Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/323830343a6536303a3a2f33322d3333203d3e203631383838.roa
File: 323830343a6536303a3a2f33322d3333203d3e203631383838.roa (raw, json)
Hash identifier: ggG0TsiDBfTuKG8XK9TlFnBZ42c6xmvc62oVSo33Hd8=
Subject key identifier: CB:BB:A3:94:CC:FB:D1:86:ED:C6:F0:94:99:E4:12:2A:1A:D6:D5:75
Certificate issuer: /CN=514A8DDF85E26D45A530C92F183967F8EA1F56A9
Certificate serial: 6338BBD11D192438F57B08FE9BE4EF9EFB81819F
Authority key identifier: 51:4A:8D:DF:85:E2:6D:45:A5:30:C9:2F:18:39:67:F8:EA:1F:56:A9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/323830343a6536303a3a2f33322d3333203d3e203631383838.roa
Signing time: Sat 06 Jan 2024 00:00:00 +0000
ROA not before: Fri 05 Jan 2024 23:55:00 +0000
ROA not after: Sat 04 Jan 2025 00:00:00 +0000
asID: 61888
IP address blocks: 2804:e60::/32 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:38:bb:d1:1d:19:24:38:f5:7b:08:fe:9b:e4:ef:9e:fb:81:81:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=514A8DDF85E26D45A530C92F183967F8EA1F56A9
Validity
Not Before: Jan 5 23:55:00 2024 GMT
Not After : Jan 4 00:00:00 2025 GMT
Subject: CN=CBBBA394CCFBD186EDC6F09499E4122A1AD6D575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9b:04:a3:62:55:9f:b7:31:23:40:1f:f6:5e:
bb:36:87:7e:16:fe:c4:00:2c:86:75:e0:af:38:7a:
d5:07:4e:20:d5:8d:f4:22:50:89:e4:c6:d1:4b:e9:
d3:2f:9f:6c:e2:a0:e3:8d:54:c7:99:37:4e:50:26:
5c:9f:d3:d3:70:14:bc:b9:dc:98:8c:35:ab:b1:77:
c4:15:f1:84:42:93:e7:d7:1c:34:04:46:d8:91:15:
10:cb:b3:87:7f:8f:82:4f:ba:1c:59:95:77:b2:05:
1d:ee:f3:21:09:c0:6a:f7:c8:5b:61:59:e2:bd:ca:
41:be:f5:88:b8:a2:88:11:7e:8d:67:13:c9:bd:ec:
50:0b:08:ae:c1:05:1e:4b:41:6c:74:95:aa:8c:30:
dd:7f:4f:6c:0f:9c:37:7a:df:d8:17:46:26:cd:fe:
37:10:be:d7:d8:2a:9b:f6:d4:60:38:7c:31:bb:b0:
38:c4:d4:2f:db:d5:55:1e:a8:de:b7:26:4f:f8:68:
c4:50:e9:77:9d:67:df:49:58:fb:da:f6:7f:5a:3f:
95:9f:f7:dc:d0:9c:da:8c:c2:b1:ec:e2:ea:2f:08:
b0:79:fa:6d:7f:b7:88:64:1e:9d:1b:98:ec:2f:56:
08:6f:25:45:b4:8e:1e:5e:53:d4:bc:db:17:3e:8e:
9f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BB:A3:94:CC:FB:D1:86:ED:C6:F0:94:99:E4:12:2A:1A:D6:D5:75
X509v3 Authority Key Identifier:
keyid:51:4A:8D:DF:85:E2:6D:45:A5:30:C9:2F:18:39:67:F8:EA:1F:56:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/323830343a6536303a3a2f33322d3333203d3e203631383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:e60::/32
Signature Algorithm: sha256WithRSAEncryption
06:78:ed:42:68:27:25:0c:01:64:86:d5:99:ca:61:6e:af:6d:
