Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a623a313a3a2f36342d3634203d3e203238323032.roa
File: 323830343a3837633a623a313a3a2f36342d3634203d3e203238323032.roa (raw, json)
Hash identifier: GYlpMdPGRY+KigkEuxLJx0hVQ7ehSAEASO2rATNcxHA=
Subject key identifier: 00:FC:5D:72:88:0B:4B:9B:48:C0:EC:05:26:92:BE:57:2C:3C:46:5A
Certificate issuer: /CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Certificate serial: 2C51A39DF3C5C4DE5639C1A0236C72ADB0E76D34
Authority key identifier: 65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a623a313a3a2f36342d3634203d3e203238323032.roa
Signing time: Fri 10 Jan 2025 14:19:57 +0000
ROA not before: Fri 10 Jan 2025 14:14:57 +0000
ROA not after: Fri 09 Jan 2026 14:19:57 +0000
asID: 28202
IP address blocks: 2804:87c:b:1::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:51:a3:9d:f3:c5:c4:de:56:39:c1:a0:23:6c:72:ad:b0:e7:6d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Validity
Not Before: Jan 10 14:14:57 2025 GMT
Not After : Jan 9 14:19:57 2026 GMT
Subject: CN=00FC5D72880B4B9B48C0EC052692BE572C3C465A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:05:c3:8e:8a:43:7e:e4:95:8b:f5:fd:78:99:
0b:cf:4d:3c:e9:16:59:c5:b5:fa:56:1b:84:47:c7:
1f:80:3b:f2:cf:6d:0a:6a:74:21:49:aa:3b:8e:20:
3f:9e:56:2a:1e:56:2f:2b:06:9c:29:4d:38:ff:c2:
14:7a:18:a5:6c:84:74:e2:41:a7:6e:73:20:e0:6f:
57:df:59:55:5e:23:20:5e:97:c5:21:7f:b4:35:fd:
e8:b9:a6:52:7e:d1:dc:bc:12:1e:13:b9:60:b0:c5:
e7:27:9e:36:e8:a8:8c:ef:0b:0d:2a:50:6a:2b:88:
ce:2a:20:41:84:97:07:49:fa:6e:f0:2e:38:89:0e:
c8:aa:4f:95:d6:b9:f0:15:e9:54:83:1a:5c:4a:27:
42:81:b9:5e:d5:5b:10:4a:3e:16:7e:4f:5e:42:a7:
3d:39:81:20:1e:17:f1:08:f6:7a:31:0d:41:0b:4c:
ec:fe:a8:75:16:2e:84:fb:42:cc:87:f7:2b:eb:36:
90:9d:b9:be:a1:75:3f:8c:91:e4:83:1e:07:b3:88:
f0:4a:ba:43:26:04:5b:ae:f5:fe:42:e0:75:af:8a:
b9:cd:df:9c:f6:b6:b2:29:7b:c0:03:a4:a5:47:bf:
19:6f:bd:3e:03:bf:fe:9d:35:39:e9:9c:3f:11:66:
6d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:FC:5D:72:88:0B:4B:9B:48:C0:EC:05:26:92:BE:57:2C:3C:46:5A
X509v3 Authority Key Identifier:
keyid:65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a623a313a3a2f36342d3634203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:87c:b:1::/64
Signature Algorithm: sha256WithRSAEncryption
9b:c7:70:45:45:e9:74:e6:0c:ce:4a:db:59:b7:32:98:bd:24:
04:9d:fe:ba:67:95:bb:bd:48:18:7d:0e:be:fd:7e:2c:f5:92:
d4:04:16:dc:f2:9c:2e:bb:7d:c5:bf:6a:eb:e3:16:eb:78:96:
61:fb:6e:d3:11:d8:31:63:fb:92:c7:ea:99:f8:98:13:16:e7:
9a:25:1d:3c:54:c8:ef:9c:5f:fe:d6:67:a6:a8:04:12:7e:87:
53:a5:a9:0d:37:20:7e:19:cf:23:9f:06:5d:70:cb:e1:88:ea:
7d:57:d5:bf:0b:c8:5a:95:34:1d:a6:1f:f1:ce:ec:b1:e1:33:
b5:4f:44:fe:c9:62:38:53:11:83:24:c4:56:7e:00:48:51:f5:
29:0c:eb:d3:34:37:06:82:99:88:b6:e1:5b:2d:b9:b0:80:e7:
f5:a0:63:6c:a1:62:71:cf:d6:82:09:4d:7c:5a:e4:fe:20:5a:
ad:5c:86:79:6b:b1:3e:01:4a:f2:23:8c:0f:46:50:12:ab:07:
b4:b5:1c:d7:5b:48:4b:6c:d5:d6:bd:75:35:f7:27:ca:a3:f9:
0e:f2:8e:30:9c:cf:7e:82:3b:0b:fc:2f:ff:3e:8e:ec:55:d1:
85:be:cc:89:9d:51:22:16:93:cd:f0:d3:1f:b7:4b:0b:55:67:
36:4e:70:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:08:22 2025 by rpki-client