Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/323830343a3837633a303a383a3a2f36342d3634203d3e203238323032.roa
File: 323830343a3837633a303a383a3a2f36342d3634203d3e203238323032.roa (raw, json)
Hash identifier: S0YH4wRltSMvU6E+fXNeAxH8fikYViBNoY0Rtj+FUmk=
Subject key identifier: 9D:74:A9:07:5C:34:E6:B8:76:7B:7C:3F:AB:BE:99:A4:29:38:BD:5D
Certificate issuer: /CN=85FE199EB26E8B5E82D6033E5D496B0510EBD27C
Certificate serial: 054E86E57D69F715DDC7CB116C4ADA6E5DA8E9A5
Authority key identifier: 85:FE:19:9E:B2:6E:8B:5E:82:D6:03:3E:5D:49:6B:05:10:EB:D2:7C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/323830343a3837633a303a383a3a2f36342d3634203d3e203238323032.roa
Signing time: Fri 10 Jan 2025 17:22:59 +0000
ROA not before: Fri 10 Jan 2025 17:17:59 +0000
ROA not after: Fri 09 Jan 2026 17:22:59 +0000
asID: 28202
IP address blocks: 2804:87c:0:8::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:4e:86:e5:7d:69:f7:15:dd:c7:cb:11:6c:4a:da:6e:5d:a8:e9:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85FE199EB26E8B5E82D6033E5D496B0510EBD27C
Validity
Not Before: Jan 10 17:17:59 2025 GMT
Not After : Jan 9 17:22:59 2026 GMT
Subject: CN=9D74A9075C34E6B8767B7C3FABBE99A42938BD5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c3:93:5f:14:6b:d8:fb:ff:78:7b:e1:6e:f5:
c2:a2:d1:53:20:7e:7a:bd:4b:6a:53:32:51:38:28:
0d:8a:59:8b:54:1b:99:e4:98:9d:a4:21:ee:1c:89:
21:7c:86:67:9e:a5:94:3b:56:8d:76:35:3e:72:e4:
77:2c:b0:5b:e5:cb:ea:02:b1:c9:58:c5:d7:41:fc:
e8:b7:3d:9d:60:7c:50:c9:f5:f8:de:de:68:6a:80:
23:23:75:2d:36:1b:e8:a2:dd:77:eb:1e:31:06:cf:
68:b9:a7:12:7d:5e:be:88:dc:d6:d5:c5:fe:4c:e6:
bc:91:b5:f2:b9:58:d2:44:ca:86:8d:20:33:70:86:
37:1a:d9:ca:fc:44:a1:36:f3:76:ee:ca:61:7e:6b:
df:b3:a5:a0:7d:5a:a1:ce:33:a5:54:3a:f9:7e:0d:
06:72:de:ec:a3:46:94:84:f0:d9:51:9a:5c:0d:31:
3c:2b:f7:bd:0c:22:ae:b7:9e:ae:50:93:f3:29:c8:
ae:59:e2:48:cf:59:57:a2:08:39:47:e2:1d:80:e4:
ea:9b:8a:7a:ec:3b:61:8e:88:a1:00:0f:b6:39:b9:
a6:c8:2a:1c:6d:fc:bb:8d:71:b7:c6:b4:12:66:21:
eb:18:1c:cf:84:d4:fd:b3:d1:43:0b:c3:5a:9a:82:
cf:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:74:A9:07:5C:34:E6:B8:76:7B:7C:3F:AB:BE:99:A4:29:38:BD:5D
X509v3 Authority Key Identifier:
keyid:85:FE:19:9E:B2:6E:8B:5E:82:D6:03:3E:5D:49:6B:05:10:EB:D2:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/323830343a3837633a303a383a3a2f36342d3634203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:87c:0:8::/64
Signature Algorithm: sha256WithRSAEncryption
0a:f3:12:1b:a6:2a:41:5c:34:f5:e4:0c:9d:5c:af:1a:83:8f:
48:8b:80:ef:20:a1:71:43:87:a0:59:21:e3:25:c1:4a:2f:c1:
f6:17:77:bc:c3:f9:4a:ac:55:21:23:57:af:01:fb:29:4f:da:
01:4e:1a:67:54:ed:bc:db:11:0a:60:0a:f9:33:b8:ff:9c:16:
0b:5e:a0:15:bf:84:4b:95:fb:7b:8f:d1:41:1a:9a:0e:07:96:
3e:08:5a:e5:34:c0:36:29:46:10:e6:1f:20:dd:9d:b1:c8:ba:
60:b7:9b:cb:37:d8:ad:56:de:70:db:91:7a:de:3d:e9:73:76:
9c:78:5b:7c:a6:42:40:99:32:b1:9d:e3:89:0e:6d:87:c8:98:
b1:aa:ba:45:6e:55:5d:c8:f8:b0:46:d5:d9:e2:58:8f:e1:2c:
3b:30:59:a0:4e:d7:41:0d:3a:29:5e:6d:48:5d:bf:23:af:6f:
ea:28:bf:fb:8e:3e:07:2f:1b:88:56:8f:a4:bb:8a:09:b4:c4:
1a:be:a1:c7:70:a6:4d:6c:08:1c:19:d2:1e:dd:9c:c2:73:3f:
39:0d:a1:2d:14:e9:d6:c6:ad:41:fd:07:e9:4c:b6:ea:58:60:
40:84:10:0e:7c:36:19:30:7e:a1:01:55:74:a4:c8:34:5a:db:
8d:c7:9a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:02:15 2025 by rpki-client