Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/323830343a3837633a323a3a2f34382d3438203d3e203238323032.roa
File: 323830343a3837633a323a3a2f34382d3438203d3e203238323032.roa (raw, json)
Hash identifier: OWcSZWRoe8iiqRp0WT8K8rgUQKYzgcLXFAvJw2N8XOA=
Subject key identifier: F7:52:28:F8:1F:8B:50:EF:F4:8F:86:6B:B9:CF:54:72:71:A9:B7:1A
Certificate issuer: /CN=85FE199EB26E8B5E82D6033E5D496B0510EBD27C
Certificate serial: 23A228960D4A2A4DDE6ABD3A6540CCC5A5A5E0CB
Authority key identifier: 85:FE:19:9E:B2:6E:8B:5E:82:D6:03:3E:5D:49:6B:05:10:EB:D2:7C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/323830343a3837633a323a3a2f34382d3438203d3e203238323032.roa
Signing time: Fri 10 Jan 2025 17:22:57 +0000
ROA not before: Fri 10 Jan 2025 17:17:57 +0000
ROA not after: Fri 09 Jan 2026 17:22:57 +0000
asID: 28202
IP address blocks: 2804:87c:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:a2:28:96:0d:4a:2a:4d:de:6a:bd:3a:65:40:cc:c5:a5:a5:e0:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85FE199EB26E8B5E82D6033E5D496B0510EBD27C
Validity
Not Before: Jan 10 17:17:57 2025 GMT
Not After : Jan 9 17:22:57 2026 GMT
Subject: CN=F75228F81F8B50EFF48F866BB9CF547271A9B71A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:10:be:46:b2:f6:8c:ca:55:b7:69:d0:35:22:
2f:bf:bd:62:ad:0f:e6:bc:3f:62:8c:4d:42:a2:70:
c0:1c:f9:c3:75:e9:99:e4:88:80:da:a4:8c:37:f4:
70:b6:89:61:3d:32:0f:e8:f6:ab:4c:dd:c0:50:1a:
a3:5d:e3:50:a7:3d:13:ed:bf:ae:cf:02:94:b6:bf:
f0:16:f0:16:cf:4c:60:4e:a6:0d:b8:1c:20:2a:43:
5a:12:1b:89:aa:90:b5:e1:da:74:0f:5c:1c:ff:20:
c0:4e:fb:f6:eb:9b:d4:d5:1a:b0:cc:ba:4f:b8:02:
f9:2c:34:27:36:13:8e:65:42:58:32:4c:ae:00:8e:
7e:e8:df:13:92:c9:7c:9e:ff:a5:25:a1:f0:cc:4b:
c7:14:22:97:ba:12:0e:53:ff:e1:71:bb:a4:38:42:
f7:0e:b7:21:4f:33:4c:09:42:d6:84:e2:5b:90:b2:
95:ce:ef:73:ba:37:ca:9a:80:06:42:17:3c:2f:0d:
bd:41:fd:44:e0:25:c5:af:7a:0a:f7:b0:8f:21:5a:
3f:3f:e2:54:f1:0a:e6:d0:de:06:4e:ea:2d:3c:53:
80:ec:75:33:d2:93:6d:c1:17:6d:24:88:b0:94:ae:
2e:f6:2e:8b:64:68:b8:05:2d:57:00:5b:53:41:92:
d3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:52:28:F8:1F:8B:50:EF:F4:8F:86:6B:B9:CF:54:72:71:A9:B7:1A
X509v3 Authority Key Identifier:
keyid:85:FE:19:9E:B2:6E:8B:5E:82:D6:03:3E:5D:49:6B:05:10:EB:D2:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/323830343a3837633a323a3a2f34382d3438203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:87c:2::/48
Signature Algorithm: sha256WithRSAEncryption
52:c5:83:58:96:62:df:98:dd:b2:68:e4:84:de:a0:ab:f8:de:
1e:a4:18:d5:83:d0:f6:34:e8:c5:8b:fc:7f:8b:48:03:ea:b4:
01:bb:90:7b:29:ce:90:e6:95:ef:6a:43:70:c9:fb:11:87:0f:
b2:aa:ce:c1:4b:b6:a2:07:98:fa:b2:a7:e7:25:33:a7:51:71:
ef:44:19:94:3c:d4:c5:89:05:fd:c7:ad:63:60:61:c6:12:fd:
2b:c5:ea:fd:9b:28:cf:12:09:a2:48:4b:5e:a6:17:df:8a:e0:
79:ce:76:dd:c2:f6:f1:1a:96:37:fb:64:b6:58:3d:82:b8:e0:
a4:d2:5e:29:f8:fa:29:0b:47:76:b6:02:e5:30:08:21:3d:6a:
b2:9c:f7:15:96:a3:58:e9:62:33:9c:21:e6:51:08:80:47:21:
85:14:c8:94:c0:de:62:31:cf:b4:4c:63:8c:b5:98:c7:4d:0e:
58:16:60:f9:64:c9:81:9a:01:64:31:69:41:9d:67:8b:8a:da:
76:91:a3:fa:22:b9:39:50:c2:fc:32:51:4d:44:56:0d:e2:88:
13:7d:10:b9:48:0b:b8:5d:d4:37:93:24:be:86:56:02:65:bb:
71:35:db:19:62:46:df:36:49:da:a6:1b:8e:00:39:f6:47:56:
4e:51:82:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:34:33 2025 by rpki-client