Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633031383a3a2f34382d3438203d3e203631353932.roa
File: 323830343a346333343a633031383a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier: 6yf84IeGvVIMmAtsp7itFhGrxtmJOHVcsgu6hVYOhYk=
Subject key identifier: A1:CD:6C:66:5E:6A:AD:F4:F3:E8:49:57:86:80:BA:43:A1:A2:BC:59
Certificate issuer: /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial: 683DA6D482F368273F740E071918030F4A4F00B3
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633031383a3a2f34382d3438203d3e203631353932.roa
Signing time: Thu 24 Aug 2023 18:53:04 +0000
ROA not before: Thu 24 Aug 2023 18:48:04 +0000
ROA not after: Thu 22 Aug 2024 18:53:04 +0000
asID: 61592
IP address blocks: 2804:4c34:c018::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:3d:a6:d4:82:f3:68:27:3f:74:0e:07:19:18:03:0f:4a:4f:00:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Validity
Not Before: Aug 24 18:48:04 2023 GMT
Not After : Aug 22 18:53:04 2024 GMT
Subject: CN=A1CD6C665E6AADF4F3E849578680BA43A1A2BC59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:59:1d:16:1a:7a:d3:dc:c3:76:3e:ff:a0:1e:
94:ed:0d:6f:f4:0b:3f:92:27:f9:8c:99:8f:50:1a:
3e:17:fc:4b:d2:4c:09:ec:50:17:5a:0c:52:7c:68:
72:b6:b5:56:92:09:19:96:09:b7:64:3e:0c:6d:6f:
28:aa:68:33:d8:69:34:b5:a2:ec:61:30:67:94:48:
0c:ed:08:c7:39:9f:93:27:cb:3b:fe:ce:ac:3d:35:
f1:84:24:f8:92:66:55:7f:13:7f:cb:c9:78:65:ff:
5c:c0:0f:11:2e:aa:de:0b:fc:2b:d8:c7:54:cf:69:
ec:20:6a:a1:f0:23:4b:c3:80:9a:b0:af:11:c1:f3:
02:6e:0e:cc:ea:d7:80:d1:3c:8a:b7:c0:b4:e5:f7:
f3:83:22:7e:ac:92:ba:a8:6a:13:ad:96:a5:0d:6c:
1d:66:98:f8:d6:02:55:ea:38:80:ab:a6:8a:09:a6:
b9:39:45:5a:53:d0:16:9b:cb:e4:cf:a2:00:8b:3a:
cb:c8:d1:43:53:3f:26:b5:7a:fd:3d:06:c8:f5:3f:
b3:34:0c:6e:5e:03:37:aa:88:6b:a0:e1:e6:27:05:
11:a3:c0:f3:0c:c6:05:34:4a:f0:c5:f8:05:ac:a9:
8c:b3:f5:69:bd:eb:82:d5:db:3e:ce:ab:30:cd:a1:
ee:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CD:6C:66:5E:6A:AD:F4:F3:E8:49:57:86:80:BA:43:A1:A2:BC:59
X509v3 Authority Key Identifier:
keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633031383a3a2f34382d3438203d3e203631353932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4c34:c018::/48
Signature Algorithm: sha256WithRSAEncryption
28:c4:0b:6c:99:85:47:87:cf:d8:5e:3c:a5:04:2c:15:3a:9b:
5f:26:1b:ba:62:55:9f:46:b2:ac:57:b8:ba:1d:df:db:fb:5a:
db:33:83:98:93:f4:2b:e3:32:49:ac:f2:db:4b:e6:6d:be:96:
d9:69:0c:7f:f1:10:2e:92:d3:2f:ad:28:51:e1:79:40:87:06:
