Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a653030303a3a2f33352d3335203d3e203631353837.roa
File: 323830343a333330303a653030303a3a2f33352d3335203d3e203631353837.roa (raw, json)
Hash identifier: nyWZ7y92XDjvQhCHoff4P+Yd9yEvRR3cwjF+mflaUfs=
Subject key identifier: 2E:EC:63:A5:6C:02:65:39:58:47:DE:C6:6E:CE:DE:08:A6:94:DA:1C
Certificate issuer: /CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
Certificate serial: 3051B6B6563C6BD557C5400CDC239A3D98FF1A72
Authority key identifier: B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a653030303a3a2f33352d3335203d3e203631353837.roa
Signing time: Wed 10 Jan 2024 13:02:14 +0000
ROA not before: Wed 10 Jan 2024 12:57:14 +0000
ROA not after: Wed 08 Jan 2025 13:02:14 +0000
asID: 61587
IP address blocks: 2804:3300:e000::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:51:b6:b6:56:3c:6b:d5:57:c5:40:0c:dc:23:9a:3d:98:ff:1a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
Validity
Not Before: Jan 10 12:57:14 2024 GMT
Not After : Jan 8 13:02:14 2025 GMT
Subject: CN=2EEC63A56C0265395847DEC66ECEDE08A694DA1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fa:cb:c4:44:8b:e2:40:d1:b4:3b:d2:8b:1f:
f1:7d:a1:21:88:9d:d7:4c:59:0b:08:65:b5:f7:f1:
b1:37:32:7c:a5:a2:3e:af:44:53:74:6f:3d:d2:be:
8b:47:09:ba:37:13:b8:16:80:44:b7:ba:ac:5e:2c:
7f:ca:f9:51:a1:76:4c:fb:6d:46:b4:bb:cd:f7:da:
25:1f:03:15:ee:b3:9e:85:7f:b4:52:a1:99:e9:6e:
9d:53:11:c8:cf:d3:92:60:2c:95:52:b0:0a:f1:72:
9a:35:e7:a9:2b:7c:d7:07:9e:c7:5d:72:b4:2e:e2:
8a:11:e1:5c:8e:5c:28:01:b7:da:a3:74:ff:5f:e2:
6f:84:ca:d6:9a:11:10:83:12:d5:99:fd:5d:20:c1:
01:b1:10:d4:ba:24:a1:9a:b9:c2:43:83:33:6a:11:
5f:36:56:34:e1:33:97:9b:ce:18:1f:c8:4d:ca:91:
a0:51:27:6d:8e:f4:c7:54:1a:51:1a:8f:ee:be:1f:
23:c3:a4:2c:0c:76:f7:16:c5:6a:80:81:3e:6e:bd:
35:a7:13:4b:d7:42:1e:3b:c0:f4:40:cd:c2:ad:40:
a6:93:75:80:12:5b:43:37:a4:d3:b1:5d:8a:03:86:
bd:7e:fd:30:b1:83:43:e0:3f:c5:02:c0:f0:de:32:
20:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EC:63:A5:6C:02:65:39:58:47:DE:C6:6E:CE:DE:08:A6:94:DA:1C
X509v3 Authority Key Identifier:
keyid:B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a653030303a3a2f33352d3335203d3e203631353837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3300:e000::/35
Signature Algorithm: sha256WithRSAEncryption
cc:67:33:9a:a5:d3:e1:18:d7:bc:5f:f7:a5:92:0d:bb:ce:8c:
fe:30:3a:6f:6c:f9:93:3c:4a:05:03:26:2f:83:a2:1e:93:05:
d5:0f:ec:71:2d:81:b9:95:8a:63:fc:36:1b:08:fc:d0:eb:9c:
