Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a623a3a2f36342d3634203d3e203238323032.roa
File: 323830343a3837633a623a3a2f36342d3634203d3e203238323032.roa (raw, json)
Hash identifier: Wv3D95yuRmurWDCOk/cp0WxzWMstScotN0U0qCT0BkI=
Subject key identifier: C0:73:92:B6:AD:F0:F6:F6:67:21:C4:03:D1:77:76:66:F2:05:9A:9A
Certificate issuer: /CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
Certificate serial: 13A003BFBE50B9D5AC0C2F42D71850CC7436818A
Authority key identifier: BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a623a3a2f36342d3634203d3e203238323032.roa
Signing time: Mon 13 Jan 2025 13:32:31 +0000
ROA not before: Mon 13 Jan 2025 13:27:31 +0000
ROA not after: Mon 12 Jan 2026 13:32:31 +0000
asID: 28202
IP address blocks: 2804:87c:b::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:a0:03:bf:be:50:b9:d5:ac:0c:2f:42:d7:18:50:cc:74:36:81:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
Validity
Not Before: Jan 13 13:27:31 2025 GMT
Not After : Jan 12 13:32:31 2026 GMT
Subject: CN=C07392B6ADF0F6F66721C403D1777666F2059A9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1c:32:27:1a:90:e2:27:20:3b:d4:67:3e:a5:
05:a6:61:21:ae:5c:4a:60:fd:b7:0d:15:d6:6d:85:
e6:66:68:ad:08:65:39:3f:42:ac:6e:e5:e8:57:c9:
47:26:c9:57:de:17:ae:5a:08:20:3f:97:5c:b8:1f:
3d:a3:11:86:c2:9e:f1:1e:53:c1:f7:d8:10:90:ee:
72:e6:cb:8d:0d:82:ef:5a:c5:a6:03:25:86:6d:6d:
77:b8:0e:db:05:d8:c0:fd:3e:5d:87:c4:e1:7b:c1:
8e:9a:55:46:54:5e:2e:9f:84:9c:94:1f:8e:cd:55:
1a:8d:93:37:84:20:25:20:36:1e:a2:fb:ed:5b:fb:
42:99:38:e7:ca:4c:c4:77:91:c1:56:99:73:da:e8:
b8:7d:04:52:f0:71:2b:8a:27:22:41:7e:27:98:b4:
2a:44:3c:91:8b:17:4f:05:1f:94:f8:76:88:f1:f1:
77:64:19:be:7b:32:ff:11:fa:f9:5a:7b:0d:3e:44:
a7:67:f2:77:27:9f:25:b1:63:5b:cd:96:44:1b:b6:
54:22:39:fd:66:f1:6b:8c:56:66:b0:e6:6b:88:e1:
5a:0f:da:05:15:6f:27:ea:e2:f3:40:c5:ac:6c:43:
96:e6:19:fe:9a:65:41:cf:96:c8:07:61:ca:9e:8c:
d2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:73:92:B6:AD:F0:F6:F6:67:21:C4:03:D1:77:76:66:F2:05:9A:9A
X509v3 Authority Key Identifier:
keyid:BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a623a3a2f36342d3634203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:87c:b::/64
Signature Algorithm: sha256WithRSAEncryption
7e:88:6f:8b:9e:9f:80:16:b2:82:d3:6c:3f:94:c3:46:49:39:
02:08:dd:e4:a5:d7:56:5c:e0:59:42:9d:85:26:2e:dc:21:3f:
d1:3c:ef:e0:cd:9c:e0:20:ca:52:b8:25:93:0b:79:de:96:4d:
4a:bd:7c:3b:fe:be:79:70:69:28:14:bf:15:01:2f:f5:4a:7d:
