Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/323830343a3837633a383a3a2f36342d3634203d3e203238323032.roa
File: 323830343a3837633a383a3a2f36342d3634203d3e203238323032.roa (raw, json)
Hash identifier: 7/4k5qzLhchoP/6UnVUDFtq0oZIkZEkN0UneVUR19CM=
Subject key identifier: F3:1F:D0:D3:8F:A8:9D:29:D1:95:82:4E:FD:5A:43:11:57:46:A4:4D
Certificate issuer: /CN=85FE199EB26E8B5E82D6033E5D496B0510EBD27C
Certificate serial: 347A3321285294D463B3BA525CC6850F04E02514
Authority key identifier: 85:FE:19:9E:B2:6E:8B:5E:82:D6:03:3E:5D:49:6B:05:10:EB:D2:7C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/323830343a3837633a383a3a2f36342d3634203d3e203238323032.roa
Signing time: Fri 10 Jan 2025 17:23:01 +0000
ROA not before: Fri 10 Jan 2025 17:18:01 +0000
ROA not after: Fri 09 Jan 2026 17:23:01 +0000
asID: 28202
IP address blocks: 2804:87c:8::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:7a:33:21:28:52:94:d4:63:b3:ba:52:5c:c6:85:0f:04:e0:25:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85FE199EB26E8B5E82D6033E5D496B0510EBD27C
Validity
Not Before: Jan 10 17:18:01 2025 GMT
Not After : Jan 9 17:23:01 2026 GMT
Subject: CN=F31FD0D38FA89D29D195824EFD5A43115746A44D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4b:86:f2:7b:0c:f5:35:0e:ac:d1:0b:6b:e6:
d6:29:3a:19:a4:9b:8b:59:6a:19:5d:21:de:99:d3:
9d:4e:d3:2d:98:9c:aa:dd:7e:8d:5e:e1:ea:5a:52:
14:61:ab:b6:4a:31:ff:74:7f:18:4c:d5:99:53:06:
97:98:e6:6e:c7:db:24:9d:b6:2c:c4:a5:63:01:55:
c0:9c:9d:ec:50:12:8f:91:3c:e5:b9:53:05:29:1f:
53:f5:ae:1c:20:19:2b:e7:1a:4f:21:e8:89:9e:bb:
f4:fa:23:9e:77:85:72:52:0f:dd:2e:5c:39:a5:94:
29:1e:f3:6c:24:b1:87:a2:83:fd:30:34:7a:55:64:
89:09:0b:1a:9b:0d:52:3f:07:b3:75:5a:15:b3:23:
0d:77:4a:c2:f3:45:0c:09:5c:04:94:c4:42:bf:ca:
04:64:5a:c6:f4:3a:29:32:0b:55:e6:cc:a8:cb:e2:
c8:16:0f:84:4f:7e:f2:74:13:16:64:b8:05:03:cb:
0a:89:20:f0:61:e1:c4:cf:c5:af:8b:f2:d4:a1:68:
0b:b8:39:ea:26:eb:2b:f6:ec:c4:6a:ce:b2:b3:60:
43:2e:72:73:18:5a:6b:ce:dc:b3:84:23:35:8e:4a:
56:fd:d3:75:d6:18:d6:5f:c0:bd:07:fd:0c:7d:21:
f2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1F:D0:D3:8F:A8:9D:29:D1:95:82:4E:FD:5A:43:11:57:46:A4:4D
X509v3 Authority Key Identifier:
keyid:85:FE:19:9E:B2:6E:8B:5E:82:D6:03:3E:5D:49:6B:05:10:EB:D2:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/323830343a3837633a383a3a2f36342d3634203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:87c:8::/64
Signature Algorithm: sha256WithRSAEncryption
12:81:11:9b:67:57:9d:93:f8:6b:d9:76:a5:82:f0:e4:f7:cd:
b2:d1:42:57:7f:84:79:46:ac:72:85:10:6b:14:45:2f:b2:91:
8d:59:ce:05:55:dd:dc:dc:2d:db:6a:86:0e:1b:35:48:a4:9c:
79:6f:85:ce:2f:80:3c:56:00:65:df:26:67:00:15:c7:31:26:
6f:f7:44:a8:cb:37:e9:a5:cd:a6:f0:24:cc:9e:74:72:17:ce:
de:a0:2a:f0:81:5c:81:3a:1c:2a:a8:9e:73:41:a6:e1:27:6a:
53:cb:65:7c:90:a6:50:c6:2a:82:ee:08:31:29:7e:a3:da:92:
e8:07:28:3f:62:65:7c:fb:68:c2:10:e6:7a:05:1a:43:c9:11:
74:d4:14:7b:93:af:ee:8e:62:8c:e6:8a:bf:7a:83:f0:e8:33:
9d:27:1f:11:72:ec:c0:5f:81:a2:36:62:8c:b4:b2:b0:c5:a4:
85:a6:ca:2a:0e:48:b2:f5:87:ca:bf:b6:f4:93:32:c6:bc:96:
42:f6:c8:78:cd:ed:6a:90:82:28:08:6e:68:e2:12:64:1f:37:
d9:4c:62:a4:6a:0e:39:94:ed:b0:9c:b6:85:6e:bc:7a:a3:22:
b2:16:49:c2:e3:52:d4:c4:3f:74:62:f1:7e:88:e0:77:5a:ce:
7c:0e:0f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:58:19 2025 by rpki-client