Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/323830343a3837633a383a31303a3a2f36342d3634203d3e203238323032.roa
File: 323830343a3837633a383a31303a3a2f36342d3634203d3e203238323032.roa (raw, json)
Hash identifier: SaLi4z9SY41f25/iMHbgAFnaauvxckc28SVw9ZNDWAA=
Subject key identifier: 0E:4F:10:B9:11:3B:D0:2F:96:BA:AB:D2:48:D1:D3:DC:81:97:04:0B
Certificate issuer: /CN=85FE199EB26E8B5E82D6033E5D496B0510EBD27C
Certificate serial: 71745698EB73E738CA6D6301E5040A42EFFF03F8
Authority key identifier: 85:FE:19:9E:B2:6E:8B:5E:82:D6:03:3E:5D:49:6B:05:10:EB:D2:7C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/323830343a3837633a383a31303a3a2f36342d3634203d3e203238323032.roa
Signing time: Fri 10 Jan 2025 17:22:54 +0000
ROA not before: Fri 10 Jan 2025 17:17:54 +0000
ROA not after: Fri 09 Jan 2026 17:22:54 +0000
asID: 28202
IP address blocks: 2804:87c:8:10::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:74:56:98:eb:73:e7:38:ca:6d:63:01:e5:04:0a:42:ef:ff:03:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85FE199EB26E8B5E82D6033E5D496B0510EBD27C
Validity
Not Before: Jan 10 17:17:54 2025 GMT
Not After : Jan 9 17:22:54 2026 GMT
Subject: CN=0E4F10B9113BD02F96BAABD248D1D3DC8197040B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b8:3b:49:85:c1:e9:61:34:ef:c6:e6:98:29:
3d:42:bd:f1:98:ec:f5:50:c0:8f:3a:59:1b:5e:d6:
6e:da:f8:40:53:e6:1b:cf:19:f6:59:d2:61:90:f5:
be:69:43:33:24:26:ae:68:99:7d:c0:89:48:d3:25:
f6:0e:93:89:a3:5a:75:87:5a:94:d8:f6:5a:99:a6:
16:5b:31:ae:46:01:3b:b3:28:91:8a:0b:b4:e9:54:
f8:6d:82:fb:ab:ab:59:1c:f5:cb:69:50:24:75:12:
2e:41:d5:2a:d9:a6:98:3d:f8:15:68:8e:53:07:7a:
6d:7e:4c:88:80:a1:a9:e9:00:4e:ef:29:ea:14:b8:
77:c4:67:b4:d4:5c:76:eb:60:f1:76:c6:7e:36:e9:
5b:99:ea:6d:9d:94:8e:cf:ca:6d:4b:9f:72:a0:55:
d9:2b:8e:64:18:6c:26:d9:1a:87:4a:b6:33:c1:f8:
1d:f0:2e:c6:f6:fa:98:a5:38:72:0f:f8:6c:97:2b:
93:46:ae:f1:52:50:e8:9e:cd:5e:1c:a1:9c:ac:aa:
11:77:52:d2:d8:4a:40:8b:10:36:b1:fc:0b:07:20:
72:06:a0:6d:be:7c:90:d6:e9:8b:0d:11:4f:2a:bf:
3e:34:ca:f3:c4:66:58:00:92:d4:41:68:c4:b6:c9:
3a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:4F:10:B9:11:3B:D0:2F:96:BA:AB:D2:48:D1:D3:DC:81:97:04:0B
X509v3 Authority Key Identifier:
keyid:85:FE:19:9E:B2:6E:8B:5E:82:D6:03:3E:5D:49:6B:05:10:EB:D2:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/323830343a3837633a383a31303a3a2f36342d3634203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:87c:8:10::/64
Signature Algorithm: sha256WithRSAEncryption
6b:ac:69:dd:ac:79:5c:ad:49:49:74:84:23:f4:ce:2a:96:3a:
27:4a:69:5f:94:b3:e5:80:6e:09:6b:9c:32:b4:96:26:d6:20:
