Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a383a313a3a2f36342d3634203d3e203238323032.roa
File: 323830343a3837633a383a313a3a2f36342d3634203d3e203238323032.roa (raw, json)
Hash identifier: qa2oezWOkdLFdDjH1RHi/Wwun1qfEYXvOXgNZ8TWvMw=
Subject key identifier: 24:DC:39:2B:D5:5C:21:2D:07:60:30:27:34:9F:26:20:47:B1:6A:5A
Certificate issuer: /CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
Certificate serial: 0568C3053A2CC1EDE7DAC7229AC458C5D5CEA8CA
Authority key identifier: BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a383a313a3a2f36342d3634203d3e203238323032.roa
Signing time: Mon 13 Jan 2025 13:32:11 +0000
ROA not before: Mon 13 Jan 2025 13:27:11 +0000
ROA not after: Mon 12 Jan 2026 13:32:11 +0000
asID: 28202
IP address blocks: 2804:87c:8:1::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:68:c3:05:3a:2c:c1:ed:e7:da:c7:22:9a:c4:58:c5:d5:ce:a8:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
Validity
Not Before: Jan 13 13:27:11 2025 GMT
Not After : Jan 12 13:32:11 2026 GMT
Subject: CN=24DC392BD55C212D07603027349F262047B16A5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b8:b3:fe:9d:6f:1a:b2:c9:cf:4d:25:34:6d:
a6:a2:57:66:d8:53:24:c2:87:02:65:56:7e:ac:d6:
2f:a1:e9:16:49:ee:ef:3e:4f:56:82:a3:78:b9:ad:
a8:9a:8f:19:e0:16:fe:e7:45:77:39:95:34:e3:1d:
64:37:38:a3:83:78:b5:c7:a2:8c:e8:94:3f:ea:13:
a6:c9:01:1a:9b:b8:fa:db:b3:9e:88:57:e7:b2:6b:
c0:96:e4:9e:c0:90:d4:dc:82:11:26:74:bf:8f:d9:
b9:54:ff:a8:ac:10:66:f1:2e:3d:c0:f6:cb:25:95:
ac:35:c6:b8:43:70:3d:b7:2d:c7:e1:2d:58:f3:b2:
54:0d:f8:49:22:5d:8e:fa:f7:a9:68:4a:c1:ba:dd:
f1:c6:15:4a:04:18:1d:67:aa:e6:34:cc:bb:48:e4:
52:18:6e:c0:0c:1e:24:ac:07:ea:61:56:ec:62:e7:
2e:54:9a:3b:f0:d0:6a:68:8e:aa:f1:9c:36:00:ee:
2a:a1:fb:2d:27:c7:ca:cf:f2:33:d8:55:1c:95:c7:
f2:e1:ad:a0:90:7f:94:e3:d1:fc:76:66:3c:fd:7a:
1c:f3:30:a5:48:6a:db:39:ee:5e:21:4d:34:8a:77:
e8:2d:54:6d:eb:e0:e2:73:9d:38:12:08:2d:5f:39:
62:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DC:39:2B:D5:5C:21:2D:07:60:30:27:34:9F:26:20:47:B1:6A:5A
X509v3 Authority Key Identifier:
keyid:BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a383a313a3a2f36342d3634203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:87c:8:1::/64
Signature Algorithm: sha256WithRSAEncryption
97:42:04:a9:bc:ac:c7:cd:b0:b9:06:dc:da:2b:4a:71:52:4f:
f3:bc:00:94:33:cc:1e:80:b9:03:de:c1:57:45:26:c7:7b:2f:
4d:97:89:5a:47:ba:e6:c6:8d:34:9f:13:46:eb:db:06:b0:78:
61:05:2f:c5:2f:a4:ae:a8:16:da:44:3b:55:a5:d2:b9:70:26:
93:7d:8e:d5:ea:a5:6e:be:79:99:39:fd:2f:71:cd:89:78:3a:
29:b7:23:08:ce:56:a9:3a:f3:15:ff:4b:40:3b:8f:37:4c:e2:
ea:34:29:53:21:d4:14:76:ca:2d:c2:32:d4:38:b2:a9:c3:69:
96:1a:c3:5a:42:e4:fe:38:13:a7:8d:60:ea:04:09:f5:61:9c:
96:5b:32:c7:c5:cc:b9:c1:2e:db:12:a7:ce:76:69:2c:71:42:
bf:2a:85:5d:0a:84:fa:fd:2a:a7:f5:20:8f:46:12:96:ae:48:
84:01:b4:2f:2f:ab:3a:7a:8d:e1:fb:68:db:92:58:65:1b:26:
c8:59:f4:c6:c7:38:ed:4a:1e:78:72:88:e0:73:be:94:6c:72:
09:b8:52:58:0a:23:d1:fe:fb:96:b3:6f:5e:ff:8c:6e:1c:b2:
7f:67:8a:11:be:8c:4e:a4:3e:b9:ac:70:1c:87:3c:aa:24:42:
36:cd:a3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:43:13 2025 by rpki-client on console.sobornost.net