Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/0/323830343a333163343a3a2f33322d3438203d3e20323635303336.roa
File: 323830343a333163343a3a2f33322d3438203d3e20323635303336.roa (raw, json)
Hash identifier: PJJfgYsxCl2XxP0NbwPBLZk+rwOJmT/jXn20hSzmxJg=
Subject key identifier: 47:93:47:28:F8:CF:FE:1D:1E:CF:A3:90:61:17:05:67:4A:DB:51:8E
Certificate issuer: /CN=93B22D1C8D79AC32084C436604802BA8B3A61E1F
Certificate serial: 6C5E6A9CB0E625BD8165B3121417D578902B873D
Authority key identifier: 93:B2:2D:1C:8D:79:AC:32:08:4C:43:66:04:80:2B:A8:B3:A6:1E:1F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93B22D1C8D79AC32084C436604802BA8B3A61E1F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/0/323830343a333163343a3a2f33322d3438203d3e20323635303336.roa
Signing time: Wed 10 Jan 2024 14:01:23 +0000
ROA not before: Wed 10 Jan 2024 13:56:23 +0000
ROA not after: Wed 08 Jan 2025 14:01:23 +0000
asID: 265036
IP address blocks: 2804:31c4::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:5e:6a:9c:b0:e6:25:bd:81:65:b3:12:14:17:d5:78:90:2b:87:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93B22D1C8D79AC32084C436604802BA8B3A61E1F
Validity
Not Before: Jan 10 13:56:23 2024 GMT
Not After : Jan 8 14:01:23 2025 GMT
Subject: CN=47934728F8CFFE1D1ECFA390611705674ADB518E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:75:c1:42:f6:d6:f8:d6:eb:60:16:09:17:af:
fa:00:68:50:c9:de:56:e9:a4:4e:80:23:5b:99:90:
b1:0b:dc:4e:76:b0:98:b5:3e:10:6c:57:5f:d2:06:
ac:fa:9f:f0:1b:96:54:84:76:50:8d:e1:ec:e7:8f:
da:02:1c:20:f3:58:80:8d:d2:17:16:24:29:37:62:
3c:e6:49:f5:eb:35:52:71:2e:a1:68:f6:e8:56:d7:
c8:7b:21:70:32:b9:18:10:e3:b6:53:79:e1:bc:1e:
c7:8a:24:0f:09:8a:87:66:53:47:97:61:91:b3:cf:
52:d8:7a:16:3f:56:e9:8e:0b:23:06:03:0d:4b:0d:
2a:ac:0b:43:cb:cd:21:58:1e:16:6e:0e:36:b5:6c:
04:80:32:1d:86:32:97:b9:1a:eb:5e:7e:04:f2:40:
3d:76:72:97:28:e7:fd:f8:5a:c8:20:92:dc:20:9f:
73:ee:21:61:66:08:21:52:81:f9:d9:9c:d0:2d:1b:
5e:f3:a5:8e:bb:a4:c0:ea:f6:2f:93:4e:6d:57:19:
64:cc:4a:22:b7:2f:80:87:32:2b:6d:36:44:c1:b4:
ed:fe:2f:8b:41:88:bb:cf:d2:1d:c5:b7:7a:a9:2a:
31:fa:de:2d:59:d1:e4:bd:f1:a9:ab:6f:9f:6a:e3:
1f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:93:47:28:F8:CF:FE:1D:1E:CF:A3:90:61:17:05:67:4A:DB:51:8E
X509v3 Authority Key Identifier:
keyid:93:B2:2D:1C:8D:79:AC:32:08:4C:43:66:04:80:2B:A8:B3:A6:1E:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/0/93B22D1C8D79AC32084C436604802BA8B3A61E1F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93B22D1C8D79AC32084C436604802BA8B3A61E1F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/0/323830343a333163343a3a2f33322d3438203d3e20323635303336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:31c4::/32
