Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/323830343a3837633a623a313a3a2f36342d3634203d3e203238323032.roa
File: 323830343a3837633a623a313a3a2f36342d3634203d3e203238323032.roa (raw, json)
Hash identifier: LYjAl/Tv5CTJOGUy1E0PsxuVR4UQ7AGDLHV3bhnN4bc=
Subject key identifier: 51:83:36:92:E3:11:09:2D:C3:EA:60:90:27:B6:6A:99:B1:96:D7:F5
Certificate issuer: /CN=85FE199EB26E8B5E82D6033E5D496B0510EBD27C
Certificate serial: 282BCA2D4C19AA4FA5A7D9DB6834281B022BE47F
Authority key identifier: 85:FE:19:9E:B2:6E:8B:5E:82:D6:03:3E:5D:49:6B:05:10:EB:D2:7C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/323830343a3837633a623a313a3a2f36342d3634203d3e203238323032.roa
Signing time: Fri 10 Jan 2025 17:22:53 +0000
ROA not before: Fri 10 Jan 2025 17:17:53 +0000
ROA not after: Fri 09 Jan 2026 17:22:53 +0000
asID: 28202
IP address blocks: 2804:87c:b:1::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:2b:ca:2d:4c:19:aa:4f:a5:a7:d9:db:68:34:28:1b:02:2b:e4:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85FE199EB26E8B5E82D6033E5D496B0510EBD27C
Validity
Not Before: Jan 10 17:17:53 2025 GMT
Not After : Jan 9 17:22:53 2026 GMT
Subject: CN=51833692E311092DC3EA609027B66A99B196D7F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:92:7a:fd:a1:49:2e:b7:ea:e6:73:5f:76:4d:
44:ea:29:09:b2:96:38:29:8f:e5:0e:cb:cc:12:47:
fe:3d:df:9e:ab:46:26:cf:da:c9:3a:f5:1d:77:70:
4b:51:de:6a:7c:53:9a:84:7d:4d:ec:a3:3a:db:c1:
ef:f3:ed:6a:60:cc:a7:a5:59:6d:58:b0:1f:0d:e2:
06:f1:17:c2:e6:78:44:da:b3:2c:3a:46:aa:49:ef:
9f:b8:8a:75:bf:06:65:ad:04:1b:ac:c7:ef:1a:ad:
1e:f3:6b:78:85:8e:92:79:9d:9b:1b:18:b1:2d:86:
b5:c8:fe:75:9e:66:09:32:f0:92:8d:44:82:ec:af:
22:1d:2a:85:06:28:6a:c5:58:30:ee:46:e2:22:fe:
62:a5:96:91:56:78:d4:7e:4d:0c:44:8f:76:e4:5d:
d6:20:07:18:d4:4c:71:7d:cc:fb:fb:e0:31:e4:ee:
b4:ad:42:13:d6:6a:f3:12:f7:a6:5c:4b:fa:c2:ac:
a4:9c:6c:0b:20:14:03:1b:06:f7:66:66:3a:63:a0:
67:51:31:f8:da:a5:76:73:fe:f8:3e:3c:37:2b:1f:
64:e6:1b:a8:ba:72:ca:5d:57:78:98:84:90:e2:70:
a0:30:33:dc:d8:76:a6:9b:62:3b:88:ea:3e:35:9a:
96:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:83:36:92:E3:11:09:2D:C3:EA:60:90:27:B6:6A:99:B1:96:D7:F5
X509v3 Authority Key Identifier:
keyid:85:FE:19:9E:B2:6E:8B:5E:82:D6:03:3E:5D:49:6B:05:10:EB:D2:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/323830343a3837633a623a313a3a2f36342d3634203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:87c:b:1::/64
Signature Algorithm: sha256WithRSAEncryption
04:83:4c:4f:ef:c3:99:65:9d:23:db:a7:78:7a:69:09:26:f5:
e3:47:9d:9a:ba:5c:15:c6:05:22:f1:2f:ed:8d:64:ac:94:0c:
db:4d:af:d7:74:7e:99:6e:10:26:08:a6:8d:6f:b9:16:b0:b6:
ea:7b:fc:ae:33:ca:d1:5e:ab:3b:db:e5:94:fd:62:3e:db:86:
d3:52:3c:50:28:16:f5:bd:36:c1:59:f2:f5:7d:16:6d:c3:bb:
8a:6b:53:ed:b0:28:3a:99:cf:e6:db:d1:2d:a3:48:89:95:dc:
85:87:8a:22:bc:5b:cd:0e:cf:7e:83:c2:2f:3b:2e:64:a1:ec:
ff:52:0e:59:21:bc:f3:aa:96:ec:b1:98:61:7b:59:c3:29:57:
88:aa:dc:b5:be:86:13:32:65:f0:ec:95:4b:38:46:fa:26:43:
79:78:b7:a5:f4:2a:fc:9c:b5:a6:a4:15:02:dc:f2:f8:80:85:
a0:3e:da:f7:d1:b6:c7:bf:25:a2:c3:02:e8:a4:56:c6:bb:99:
be:f2:d2:96:88:79:01:bb:34:2c:0c:17:ba:fb:4a:b6:b7:10:
c0:17:d4:15:96:71:57:60:95:93:c4:ec:11:c0:07:1e:a6:0c:
e5:d4:bd:8f:b9:89:97:72:9a:31:bd:91:fc:80:5e:80:0b:28:
ee:2d:7b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:53:34 2025 by rpki-client