94:ea:2f:83:62:e4:ce:19:26:e8:b8:05:2c:22:09:a4:03:67:
62:36:40:16:c7:da:30:c6:79:49:8d:2b:16:c0:43:19:a5:64:
1a:5a:63:f6:76:94:47:d5:ba:ad:98:b2:e3:0b:d7:d5:5e:43:
ce:73:9f:28:e4:78:1f:14:d4:53:6a:ea:14:ad:c9:2b:90:66:
89:de:93:e4:8b:47:82:89:8f:ad:42:e8:21:34:92:cf:75:4c:
a0:03:d5:62:63:25:be:e6:a8:5d:9f:4d:d1:be:6a:68:7c:1e:
f9:49:2e:f4:de:f3:9c:86:47:9b:53:35:24:21:22:75:a9:dc:
6a:73:6a:11:7c:7d:3a:f3:46:ea:88:3e:81:ec:b0:0b:e9:3c:
0a:60:3d:bb:26:ce:b2:ac:54:12:88:4f:df:89:24:24:6e:7c:
90:b3:cc:52:7b:28:82:99:1d:bf:88:09:3e:f1:4b:cb:31:83:
60:b4:3f:41:fe:2f:5c:74:76:d4:16:b4:cd:eb:5c:aa:dd:79:
29:b4:81:41:2b:04:86:fa:fe:72:77:03:bd:a5:a1:a7:d4:bc:
f3:db:67:e8:33:69:a7:59:38:5d:a6:91:68:87:6d:73:8e:3c:
cf:11:cf:98
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUYzi70R0ZJDj1ewj+m+TvnvuBgZ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTE0QThEREY4NUUyNkQ0NUE1MzBDOTJGMTgzOTY3RjhF
QTFGNTZBOTAeFw0yNDAxMDUyMzU1MDBaFw0yNTAxMDQwMDAwMDBaMDMxMTAvBgNV
BAMTKENCQkJBMzk0Q0NGQkQxODZFREM2RjA5NDk5RTQxMjJBMUFENkQ1NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbmwSjYlWftzEjQB/2Xrs2h34W
/sQALIZ14K84etUHTiDVjfQiUInkxtFL6dMvn2zioOONVMeZN05QJlyf09NwFLy5
3JiMNauxd8QV8YRCk+fXHDQERtiRFRDLs4d/j4JPuhxZlXeyBR3u8yEJwGr3yFth
WeK9ykG+9Yi4oogRfo1nE8m97FALCK7BBR5LQWx0laqMMN1/T2wPnDd639gXRibN
/jcQvtfYKpv21GA4fDG7sDjE1C/b1VUeqN63Jk/4aMRQ6XedZ99JWPva9n9aP5Wf
99zQnNqMwrHs4uovCLB5+m1/t4hkHp0bmOwvVghvJUW0jh5eU9S82xc+jp+rAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUy7ujlMz70YbtxvCUmeQSKhrW1XUwHwYDVR0j
BBgwFoAUUUqN34XibUWlMMkvGDln+OofVqkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzRoUzdCOHVHWXNEVk42eVVvVDVMckVpNWVFaTFuVFh6SDNLNW1RS1JC
QmUvMC81MTRBOERERjg1RTI2RDQ1QTUzMEM5MkYxODM5NjdGOEVBMUY1NkE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzUxNEE4RERGODVFMjZENDVB
NTMwQzkyRjE4Mzk2N0Y4RUExRjU2QTkuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM0aFM3Qjh1R1lzRFZONnlVb1Q1THJFaTVlRWkxblRYekgzSzVtUUtSQkJlLzAv
MzIzODMwMzQzYTY1MzYzMDNhM2EyZjMzMzIyZDMzMzMyMDNkM2UyMDM2MzEzODM4
Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBA5gMA0GCSqGSIb3DQEBCwUAA4IBAQAGeO1CaCclDAFk
htWZymFur22U6i+DYuTOGSbouAUsIgmkA2diNkAWx9owxnlJjSsWwEMZpWQaWmP2
dpRH1bqtmLLjC9fVXkPOc58o5HgfFNRTauoUrckrkGaJ3pPki0eCiY+tQughNJLP
dUygA9ViYyW+5qhdn03RvmpofB75SS703vOchkebUzUkISJ1qdxqc2oRfH0680bq
iD6B7LAL6TwKYD27Js6yrFQSiE/fiSQkbnyQs8xSeyiCmR2/iAk+8UvLMYNgtD9B
/i9cdHbUFrTN61yq3XkptIFBKwSG+v5ydwO9paGn1Lzz22foM2mnWThdppFoh21z
jjzPEc+Y
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:42 2025 by rpki-client