Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/0/323830343a3466383a3a2f33322d3438203d3e203238323633.roa
File: 323830343a3466383a3a2f33322d3438203d3e203238323633.roa (raw, json)
Hash identifier: zExzLjCYYdgX+abnQJuWuPlWYdQU82T351lnA8AQ5wQ=
Subject key identifier: D6:46:25:76:DD:F9:52:F6:B0:AF:AA:A0:D1:07:36:8D:24:62:5F:94
Certificate issuer: /CN=2C4950C71122E144532D0ECA84E49D609A511FEF
Certificate serial: 66E3C73384A87DBF6B0E45F906D87DA6147F9228
Authority key identifier: 2C:49:50:C7:11:22:E1:44:53:2D:0E:CA:84:E4:9D:60:9A:51:1F:EF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C4950C71122E144532D0ECA84E49D609A511FEF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/0/323830343a3466383a3a2f33322d3438203d3e203238323633.roa
Signing time: Fri 03 Nov 2023 12:48:28 +0000
ROA not before: Fri 03 Nov 2023 12:43:28 +0000
ROA not after: Fri 01 Nov 2024 12:48:28 +0000
asID: 28263
IP address blocks: 2804:4f8::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:e3:c7:33:84:a8:7d:bf:6b:0e:45:f9:06:d8:7d:a6:14:7f:92:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C4950C71122E144532D0ECA84E49D609A511FEF
Validity
Not Before: Nov 3 12:43:28 2023 GMT
Not After : Nov 1 12:48:28 2024 GMT
Subject: CN=D6462576DDF952F6B0AFAAA0D107368D24625F94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:11:25:c1:f0:af:95:38:44:c6:a5:ee:d6:f2:
2e:03:98:2e:6b:eb:81:6d:3f:ef:5e:06:5d:a3:ea:
c4:a3:61:3d:20:ca:d6:8d:a1:d6:e2:dd:2c:14:37:
a4:92:d7:31:23:ee:87:7b:d2:00:39:8d:af:00:b9:
9a:be:27:ed:ac:5b:88:0c:dc:df:bb:95:a1:3d:71:
db:8a:7c:c8:e8:7b:86:4d:6d:47:90:2c:1b:35:57:
c1:c6:c9:00:88:3c:73:de:fe:c5:b3:49:a9:0d:c9:
4f:5b:c0:33:9f:1a:85:85:21:ef:c3:25:4b:de:31:
cf:54:c9:30:93:57:e8:3f:d5:a9:10:d5:8b:8d:ab:
15:01:74:1f:7a:53:e3:24:fa:fa:94:dc:67:3e:4b:
82:d5:8a:2d:32:52:80:34:bf:3c:1c:60:ac:72:b8:
b3:d4:17:0f:7c:ff:ae:98:43:1c:31:da:11:46:1b:
a1:19:1b:a9:91:81:1b:5b:c8:08:8c:00:fe:ad:00:
bf:2f:32:96:63:a5:1f:83:66:9e:43:c3:2b:51:f4:
2d:1a:4c:14:11:40:03:6b:46:e2:b9:d8:f4:c0:7d:
68:b4:cd:b0:0f:fc:ec:fc:0c:c5:d6:95:e5:9f:7c:
50:8a:20:dd:fc:ef:c1:15:4f:4a:d8:38:a4:d3:71:
dd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:46:25:76:DD:F9:52:F6:B0:AF:AA:A0:D1:07:36:8D:24:62:5F:94
X509v3 Authority Key Identifier:
keyid:2C:49:50:C7:11:22:E1:44:53:2D:0E:CA:84:E4:9D:60:9A:51:1F:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/0/2C4950C71122E144532D0ECA84E49D609A511FEF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C4950C71122E144532D0ECA84E49D609A511FEF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/0/323830343a3466383a3a2f33322d3438203d3e203238323633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4f8::/32
