Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/323830343a373564343a3a2f33322d3438203d3e20323731303732.roa
File: 323830343a373564343a3a2f33322d3438203d3e20323731303732.roa (raw, json)
Hash identifier: gZABhcIIj3zj1i0lRsb/GXhkfmwPqSUrhvrZ7Xg8I/w=
Subject key identifier: 4B:E7:8E:C9:5E:4F:14:53:DE:CB:28:FF:CD:EA:49:30:B9:A4:52:7B
Certificate issuer: /CN=D79E6FA1BCB46B68863FF39B03FDADF551198EEC
Certificate serial: 3BBCEAD2FC55AE3E675A02C0326F38D9690E1DFA
Authority key identifier: D7:9E:6F:A1:BC:B4:6B:68:86:3F:F3:9B:03:FD:AD:F5:51:19:8E:EC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/323830343a373564343a3a2f33322d3438203d3e20323731303732.roa
Signing time: Fri 20 Dec 2024 17:35:23 +0000
ROA not before: Fri 20 Dec 2024 17:30:23 +0000
ROA not after: Fri 19 Dec 2025 17:35:23 +0000
asID: 271072
IP address blocks: 2804:75d4::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:bc:ea:d2:fc:55:ae:3e:67:5a:02:c0:32:6f:38:d9:69:0e:1d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D79E6FA1BCB46B68863FF39B03FDADF551198EEC
Validity
Not Before: Dec 20 17:30:23 2024 GMT
Not After : Dec 19 17:35:23 2025 GMT
Subject: CN=4BE78EC95E4F1453DECB28FFCDEA4930B9A4527B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1d:1a:90:20:29:6d:2a:7a:23:f2:41:f0:6b:
3f:b2:d5:69:4b:4f:ec:4d:f1:00:f3:69:6a:e5:c9:
8e:c5:ca:57:e7:52:55:8c:cd:1f:10:6c:e6:af:1b:
fa:fc:75:f7:00:3b:50:c1:f5:bd:07:12:38:27:47:
27:2d:76:2d:5a:45:c4:04:1b:c4:3e:c4:f4:4f:14:
30:d7:2e:7a:b2:fd:dd:6a:76:8d:5c:dc:b4:13:10:
b8:3f:f9:af:0a:60:85:e3:1d:cb:05:8a:c4:22:0a:
4a:71:7c:1f:7e:67:f2:32:68:92:e7:73:07:cb:05:
42:ff:ff:ca:05:3e:36:76:c3:c2:07:86:b0:bc:49:
35:f6:67:6e:9c:9b:71:11:70:d6:a1:5b:59:20:33:
8d:95:68:42:b7:ff:b4:77:e8:ed:19:e3:5c:ba:6b:
8a:5a:2a:6b:c7:71:63:00:39:e4:95:2f:46:a1:e7:
0c:38:7a:cc:fb:6d:c5:ec:b0:97:1e:7d:f1:92:31:
71:8b:87:52:6b:4e:eb:e0:29:6a:02:3b:c0:c8:46:
d5:4c:4f:c1:c4:94:23:bd:af:ec:32:64:2d:51:4e:
fd:90:52:e6:33:e6:ba:6e:ff:23:0c:47:cd:da:a4:
c2:08:57:ec:90:88:76:b2:f1:57:1d:bf:79:61:ec:
1d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E7:8E:C9:5E:4F:14:53:DE:CB:28:FF:CD:EA:49:30:B9:A4:52:7B
X509v3 Authority Key Identifier:
keyid:D7:9E:6F:A1:BC:B4:6B:68:86:3F:F3:9B:03:FD:AD:F5:51:19:8E:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/323830343a373564343a3a2f33322d3438203d3e20323731303732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:75d4::/32
Signature Algorithm: sha256WithRSAEncryption
91:1f:c5:d5:5e:81:f3:63:3a:de:79:15:e8:90:c9:49:bf:c9:
