Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a383a393a3a2f36342d3634203d3e203238323032.roa
File: 323830343a3837633a383a393a3a2f36342d3634203d3e203238323032.roa (raw, json)
Hash identifier: H/EFHVxp7IegUG+ksYP0Y5Bc/+zXB0mKlkgEcL8DVNI=
Subject key identifier: AF:7D:2E:E8:AB:90:8B:7B:3C:6B:38:ED:20:B9:C5:FA:EB:00:D2:3F
Certificate issuer: /CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Certificate serial: 36EA499FD40C10E232D4B37A8FD99E345A65F901
Authority key identifier: 65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a383a393a3a2f36342d3634203d3e203238323032.roa
Signing time: Fri 10 Jan 2025 14:20:04 +0000
ROA not before: Fri 10 Jan 2025 14:15:04 +0000
ROA not after: Fri 09 Jan 2026 14:20:04 +0000
asID: 28202
IP address blocks: 2804:87c:8:9::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:ea:49:9f:d4:0c:10:e2:32:d4:b3:7a:8f:d9:9e:34:5a:65:f9:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Validity
Not Before: Jan 10 14:15:04 2025 GMT
Not After : Jan 9 14:20:04 2026 GMT
Subject: CN=AF7D2EE8AB908B7B3C6B38ED20B9C5FAEB00D23F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f5:66:72:b4:38:5f:e6:b7:eb:b7:6b:2c:10:
9e:64:dd:f4:7b:94:a6:a6:b7:63:db:1f:0e:d1:eb:
b4:b4:8a:e6:4e:bd:a1:25:91:fb:4a:23:c6:b3:a4:
44:3c:85:67:de:16:4d:76:a2:57:fc:a5:4b:43:ad:
5c:23:05:6b:cc:04:61:79:16:ca:d4:aa:fb:69:42:
bb:bf:04:47:96:d5:51:a6:32:99:d5:d4:c8:08:d2:
81:6f:8f:35:8d:8a:81:2c:2f:20:b3:3a:f7:df:90:
77:3c:da:f7:bd:4d:d1:58:68:25:97:56:d0:a5:c8:
f0:27:e2:0d:f3:3e:91:0a:c0:95:e0:1c:ad:a7:10:
ae:c7:68:e3:a1:1e:8d:78:38:21:38:52:8c:23:20:
41:c9:a7:5a:e0:e3:cc:2c:0a:96:2e:2b:5b:91:fa:
d5:ee:87:d8:f6:79:40:05:87:b1:3e:6d:fd:12:ef:
ce:23:21:e3:72:1b:a9:d7:75:9b:21:34:dd:f1:5f:
53:35:20:7c:c9:c6:f3:d9:7f:a7:c7:c5:fd:7a:94:
33:b5:eb:43:1e:07:85:27:56:2d:1b:65:66:38:ef:
b1:db:b2:2a:d9:48:9e:e4:a9:0d:68:5d:54:6c:45:
80:d0:06:2e:95:76:a5:9d:17:39:af:a1:4d:44:48:
2d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7D:2E:E8:AB:90:8B:7B:3C:6B:38:ED:20:B9:C5:FA:EB:00:D2:3F
X509v3 Authority Key Identifier:
keyid:65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a383a393a3a2f36342d3634203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:87c:8:9::/64
Signature Algorithm: sha256WithRSAEncryption
8a:71:f9:57:43:36:6a:60:d4:63:33:8f:dd:39:fc:e4:16:95:
32:c5:db:b8:f3:1f:e3:39:83:05:a3:d2:ee:89:0a:30:0d:80:
45:53:8e:4f:74:42:b6:8d:14:d3:fe:51:3a:a8:3a:f0:75:60:
0a:14:df:40:43:a6:70:a5:61:80:ad:99:b7:23:95:e5:5a:fa:
07:55:f7:46:bc:b4:bc:35:d5:71:3d:66:8b:66:85:fb:95:38:
37:11:c1:5e:dc:96:17:eb:6a:7a:03:dc:5e:5c:85:bc:d6:7a:
80:f6:6e:5b:18:76:4b:03:53:d2:f2:ba:83:eb:e2:85:fd:e4:
8c:1f:7b:98:c8:9a:04:01:92:c7:a7:f3:7d:b1:56:9c:f8:5c:
73:ca:19:ca:35:80:8b:ce:f7:ee:ca:f4:5c:d4:f4:4c:d3:f1:
72:4d:6d:5d:0e:05:d0:3a:1a:35:8b:41:c8:65:44:df:40:14:
55:e4:d9:ef:bc:00:c3:83:3e:79:9d:ec:2a:c0:87:a2:29:ab:
17:05:77:60:0c:94:97:80:22:93:39:5d:ad:3e:f9:31:68:3a:
36:1f:ec:20:44:61:3a:7f:f4:c9:0e:27:66:46:57:7d:fd:1a:
c6:76:6c:7b:56:85:c0:3d:da:2a:ed:16:d3:67:4a:d5:6d:96:
f9:a6:c9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:31 2025 by rpki-client