Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/323830343a3837633a383a393a3a2f36342d3634203d3e203238323032.roa
File: 323830343a3837633a383a393a3a2f36342d3634203d3e203238323032.roa (raw, json)
Hash identifier: KuSITKV75QMRFNnMD/rfVpCpO7cAsg+osHLULR7036o=
Subject key identifier: 53:E0:F9:48:F6:6C:93:7E:CB:F2:6E:DC:7E:21:21:5D:21:8B:62:BB
Certificate issuer: /CN=85FE199EB26E8B5E82D6033E5D496B0510EBD27C
Certificate serial: 66EA936F2D00B16B168D6845F78E44034464A3ED
Authority key identifier: 85:FE:19:9E:B2:6E:8B:5E:82:D6:03:3E:5D:49:6B:05:10:EB:D2:7C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/323830343a3837633a383a393a3a2f36342d3634203d3e203238323032.roa
Signing time: Fri 10 Jan 2025 17:22:54 +0000
ROA not before: Fri 10 Jan 2025 17:17:54 +0000
ROA not after: Fri 09 Jan 2026 17:22:54 +0000
asID: 28202
IP address blocks: 2804:87c:8:9::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:ea:93:6f:2d:00:b1:6b:16:8d:68:45:f7:8e:44:03:44:64:a3:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85FE199EB26E8B5E82D6033E5D496B0510EBD27C
Validity
Not Before: Jan 10 17:17:54 2025 GMT
Not After : Jan 9 17:22:54 2026 GMT
Subject: CN=53E0F948F66C937ECBF26EDC7E21215D218B62BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d0:a4:27:f7:28:4f:85:e8:fc:ae:8d:4a:79:
5f:42:3f:62:54:05:34:0e:e2:36:c8:31:b4:e8:2c:
42:42:35:fd:3c:ba:a2:21:e0:b1:76:24:ce:7c:e3:
9a:d2:df:98:b5:bd:8a:09:33:10:be:cd:fe:0b:ed:
94:cb:9b:6d:86:f7:50:35:b9:49:cf:a1:48:d5:45:
f6:e8:cc:77:02:f7:ec:cc:84:04:9b:84:7b:fd:c5:
32:82:b7:22:55:c1:1b:03:f1:bb:d6:e4:0a:a6:c5:
bf:94:92:c0:b8:cd:1d:ee:ae:3d:d4:54:72:a7:b8:
ef:63:22:51:dd:9f:98:c3:5d:dd:13:b2:c8:72:9b:
da:b6:13:c0:61:34:90:d7:0a:79:4b:38:37:c3:41:
21:58:98:80:28:4c:95:4a:36:94:de:c2:f2:9f:39:
d4:4e:a6:27:e8:d8:1b:b0:26:8b:ec:d8:4e:ca:0d:
f9:6e:c4:7e:37:fa:56:fe:ec:18:12:34:96:98:84:
11:2b:ed:85:7e:e4:25:53:17:27:91:51:b9:c6:13:
65:5e:3b:1c:18:75:e1:39:cc:12:c6:12:15:42:1b:
cc:33:52:a3:49:d9:26:8a:f1:8a:af:9b:06:02:39:
3d:59:22:c6:a2:f1:5a:c1:ad:d2:6d:d6:da:83:c1:
7e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E0:F9:48:F6:6C:93:7E:CB:F2:6E:DC:7E:21:21:5D:21:8B:62:BB
X509v3 Authority Key Identifier:
keyid:85:FE:19:9E:B2:6E:8B:5E:82:D6:03:3E:5D:49:6B:05:10:EB:D2:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/323830343a3837633a383a393a3a2f36342d3634203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:87c:8:9::/64
Signature Algorithm: sha256WithRSAEncryption
1a:71:89:cf:83:4c:42:6c:f3:e0:13:99:68:6f:ab:72:a3:61:
55:81:d3:c8:52:a8:4a:d5:8b:de:30:a7:da:ef:5d:88:70:28:
