Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/323830343a323839303a3a2f33322d3332203d3e203532373331.roa
File: 323830343a323839303a3a2f33322d3332203d3e203532373331.roa (raw, json)
Hash identifier: srnKUvyRAgt6yMC6XemsbFr2pZo7A6pTEtw/LghLZvM=
Subject key identifier: 1B:43:F7:BD:34:5D:4D:BD:A0:B3:61:78:A7:56:4C:7F:E2:3C:92:22
Certificate issuer: /CN=21AE386CAD3039E4C970C824F769FF2366BED33B
Certificate serial: 2BC9078880FB33CA7ADA81844FA18AB0EFE2AFB0
Authority key identifier: 21:AE:38:6C:AD:30:39:E4:C9:70:C8:24:F7:69:FF:23:66:BE:D3:3B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21AE386CAD3039E4C970C824F769FF2366BED33B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/323830343a323839303a3a2f33322d3332203d3e203532373331.roa
Signing time: Sun 15 Sep 2024 23:31:41 +0000
ROA not before: Sun 15 Sep 2024 23:26:41 +0000
ROA not after: Sun 14 Sep 2025 23:31:41 +0000
asID: 52731
IP address blocks: 2804:2890::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:c9:07:88:80:fb:33:ca:7a:da:81:84:4f:a1:8a:b0:ef:e2:af:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21AE386CAD3039E4C970C824F769FF2366BED33B
Validity
Not Before: Sep 15 23:26:41 2024 GMT
Not After : Sep 14 23:31:41 2025 GMT
Subject: CN=1B43F7BD345D4DBDA0B36178A7564C7FE23C9222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:79:fe:3f:cf:a5:53:17:4a:10:a3:62:2a:bb:
14:49:e0:ad:b1:47:84:13:ca:79:ab:f5:a6:a3:ee:
06:ff:d4:eb:cf:3e:f6:a0:b5:83:ec:e9:b1:3f:7d:
8f:63:a3:62:3d:b7:f8:12:ba:30:92:99:4a:1a:fe:
af:52:af:cc:bb:de:ab:08:ef:57:d0:78:b1:4c:38:
23:8a:d3:55:c3:93:94:96:86:82:a5:07:5e:f9:b0:
10:09:09:99:67:e3:25:81:f4:13:e1:24:1c:0b:88:
94:8e:12:44:5d:8e:bf:39:40:25:0c:70:0d:d8:05:
b3:04:df:cc:b5:97:99:b6:01:68:e2:08:43:ea:8e:
33:1c:02:db:01:00:f7:73:6c:93:51:b7:7e:cc:af:
22:c9:3e:dd:65:61:e7:19:b0:39:74:2d:8c:67:72:
89:31:9d:c7:14:6f:02:ec:f2:33:ee:2b:58:a6:5e:
97:6c:08:7e:7e:70:a1:8c:38:c0:ca:e8:83:3c:87:
6c:a2:30:c5:6b:93:e4:b5:fd:4b:94:38:4f:83:90:
9a:02:5d:eb:af:64:88:29:d4:d1:1d:3d:cc:a9:cb:
fd:fa:a6:52:0e:ca:4d:e6:6e:2b:ce:f3:65:47:82:
ac:23:04:5d:15:47:1f:07:7a:42:2d:9e:52:33:25:
15:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:43:F7:BD:34:5D:4D:BD:A0:B3:61:78:A7:56:4C:7F:E2:3C:92:22
X509v3 Authority Key Identifier:
keyid:21:AE:38:6C:AD:30:39:E4:C9:70:C8:24:F7:69:FF:23:66:BE:D3:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/21AE386CAD3039E4C970C824F769FF2366BED33B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21AE386CAD3039E4C970C824F769FF2366BED33B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/323830343a323839303a3a2f33322d3332203d3e203532373331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2890::/32
