Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/323830343a3837633a383a3430313a3a2f36342d3634203d3e203238323032.roa
File: 323830343a3837633a383a3430313a3a2f36342d3634203d3e203238323032.roa (raw, json)
Hash identifier: ndPzQ0gQSDUnEJqbp1HnQa2TaAyU0oSjkSHOl0rEsyQ=
Subject key identifier: A9:FF:89:59:E4:37:C4:DC:A3:AF:F8:36:F2:06:64:8E:1F:F1:3A:42
Certificate issuer: /CN=85FE199EB26E8B5E82D6033E5D496B0510EBD27C
Certificate serial: 7E1DEB24B1C430DFE59C0B86A7D8D351AFDB5778
Authority key identifier: 85:FE:19:9E:B2:6E:8B:5E:82:D6:03:3E:5D:49:6B:05:10:EB:D2:7C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/323830343a3837633a383a3430313a3a2f36342d3634203d3e203238323032.roa
Signing time: Fri 10 Jan 2025 17:22:59 +0000
ROA not before: Fri 10 Jan 2025 17:17:59 +0000
ROA not after: Fri 09 Jan 2026 17:22:59 +0000
asID: 28202
IP address blocks: 2804:87c:8:401::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:1d:eb:24:b1:c4:30:df:e5:9c:0b:86:a7:d8:d3:51:af:db:57:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85FE199EB26E8B5E82D6033E5D496B0510EBD27C
Validity
Not Before: Jan 10 17:17:59 2025 GMT
Not After : Jan 9 17:22:59 2026 GMT
Subject: CN=A9FF8959E437C4DCA3AFF836F206648E1FF13A42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:79:2b:c3:83:1b:6b:97:41:ae:6b:9c:b3:ca:
02:a5:2f:7c:d7:fa:98:b3:27:d2:91:e3:68:06:cb:
f1:f3:d0:1e:88:e0:22:54:4e:51:84:91:a0:6a:50:
2b:55:81:a7:34:d4:70:67:d0:e9:61:98:5f:ab:dc:
87:bc:72:74:5b:7a:db:b2:9c:40:57:79:3b:01:67:
b8:06:20:3f:c5:07:73:6b:1e:21:e6:5d:c3:42:fa:
f9:77:fa:ac:80:4a:63:2b:6d:ae:a3:35:aa:82:f7:
a4:3e:02:0e:26:b0:b9:63:5b:4d:ce:ef:fd:0c:5f:
c4:99:33:17:e0:bd:0b:b4:a8:a0:87:9c:a3:d9:ea:
a4:fa:c3:61:05:63:f2:37:2c:23:e7:b2:38:1e:48:
4b:c6:78:4e:b0:64:cc:6c:16:0e:44:79:22:1a:2b:
49:18:73:ac:6b:6a:10:0c:12:3d:30:cc:1b:05:82:
a1:d4:d7:59:e1:2e:51:27:ab:1f:34:aa:9f:7f:ce:
4b:25:67:4d:46:90:60:8f:85:7d:b7:51:9b:2b:4a:
9f:f6:89:fd:57:16:69:9a:cb:f0:8b:62:5d:64:c3:
21:04:43:96:27:d2:c9:e6:07:89:69:3a:fe:3b:02:
03:0f:2a:c9:10:1f:ac:86:dc:12:2b:e1:22:ac:0f:
fc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FF:89:59:E4:37:C4:DC:A3:AF:F8:36:F2:06:64:8E:1F:F1:3A:42
X509v3 Authority Key Identifier:
keyid:85:FE:19:9E:B2:6E:8B:5E:82:D6:03:3E:5D:49:6B:05:10:EB:D2:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/323830343a3837633a383a3430313a3a2f36342d3634203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:87c:8:401::/64
Signature Algorithm: sha256WithRSAEncryption
87:cc:c6:7f:c3:26:61:0e:b7:e3:98:5c:17:4d:70:9a:7d:de:
a3:7f:40:8e:28:cc:12:2e:ad:65:ee:4b:1c:36:85:5c:74:f5:
ba:62:47:4f:f7:dd:85:b4:02:76:06:25:08:36:ff:e6:bd:8d:
f9:96:7a:45:8c:63:f2:0a:85:c8:4f:50:89:ad:1d:93:3d:b8:
a1:dd:42:9e:46:4b:84:3a:1c:51:62:49:e2:ae:b8:f9:94:4d:
e3:6b:c8:51:cd:c3:af:a0:3a:03:01:68:11:46:67:f5:dc:76:
08:27:6b:a9:83:2a:4c:3d:14:9f:d2:9f:70:e6:83:11:94:ee:
6c:bd:28:94:95:cb:a3:31:c2:eb:50:5e:a4:d4:77:06:06:51:
ae:df:9b:23:3b:ce:14:4f:95:5f:b5:51:fd:01:82:0b:06:c5:
71:a3:28:20:2b:3a:bb:52:6d:25:e8:8d:40:f0:53:05:b3:aa:
c0:ac:13:ab:6b:33:b7:b2:47:e0:4e:87:e2:70:74:f1:77:49:
75:fa:5f:d9:da:1e:e8:e7:2a:47:43:3f:f2:ee:68:8a:da:93:
f7:05:8d:a9:f4:70:76:37:99:3f:f0:19:2e:3a:a0:89:c8:0f:
56:14:e0:5b:6d:31:97:d2:8f:22:8c:d7:13:9c:df:75:97:47:
23:77:8e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:58:15 2025 by rpki-client