Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a313a3a2f34382d3438203d3e203238323032.roa
File: 323830343a3837633a313a3a2f34382d3438203d3e203238323032.roa (raw, json)
Hash identifier: NRqt+omRc4BAzfxAUZ2bT5nP0iObXagFOoryrW2R6eE=
Subject key identifier: F1:8C:B1:A8:32:70:D8:B8:F4:CF:A0:9F:C2:9C:3B:24:CA:BD:0A:E6
Certificate issuer: /CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Certificate serial: 3B19BB663D3E4D3339E4A0E7BF712ED1289AE63A
Authority key identifier: 65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a313a3a2f34382d3438203d3e203238323032.roa
Signing time: Fri 10 Jan 2025 14:19:49 +0000
ROA not before: Fri 10 Jan 2025 14:14:49 +0000
ROA not after: Fri 09 Jan 2026 14:19:49 +0000
asID: 28202
IP address blocks: 2804:87c:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:19:bb:66:3d:3e:4d:33:39:e4:a0:e7:bf:71:2e:d1:28:9a:e6:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Validity
Not Before: Jan 10 14:14:49 2025 GMT
Not After : Jan 9 14:19:49 2026 GMT
Subject: CN=F18CB1A83270D8B8F4CFA09FC29C3B24CABD0AE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:da:b0:f4:b1:54:52:81:7b:c6:db:10:c3:db:
2c:a1:7c:de:28:05:bb:89:c9:4d:a5:dc:1d:e5:59:
8c:cc:66:db:ab:96:4f:b8:cf:5e:8c:11:8e:98:59:
7b:63:38:7f:0b:39:3e:b8:8d:d8:82:cb:94:ad:79:
91:84:fe:03:03:98:bc:dc:8e:41:fe:60:8c:d4:f6:
98:d4:c3:7c:66:35:98:70:c4:6b:1d:e2:68:6c:f0:
c2:27:e5:b5:c3:4a:f5:d8:2b:96:94:e1:2c:e9:40:
14:46:98:25:70:e7:55:f3:06:0f:aa:16:dd:ff:39:
f2:dd:ab:f2:8d:bb:6d:eb:fe:0a:8b:3f:9b:2c:87:
88:11:9c:0c:21:77:72:41:47:f9:71:55:1b:4a:a2:
b6:87:52:7c:73:38:ce:8d:ba:63:19:54:76:8e:e3:
19:6f:22:5b:a5:1a:26:15:2e:13:be:84:10:07:95:
1f:44:89:c3:33:64:6a:dc:9b:83:b6:09:f0:10:dd:
0a:ee:56:14:a5:ee:fe:02:34:d8:95:c8:67:80:36:
ec:93:e2:76:9e:10:01:c1:b8:be:80:54:2f:34:a5:
5d:49:3f:bb:8a:80:05:80:ed:6c:38:b5:1a:17:da:
dc:82:24:6a:eb:4e:53:95:20:36:c8:f6:a6:75:1f:
4e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8C:B1:A8:32:70:D8:B8:F4:CF:A0:9F:C2:9C:3B:24:CA:BD:0A:E6
X509v3 Authority Key Identifier:
keyid:65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a313a3a2f34382d3438203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:87c:1::/48
Signature Algorithm: sha256WithRSAEncryption
4d:12:01:6f:db:a4:16:83:fc:e4:48:ea:94:4d:5b:09:a2:85:
08:99:91:9d:cf:53:0a:3f:c9:74:ca:b8:2a:70:e3:d2:51:09:
96:5f:8e:c6:aa:91:50:79:71:be:ce:a2:95:22:6b:5f:86:5a:
53:08:ae:72:bc:3c:c8:63:80:9c:d6:b9:cd:79:6b:1e:17:5c:
90:90:9c:1f:23:66:86:09:44:e4:96:73:ed:26:e9:8f:13:25:
98:9a:93:c6:b1:20:9e:a5:e2:a7:a1:90:d0:e5:75:b5:ab:1b:
cb:c8:7d:c0:bb:7c:3b:51:fe:85:46:1c:63:6f:4c:60:aa:b2:
8a:08:df:c8:c2:5f:18:44:fd:fe:6c:05:ea:7e:44:7e:ac:43:
05:1d:a2:dd:f4:8e:f8:cb:39:24:ec:ab:03:f8:ea:bf:30:db:
5c:a5:38:e8:4e:69:fb:a1:35:ef:cd:5d:89:f9:59:8f:c7:b6:
0b:be:76:6a:c5:ae:be:d8:6d:95:9a:99:8c:1e:96:07:f3:5b:
a7:21:a8:70:f8:4f:ff:a7:59:ca:29:b3:10:b8:1c:1a:d4:18:
7c:c6:ff:33:ca:66:a9:0b:81:42:a8:aa:f8:fd:3a:cf:d8:4e:
4b:25:1a:5a:c5:08:1f:95:ab:8b:95:09:f3:87:72:4a:50:17:
c9:99:89:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:09:21 2025 by rpki-client