Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/323830343a3837633a393a3a2f36342d3634203d3e203238323032.roa
File: 323830343a3837633a393a3a2f36342d3634203d3e203238323032.roa (raw, json)
Hash identifier: S2WS1aiOemKQTu70UNd2BQ1cSbotHQPzxah2JIDqMgM=
Subject key identifier: DD:DE:09:C6:A1:DF:91:00:DB:10:30:39:3D:E2:F2:F7:3F:B6:A7:08
Certificate issuer: /CN=85FE199EB26E8B5E82D6033E5D496B0510EBD27C
Certificate serial: 1FE14FE82443AEB6EA2A8660DC487FCCC10729A3
Authority key identifier: 85:FE:19:9E:B2:6E:8B:5E:82:D6:03:3E:5D:49:6B:05:10:EB:D2:7C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/323830343a3837633a393a3a2f36342d3634203d3e203238323032.roa
Signing time: Fri 10 Jan 2025 17:23:03 +0000
ROA not before: Fri 10 Jan 2025 17:18:03 +0000
ROA not after: Fri 09 Jan 2026 17:23:03 +0000
asID: 28202
IP address blocks: 2804:87c:9::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:e1:4f:e8:24:43:ae:b6:ea:2a:86:60:dc:48:7f:cc:c1:07:29:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85FE199EB26E8B5E82D6033E5D496B0510EBD27C
Validity
Not Before: Jan 10 17:18:03 2025 GMT
Not After : Jan 9 17:23:03 2026 GMT
Subject: CN=DDDE09C6A1DF9100DB1030393DE2F2F73FB6A708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8b:3c:6d:29:aa:5c:a3:5c:68:76:4b:0a:a4:
4c:ac:81:5a:2b:5e:b6:2c:00:16:e1:b9:95:98:33:
a9:cb:cd:a1:20:b1:d5:38:b9:a0:15:ff:f6:bf:b4:
a5:d1:90:2d:84:60:5e:bd:a3:ec:af:5d:0a:21:03:
08:84:28:9f:2a:3d:15:6c:87:fa:e1:e5:8e:7c:3a:
45:0c:ec:7e:ff:3b:14:b5:bd:bc:04:7c:64:9c:8f:
13:82:6c:b8:1e:8c:04:00:75:12:04:35:da:d5:62:
4a:ce:f4:d3:4a:52:f3:65:e5:61:86:12:d9:9e:a0:
72:a5:6d:9b:cd:8f:32:c9:01:75:2a:48:68:41:82:
15:17:f0:83:86:53:7c:2c:34:35:d6:85:66:08:ae:
fc:97:b0:f8:f6:25:da:3f:f5:68:9f:80:27:ea:ee:
0a:46:92:14:c8:0a:03:27:a3:50:75:a2:45:eb:8d:
e1:fb:8b:a6:02:6b:64:1b:90:67:5b:5f:43:de:4e:
69:20:36:0b:92:89:da:14:d9:1b:ce:ef:9a:52:15:
5c:e7:ff:5e:37:fa:8b:f3:e4:67:7b:97:40:0b:0b:
64:6c:ef:68:b0:93:a1:d3:9f:55:9f:10:21:b4:60:
5d:fa:98:79:b3:31:28:03:b5:73:4c:9e:3a:cc:71:
74:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DE:09:C6:A1:DF:91:00:DB:10:30:39:3D:E2:F2:F7:3F:B6:A7:08
X509v3 Authority Key Identifier:
keyid:85:FE:19:9E:B2:6E:8B:5E:82:D6:03:3E:5D:49:6B:05:10:EB:D2:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/323830343a3837633a393a3a2f36342d3634203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:87c:9::/64
Signature Algorithm: sha256WithRSAEncryption
41:46:23:ba:33:35:69:85:25:2a:58:73:b9:2f:12:3a:50:f9:
65:d4:31:1a:75:ef:7e:a8:53:74:f0:46:50:5c:d7:d0:9c:42:
84:99:33:43:db:99:ae:da:18:15:6d:34:7e:96:4a:65:c9:4e:
1e:26:95:16:70:96:0b:ee:d2:b0:ee:55:05:7b:e7:32:db:53:
49:e0:0b:51:af:f0:a3:be:ce:a0:a7:e0:16:ec:35:6e:f0:44:
6e:72:bc:63:e3:15:33:a4:ad:19:27:8f:dd:be:32:94:9e:1e:
a8:55:ad:cf:0d:ba:50:11:7f:b8:65:b3:15:6d:b7:10:57:cb:
52:bb:f9:b6:2a:02:6a:a9:a9:50:f8:9d:73:c5:6c:bf:1f:41:
28:c9:2a:f6:35:db:72:e7:fc:c1:cf:34:b2:9a:14:f9:9c:4f:
da:e0:af:c1:f4:67:65:30:0a:2d:ed:8f:d6:cd:1a:d2:03:58:
85:6f:04:8d:13:78:18:ac:dc:03:d0:4e:5d:dc:a2:99:4b:4c:
f9:55:e2:08:61:cf:f2:4c:87:d1:b5:22:73:9a:08:4a:f9:1b:
56:2f:d6:bd:82:26:e1:f1:b8:70:82:90:9f:47:08:a3:a2:33:
c4:e6:21:84:a0:fb:53:c9:99:d0:a9:8b:8e:59:a3:f1:55:8c:
99:e3:6f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:34:44 2025 by rpki-client