Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/323830343a326363303a383030303a3a2f33332d3333203d3e20323635323431.roa
File: 323830343a326363303a383030303a3a2f33332d3333203d3e20323635323431.roa (raw, json)
Hash identifier: eQgDnNZUzZr2z93Y8YKFFf7vGzPvDCzL2T/9fRcdyUI=
Subject key identifier: 97:E5:F8:1B:25:F9:11:43:AD:0A:56:F7:B5:28:5D:A2:5E:9A:3E:AA
Certificate issuer: /CN=206AA74F8C9E65605FA9A3C6970DAE15CFC48016
Certificate serial: 363FB78834C1E61DA9F838F95FC6129A883E92EB
Authority key identifier: 20:6A:A7:4F:8C:9E:65:60:5F:A9:A3:C6:97:0D:AE:15:CF:C4:80:16
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/206AA74F8C9E65605FA9A3C6970DAE15CFC48016.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/323830343a326363303a383030303a3a2f33332d3333203d3e20323635323431.roa
Signing time: Mon 29 May 2023 13:45:51 +0000
ROA not before: Mon 29 May 2023 13:40:51 +0000
ROA not after: Mon 27 May 2024 13:45:51 +0000
asID: 265241
IP address blocks: 2804:2cc0:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:3f:b7:88:34:c1:e6:1d:a9:f8:38:f9:5f:c6:12:9a:88:3e:92:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206AA74F8C9E65605FA9A3C6970DAE15CFC48016
Validity
Not Before: May 29 13:40:51 2023 GMT
Not After : May 27 13:45:51 2024 GMT
Subject: CN=97E5F81B25F91143AD0A56F7B5285DA25E9A3EAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b7:0d:0e:08:14:bb:26:24:32:aa:ee:64:ca:
9b:15:e6:5a:33:8a:74:a5:99:b2:49:a4:ff:dd:5c:
d3:94:df:20:1c:bb:f2:64:ca:4f:ef:85:af:49:36:
96:aa:bb:7d:81:f5:c9:51:79:35:02:e3:aa:85:28:
ac:69:42:92:a1:cd:cb:e3:58:bf:79:2e:6d:ba:1f:
8e:23:2b:4f:66:a5:0e:19:20:d0:c7:09:e2:5c:d2:
e4:25:04:b2:ad:7e:10:1f:7f:e3:aa:f8:f0:0f:dc:
95:d5:7c:ea:a7:6c:40:7a:62:0c:63:d5:0a:b4:ab:
d4:0f:45:38:45:dd:1e:6d:20:96:af:da:9b:dd:8a:
b6:1d:bd:e8:b3:cb:ca:14:0a:a0:7a:22:23:0b:8e:
25:08:56:6e:f0:6f:27:32:c8:56:46:7d:69:bc:0d:
e5:7e:8a:b0:5d:8b:5c:3f:4b:81:24:29:da:c6:7d:
4a:97:fb:cb:8c:94:be:46:c8:b0:04:28:8b:e2:c0:
ee:a1:f3:05:d9:08:86:19:1c:e3:da:cc:d7:1b:e4:
e7:bb:4c:d7:b8:fe:3b:03:7d:b5:07:6a:b3:7d:3f:
6b:64:16:42:2d:06:af:c4:39:9a:b1:45:2f:3b:b1:
01:29:ba:bf:ea:ce:f1:30:74:14:d8:4a:41:ad:1c:
85:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E5:F8:1B:25:F9:11:43:AD:0A:56:F7:B5:28:5D:A2:5E:9A:3E:AA
X509v3 Authority Key Identifier:
keyid:20:6A:A7:4F:8C:9E:65:60:5F:A9:A3:C6:97:0D:AE:15:CF:C4:80:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/206AA74F8C9E65605FA9A3C6970DAE15CFC48016.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/206AA74F8C9E65605FA9A3C6970DAE15CFC48016.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/323830343a326363303a383030303a3a2f33332d3333203d3e20323635323431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2cc0:8000::/33