04:fe:0a:7f:db:47:da:50:3b:38:44:47:f4:9d:f0:88:0b:dc:
63:56:62:a4:d7:8a:35:19:dc:0a:56:ea:f7:68:23:e7:97:af:
b4:09:25:a3:e1:ae:d9:35:04:a7:8c:3f:07:48:66:00:19:d9:
ad:44:5f:91:40:7b:ba:03:54:f1:88:82:49:82:7c:8e:27:07:
46:00:e2:1c:94:c6:fe:c4:54:39:aa:2e:11:03:6d:91:3e:85:
a1:3d:21:82:7b:86:42:1c:cf:2e:dc:3f:72:dd:38:d7:1e:de:
a0:4d:33:ef:a1:ef:ba:ba:d2:40:fa:e3:b1:89:c4:5d:ef:8b:
74:2b:d3:05:7b:10:e3:62:93:e5:40:05:1f:2a:6c:fc:dc:26:
a9:72:0f:48:86:6e:b9:29:a5:5c:e0:99:a5:07:bd:27:6d:5c:
03:0c:56:ea:c9:f8:2e:46:ca:47:d4:54:42:bc:b0:df:0f:8f:
55:e6:65:61:20:6b:85:b6:68:f8:ba:b6:de:13:63:19:c8:a3:
36:1f:a6:f3:a4:f0:7d:2a:0a:2c:b7:6f:fe:ad:81:3a:9b:98:
2b:fc:a6:65
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUcXRWmOtz5zjKbWMB5QQKQu//A/gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVGRTE5OUVCMjZFOEI1RTgyRDYwMzNFNUQ0OTZCMDUx
MEVCRDI3QzAeFw0yNTAxMTAxNzE3NTRaFw0yNjAxMDkxNzIyNTRaMDMxMTAvBgNV
BAMTKDBFNEYxMEI5MTEzQkQwMkY5NkJBQUJEMjQ4RDFEM0RDODE5NzA0MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsuDtJhcHpYTTvxuaYKT1CvfGY
7PVQwI86WRte1m7a+EBT5hvPGfZZ0mGQ9b5pQzMkJq5omX3AiUjTJfYOk4mjWnWH
WpTY9lqZphZbMa5GATuzKJGKC7TpVPhtgvurq1kc9ctpUCR1Ei5B1SrZppg9+BVo
jlMHem1+TIiAoanpAE7vKeoUuHfEZ7TUXHbrYPF2xn426VuZ6m2dlI7Pym1Ln3Kg
VdkrjmQYbCbZGodKtjPB+B3wLsb2+pilOHIP+GyXK5NGrvFSUOiezV4coZysqhF3
UtLYSkCLEDax/AsHIHIGoG2+fJDW6YsNEU8qvz40yvPEZlgAktRBaMS2yTq5AgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUDk8QuRE70C+WuqvSSNHT3IGXBAswHwYDVR0j
BBgwFoAUhf4ZnrJui16C1gM+XUlrBRDr0nwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGRQN05GMUJkM3ZBekdEY2o3dm1RVlc5ZmtyQVE3UHltUDl1eE04Qk1V
V00vNi84NUZFMTk5RUIyNkU4QjVFODJENjAzM0U1RDQ5NkIwNTEwRUJEMjdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1RkUxOTlFQjI2RThCNUU4
MkQ2MDMzRTVENDk2QjA1MTBFQkQyN0MuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRkUDdORjFCZDN2QXpHRGNqN3ZtUVZXOWZrckFRN1B5bVA5dXhNOEJNVVdNLzYv
MzIzODMwMzQzYTM4Mzc2MzNhMzgzYTMxMzAzYTNhMmYzNjM0MmQzNjM0MjAzZDNl
MjAzMjM4MzIzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCQGCCsG
AQUFBwEHAQH/BBUwEzARBAIAAjALAwkAKAQIfAAIABAwDQYJKoZIhvcNAQELBQAD
ggEBAGusad2seVytSUl0hCP0ziqWOidKaV+Us+WAbglrnDK0libWIAT+Cn/bR9pQ
OzhER/Sd8IgL3GNWYqTXijUZ3ApW6vdoI+eXr7QJJaPhrtk1BKeMPwdIZgAZ2a1E
X5FAe7oDVPGIgkmCfI4nB0YA4hyUxv7EVDmqLhEDbZE+haE9IYJ7hkIczy7cP3Ld
ONce3qBNM++h77q60kD647GJxF3vi3Qr0wV7EONik+VABR8qbPzcJqlyD0iGbrkp
pVzgmaUHvSdtXAMMVurJ+C5GykfUVEK8sN8Pj1XmZWEga4W2aPi6tt4TYxnIozYf
pvOk8H0qCiy3b/6tgTqbmCv8pmU=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:34:25 2025 by rpki-client