Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/323830343a3837633a623a3a2f34382d3438203d3e203238323032.roa
File: 323830343a3837633a623a3a2f34382d3438203d3e203238323032.roa (raw, json)
Hash identifier: qHFPfycqA2UUjFLUrp2Kst1Utf8+6ELMckE0ctlOsZs=
Subject key identifier: 5B:2D:59:C2:19:1F:A1:79:12:06:31:88:CF:E0:FE:23:AD:5B:98:29
Certificate issuer: /CN=85FE199EB26E8B5E82D6033E5D496B0510EBD27C
Certificate serial: 2337E7CBE800856F06D8D6291C37F08D815A6A32
Authority key identifier: 85:FE:19:9E:B2:6E:8B:5E:82:D6:03:3E:5D:49:6B:05:10:EB:D2:7C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/323830343a3837633a623a3a2f34382d3438203d3e203238323032.roa
Signing time: Fri 10 Jan 2025 17:22:55 +0000
ROA not before: Fri 10 Jan 2025 17:17:55 +0000
ROA not after: Fri 09 Jan 2026 17:22:55 +0000
asID: 28202
IP address blocks: 2804:87c:b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:37:e7:cb:e8:00:85:6f:06:d8:d6:29:1c:37:f0:8d:81:5a:6a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85FE199EB26E8B5E82D6033E5D496B0510EBD27C
Validity
Not Before: Jan 10 17:17:55 2025 GMT
Not After : Jan 9 17:22:55 2026 GMT
Subject: CN=5B2D59C2191FA17912063188CFE0FE23AD5B9829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:10:01:02:a7:76:ad:06:03:32:65:ca:f8:d3:
c2:5f:92:a6:4c:97:d2:34:eb:fa:33:be:5e:cd:27:
be:e2:f0:40:ba:0c:d6:b3:65:23:09:86:6e:d4:3c:
ec:f8:2e:71:fe:3c:c7:7f:a0:20:6f:63:c2:c3:f1:
23:a6:50:34:46:b6:5b:75:6f:25:a1:7d:e9:c2:76:
6d:42:d6:51:76:5c:e8:01:47:8f:9b:7b:76:77:ac:
a4:e1:02:b8:f9:47:87:df:0e:a7:94:d2:3a:56:67:
fa:bd:54:dd:96:d8:43:84:34:c3:b2:9f:90:f9:20:
ec:b4:fd:9e:8f:dd:1f:70:51:f5:89:98:65:f0:93:
e2:67:9d:f8:39:e7:e1:ea:84:c8:43:f1:93:d2:45:
fd:30:5f:11:25:7c:27:50:21:6e:f2:68:30:71:e0:
46:80:0a:03:93:6b:73:9e:9a:dc:1a:04:a2:41:2e:
26:76:55:92:f4:ff:f4:be:cb:b7:3a:9c:20:2f:0f:
50:c8:bb:e7:3b:7a:8e:bc:8e:9c:55:5f:52:a8:36:
47:99:55:57:f4:82:35:a3:7b:d0:33:0f:c4:3f:bf:
12:7e:62:dd:07:c2:64:2b:ea:ea:d6:cc:8c:66:d7:
2b:11:e2:13:6a:59:0d:aa:56:25:dc:b2:cf:b4:5a:
b4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2D:59:C2:19:1F:A1:79:12:06:31:88:CF:E0:FE:23:AD:5B:98:29
X509v3 Authority Key Identifier:
keyid:85:FE:19:9E:B2:6E:8B:5E:82:D6:03:3E:5D:49:6B:05:10:EB:D2:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/323830343a3837633a623a3a2f34382d3438203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:87c:b::/48
Signature Algorithm: sha256WithRSAEncryption
69:15:86:65:69:60:4a:69:a4:bf:63:52:42:d1:88:45:19:ae:
8e:15:52:1d:19:06:dd:24:5a:dd:2f:94:73:12:4d:cc:f0:ba:
13:9d:cd:b4:a8:f9:c9:0b:3a:a7:01:05:72:e5:7c:d0:e2:ca:
17:a7:51:37:74:93:7e:ef:5e:4d:f4:2e:42:ae:13:57:4d:e8:
db:95:a0:2e:83:d3:5f:c0:2b:1f:64:0b:da:e8:2d:f7:b6:20:
1b:7c:e2:c8:20:a0:02:cc:e8:c8:64:4f:b9:4b:e8:d8:9b:19:
c3:04:2e:59:f3:02:a8:ed:ba:cc:d9:ba:0e:4e:28:5b:4f:b2:
db:30:a5:1f:0c:18:07:4f:a1:55:99:40:06:9b:f7:4e:cc:b9:
36:74:89:68:5e:5d:3f:5f:09:71:3f:59:ac:97:ae:5b:5e:3f:
53:43:2c:8c:3b:75:0a:9f:45:6a:03:46:2e:ff:ec:19:0b:77:
58:25:fd:f2:39:e3:6a:71:49:e9:49:8d:d2:de:00:8b:74:32:
ed:74:22:8b:bd:64:85:35:30:ab:bd:a9:33:ca:0a:a8:c9:50:
53:78:77:0f:83:d8:f5:7d:49:5b:06:9e:0d:2e:f8:e8:64:60:
26:d9:d6:0c:16:34:1e:c0:a1:e1:55:4b:4e:c0:90:07:47:c2:
65:e9:36:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:58:35 2025 by rpki-client