Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a623a313a3a2f36342d3634203d3e203238323032.roa
File: 323830343a3837633a623a313a3a2f36342d3634203d3e203238323032.roa (raw, json)
Hash identifier: O1mgfEbqLa1uHoYtNCo9+QPsiA7S7gOiy58euF0tW0I=
Subject key identifier: B5:19:3C:A9:0F:94:E8:86:7C:E3:3E:25:65:52:39:93:AC:A4:21:5E
Certificate issuer: /CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
Certificate serial: 6E16F9D8E85A338119A6BCEBEEDA99F9AA465501
Authority key identifier: BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a623a313a3a2f36342d3634203d3e203238323032.roa
Signing time: Mon 13 Jan 2025 13:32:24 +0000
ROA not before: Mon 13 Jan 2025 13:27:24 +0000
ROA not after: Mon 12 Jan 2026 13:32:24 +0000
asID: 28202
IP address blocks: 2804:87c:b:1::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:16:f9:d8:e8:5a:33:81:19:a6:bc:eb:ee:da:99:f9:aa:46:55:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
Validity
Not Before: Jan 13 13:27:24 2025 GMT
Not After : Jan 12 13:32:24 2026 GMT
Subject: CN=B5193CA90F94E8867CE33E2565523993ACA4215E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9f:dc:cc:88:d1:c5:ed:3e:60:c4:c2:17:6e:
7a:ff:20:80:70:6b:3b:6f:7e:3e:d6:b8:e2:b7:2b:
a7:c6:c2:1d:e2:37:33:12:54:75:f6:f0:9d:62:2f:
c1:16:9d:78:53:2b:21:f9:c3:7c:79:05:cd:8d:fa:
96:6a:69:cf:65:73:fb:a2:67:5b:3c:03:6a:91:62:
70:10:cc:32:f5:21:6d:df:8f:ca:68:f3:b6:8e:db:
cf:a7:80:28:2b:e9:90:e5:d0:bd:2d:dc:88:ec:6e:
ae:75:2f:18:ee:b7:29:50:65:dc:64:70:be:47:da:
3d:46:b9:db:29:f2:8c:29:f5:38:a7:35:6e:96:4b:
b4:f9:1e:a1:cc:c8:70:12:51:12:a3:a1:09:13:cb:
ba:19:75:57:b7:fa:ae:37:ac:f8:d3:b8:99:a7:3e:
61:32:08:f1:25:31:bf:68:22:ea:66:1e:48:1a:50:
16:95:f4:85:7b:55:a3:f7:8d:fc:30:53:c5:50:02:
c3:ec:55:ec:ba:f8:11:74:01:2c:cd:d0:9a:1e:99:
99:32:1f:47:17:b1:4e:39:4d:51:3b:a2:81:84:3a:
89:b8:d8:fd:c0:a5:bc:93:fd:54:e8:14:29:cf:97:
a2:f6:c5:f7:1a:23:b5:67:33:44:1c:07:9d:c3:c5:
67:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:19:3C:A9:0F:94:E8:86:7C:E3:3E:25:65:52:39:93:AC:A4:21:5E
X509v3 Authority Key Identifier:
keyid:BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a623a313a3a2f36342d3634203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:87c:b:1::/64
Signature Algorithm: sha256WithRSAEncryption
8f:80:1b:4f:90:d0:71:7e:f7:40:ec:42:4f:09:8c:6d:ec:a9:
82:ea:36:b7:47:73:44:40:cc:aa:71:5c:77:db:4a:36:8f:5f:
0e:9f:b1:fc:b9:f7:a0:f0:4f:cc:d4:cb:dd:b4:0c:ed:cb:bd:
47:52:d5:26:2a:e0:bd:04:7f:90:81:1f:12:fa:90:d9:06:c9:
e2:88:3c:e1:02:0a:0c:24:36:15:17:a9:b0:0a:44:cd:75:51:
48:98:b1:c6:30:0f:a8:56:9e:6d:f6:b9:99:5b:ab:09:e7:b4:
63:f7:70:53:ee:ad:df:9c:eb:28:3e:dc:6b:26:0a:cc:6f:e7:
42:63:8a:ea:b7:3a:5d:21:ef:6b:ec:15:e5:a4:1d:e3:51:4c:
d8:47:84:a4:b6:b6:53:37:22:42:d3:c1:fb:58:ac:2b:4b:0f:
fb:d2:6b:75:c9:b8:64:2f:1c:56:38:a6:ef:31:74:31:55:e9:
2a:99:6a:e1:ae:d0:dc:17:38:ee:5f:87:ec:b9:80:aa:bc:45:
ea:32:30:7e:8e:b4:1b:c8:3c:87:ca:64:b9:4c:af:da:32:f5:
0f:a0:b2:a7:74:53:98:73:e3:88:7e:d1:b2:54:58:e8:a6:c2:
84:de:23:fc:29:fe:7f:3c:88:2f:74:d0:35:0a:aa:a4:0e:95:
38:11:dd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:02:48 2025 by rpki-client