4c:53:12:1e:7c:75:aa:b9:54:69:75:28:20:87:68:6f:9d:00:
16:8e:ab:24:9e:4b:af:74:67:eb:4b:21:ef:d2:58:2b:f0:9c:
d0:89:75:ad:4a:97:24:99:85:05:25:89:cb:fd:03:07:29:70:
4c:70:3c:3c:95:9e:ff:62:cf:bc:40:f9:93:b1:67:dd:78:e7:
8a:a1:4d:12:d4:e2:04:9b:e5:f5:80:cf:53:92:84:90:2c:c2:
28:09:80:1f:74:24:c8:55:4e:4e:34:40:83:ed:b8:ff:88:45:
c4:0f:08:c6:71:91:6e:54:1e:14:63:39:f2:f4:09:68:c9:63:
2a:c1:0c:0e:a0:4e:f1:aa:d7:b9:3c:70:c6:30:be:d0:8c:1d:
ad:ff:ef:72:f8:5e:53:2f:48:ec:62:e0:0f:81:00:92:11:62:
9d:cd:a9:61:6c:16:29:90:31:7d:ae:15:c6:c6:97:9a:fe:80:
ea:52:c3:fe:3e:15:94:57:02:46:69:bb:a3:f6:48:63:12:a1:
e4:13:f7:97:85:25:19:c7:0b:41:8f:cb:4f:08:bb:3c:c5:9b:
e9:52:28:8d
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUZuqTby0AsWsWjWhF945EA0Rko+0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVGRTE5OUVCMjZFOEI1RTgyRDYwMzNFNUQ0OTZCMDUx
MEVCRDI3QzAeFw0yNTAxMTAxNzE3NTRaFw0yNjAxMDkxNzIyNTRaMDMxMTAvBgNV
BAMTKDUzRTBGOTQ4RjY2QzkzN0VDQkYyNkVEQzdFMjEyMTVEMjE4QjYyQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC10KQn9yhPhej8ro1KeV9CP2JU
BTQO4jbIMbToLEJCNf08uqIh4LF2JM5845rS35i1vYoJMxC+zf4L7ZTLm22G91A1
uUnPoUjVRfbozHcC9+zMhASbhHv9xTKCtyJVwRsD8bvW5Aqmxb+UksC4zR3urj3U
VHKnuO9jIlHdn5jDXd0Tsshym9q2E8BhNJDXCnlLODfDQSFYmIAoTJVKNpTewvKf
OdROpifo2BuwJovs2E7KDfluxH43+lb+7BgSNJaYhBEr7YV+5CVTFyeRUbnGE2Ve
OxwYdeE5zBLGEhVCG8wzUqNJ2SaK8YqvmwYCOT1ZIsai8VrBrdJt1tqDwX4BAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUU+D5SPZsk37L8m7cfiEhXSGLYrswHwYDVR0j
BBgwFoAUhf4ZnrJui16C1gM+XUlrBRDr0nwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGRQN05GMUJkM3ZBekdEY2o3dm1RVlc5ZmtyQVE3UHltUDl1eE04Qk1V
V00vNi84NUZFMTk5RUIyNkU4QjVFODJENjAzM0U1RDQ5NkIwNTEwRUJEMjdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1RkUxOTlFQjI2RThCNUU4
MkQ2MDMzRTVENDk2QjA1MTBFQkQyN0MuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRkUDdORjFCZDN2QXpHRGNqN3ZtUVZXOWZrckFRN1B5bVA5dXhNOEJNVVdNLzYv
MzIzODMwMzQzYTM4Mzc2MzNhMzgzYTM5M2EzYTJmMzYzNDJkMzYzNDIwM2QzZTIw
MzIzODMyMzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAkBggrBgEF
BQcBBwEB/wQVMBMwEQQCAAIwCwMJACgECHwACAAJMA0GCSqGSIb3DQEBCwUAA4IB
AQAacYnPg0xCbPPgE5lob6tyo2FVgdPIUqhK1YveMKfa712IcChMUxIefHWquVRp
dSggh2hvnQAWjqsknkuvdGfrSyHv0lgr8JzQiXWtSpckmYUFJYnL/QMHKXBMcDw8
lZ7/Ys+8QPmTsWfdeOeKoU0S1OIEm+X1gM9TkoSQLMIoCYAfdCTIVU5ONECD7bj/
iEXEDwjGcZFuVB4UYzny9AloyWMqwQwOoE7xqte5PHDGML7QjB2t/+9y+F5TL0js
YuAPgQCSEWKdzalhbBYpkDF9rhXGxpea/oDqUsP+PhWUVwJGabuj9khjEqHkE/eX
hSUZxwtBj8tPCLs8xZvpUiiN
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:37:05 2025 by rpki-client