Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/323830343a3837633a383a313a3a2f36342d3634203d3e203238323032.roa
File: 323830343a3837633a383a313a3a2f36342d3634203d3e203238323032.roa (raw, json)
Hash identifier: Jgvfv02G165V/6JUsBXo/wwam9aPF8zJM+MAMAZspr0=
Subject key identifier: 37:05:C7:94:E4:47:C0:15:D0:30:49:B0:7D:1D:70:6C:B0:70:6C:98
Certificate issuer: /CN=85FE199EB26E8B5E82D6033E5D496B0510EBD27C
Certificate serial: 3D244C45D80FAE26BB08B8F069F7F488A677CD32
Authority key identifier: 85:FE:19:9E:B2:6E:8B:5E:82:D6:03:3E:5D:49:6B:05:10:EB:D2:7C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/323830343a3837633a383a313a3a2f36342d3634203d3e203238323032.roa
Signing time: Fri 10 Jan 2025 17:23:01 +0000
ROA not before: Fri 10 Jan 2025 17:18:01 +0000
ROA not after: Fri 09 Jan 2026 17:23:01 +0000
asID: 28202
IP address blocks: 2804:87c:8:1::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:24:4c:45:d8:0f:ae:26:bb:08:b8:f0:69:f7:f4:88:a6:77:cd:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85FE199EB26E8B5E82D6033E5D496B0510EBD27C
Validity
Not Before: Jan 10 17:18:01 2025 GMT
Not After : Jan 9 17:23:01 2026 GMT
Subject: CN=3705C794E447C015D03049B07D1D706CB0706C98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ed:c8:76:0d:73:c0:6a:c8:3b:af:22:6a:39:
23:cf:86:4b:5b:af:77:ed:d2:d2:f4:9d:06:41:2d:
50:f5:82:04:a6:8f:39:f8:9c:71:b1:2b:f2:21:e0:
92:16:81:e2:db:e3:ad:0b:d8:20:e3:25:6f:cb:ad:
1a:f2:fa:05:7a:07:dc:07:f8:02:e2:58:75:8b:75:
84:a8:1c:7c:c4:87:30:72:a1:64:c7:67:2d:e5:fe:
62:3d:8d:56:0f:73:01:a2:62:94:0b:81:36:0f:e3:
31:e8:47:eb:f2:1d:c7:ec:7b:46:e6:d4:d3:82:9f:
6e:0f:72:5f:91:4f:b8:c5:cc:e0:ee:8f:58:26:e8:
0d:83:04:99:0e:1d:d8:60:46:db:9c:bc:06:0f:88:
7c:dc:bd:33:eb:6b:8e:f3:0a:ab:60:89:a7:79:37:
e0:0f:70:04:5f:87:8f:8c:f6:be:c5:f8:ae:37:7d:
af:f6:1b:e2:9b:5b:79:49:d8:fa:ca:c7:77:fa:94:
24:0e:ea:39:21:33:91:82:f5:b9:27:82:26:3d:e8:
d8:14:34:46:eb:91:64:80:51:7a:e5:12:ac:f3:e7:
15:0d:53:9a:77:49:df:6f:95:bf:cb:f6:13:c8:d4:
13:01:a7:52:08:54:cf:42:c5:c4:0f:f9:03:62:76:
1c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:05:C7:94:E4:47:C0:15:D0:30:49:B0:7D:1D:70:6C:B0:70:6C:98
X509v3 Authority Key Identifier:
keyid:85:FE:19:9E:B2:6E:8B:5E:82:D6:03:3E:5D:49:6B:05:10:EB:D2:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/323830343a3837633a383a313a3a2f36342d3634203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:87c:8:1::/64
Signature Algorithm: sha256WithRSAEncryption
5b:4e:8a:ff:6f:8a:e8:8f:0c:79:9d:44:03:b1:58:cb:88:e8:
f0:f2:d4:5e:a3:c2:1b:91:41:b5:15:24:0b:23:17:69:93:52:
57:56:e3:61:1c:a6:b1:00:d6:5f:e1:cf:7f:84:99:12:72:08:
c2:c0:e1:4c:46:fe:72:5c:d9:60:ef:e5:d6:b0:f8:d6:e5:4b:
f2:4c:28:59:1d:b4:ef:a8:22:87:78:8f:53:d0:6d:97:22:16:
24:26:ee:7e:5b:5a:64:31:b7:1e:25:db:4f:48:2e:c1:99:d0:
00:71:26:68:5f:9a:2e:c6:d1:9b:49:f7:99:40:b4:51:42:8e:
a3:29:a8:2b:d0:bb:7d:b0:38:4a:55:90:c7:10:90:50:6a:95:
32:fd:b2:bb:fa:58:00:be:85:97:4d:b4:15:39:79:c0:2c:dc:
be:48:3d:76:02:3a:b4:4c:12:08:ea:af:f7:42:f9:aa:40:43:
59:1d:62:fb:82:ac:d2:db:7d:69:bb:54:e6:b4:00:1f:fc:e2:
7c:89:41:8a:fa:25:bf:57:af:23:9f:13:17:34:a5:5c:61:d3:
20:da:3d:1d:9f:3b:ee:66:6d:3f:f7:b9:3a:a2:2d:32:b2:37:
7d:3a:58:5d:f2:c2:2d:ee:ad:95:5d:da:19:08:7d:10:38:9b:
9b:ac:87:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:56:02 2025 by rpki-client