Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/1/323830343a356166343a383030303a3a2f33332d3333203d3e20323638383039.roa
File: 323830343a356166343a383030303a3a2f33332d3333203d3e20323638383039.roa (raw, json)
Hash identifier: pgbTL6QiDJkaDX1/6Lk8w0SS5/AtTBYLsPGbvZxFyGY=
Subject key identifier: CB:64:D2:E9:7C:ED:03:DA:F7:94:D1:14:87:B6:34:95:D0:0F:6A:B7
Certificate issuer: /CN=A5B00DCE5A3ED6DF76BE34EEA35647AD51B8A931
Certificate serial: 3A01A59D0949A1BCA03E5ADFF8FD3DEF445AAFCD
Authority key identifier: A5:B0:0D:CE:5A:3E:D6:DF:76:BE:34:EE:A3:56:47:AD:51:B8:A9:31
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5B00DCE5A3ED6DF76BE34EEA35647AD51B8A931.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/1/323830343a356166343a383030303a3a2f33332d3333203d3e20323638383039.roa
Signing time: Wed 16 Aug 2023 21:49:30 +0000
ROA not before: Wed 16 Aug 2023 21:44:30 +0000
ROA not after: Wed 14 Aug 2024 21:49:30 +0000
asID: 268809
IP address blocks: 2804:5af4:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:01:a5:9d:09:49:a1:bc:a0:3e:5a:df:f8:fd:3d:ef:44:5a:af:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5B00DCE5A3ED6DF76BE34EEA35647AD51B8A931
Validity
Not Before: Aug 16 21:44:30 2023 GMT
Not After : Aug 14 21:49:30 2024 GMT
Subject: CN=CB64D2E97CED03DAF794D11487B63495D00F6AB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:86:5b:40:71:83:b9:65:75:2a:6c:3d:91:93:
83:19:f4:87:10:dd:7b:47:b9:cc:2c:0c:f3:70:a9:
10:30:56:75:d5:8b:fa:6b:fb:cb:17:64:4b:5e:72:
8a:78:89:83:a1:50:11:16:44:5b:82:3a:fb:d8:b3:
a7:e6:94:fa:d4:9e:ea:b3:88:dc:cb:f1:93:ac:df:
cb:b8:cf:23:37:e1:9c:ad:9f:c9:8d:0f:b0:2f:4e:
12:61:39:ea:a0:b8:75:4f:60:e5:2d:0f:e1:28:28:
ff:44:1a:79:47:52:b9:42:cf:aa:0b:9e:e6:48:9d:
5e:20:a4:1b:5c:62:78:78:f3:87:49:f4:ca:67:1d:
2d:2a:49:e7:79:06:e0:84:a8:40:54:2b:a1:12:75:
6d:c2:c9:9a:01:56:ad:d9:6b:a7:2a:01:d8:e3:a7:
fc:87:06:46:9d:b3:52:45:6e:ae:65:d2:e6:9c:8a:
75:4d:be:f8:64:d1:77:ac:46:a5:ac:b9:bf:94:87:
d2:c6:19:a3:bb:ed:59:52:14:27:3a:f0:85:29:a1:
43:4b:5d:c7:79:de:4d:7a:7c:0c:17:24:1e:30:33:
24:63:e0:f3:e7:7c:d1:55:44:57:84:17:09:78:e9:
32:4b:58:b1:67:33:bc:c0:1a:aa:cd:a0:54:8e:da:
f7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:64:D2:E9:7C:ED:03:DA:F7:94:D1:14:87:B6:34:95:D0:0F:6A:B7
X509v3 Authority Key Identifier:
keyid:A5:B0:0D:CE:5A:3E:D6:DF:76:BE:34:EE:A3:56:47:AD:51:B8:A9:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/1/A5B00DCE5A3ED6DF76BE34EEA35647AD51B8A931.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5B00DCE5A3ED6DF76BE34EEA35647AD51B8A931.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/1/323830343a356166343a383030303a3a2f33332d3333203d3e20323638383039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5af4:8000::/33