77:53:46:11:18:37:ef:2b:a6:d3:d1:5b:d5:c8:1c:2e:c2:9b:
f1:41:84:4a:9a:8d:0a:8e:51:d8:c2:77:2e:2d:80:07:c1:8e:
58:e8:3b:8e:36:45:45:1a:38:7a:17:a6:64:1c:ca:be:19:d1:
ee:0a:49:f9:df:e4:6b:24:24:b5:2e:61:6a:bb:7e:06:70:91:
a5:53:1f:2a:2a:ea:c8:0d:7e:54:78:2c:26:41:a0:89:08:2f:
c3:29:b5:a2:c7:0a:0e:1e:c8:50:b4:b7:a3:f5:ea:3e:f3:40:
87:22:2b:35:3c:ed:a4:bd:7c:4d:00:86:52:5e:9f:bf:d0:fa:
7c:a8:32:83:9c:8d:66:8c:b5:10:d1:e3:4b:bc:9f:3a:4b:7d:
05:8d:4d:61:01:b6:7a:97:87:cf:0d:43:90:49:72:cf:bc:6f:
97:35:77:73:6d:39:2e:47:59:57:b0:ac:46:0a:af:45:d4:c2:
75:83:65:0d
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIUE6ADv75QudWsDC9C1xhQzHQ2gYowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkU4NjcxMzRERDU3NkFBNDREQTc3QTFDNUQ3MTREQjM4
NEZFQzA4MzAeFw0yNTAxMTMxMzI3MzFaFw0yNjAxMTIxMzMyMzFaMDMxMTAvBgNV
BAMTKEMwNzM5MkI2QURGMEY2RjY2NzIxQzQwM0QxNzc3NjY2RjIwNTlBOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTHDInGpDiJyA71Gc+pQWmYSGu
XEpg/bcNFdZtheZmaK0IZTk/Qqxu5ehXyUcmyVfeF65aCCA/l1y4Hz2jEYbCnvEe
U8H32BCQ7nLmy40Ngu9axaYDJYZtbXe4DtsF2MD9Pl2HxOF7wY6aVUZUXi6fhJyU
H47NVRqNkzeEICUgNh6i++1b+0KZOOfKTMR3kcFWmXPa6Lh9BFLwcSuKJyJBfieY
tCpEPJGLF08FH5T4dojx8XdkGb57Mv8R+vlaew0+RKdn8ncnnyWxY1vNlkQbtlQi
Of1m8WuMVmaw5muI4VoP2gUVbyfq4vNAxaxsQ5bmGf6aZUHPlsgHYcqejNKBAgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQUwHOStq3w9vZnIcQD0Xd2ZvIFmpowHwYDVR0j
BBgwFoAUvoZxNN1XaqRNp3ocXXFNs4T+wIMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGRQN05GMUJkM3ZBekdEY2o3dm1RVlc5ZmtyQVE3UHltUDl1eE04Qk1V
V00vMC9CRTg2NzEzNERENTc2QUE0NERBNzdBMUM1RDcxNERCMzg0RkVDMDgzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFODY3MTM0REQ1NzZBQTQ0
REE3N0ExQzVENzE0REIzODRGRUMwODMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRkUDdORjFCZDN2QXpHRGNqN3ZtUVZXOWZrckFRN1B5bVA5dXhNOEJNVVdNLzAv
MzIzODMwMzQzYTM4Mzc2MzNhNjIzYTNhMmYzNjM0MmQzNjM0MjAzZDNlMjAzMjM4
MzIzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEH
AQH/BBUwEzARBAIAAjALAwkAKAQIfAALAAAwDQYJKoZIhvcNAQELBQADggEBAH6I
b4uen4AWsoLTbD+Uw0ZJOQII3eSl11Zc4FlCnYUmLtwhP9E87+DNnOAgylK4JZML
ed6WTUq9fDv+vnlwaSgUvxUBL/VKfXdTRhEYN+8rptPRW9XIHC7Cm/FBhEqajQqO
UdjCdy4tgAfBjljoO442RUUaOHoXpmQcyr4Z0e4KSfnf5GskJLUuYWq7fgZwkaVT
Hyoq6sgNflR4LCZBoIkIL8MptaLHCg4eyFC0t6P16j7zQIciKzU87aS9fE0AhlJe
n7/Q+nyoMoOcjWaMtRDR40u8nzpLfQWNTWEBtnqXh88NQ5BJcs+8b5c1d3NtOS5H
WVewrEYKr0XUwnWDZQ0=
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:13:38 2025 by rpki-client