1f:ae:2e:fe:74:e1:f1:d3:5a:17:87:23:04:a0:b2:51:17:4c:
70:69:76:f5:5e:b0:01:9d:3f:0d:df:26:b7:65:0b:ba:ce:9c:
67:5f:a2:7f:61:f9:42:06:aa:1d:06:9d:e6:39:80:0e:b5:c0:
6d:52:6a:b4:73:0b:ca:d7:37:37:d6:b9:80:d3:78:10:57:04:
1d:eb:e6:f4:24:7b:ab:bb:a6:7d:7d:09:40:3f:c2:64:18:0a:
a7:0f:58:be:7a:98:d3:79:0e:60:d2:31:5a:e7:e5:35:f9:b6:
8f:52:21:27:d4:f6:87:37:df:21:9e:89:14:7f:46:05:f5:34:
4a:8a:7d:8a:3c:ac:f8:f2:51:b7:0d:fb:0b:cc:3d:1c:f3:d8:
9f:2d:82:56:b9:16:da:38:7b:b3:9d:61:28:db:49:49:17:8f:
a4:f7:60:22:c9:59:9a:7f:ec:bc:92:b0:b3:0d:dc:7d:4f:09:
9f:1b:cf:c8
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUaD2m1ILzaCc/dA4HGRgDD0pPALMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM0REFBOTYwMEU0QkQ3ODg1Njc2QzU4M0RFNEI5Q0Ex
QUM3RDI3MzAeFw0yMzA4MjQxODQ4MDRaFw0yNDA4MjIxODUzMDRaMDMxMTAvBgNV
BAMTKEExQ0Q2QzY2NUU2QUFERjRGM0U4NDk1Nzg2ODBCQTQzQTFBMkJDNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWWR0WGnrT3MN2Pv+gHpTtDW/0
Cz+SJ/mMmY9QGj4X/EvSTAnsUBdaDFJ8aHK2tVaSCRmWCbdkPgxtbyiqaDPYaTS1
ouxhMGeUSAztCMc5n5Mnyzv+zqw9NfGEJPiSZlV/E3/LyXhl/1zADxEuqt4L/CvY
x1TPaewgaqHwI0vDgJqwrxHB8wJuDszq14DRPIq3wLTl9/ODIn6skrqoahOtlqUN
bB1mmPjWAlXqOICrpooJprk5RVpT0Baby+TPogCLOsvI0UNTPya1ev09Bsj1P7M0
DG5eAzeqiGug4eYnBRGjwPMMxgU0SvDF+AWsqYyz9Wm964LV2z7OqzDNoe47AgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUoc1sZl5qrfTz6ElXhoC6Q6GivFkwHwYDVR0j
BBgwFoAUw02qlgDkvXiFZ2xYPeS5yhrH0nMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkVMOW1ydlBYZ2NwTGJDUTFNbnFhSlVnUkx2YXhhWUp4QThzMzdHUG84
bXAvMC9DMzREQUE5NjAwRTRCRDc4ODU2NzZDNTgzREU0QjlDQTFBQzdEMjczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MzNERBQTk2MDBFNEJENzg4
NTY3NkM1ODNERTRCOUNBMUFDN0QyNzMuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJFTDltcnZQWGdjcExiQ1ExTW5xYUpVZ1JMdmF4YVlKeEE4czM3R1BvOG1wLzAv
MzIzODMwMzQzYTM0NjMzMzM0M2E2MzMwMzEzODNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDM2MzEzNTM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBEw0wBgwDQYJKoZIhvcNAQELBQAD
ggEBACjEC2yZhUeHz9hePKUELBU6m18mG7piVZ9GsqxXuLod39v7Wtszg5iT9Cvj
Mkms8ttL5m2+ltlpDH/xEC6S0y+tKFHheUCHBh+uLv504fHTWheHIwSgslEXTHBp
dvVesAGdPw3fJrdlC7rOnGdfon9h+UIGqh0GneY5gA61wG1SarRzC8rXNzfWuYDT
eBBXBB3r5vQke6u7pn19CUA/wmQYCqcPWL56mNN5DmDSMVrn5TX5to9SISfU9oc3
3yGeiRR/RgX1NEqKfYo8rPjyUbcN+wvMPRzz2J8tgla5Fto4e7OdYSjbSUkXj6T3
YCLJWZp/7LySsLMN3H1PCZ8bz8g=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:25 2025 by rpki-client