05:31:01:d2:c0:04:43:87:e7:42:e5:34:30:a9:9e:ac:48:74:
34:7d:3c:ac:90:73:2a:2a:c0:fa:15:86:a2:83:dd:ff:94:b6:
2b:83:ec:f2:28:7f:0e:20:ec:cf:2a:2c:4d:b4:94:1f:f0:29:
33:d3:68:69:01:16:3b:80:58:f0:24:35:f2:b4:f7:3a:3f:9e:
2d:9e:d0:eb:4c:61:03:06:e6:1d:fa:68:d9:54:da:b6:d6:fd:
f5:65:83:82:fb:a6:64:5b:a4:13:cb:08:b3:df:8c:31:cd:c2:
26:92:8b:25:19:0e:8a:e2:0b:3b:13:0c:be:df:08:a2:23:1f:
0b:da:7e:05:23:dc:b0:1f:38:4a:ad:d7:70:e1:51:a0:6c:76:
20:87:b7:a2:ce:77:7a:e1:54:34:50:36:18:a4:2d:f3:c5:ff:
5b:b7:7c:bb:3a:53:fa:1a:aa:48:57:21:16:19:20:d6:0d:23:
36:65:2c:98:c4:c9:9b:49:63:6e:d7:aa:ce:98:24:09:bc:33:
66:32:0e:a6:61:43:30:2c:72:06:40:1a:e0:b9:cf:4e:dd:94:
94:db:33:38:f4:9f:02:ea:f8:ce:0a:e2:1b:79:cb:d8:c5:b1:
dc:dc:b3:8c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUO7zq0vxVrj5nWgLAMm842WkOHfowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDc5RTZGQTFCQ0I0NkI2ODg2M0ZGMzlCMDNGREFERjU1
MTE5OEVFQzAeFw0yNDEyMjAxNzMwMjNaFw0yNTEyMTkxNzM1MjNaMDMxMTAvBgNV
BAMTKDRCRTc4RUM5NUU0RjE0NTNERUNCMjhGRkNERUE0OTMwQjlBNDUyN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxHRqQICltKnoj8kHwaz+y1WlL
T+xN8QDzaWrlyY7FylfnUlWMzR8QbOavG/r8dfcAO1DB9b0HEjgnRyctdi1aRcQE
G8Q+xPRPFDDXLnqy/d1qdo1c3LQTELg/+a8KYIXjHcsFisQiCkpxfB9+Z/IyaJLn
cwfLBUL//8oFPjZ2w8IHhrC8STX2Z26cm3ERcNahW1kgM42VaEK3/7R36O0Z41y6
a4paKmvHcWMAOeSVL0ah5ww4esz7bcXssJceffGSMXGLh1JrTuvgKWoCO8DIRtVM
T8HElCO9r+wyZC1RTv2QUuYz5rpu/yMMR83apMIIV+yQiHay8Vcdv3lh7B0TAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUS+eOyV5PFFPeyyj/zepJMLmkUnswHwYDVR0j
BBgwFoAU155voby0a2iGP/ObA/2t9VEZjuwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmZERlFZUVRUekt0aGlqNjZ5V3FIM0tydnBQWWJ6ZXhUMWl4dGN4eDNK
THIvMC9ENzlFNkZBMUJDQjQ2QjY4ODYzRkYzOUIwM0ZEQURGNTUxMTk4RUVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3OUU2RkExQkNCNDZCNjg4
NjNGRjM5QjAzRkRBREY1NTExOThFRUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJmREZRWVFUVHpLdGhpajY2eVdxSDNLcnZwUFliemV4VDFpeHRjeHgzSkxyLzAv
MzIzODMwMzQzYTM3MzU2NDM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMx
MzAzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR11DANBgkqhkiG9w0BAQsFAAOCAQEAkR/F1V6B
82M63nkV6JDJSb/JBTEB0sAEQ4fnQuU0MKmerEh0NH08rJBzKirA+hWGooPd/5S2
K4Ps8ih/DiDszyosTbSUH/ApM9NoaQEWO4BY8CQ18rT3Oj+eLZ7Q60xhAwbmHfpo
2VTattb99WWDgvumZFukE8sIs9+MMc3CJpKLJRkOiuILOxMMvt8IoiMfC9p+BSPc
sB84Sq3XcOFRoGx2IIe3os53euFUNFA2GKQt88X/W7d8uzpT+hqqSFchFhkg1g0j
NmUsmMTJm0ljbteqzpgkCbwzZjIOpmFDMCxyBkAa4LnPTt2UlNszOPSfAur4zgri
G3nL2MWx3NyzjA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:13 2025 by rpki-client