Signature Algorithm: sha256WithRSAEncryption
a3:99:54:43:fa:e5:a9:48:67:46:ea:dc:25:0c:d4:48:68:92:
eb:04:cd:3e:34:89:e5:67:1e:82:61:34:20:a1:33:77:3a:b7:
5d:95:c8:c7:77:90:10:68:8d:91:2d:70:5e:3f:fa:76:32:54:
66:13:05:ba:04:e3:57:bd:4a:e3:7b:25:89:e8:0b:9a:5c:95:
73:88:b8:0e:4b:98:9a:dc:15:45:81:b3:f8:68:fd:18:b5:24:
58:55:1a:f0:c7:e8:5b:3b:41:60:30:ac:39:b3:2b:1c:fe:ab:
d6:ef:1c:70:4c:8c:6e:ed:53:d7:ee:68:68:3c:50:5a:a9:d5:
20:48:2d:b5:b9:3f:21:eb:1a:c1:22:5a:94:6e:07:d4:8e:91:
e4:ec:90:cb:c8:04:3e:fc:c2:c5:e7:ee:c5:39:52:59:6f:3b:
c4:fc:91:0b:7c:09:37:fa:5b:95:9f:61:6f:e0:52:10:48:c9:
7c:e1:8b:ae:c8:23:6b:67:ea:9b:b1:ee:1f:67:92:6e:a7:39:
46:a2:f7:12:74:91:4c:66:2c:2d:38:38:17:64:0f:bf:50:8b:
77:0e:69:6a:41:dc:5d:c6:c4:1b:a6:72:df:78:9e:ff:80:79:
69:18:a0:91:82:9d:e9:1a:15:0e:b2:63:ff:a9:79:38:03:c0:
e8:33:0d:be
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUZuPHM4Sofb9rDkX5Bth9phR/kigwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkM0OTUwQzcxMTIyRTE0NDUzMkQwRUNBODRFNDlENjA5
QTUxMUZFRjAeFw0yMzExMDMxMjQzMjhaFw0yNDExMDExMjQ4MjhaMDMxMTAvBgNV
BAMTKEQ2NDYyNTc2RERGOTUyRjZCMEFGQUFBMEQxMDczNjhEMjQ2MjVGOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpESXB8K+VOETGpe7W8i4DmC5r
64FtP+9eBl2j6sSjYT0gytaNodbi3SwUN6SS1zEj7od70gA5ja8AuZq+J+2sW4gM
3N+7laE9cduKfMjoe4ZNbUeQLBs1V8HGyQCIPHPe/sWzSakNyU9bwDOfGoWFIe/D
JUveMc9UyTCTV+g/1akQ1YuNqxUBdB96U+Mk+vqU3Gc+S4LVii0yUoA0vzwcYKxy
uLPUFw98/66YQxwx2hFGG6EZG6mRgRtbyAiMAP6tAL8vMpZjpR+DZp5DwytR9C0a
TBQRQANrRuK52PTAfWi0zbAP/Oz8DMXWleWffFCKIN3878EVT0rYOKTTcd0dAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQU1kYldt35Uvawr6qg0Qc2jSRiX5QwHwYDVR0j
BBgwFoAULElQxxEi4URTLQ7KhOSdYJpRH+8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmY3ZVk3a3JYdHJON2h2dDN4SzNwNnNmNGtEcFZDQnZUZG9YdnJBY1RL
VDYvMC8yQzQ5NTBDNzExMjJFMTQ0NTMyRDBFQ0E4NEU0OUQ2MDlBNTExRkVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJDNDk1MEM3MTEyMkUxNDQ1
MzJEMEVDQTg0RTQ5RDYwOUE1MTFGRUYuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJmN2VZN2tyWHRyTjdodnQzeEszcDZzZjRrRHBWQ0J2VGRvWHZyQWNUS1Q2LzAv
MzIzODMwMzQzYTM0NjYzODNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzgzMjM2
MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAT4MA0GCSqGSIb3DQEBCwUAA4IBAQCjmVRD+uWpSGdG
6twlDNRIaJLrBM0+NInlZx6CYTQgoTN3OrddlcjHd5AQaI2RLXBeP/p2MlRmEwW6
BONXvUrjeyWJ6AuaXJVziLgOS5ia3BVFgbP4aP0YtSRYVRrwx+hbO0FgMKw5sysc
/qvW7xxwTIxu7VPX7mhoPFBaqdUgSC21uT8h6xrBIlqUbgfUjpHk7JDLyAQ+/MLF
5+7FOVJZbzvE/JELfAk3+luVn2Fv4FIQSMl84YuuyCNrZ+qbse4fZ5JupzlGovcS
dJFMZiwtODgXZA+/UIt3DmlqQdxdxsQbpnLfeJ7/gHlpGKCRgp3pGhUOsmP/qXk4
A8DoMw2+
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:18:25 2025 by rpki-client