Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a383a383a3a2f36342d3634203d3e203238323032.roa
File: 323830343a3837633a383a383a3a2f36342d3634203d3e203238323032.roa (raw, json)
Hash identifier: iJHzXqAD9SuzLPwIwAgMFiSsSQNpj9je6FeVeK8ytaU=
Subject key identifier: 33:DF:2C:58:87:26:24:0D:64:60:C8:C7:B8:09:02:72:56:4D:E2:34
Certificate issuer: /CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Certificate serial: 232FC65563053DFBE6E6251337CCC4899011FDB6
Authority key identifier: 65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a383a383a3a2f36342d3634203d3e203238323032.roa
Signing time: Fri 10 Jan 2025 14:19:52 +0000
ROA not before: Fri 10 Jan 2025 14:14:52 +0000
ROA not after: Fri 09 Jan 2026 14:19:52 +0000
asID: 28202
IP address blocks: 2804:87c:8:8::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:2f:c6:55:63:05:3d:fb:e6:e6:25:13:37:cc:c4:89:90:11:fd:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Validity
Not Before: Jan 10 14:14:52 2025 GMT
Not After : Jan 9 14:19:52 2026 GMT
Subject: CN=33DF2C588726240D6460C8C7B8090272564DE234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7a:62:8c:d3:23:b6:58:fb:81:76:1b:60:87:
8f:d1:8a:27:79:ab:1c:6d:ca:7f:3f:a9:ca:0c:20:
24:f9:c8:e5:87:a3:70:76:b8:18:fd:11:b6:05:8c:
26:a3:99:92:94:c4:54:60:26:4d:56:a8:7a:28:1d:
95:94:db:cb:93:92:e0:af:0c:79:76:84:9f:8d:de:
09:5e:dd:21:28:e5:24:99:83:0e:21:fc:c2:92:1d:
7f:e3:77:d5:34:13:03:42:44:d5:2f:7a:79:b8:e2:
bf:72:7d:b9:b4:5b:1a:a2:9c:e0:b2:cf:b7:6b:71:
27:61:a4:8f:1e:06:7d:1f:6d:ba:db:d9:01:31:d5:
29:42:78:63:8c:4e:15:ba:ca:34:a0:7e:57:2f:86:
92:67:af:02:69:43:cb:46:14:02:11:2b:7b:7e:d7:
0b:31:a6:0a:52:1b:31:1a:dc:72:ac:6b:f5:34:9f:
c4:ed:bb:a6:e9:a8:37:62:df:fb:34:48:31:47:8a:
eb:de:bd:73:a4:36:4f:45:37:75:87:2a:49:de:e0:
1e:81:be:c1:07:3b:e8:1a:94:5d:f9:0b:23:9d:94:
c0:5e:40:8b:c5:ab:de:46:30:eb:9e:79:da:06:77:
66:7f:25:3a:c5:25:b2:b7:7c:a0:80:ca:a0:7f:74:
c2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DF:2C:58:87:26:24:0D:64:60:C8:C7:B8:09:02:72:56:4D:E2:34
X509v3 Authority Key Identifier:
keyid:65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a383a383a3a2f36342d3634203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:87c:8:8::/64
Signature Algorithm: sha256WithRSAEncryption
91:bb:25:f8:da:59:c8:76:d9:8c:45:55:0c:13:e6:32:c8:31:
d0:57:1b:05:50:a6:9f:ae:cf:c9:6b:e8:00:82:ba:e8:d7:80:
40:02:08:58:96:e2:d1:64:b3:ac:c1:ed:31:54:40:5c:dd:24:
5e:59:13:8d:2b:c4:3f:8d:09:1c:1b:4d:b5:2c:64:4d:29:4e:
b1:ce:f3:d8:72:71:47:ea:5c:52:4f:07:f4:7d:66:46:9c:44:
32:48:e1:fd:36:87:56:53:ee:1f:c1:72:11:0e:56:0d:de:bb:
12:3e:30:22:80:c5:b4:72:cc:ad:ad:37:91:3b:14:72:69:37:
20:80:f9:6b:1b:72:3e:55:aa:32:c3:b7:1e:14:53:01:8c:cf:
88:ed:42:e3:b1:70:45:c1:fb:54:3b:9c:51:18:47:8c:7f:93:
39:29:19:91:08:11:c3:37:6a:bc:2c:ec:b4:ea:30:1f:1f:c5:
88:4c:f2:e6:85:28:b1:fc:26:dd:6f:6f:d7:3d:29:55:d1:f9:
4b:f1:b5:49:f2:fe:33:96:2e:c9:78:a9:75:e3:5c:e5:43:91:
50:ae:c9:8e:9d:92:1f:92:00:a0:8c:5f:b4:38:02:1a:7f:3d:
25:10:4b:52:47:f7:c8:7e:94:9d:34:54:94:90:05:50:a6:19:
e8:0b:ee:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:38 2025 by rpki-client