Signature Algorithm: sha256WithRSAEncryption
aa:ff:de:ca:37:7a:f1:1c:2d:64:9e:be:29:ff:99:cb:fa:bf:
67:62:73:d6:21:5d:84:0e:c2:a6:d1:07:1f:9a:45:c7:0a:8e:
33:e7:73:9b:dd:ce:dd:62:b6:e9:bd:96:55:33:18:e7:4e:75:
2e:68:c4:14:cb:46:ca:c3:69:8f:5b:84:ed:c1:fb:5a:cc:a2:
bf:66:b2:91:a5:da:78:bc:fc:6d:4b:ae:9b:e6:c7:5a:08:4e:
44:27:82:c0:1b:b7:36:53:1b:35:7d:97:b9:c6:55:f5:27:9f:
c1:1e:ce:05:84:b9:48:38:86:92:fc:c7:80:2a:90:ac:fe:ce:
f4:c4:b5:8a:05:8d:72:1f:c7:84:66:28:e6:f4:b4:b4:ec:96:
32:76:f3:d9:23:af:39:0b:92:14:a5:b7:ed:2e:ae:66:b0:7f:
5b:b1:ea:ca:75:a4:f8:dc:09:7c:d0:d6:ab:6f:7b:2e:13:7d:
5d:f6:0f:c9:64:45:14:51:fa:27:38:9b:7e:be:8e:f7:5c:c1:
f1:9f:98:96:78:41:53:74:41:e9:74:cb:7b:65:3c:5d:d2:75:
d7:a9:8b:f2:99:61:f6:6f:b5:73:7c:0d:6c:17:e9:d1:8e:ce:
13:c3:c7:a5:3d:e1:a0:8e:37:9e:ad:f3:26:ca:03:cb:3c:73:
e5:11:34:a8
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUbF5qnLDmJb2BZbMSFBfVeJArhz0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTNCMjJEMUM4RDc5QUMzMjA4NEM0MzY2MDQ4MDJCQThC
M0E2MUUxRjAeFw0yNDAxMTAxMzU2MjNaFw0yNTAxMDgxNDAxMjNaMDMxMTAvBgNV
BAMTKDQ3OTM0NzI4RjhDRkZFMUQxRUNGQTM5MDYxMTcwNTY3NEFEQjUxOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsdcFC9tb41utgFgkXr/oAaFDJ
3lbppE6AI1uZkLEL3E52sJi1PhBsV1/SBqz6n/AbllSEdlCN4eznj9oCHCDzWICN
0hcWJCk3YjzmSfXrNVJxLqFo9uhW18h7IXAyuRgQ47ZTeeG8HseKJA8JiodmU0eX
YZGzz1LYehY/VumOCyMGAw1LDSqsC0PLzSFYHhZuDja1bASAMh2GMpe5GutefgTy
QD12cpco5/34Wsggktwgn3PuIWFmCCFSgfnZnNAtG17zpY67pMDq9i+TTm1XGWTM
SiK3L4CHMittNkTBtO3+L4tBiLvP0h3Ft3qpKjH63i1Z0eS98amrb59q4x/HAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUR5NHKPjP/h0ez6OQYRcFZ0rbUY4wHwYDVR0j
BBgwFoAUk7ItHI15rDIITENmBIArqLOmHh8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnMzbWlIbWNKWjFuaEpmcDhXUmJ2VGNKQXl4N3ZBMlUyR3kya2VCc3VX
ZkUvMC85M0IyMkQxQzhENzlBQzMyMDg0QzQzNjYwNDgwMkJBOEIzQTYxRTFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzkzQjIyRDFDOEQ3OUFDMzIw
ODRDNDM2NjA0ODAyQkE4QjNBNjFFMUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJzM21pSG1jSloxbmhKZnA4V1JidlRjSkF5eDd2QTJVMkd5MmtlQnN1V2ZFLzAv
MzIzODMwMzQzYTMzMzE2MzM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM1
MzAzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQxxDANBgkqhkiG9w0BAQsFAAOCAQEAqv/eyjd6
8RwtZJ6+Kf+Zy/q/Z2Jz1iFdhA7CptEHH5pFxwqOM+dzm93O3WK26b2WVTMY5051
LmjEFMtGysNpj1uE7cH7Wsyiv2aykaXaeLz8bUuum+bHWghORCeCwBu3NlMbNX2X
ucZV9SefwR7OBYS5SDiGkvzHgCqQrP7O9MS1igWNch/HhGYo5vS0tOyWMnbz2SOv
OQuSFKW37S6uZrB/W7HqynWk+NwJfNDWq297LhN9XfYPyWRFFFH6Jzibfr6O91zB
8Z+YlnhBU3RB6XTLe2U8XdJ116mL8plh9m+1c3wNbBfp0Y7OE8PHpT3hoI43nq3z
JsoDyzxz5RE0qA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:13:31 2025 by rpki-client