Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/323830343a35343a3a2f33322d3332203d3e203238323230.roa
File: 323830343a35343a3a2f33322d3332203d3e203238323230.roa (raw, json)
Hash identifier: tDHiP6PlSVtuT43JLokPMiH/YH9d0ZV99p5hXRHJdbs=
Subject key identifier: 23:21:59:7B:08:0A:2A:70:04:3A:E1:02:28:BF:32:B0:72:BF:05:74
Certificate issuer: /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial: 722643C61BE9C6C6118C1F7AF1C49C2988AE2337
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/323830343a35343a3a2f33322d3332203d3e203238323230.roa
Signing time: Tue 12 Mar 2024 19:51:17 +0000
ROA not before: Tue 12 Mar 2024 19:46:17 +0000
ROA not after: Tue 11 Mar 2025 19:51:17 +0000
asID: 28220
IP address blocks: 2804:54::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:26:43:c6:1b:e9:c6:c6:11:8c:1f:7a:f1:c4:9c:29:88:ae:23:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Validity
Not Before: Mar 12 19:46:17 2024 GMT
Not After : Mar 11 19:51:17 2025 GMT
Subject: CN=2321597B080A2A70043AE10228BF32B072BF0574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c8:46:95:ed:6e:ea:24:7a:43:54:52:c5:50:
33:c8:de:61:bc:ba:74:d9:f0:6d:cc:c9:fa:4c:88:
f4:44:16:fe:79:a9:b0:62:28:d4:a1:bf:28:45:2e:
62:d2:53:2b:59:82:9f:eb:48:70:8b:cc:10:0a:d2:
71:37:37:23:9c:b4:85:e4:b8:29:54:c4:36:ac:3b:
f3:fb:75:c0:6d:de:e4:88:bd:61:3f:83:37:59:a2:
ab:e7:f4:97:61:35:c9:9a:8a:3f:6d:4a:dd:3b:07:
cb:1b:3e:f8:bf:dd:38:03:2d:ea:e2:80:cd:c5:3d:
aa:3d:ac:b7:d4:8c:d1:1a:bd:ed:b3:da:3f:ba:41:
96:47:54:c8:de:6a:61:f9:88:b7:74:6d:9e:dd:c9:
33:8d:2c:6a:b1:bc:78:6e:16:b1:46:ca:6e:5f:dd:
8a:78:74:93:0e:3f:a3:4a:7a:fb:98:19:8c:6a:1c:
7e:59:fd:fd:65:d4:0e:d0:fa:55:65:81:c7:ac:65:
ee:e2:02:71:b4:0a:a7:f5:2c:c6:19:8d:32:ef:c1:
b5:be:63:7a:1b:28:c2:e9:75:a0:a4:c5:79:76:1a:
c8:27:a7:74:e5:12:7e:85:44:f4:60:49:96:09:37:
95:82:c7:c6:b0:22:8b:63:51:1b:08:36:50:9a:d4:
d2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:21:59:7B:08:0A:2A:70:04:3A:E1:02:28:BF:32:B0:72:BF:05:74
X509v3 Authority Key Identifier:
keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/323830343a35343a3a2f33322d3332203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:54::/32
Signature Algorithm: sha256WithRSAEncryption
27:3d:0b:63:8a:77:b7:3e:85:8a:72:94:a3:f4:dd:ce:3d:2c:
ec:1c:f8:cf:d1:56:a0:e1:f9:f5:f8:bb:2b:8d:18:ba:14:81:
ea:50:a7:86:4b:57:cf:cc:c6:8f:fe:e4:1c:ca:7b:ce:74:9d:
