Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/323830343a3837633a623a3a2f36342d3634203d3e203238323032.roa
File: 323830343a3837633a623a3a2f36342d3634203d3e203238323032.roa (raw, json)
Hash identifier: jrAv3iWTt0x+EO+cKwTor8RR7hByU0zsc6EeTuN4JK4=
Subject key identifier: EE:46:F2:6E:52:FF:3E:21:2C:63:FC:A4:44:DD:79:99:2E:B2:83:1C
Certificate issuer: /CN=85FE199EB26E8B5E82D6033E5D496B0510EBD27C
Certificate serial: 3ACB4E0E2B06FA6248970DF0513AB897EEB58476
Authority key identifier: 85:FE:19:9E:B2:6E:8B:5E:82:D6:03:3E:5D:49:6B:05:10:EB:D2:7C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/323830343a3837633a623a3a2f36342d3634203d3e203238323032.roa
Signing time: Fri 10 Jan 2025 17:23:03 +0000
ROA not before: Fri 10 Jan 2025 17:18:03 +0000
ROA not after: Fri 09 Jan 2026 17:23:03 +0000
asID: 28202
IP address blocks: 2804:87c:b::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:cb:4e:0e:2b:06:fa:62:48:97:0d:f0:51:3a:b8:97:ee:b5:84:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85FE199EB26E8B5E82D6033E5D496B0510EBD27C
Validity
Not Before: Jan 10 17:18:03 2025 GMT
Not After : Jan 9 17:23:03 2026 GMT
Subject: CN=EE46F26E52FF3E212C63FCA444DD79992EB2831C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e8:5a:84:11:2d:a6:26:d6:b2:ad:a9:a9:35:
cd:4c:aa:49:71:36:28:7b:d4:91:02:89:3f:74:c5:
d2:bb:be:b9:5d:dc:bb:76:9c:8c:a1:69:df:81:29:
72:58:23:1b:3f:41:bc:27:01:64:bc:5e:87:cb:db:
97:3b:3c:96:9f:de:38:18:3d:b3:b2:99:3f:3a:39:
f3:b1:6f:74:5c:81:28:51:06:c2:a2:01:0e:4f:df:
f0:42:3e:f2:46:0d:df:1f:3a:32:fd:09:30:ff:e9:
80:59:6f:55:ce:3e:c0:0c:63:bb:2c:fb:f5:c8:aa:
11:95:c8:2c:af:2e:ac:c3:d7:6f:99:fa:18:2d:a3:
9a:8c:16:f4:ed:29:b8:ec:a6:52:e8:fa:1d:ec:6b:
4e:09:d1:83:a2:9f:86:52:4e:29:1a:f0:66:af:2d:
4a:27:20:ac:de:3f:a1:60:79:e2:f9:10:b5:fb:92:
da:3f:c9:9e:8a:09:b4:e8:6c:fe:af:3c:a3:c0:92:
7e:56:ff:06:e5:b0:75:4f:fb:e3:f5:9e:24:9a:af:
19:e3:33:cb:74:96:26:fd:26:95:00:60:70:0e:b7:
9d:eb:da:26:c4:cf:f4:fe:4d:fb:12:d6:41:31:17:
54:37:7c:3c:33:2f:1f:a8:e0:83:2e:ed:a7:ff:37:
64:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:46:F2:6E:52:FF:3E:21:2C:63:FC:A4:44:DD:79:99:2E:B2:83:1C
X509v3 Authority Key Identifier:
keyid:85:FE:19:9E:B2:6E:8B:5E:82:D6:03:3E:5D:49:6B:05:10:EB:D2:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/323830343a3837633a623a3a2f36342d3634203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:87c:b::/64
Signature Algorithm: sha256WithRSAEncryption
a9:e1:62:28:03:b6:4f:cc:ca:00:e9:8b:0e:38:0f:fb:7a:4d:
2d:6d:07:ae:d0:05:fa:93:84:e7:18:68:86:7a:6f:71:c5:7b:
b5:c6:e8:c0:0f:8e:24:99:ef:68:07:20:49:a0:3b:96:b1:69:
48:13:e7:98:b3:82:4d:92:df:ea:20:3a:10:cc:39:83:44:c0:
21:f6:50:ad:63:35:a8:77:a3:ed:fb:a4:fe:b1:36:41:c4:3a:
3f:82:52:52:55:ed:df:75:59:ce:74:95:eb:12:10:b4:9c:91:
5f:59:2e:9b:09:e4:f0:af:b3:62:10:5a:a4:8e:e9:74:37:71:
19:14:0f:cb:b7:f2:90:93:25:bd:2d:ff:cb:f7:6a:d0:c8:b5:
db:92:13:02:e6:81:98:a0:ac:7c:81:ef:35:f6:9a:56:ad:eb:
68:57:03:19:5e:18:81:6a:cf:f4:4e:e1:50:cb:df:7b:ca:ce:
4d:4f:00:36:10:1e:eb:79:4a:2c:25:91:53:d5:92:5a:c9:8d:
7d:17:08:e9:ae:f8:88:09:1e:57:91:79:41:f1:58:b3:a1:6a:
98:7a:7d:42:ad:d1:23:6d:86:8b:74:17:26:2c:02:72:4a:00:
ca:3d:68:ec:80:11:86:ac:00:a8:5b:39:e5:6a:8c:d8:e0:fc:
a2:dd:80:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:55:54 2025 by rpki-client