Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a393a3a2f34382d3438203d3e203238323032.roa
File: 323830343a3837633a393a3a2f34382d3438203d3e203238323032.roa (raw, json)
Hash identifier: LzXquL6Thz+Dd4LpbvefOK76RLTTk9rIoj/ONYY7pqk=
Subject key identifier: CD:28:94:92:8D:D0:80:16:7B:B3:FB:F6:EB:ED:F5:FD:B5:39:21:B9
Certificate issuer: /CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Certificate serial: 57555078F098A0836A1476DE02B131B7C2A40BD0
Authority key identifier: 65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a393a3a2f34382d3438203d3e203238323032.roa
Signing time: Fri 10 Jan 2025 14:20:03 +0000
ROA not before: Fri 10 Jan 2025 14:15:03 +0000
ROA not after: Fri 09 Jan 2026 14:20:03 +0000
asID: 28202
IP address blocks: 2804:87c:9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:55:50:78:f0:98:a0:83:6a:14:76:de:02:b1:31:b7:c2:a4:0b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Validity
Not Before: Jan 10 14:15:03 2025 GMT
Not After : Jan 9 14:20:03 2026 GMT
Subject: CN=CD2894928DD080167BB3FBF6EBEDF5FDB53921B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:76:c3:3d:42:eb:3a:f5:ad:8d:7e:d6:68:8a:
56:26:f6:ff:b2:d2:c7:24:1c:d4:81:fa:07:05:89:
d9:3a:d6:0e:16:75:ad:5a:ad:9d:4c:ab:04:77:ce:
66:2e:a1:85:b2:3f:cd:6d:38:d5:fc:34:54:a0:be:
00:7b:10:91:03:3e:c4:75:cf:ee:84:07:c2:18:a8:
c6:9a:4a:e4:ae:a3:9b:ac:5f:f7:54:af:71:db:0c:
bf:57:a6:79:c5:06:d2:ee:3d:46:89:ca:ed:dd:1a:
c3:25:4f:98:93:34:39:2f:0e:d7:d4:65:21:3b:60:
62:83:ff:fb:68:6f:96:26:f8:ee:88:2a:e8:46:af:
f9:03:a4:58:9f:ff:10:d8:b7:b3:a2:1c:7e:04:34:
9f:f9:80:8c:72:dc:87:6d:9a:c5:59:01:af:03:fc:
29:8f:14:e4:9c:8b:e6:e7:ce:48:2d:4d:66:3d:22:
06:ae:2f:52:4a:41:24:c8:82:84:c0:7d:3d:68:ff:
5a:83:92:a3:a1:b0:a2:e5:6a:3c:2e:d5:15:4b:05:
15:d1:85:bc:62:39:2f:8d:24:09:7d:18:0c:9b:fc:
04:1c:ae:7f:96:9a:be:70:2d:69:06:7c:ce:32:3e:
e0:0f:64:88:d3:c8:00:ee:19:f6:de:88:8c:9c:1a:
84:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:28:94:92:8D:D0:80:16:7B:B3:FB:F6:EB:ED:F5:FD:B5:39:21:B9
X509v3 Authority Key Identifier:
keyid:65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a393a3a2f34382d3438203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:87c:9::/48
Signature Algorithm: sha256WithRSAEncryption
25:7a:76:a7:97:82:64:91:9d:6c:6f:e5:2d:d5:f4:ea:1e:7d:
be:c0:9b:ab:54:39:50:59:c8:6e:a0:cc:a6:5a:86:80:fa:fa:
1c:b3:2c:08:73:c2:ac:c8:59:20:ee:34:1d:28:cb:22:35:e7:
ad:58:50:fb:f6:e9:7a:fc:c2:b9:e1:66:ac:16:34:3e:b4:25:
cd:86:0f:ec:28:2e:cb:56:f8:6e:da:9a:a8:7e:b9:27:a5:5e:
24:e5:cf:cf:81:e7:d7:3e:61:a8:25:e8:11:38:0f:96:c6:68:
89:e5:07:6c:3a:f0:c0:a4:c2:99:cd:2c:c8:08:30:55:a3:db:
9e:0a:2c:ae:f7:32:b7:3d:3f:0a:84:5d:5c:7e:ea:a4:f3:97:
a1:29:85:9e:0b:f8:cf:dc:c7:5f:3d:82:ec:b3:b5:df:ca:cd:
b9:0e:16:0f:56:6a:48:ad:40:3f:d6:d2:ab:39:20:0a:f6:e4:
02:6e:f4:f4:c6:fc:66:c8:b2:49:81:b3:96:3e:16:24:d6:b4:
f3:7f:ca:59:c8:fd:90:83:86:91:42:76:03:7d:7b:31:93:0d:
0f:c0:cf:65:2e:f5:e4:62:5f:0f:cc:6f:cc:34:8a:10:65:bc:
58:e3:2c:0f:ee:ce:14:62:5b:e9:8c:fa:6e:64:f7:a1:63:3e:
b9:da:79:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:48:46 2025 by rpki-client