Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a623a3a2f36342d3634203d3e203238323032.roa
File: 323830343a3837633a623a3a2f36342d3634203d3e203238323032.roa (raw, json)
Hash identifier: vTyAPw8NDbh6hfNe2O5KdiI0EdNTdlj62Wr0N5OgL+4=
Subject key identifier: 4F:BA:97:24:01:33:C2:21:86:D1:34:0F:6A:B5:98:9E:0F:CD:4C:4A
Certificate issuer: /CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Certificate serial: 63E6B718591FC4F98FE446421BB035A8F7460FA1
Authority key identifier: 65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a623a3a2f36342d3634203d3e203238323032.roa
Signing time: Fri 10 Jan 2025 14:19:58 +0000
ROA not before: Fri 10 Jan 2025 14:14:58 +0000
ROA not after: Fri 09 Jan 2026 14:19:58 +0000
asID: 28202
IP address blocks: 2804:87c:b::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:e6:b7:18:59:1f:c4:f9:8f:e4:46:42:1b:b0:35:a8:f7:46:0f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Validity
Not Before: Jan 10 14:14:58 2025 GMT
Not After : Jan 9 14:19:58 2026 GMT
Subject: CN=4FBA97240133C22186D1340F6AB5989E0FCD4C4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c3:df:2a:4a:15:b8:fa:39:65:49:5b:35:97:
12:fc:1d:2a:2f:0a:ad:ed:df:85:c0:20:91:07:92:
b8:de:fa:21:60:18:32:c2:b9:be:9c:16:17:c4:77:
21:35:b5:8c:98:8c:0c:44:54:10:0d:ab:ac:45:c3:
58:5f:4f:d8:ea:b8:1b:54:87:b6:1e:75:19:bf:5d:
9e:c6:23:69:e7:69:c2:45:0c:e9:85:42:53:3b:7f:
d7:38:d2:87:03:cf:69:f9:3b:29:69:dc:3d:cf:94:
1d:d9:47:26:5a:fe:46:d3:96:f8:4f:17:82:11:69:
a9:8c:cc:23:c1:85:14:5e:a5:8f:eb:a9:df:47:aa:
51:2b:01:1d:6d:39:ab:69:51:a2:2d:42:bb:7b:39:
1e:fc:aa:bb:c8:c4:92:bb:10:51:4d:4d:ce:07:32:
5e:f3:c4:5e:45:ad:8a:99:d6:46:13:1d:26:3f:f0:
0b:bd:e6:8a:d3:38:3d:6b:1f:43:fa:7d:9d:af:d2:
7c:3b:5a:d8:59:f9:79:c4:8c:d7:55:62:ca:55:8f:
83:05:90:73:bf:98:d3:00:8e:de:dc:23:2b:04:bd:
82:a7:10:67:fd:63:41:dd:14:bd:16:28:63:e6:b2:
e0:32:b8:10:2b:fe:ae:50:d4:08:21:74:4e:be:17:
14:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BA:97:24:01:33:C2:21:86:D1:34:0F:6A:B5:98:9E:0F:CD:4C:4A
X509v3 Authority Key Identifier:
keyid:65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a623a3a2f36342d3634203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:87c:b::/64
Signature Algorithm: sha256WithRSAEncryption
48:7b:df:12:39:7a:52:f3:57:86:c4:bb:b6:10:e5:66:ce:e7:
73:9c:53:c0:1d:3b:2b:b6:c1:aa:24:f7:cf:00:a8:e1:2e:f5:
dc:49:7c:fd:26:f0:fe:d1:dc:e3:06:fc:b6:a9:db:7c:ef:83:
2c:a1:d6:f3:10:6b:51:ef:4f:49:62:b5:76:d7:0e:0b:0a:6c:
a1:f4:a3:c8:d2:e6:12:01:46:47:dc:cd:c3:c0:e4:ce:0f:b1:
71:3d:87:c6:fb:ba:48:f4:06:c7:51:27:c3:84:f7:34:c5:4a:
7a:7c:ae:58:30:de:5d:15:cb:51:0b:98:59:4b:11:50:cc:50:
18:a8:b1:67:62:be:95:d0:5a:fe:70:82:85:01:a3:44:1f:ee:
dd:24:88:9e:da:2b:e5:55:53:c2:b9:b7:eb:c1:ee:62:2d:cc:
20:3c:00:69:08:38:7a:20:eb:1a:50:f6:6f:fb:30:4d:f2:38:
5d:77:c7:8f:94:fc:4b:83:a8:9f:13:ee:ac:15:5d:2b:04:26:
fd:a2:2c:1c:fd:cb:f4:5b:c7:ea:3d:52:c7:e2:30:0a:5f:0c:
5d:bf:40:cb:56:48:10:e9:db:37:f4:31:fc:1c:05:f7:8d:e6:
a6:8d:5e:8f:5f:77:aa:47:37:64:94:c6:9f:6d:6a:70:ae:89:
a8:28:77:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:09:19 2025 by rpki-client