54:dc:ad:1b:88:0d:58:56:2a:b6:10:b9:1e:b4:9d:59:56:f9:
71:0a:5e:77:51:75:94:52:6d:47:64:82:ba:70:83:c0:f1:a9:
ad:07:bc:ec:db:b6:a4:a4:a7:71:32:24:e7:09:07:ce:14:f2:
7f:97:d7:18:10:cc:da:35:1c:df:d0:8f:86:2c:fd:a8:c4:7a:
5e:79:3a:74:56:df:be:ef:28:26:25:08:04:93:59:54:de:5e:
21:89:1f:99:b7:6f:34:41:2a:d6:4d:ce:37:5d:1f:12:1a:dd:
c2:dc:ca:62:ac:a2:1e:9a:19:ba:e7:38:c7:78:0c:22:b0:ea:
68:88:fb:8f:5f:60:44:c5:ff:36:0e:75:ee:83:96:24:cc:7e:
2a:44:2a:e6:8b:12:39:a8:9e:12:57:06:b3:85:47:bb:a6:52:
f0:99:5a:de:47:7a:f6:a3:b0:43:83:84:fd:a7:55:64:d3:23:
93:58:0f:43:67:ab:3c:49:bd:7a:d0:c6:8d:a0:6a:ed:66:3c:
84:09:95:40
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUciZDxhvpxsYRjB968cScKYiuIzcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzAxRDIwRkM4RjQzNkMzRDY3NzI5OEZBNDEyQzhFMzFG
QUQwODRGODAeFw0yNDAzMTIxOTQ2MTdaFw0yNTAzMTExOTUxMTdaMDMxMTAvBgNV
BAMTKDIzMjE1OTdCMDgwQTJBNzAwNDNBRTEwMjI4QkYzMkIwNzJCRjA1NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcyEaV7W7qJHpDVFLFUDPI3mG8
unTZ8G3MyfpMiPREFv55qbBiKNShvyhFLmLSUytZgp/rSHCLzBAK0nE3NyOctIXk
uClUxDasO/P7dcBt3uSIvWE/gzdZoqvn9JdhNcmaij9tSt07B8sbPvi/3TgDLeri
gM3FPao9rLfUjNEave2z2j+6QZZHVMjeamH5iLd0bZ7dyTONLGqxvHhuFrFGym5f
3Yp4dJMOP6NKevuYGYxqHH5Z/f1l1A7Q+lVlgcesZe7iAnG0Cqf1LMYZjTLvwbW+
Y3obKMLpdaCkxXl2Gsgnp3TlEn6FRPRgSZYJN5WCx8awIotjURsINlCa1NI3AgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUIyFZewgKKnAEOuECKL8ysHK/BXQwHwYDVR0j
BBgwFoAUMB0g/I9DbD1ncpj6QSyOMfrQhPgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMC8zMDFEMjBGQzhGNDM2QzNENjc3Mjk4RkE0MTJDOEUzMUZBRDA4NEY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMwMUQyMEZDOEY0MzZDM0Q2
NzcyOThGQTQxMkM4RTMxRkFEMDg0RjguY2VyMIGmBggrBgEFBQcBCwSBmTCBljCB
kwYIKwYBBQUHMAuGgYZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkR0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzAv
MzIzODMwMzQzYTM1MzQzYTNhMmYzMzMyMmQzMzMyMjAzZDNlMjAzMjM4MzIzMjMw
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAKAQAVDANBgkqhkiG9w0BAQsFAAOCAQEAJz0LY4p3tz6FinKU
o/Tdzj0s7Bz4z9FWoOH59fi7K40YuhSB6lCnhktXz8zGj/7kHMp7znSdVNytG4gN
WFYqthC5HrSdWVb5cQped1F1lFJtR2SCunCDwPGprQe87Nu2pKSncTIk5wkHzhTy
f5fXGBDM2jUc39CPhiz9qMR6Xnk6dFbfvu8oJiUIBJNZVN5eIYkfmbdvNEEq1k3O
N10fEhrdwtzKYqyiHpoZuuc4x3gMIrDqaIj7j19gRMX/Ng517oOWJMx+KkQq5osS
OaieElcGs4VHu6ZS8Jla3kd69qOwQ4OE/adVZNMjk1gPQ2erPEm9etDGjaBq7WY8
hAmVQA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org