d9:52:1b:59:cd:dd:f1:dc:03:70:a3:05:1c:9e:0a:e6:50:18:
51:45:58:5c:60:6c:a6:9d:9e:a7:97:14:47:a2:88:8a:30:9e:
87:5a:c4:d8:27:ad:ab:c6:0f:4f:ef:11:76:fa:ce:89:07:4f:
5e:c2:00:ee:02:3d:e5:05:cc:af:07:66:68:2e:ad:5f:c9:02:
a4:57:4d:4a:93:03:c0:a4:13:40:1f:35:8e:78:4c:9d:8d:a1:
d8:17:59:82:f3:8d:dd:90:3f:9f:1a:da:84:0d:e2:90:1e:4f:
8f:b9:4a:53:2b:28:5c:45:c2:92:d8:6a:c7:d0:be:30:ec:3e:
8c:b7:ff:5c:a5:b9:1f:b0:ac:f4:40:ae:56:2f:73:98:0f:cb:
8b:35:d9:d2:ef:70:fd:1a:10:55:8d:f9:1b:80:00:14:46:2e:
28:a8:0f:85:ee:26:79:83:0a:60:83:e9:29:8c:b4:55:4d:86:
00:81:32:57:1c:28:57:48:50:b3:ca:bf:f4:4c:be:39:2e:9e:
75:0c:2d:25
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUMFG2tlY8a9VXxUAM3COaPZj/GnIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjgwMTE1OTFFMTU0OEMxMUQ4NEY5Q0EyN0Q1NEFFQzFE
Q0Q0OTAxRDAeFw0yNDAxMTAxMjU3MTRaFw0yNTAxMDgxMzAyMTRaMDMxMTAvBgNV
BAMTKDJFRUM2M0E1NkMwMjY1Mzk1ODQ3REVDNjZFQ0VERTA4QTY5NERBMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6+svERIviQNG0O9KLH/F9oSGI
nddMWQsIZbX38bE3Mnyloj6vRFN0bz3SvotHCbo3E7gWgES3uqxeLH/K+VGhdkz7
bUa0u8332iUfAxXus56Ff7RSoZnpbp1TEcjP05JgLJVSsArxcpo156krfNcHnsdd
crQu4ooR4VyOXCgBt9qjdP9f4m+EytaaERCDEtWZ/V0gwQGxENS6JKGaucJDgzNq
EV82VjThM5ebzhgfyE3KkaBRJ22O9MdUGlEaj+6+HyPDpCwMdvcWxWqAgT5uvTWn
E0vXQh47wPRAzcKtQKaTdYASW0M3pNOxXYoDhr1+/TCxg0PgP8UCwPDeMiDHAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQULuxjpWwCZTlYR97Gbs7eCKaU2hwwHwYDVR0j
BBgwFoAUuAEVkeFUjBHYT5yifVSuwdzUkB0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjVtYXpYcXl3NFVjcGN3a1BkUWJQMVdqeWt3UDdraGpYRmQ5MXd6eExY
ZTYvMC9CODAxMTU5MUUxNTQ4QzExRDg0RjlDQTI3RDU0QUVDMURDRDQ5MDFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I4MDExNTkxRTE1NDhDMTFE
ODRGOUNBMjdENTRBRUMxRENENDkwMUQuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI1bWF6WHF5dzRVY3Bjd2tQZFFiUDFXanlrd1A3a2hqWEZkOTF3enhMWGU2LzAv
MzIzODMwMzQzYTMzMzMzMDMwM2E2NTMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDM2MzEzNTM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgUoBDMA4DANBgkqhkiG9w0BAQsFAAOC
AQEAzGczmqXT4RjXvF/3pZINu86M/jA6b2z5kzxKBQMmL4OiHpMF1Q/scS2BuZWK
Y/w2Gwj80Ouc2VIbWc3d8dwDcKMFHJ4K5lAYUUVYXGBspp2ep5cUR6KIijCeh1rE
2Cetq8YPT+8RdvrOiQdPXsIA7gI95QXMrwdmaC6tX8kCpFdNSpMDwKQTQB81jnhM
nY2h2BdZgvON3ZA/nxrahA3ikB5Pj7lKUysoXEXCkthqx9C+MOw+jLf/XKW5H7Cs
9ECuVi9zmA/LizXZ0u9w/RoQVY35G4AAFEYuKKgPhe4meYMKYIPpKYy0VU2GAIEy
VxwoV0hQs8q/9Ey+OS6edQwtJQ==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:22 2025 by rpki-client