Signature Algorithm: sha256WithRSAEncryption
1b:e0:d4:aa:3e:e6:e4:d4:96:83:ae:93:b1:54:bc:a5:c7:34:
ee:63:82:10:2b:84:30:09:b7:23:71:8b:07:81:ba:79:d6:aa:
c4:89:e9:50:c4:29:d5:ea:de:e0:e5:0f:da:b9:aa:ca:88:59:
37:29:0a:11:d0:22:7c:1d:c7:03:6a:15:e2:bb:fd:51:ad:8c:
b2:cb:8f:00:b5:a1:ad:a4:5e:aa:78:65:00:59:b2:b4:31:64:
27:99:84:32:87:27:70:9f:e3:16:24:3a:11:2c:ff:48:48:cf:
56:e8:89:21:59:33:62:a9:97:f2:c3:48:3a:4c:cf:ec:77:3d:
f8:9c:be:7b:d3:18:55:06:85:80:10:d9:f0:60:fa:af:bd:70:
bd:59:65:c9:a2:de:c3:15:86:e8:6d:07:69:f4:2e:77:16:7c:
06:39:17:ee:ca:74:20:3a:8b:f0:b3:fa:86:1a:ac:0b:7b:6b:
7a:c3:d9:f7:11:0d:41:55:2a:b5:64:ea:8d:e8:96:34:95:62:
1d:d9:f4:22:1c:9c:6b:b3:4b:0e:de:78:e8:c1:3c:9d:07:53:
ab:1f:de:e4:cf:0d:54:24:b5:81:07:b4:5f:2b:01:d2:e3:41:
15:d3:47:3a:0c:8b:2e:79:65:d7:19:a7:9b:25:65:f7:a7:5b:
34:4b:46:cc
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUOgGlnQlJobygPlrf+P0970Rar80wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTVCMDBEQ0U1QTNFRDZERjc2QkUzNEVFQTM1NjQ3QUQ1
MUI4QTkzMTAeFw0yMzA4MTYyMTQ0MzBaFw0yNDA4MTQyMTQ5MzBaMDMxMTAvBgNV
BAMTKENCNjREMkU5N0NFRDAzREFGNzk0RDExNDg3QjYzNDk1RDAwRjZBQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbhltAcYO5ZXUqbD2Rk4MZ9IcQ
3XtHucwsDPNwqRAwVnXVi/pr+8sXZEtecop4iYOhUBEWRFuCOvvYs6fmlPrUnuqz
iNzL8ZOs38u4zyM34Zytn8mND7AvThJhOeqguHVPYOUtD+EoKP9EGnlHUrlCz6oL
nuZInV4gpBtcYnh484dJ9MpnHS0qSed5BuCEqEBUK6ESdW3CyZoBVq3Za6cqAdjj
p/yHBkads1JFbq5l0uacinVNvvhk0XesRqWsub+Uh9LGGaO77VlSFCc68IUpoUNL
Xcd53k16fAwXJB4wMyRj4PPnfNFVRFeEFwl46TJLWLFnM7zAGqrNoFSO2veZAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUy2TS6XztA9r3lNEUh7Y0ldAParcwHwYDVR0j
BBgwFoAUpbANzlo+1t92vjTuo1ZHrVG4qTEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkFLa3NEZVRCTE1DR21qWkh1cXY2MU50WFdDWUpXNnM0bVZLajdMSk1m
TW0vMS9BNUIwMERDRTVBM0VENkRGNzZCRTM0RUVBMzU2NDdBRDUxQjhBOTMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E1QjAwRENFNUEzRUQ2REY3
NkJFMzRFRUEzNTY0N0FENTFCOEE5MzEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJBS2tzRGVUQkxNQ0dtalpIdXF2NjFOdFhXQ1lKVzZzNG1WS2o3TEpNZk1tLzEv
MzIzODMwMzQzYTM1NjE2NjM0M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzODM4MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEWvSAMA0GCSqGSIb3DQEBCwUA
A4IBAQAb4NSqPubk1JaDrpOxVLylxzTuY4IQK4QwCbcjcYsHgbp51qrEielQxCnV
6t7g5Q/auarKiFk3KQoR0CJ8HccDahXiu/1RrYyyy48AtaGtpF6qeGUAWbK0MWQn
mYQyhydwn+MWJDoRLP9ISM9W6IkhWTNiqZfyw0g6TM/sdz34nL570xhVBoWAENnw
YPqvvXC9WWXJot7DFYbobQdp9C53FnwGORfuynQgOovws/qGGqwLe2t6w9n3EQ1B
VSq1ZOqN6JY0lWId2fQiHJxrs0sO3njowTydB1OrH97kzw1UJLWBB7RfKwHS40EV
00c6DIsueWXXGaebJWX3p1s0S0bM
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:37:38 2025 by rpki-client