F:41:BF:A8:FB:69:01:61:A5:E6
X509v3 Authority Key Identifier:
keyid:BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a393a3a2f36342d3634203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:87c:9::/64
Signature Algorithm: sha256WithRSAEncryption
9c:38:ab:ad:10:46:95:f4:64:ca:89:76:ac:7c:e3:61:fc:62:
24:73:17:02:7a:02:97:75:27:26:92:18:10:db:13:e8:12:04:
22:0d:22:6e:0c:8f:0e:59:89:c1:47:94:ca:1c:ca:74:af:f8:
db:da:a5:15:de:30:29:fa:c0:e9:dd:32:ed:50:13:13:e1:a0:
b8:d4:96:59:c7:19:6b:66:bd:41:b0:a7:0d:33:53:2d:76:67:
1e:ee:bc:cd:84:26:fc:2a:ba:df:5e:e0:dc:6c:12:eb:cf:a7:
db:cc:12:98:aa:9c:85:6c:b7:3e:cf:68:9d:9c:60:13:51:50:
f4:b8:25:a9:3f:7e:98:73:4e:50:fe:b9:c5:0e:07:48:14:05:
b7:28:0a:29:57:5b:d1:78:b0:96:01:83:d1:82:eb:38:ee:b0:
fe:37:89:f8:2f:37:ca:1a:bb:ce:2f:57:32:39:b9:02:b3:e3:
37:20:8f:8b:0d:d6:ac:c9:a5:16:10:42:a2:5c:58:9a:be:ab:
0a:69:f6:23:41:62:47:0e:62:3f:45:ce:b4:1f:e8:37:05:9c:
44:e5:44:b5:b7:6f:a1:5b:95:ec:c7:60:14:1e:eb:96:6a:50:
96:e9:43:1a:e8:ab:cb:ad:e2:53:94:aa:71:f7:94:e0:53:97:
55:9b:51:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:04:24 2025 by rpki-client