Signature Algorithm: sha256WithRSAEncryption
6c:52:df:03:8b:d2:65:d9:cd:3d:b1:89:f3:e7:8f:52:14:93:
0c:29:87:b9:1b:b5:7f:db:17:90:30:7a:f4:ca:ed:f8:5a:ff:
a8:7e:4a:de:ff:7d:5d:7a:75:c4:10:b2:9d:ee:26:79:17:f0:
cb:33:f5:f6:64:cf:cb:a8:fd:31:a1:fb:e5:cc:4e:7b:d3:1e:
c7:cc:67:a5:1e:46:ca:32:b0:ae:42:b4:f9:f3:db:02:74:66:
ce:f9:bb:e8:2a:d9:59:04:c9:17:91:b9:eb:14:86:77:53:af:
4a:c9:bf:6e:80:d4:79:fc:90:1b:82:f7:23:c5:b2:52:4b:87:
fe:2c:4d:04:bd:a1:ed:fb:9c:b4:e3:c6:bf:45:79:82:8f:07:
19:7d:85:db:71:68:d8:8f:90:55:7e:1c:ee:12:5f:c0:ab:0d:
12:ce:04:e7:a2:88:a9:11:01:bb:72:1c:5f:8a:cc:a4:09:10:
60:13:8c:62:34:12:b7:90:d7:38:57:28:ab:c2:b1:a7:f9:0e:
f0:2c:0a:72:93:35:56:62:b6:e9:55:d7:ca:52:26:28:0d:c3:
a5:88:eb:47:f3:a1:2e:42:e4:3e:4c:6d:a1:a3:54:37:32:06:
39:c8:6b:88:77:ab:be:db:96:a4:c0:7d:ee:41:20:c8:44:29:
53:4f:c1:ea
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUNj+3iDTB5h2p+Dj5X8YSmog+kuswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjA2QUE3NEY4QzlFNjU2MDVGQTlBM0M2OTcwREFFMTVD
RkM0ODAxNjAeFw0yMzA1MjkxMzQwNTFaFw0yNDA1MjcxMzQ1NTFaMDMxMTAvBgNV
BAMTKDk3RTVGODFCMjVGOTExNDNBRDBBNTZGN0I1Mjg1REEyNUU5QTNFQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDitw0OCBS7JiQyqu5kypsV5loz
inSlmbJJpP/dXNOU3yAcu/Jkyk/vha9JNpaqu32B9clReTUC46qFKKxpQpKhzcvj
WL95Lm26H44jK09mpQ4ZINDHCeJc0uQlBLKtfhAff+Oq+PAP3JXVfOqnbEB6Ygxj
1Qq0q9QPRThF3R5tIJav2pvdirYdveizy8oUCqB6IiMLjiUIVm7wbycyyFZGfWm8
DeV+irBdi1w/S4EkKdrGfUqX+8uMlL5GyLAEKIviwO6h8wXZCIYZHOPazNcb5Oe7
TNe4/jsDfbUHarN9P2tkFkItBq/EOZqxRS87sQEpur/qzvEwdBTYSkGtHIXvAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUl+X4GyX5EUOtClb3tShdol6aPqowHwYDVR0j
BBgwFoAUIGqnT4yeZWBfqaPGlw2uFc/EgBYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk5zQzFvUVdUdjI5ZVM4YkdwWnFFQWpRQjd5ZXZwZDFvY1J1aHFhZVNQ
Sm0vMC8yMDZBQTc0RjhDOUU2NTYwNUZBOUEzQzY5NzBEQUUxNUNGQzQ4MDE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzIwNkFBNzRGOEM5RTY1NjA1
RkE5QTNDNjk3MERBRTE1Q0ZDNDgwMTYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJOc0Mxb1FXVHYyOWVTOGJHcFpxRUFqUUI3eWV2cGQxb2NSdWhxYWVTUEptLzAv
MzIzODMwMzQzYTMyNjM2MzMwM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzNTMyMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygELMCAMA0GCSqGSIb3DQEBCwUA
A4IBAQBsUt8Di9Jl2c09sYnz549SFJMMKYe5G7V/2xeQMHr0yu34Wv+ofkre/31d
enXEELKd7iZ5F/DLM/X2ZM/LqP0xofvlzE570x7HzGelHkbKMrCuQrT589sCdGbO
+bvoKtlZBMkXkbnrFIZ3U69Kyb9ugNR5/JAbgvcjxbJSS4f+LE0EvaHt+5y048a/
RXmCjwcZfYXbcWjYj5BVfhzuEl/Aqw0SzgTnooipEQG7chxfisykCRBgE4xiNBK3
kNc4VyirwrGn+Q7wLApykzVWYrbpVdfKUiYoDcOliOtH86EuQuQ+TG2ho1Q3MgY5
yGuId6u+25akwH3uQSDIRClTT8Hq
-----END CERTIFICATE-----
Generated at Tue Apr 22 19:36:45 2025 by rpki-client