Signature Algorithm: sha256WithRSAEncryption
0b:0f:05:c6:40:ff:9f:12:72:4c:51:a1:a2:29:16:19:dd:40:
74:42:05:71:c5:d6:14:0d:d9:ee:4a:1b:09:7b:8f:25:62:33:
17:d9:2d:90:60:2a:3d:0d:e7:3b:2b:a7:06:38:ae:33:f8:bb:
d1:c6:33:7b:50:85:4b:e7:ec:f8:53:19:58:ee:31:22:db:33:
c2:dc:61:8d:44:92:6b:f8:3c:38:b5:85:d9:a9:5a:2a:98:a2:
ae:64:1c:b1:57:af:ba:6c:8a:40:73:c6:5b:2a:a9:6b:ef:45:
4a:d5:69:f2:cb:dc:1b:cb:14:27:8c:e7:2c:24:71:22:48:75:
37:63:03:ad:34:14:e3:84:ee:46:b4:79:ea:99:f0:53:2d:2f:
d1:ae:29:2c:d5:bb:ae:95:c0:06:c9:39:6d:03:ff:b0:0f:ee:
da:a3:04:75:3f:8d:76:ee:63:9c:19:e8:b1:cd:3a:fd:82:52:
96:2f:54:0c:60:6d:cd:0e:4f:36:da:ed:fa:03:61:bc:ba:2d:
82:b4:da:d4:70:27:a0:fa:b6:86:81:21:a6:37:11:24:8d:eb:
70:91:72:cf:a4:6e:eb:7f:25:02:4d:a1:49:79:4f:44:c5:14:
68:a5:a4:66:23:1c:e9:00:a5:4a:d7:96:55:5e:aa:09:af:01:
f9:a1:fe:05
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUK8kHiID7M8p62oGET6GKsO/ir7AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFBRTM4NkNBRDMwMzlFNEM5NzBDODI0Rjc2OUZGMjM2
NkJFRDMzQjAeFw0yNDA5MTUyMzI2NDFaFw0yNTA5MTQyMzMxNDFaMDMxMTAvBgNV
BAMTKDFCNDNGN0JEMzQ1RDREQkRBMEIzNjE3OEE3NTY0QzdGRTIzQzkyMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAef4/z6VTF0oQo2IquxRJ4K2x
R4QTynmr9aaj7gb/1OvPPvagtYPs6bE/fY9jo2I9t/gSujCSmUoa/q9Sr8y73qsI
71fQeLFMOCOK01XDk5SWhoKlB175sBAJCZln4yWB9BPhJBwLiJSOEkRdjr85QCUM
cA3YBbME38y1l5m2AWjiCEPqjjMcAtsBAPdzbJNRt37MryLJPt1lYecZsDl0LYxn
cokxnccUbwLs8jPuK1imXpdsCH5+cKGMOMDK6IM8h2yiMMVrk+S1/UuUOE+DkJoC
XeuvZIgp1NEdPcypy/36plIOyk3mbivO82VHgqwjBF0VRx8HekItnlIzJRXfAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUG0P3vTRdTb2gs2F4p1ZMf+I8kiIwHwYDVR0j
BBgwFoAUIa44bK0wOeTJcMgk92n/I2a+0zswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1JzVWNCWGpmTUtxRnlzM05IalZVWWhFOG92UHkxVlZyNHJoU3VUcEtx
VzQvMC8yMUFFMzg2Q0FEMzAzOUU0Qzk3MEM4MjRGNzY5RkYyMzY2QkVEMzNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxQUUzODZDQUQzMDM5RTRD
OTcwQzgyNEY3NjlGRjIzNjZCRUQzM0IuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNSc1VjQlhqZk1LcUZ5czNOSGpWVVloRThvdlB5MVZWcjRyaFN1VHBLcVc0LzAv
MzIzODMwMzQzYTMyMzgzOTMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzUzMjM3
MzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEKJAwDQYJKoZIhvcNAQELBQADggEBAAsPBcZA/58S
ckxRoaIpFhndQHRCBXHF1hQN2e5KGwl7jyViMxfZLZBgKj0N5zsrpwY4rjP4u9HG
M3tQhUvn7PhTGVjuMSLbM8LcYY1Ekmv4PDi1hdmpWiqYoq5kHLFXr7psikBzxlsq
qWvvRUrVafLL3BvLFCeM5ywkcSJIdTdjA600FOOE7ka0eeqZ8FMtL9GuKSzVu66V
wAbJOW0D/7AP7tqjBHU/jXbuY5wZ6LHNOv2CUpYvVAxgbc0OTzba7foDYby6LYK0
2tRwJ6D6toaBIaY3ESSN63CRcs+kbut/JQJNoUl5T0TFFGilpGYjHOkApUrXllVe
qgmvAfmh/gU=
-----END CERTIFICATE-----
Generated at Fri Mar 14 00:38:25 2025 by rpki-client