Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a303a383a3a2f36342d3634203d3e203238323032.roa
File: 323830343a3837633a303a383a3a2f36342d3634203d3e203238323032.roa (raw, json)
Hash identifier: 2+i5RuZ4wQI6okptB3Eq3rfyAqxyeqwWUkKHfxwaUOQ=
Subject key identifier: 54:95:C6:8C:79:FB:1C:C4:4E:98:60:AB:15:E0:05:92:A4:B0:4E:47
Certificate issuer: /CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Certificate serial: 1AAE24AB242C04C4514B90905CAE57CDEA7C510B
Authority key identifier: 65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a303a383a3a2f36342d3634203d3e203238323032.roa
Signing time: Fri 10 Jan 2025 14:20:05 +0000
ROA not before: Fri 10 Jan 2025 14:15:05 +0000
ROA not after: Fri 09 Jan 2026 14:20:05 +0000
asID: 28202
IP address blocks: 2804:87c:0:8::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:ae:24:ab:24:2c:04:c4:51:4b:90:90:5c:ae:57:cd:ea:7c:51:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Validity
Not Before: Jan 10 14:15:05 2025 GMT
Not After : Jan 9 14:20:05 2026 GMT
Subject: CN=5495C68C79FB1CC44E9860AB15E00592A4B04E47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2a:36:5f:6f:51:8a:63:8b:a3:80:d8:cd:73:
9f:64:e7:2e:ae:71:27:a6:83:b8:25:4b:5f:df:be:
85:a6:e1:ba:69:a7:50:22:33:2f:16:37:83:bf:ea:
cf:27:09:47:18:23:a2:9d:a4:c2:55:45:85:10:a0:
40:ca:69:5b:71:56:8a:3b:d5:46:17:b8:7e:28:9e:
c0:cc:0a:0b:54:b7:cd:fb:41:3a:85:1e:0e:75:ff:
fd:1b:d6:91:9e:8b:95:cd:4f:f3:c5:1d:b1:97:90:
17:22:01:63:c5:98:5c:39:bc:2f:67:02:5a:57:c9:
77:5c:6f:1d:74:7d:bb:05:bb:dc:9d:8c:13:45:b8:
dd:b7:cc:c6:11:1a:2d:9c:e4:18:14:f9:98:0e:0b:
2c:0b:7f:da:72:26:2a:f2:18:49:cd:85:5c:0f:30:
c3:4a:c4:5e:e2:74:df:b5:e5:a7:d6:4f:94:f1:79:
49:10:5d:14:2e:d4:59:25:b6:76:fe:e3:62:d3:8e:
7b:10:74:01:65:7e:63:50:8a:a1:a4:25:08:15:64:
ee:3f:ac:5b:9e:7d:bc:e0:df:93:b5:67:77:32:a2:
5f:06:72:e4:e2:a8:4a:fb:f0:82:34:7f:a4:12:b6:
f5:5f:a6:8e:ff:a1:04:ef:c4:a6:a9:70:48:8f:96:
46:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:95:C6:8C:79:FB:1C:C4:4E:98:60:AB:15:E0:05:92:A4:B0:4E:47
X509v3 Authority Key Identifier:
keyid:65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a303a383a3a2f36342d3634203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:87c:0:8::/64
Signature Algorithm: sha256WithRSAEncryption
5f:4e:a3:80:6c:b3:dd:41:43:8f:63:e4:76:53:a8:e7:1c:84:
05:28:f0:26:a3:df:b6:0e:a9:70:f9:1a:aa:fb:b2:40:91:47:
ae:a3:a6:19:84:90:c1:c6:22:0d:d1:86:ce:fe:2c:ac:55:48:
68:af:b8:e7:9d:ba:a9:79:fc:39:13:3f:80:ca:43:19:70:b3:
e8:45:ab:7e:aa:30:3b:78:db:98:4d:3a:83:e2:fa:21:d8:38:
21:62:24:67:e7:b4:a4:0e:02:67:35:a1:5e:e2:7c:ba:32:f8:
bb:00:52:c9:05:fe:58:81:09:e5:e0:c4:88:8e:e9:7f:59:aa:
ac:b0:c9:2c:38:8a:e8:54:a1:80:40:bd:7c:e9:f4:b3:b9:b1:
79:23:78:ea:3d:cd:eb:4c:2f:75:ab:b7:c3:3d:5e:91:7c:e7:
f1:59:50:74:2a:67:60:a6:6b:a1:e2:36:b5:ec:47:22:96:f5:
47:81:29:c5:85:c7:6d:4f:ce:33:e0:07:e9:3b:70:51:9d:d4:
26:2f:09:21:74:b4:40:36:1e:88:e3:8c:c5:bb:1f:97:c2:33:
78:ee:45:72:16:a4:7b:4b:16:ab:a3:88:f3:b7:d7:c3:c2:aa:
47:44:d8:e8:1e:86:e3:d2:ce:42:cd:95:d8:8a:0d:43:38:cb:
17:12:68:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:48:40 2025 by rpki-client