Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a383a3a2f34382d3438203d3e203238323032.roa
File: 323830343a3837633a383a3a2f34382d3438203d3e203238323032.roa (raw, json)
Hash identifier: XxtNjA5DuXahJJAbVIU9jHbZYgS62f0CLwmTDKSs8+w=
Subject key identifier: D0:F4:61:69:A4:53:18:7B:F2:ED:1A:89:E1:E4:A2:D1:54:6C:2A:BF
Certificate issuer: /CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Certificate serial: 488F96B78A66E63128F36D548083BD8110D34B28
Authority key identifier: 65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a383a3a2f34382d3438203d3e203238323032.roa
Signing time: Fri 10 Jan 2025 14:19:45 +0000
ROA not before: Fri 10 Jan 2025 14:14:45 +0000
ROA not after: Fri 09 Jan 2026 14:19:45 +0000
asID: 28202
IP address blocks: 2804:87c:8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:8f:96:b7:8a:66:e6:31:28:f3:6d:54:80:83:bd:81:10:d3:4b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Validity
Not Before: Jan 10 14:14:45 2025 GMT
Not After : Jan 9 14:19:45 2026 GMT
Subject: CN=D0F46169A453187BF2ED1A89E1E4A2D1546C2ABF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:51:fa:ae:81:2c:db:fc:ad:22:1e:03:3f:49:
d7:de:bc:5d:7c:4f:e5:2a:57:cf:d2:7d:d3:9c:1e:
b6:0c:1f:4f:6a:da:b1:29:4b:fd:b8:01:7a:0b:69:
44:4d:ab:73:4c:ab:8c:c8:21:0b:4e:e7:1b:8a:06:
95:2b:af:5b:c5:a8:de:7e:ab:9f:f7:c7:25:0e:ff:
7a:55:4a:8c:bb:5e:77:fb:f9:30:9d:27:6e:f8:aa:
dd:ee:d6:62:22:a9:92:30:30:1d:d7:f8:2e:51:6b:
a3:6a:8f:4a:c3:f9:b6:d7:0e:91:2b:e8:ec:8b:c6:
99:08:29:ca:20:2e:62:11:09:45:b3:13:67:3e:16:
88:d3:9c:64:66:3a:8f:7a:34:ff:9e:e9:61:a6:46:
4b:77:a9:bd:89:5f:46:a4:3c:d2:09:a5:22:58:4f:
c9:91:e6:84:0f:8a:a5:db:c9:b2:c1:61:0e:7c:40:
f5:06:06:52:11:59:d9:ea:c4:dc:fc:88:83:b1:7e:
a0:c0:8d:75:1a:2c:8b:c6:3f:4e:f3:76:e0:ff:8c:
33:1d:56:53:8f:1c:37:2a:f9:c5:01:d9:02:ef:7f:
45:96:08:0b:34:78:18:e6:d4:56:48:1b:02:47:b6:
09:83:c7:57:80:59:07:00:14:78:ba:95:a6:36:2b:
52:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F4:61:69:A4:53:18:7B:F2:ED:1A:89:E1:E4:A2:D1:54:6C:2A:BF
X509v3 Authority Key Identifier:
keyid:65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a383a3a2f34382d3438203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:87c:8::/48
Signature Algorithm: sha256WithRSAEncryption
97:f4:ef:e5:29:85:d6:4f:5c:ea:43:c7:18:04:e8:56:41:18:
99:f3:a3:9d:74:ed:e5:e0:97:a5:1a:6f:a6:92:1b:7f:bd:f8:
e5:d0:fa:aa:5e:a8:73:fc:1f:0c:fc:71:00:d1:45:7d:d5:ad:
42:70:27:fc:7e:d9:9c:b3:54:bc:d4:73:46:ae:4b:4e:a2:1d:
4f:60:8c:93:66:33:3b:6f:44:f9:e3:ed:07:9c:43:d3:14:f4:
00:30:eb:03:8b:51:97:18:d8:5e:b9:e6:09:41:5a:13:cd:ca:
55:dc:82:ab:a1:de:b8:02:82:62:64:8c:47:82:42:ed:47:10:
e9:42:2f:a9:47:d0:96:2f:ba:90:90:8d:c8:95:ca:32:7d:20:
4d:ce:0c:f3:8f:de:d6:ee:bc:26:a2:4f:44:ce:8c:cc:35:7f:
10:b2:31:ab:81:34:0f:73:85:14:47:46:36:5c:8e:e3:19:e7:
15:38:05:67:6b:16:b9:f5:20:35:d9:d6:b7:fd:31:c7:2c:b3:
a8:05:a4:e1:57:9f:9b:ea:19:99:d4:56:bb:68:cb:ec:df:21:
54:3d:73:15:d1:0a:8c:31:ec:2e:1d:cd:b0:c2:ad:29:22:8d:
ee:82:e2:9b:b7:3b:0e:29:eb:6b:b7:2a:06:f3:eb:26:2d:c8:
f4:8e:76:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:34 2025 by rpki-client