Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a383034303a3a2f34322d3432203d3e20323632383437.roa
File: 323830343a3265383a383034303a3a2f34322d3432203d3e20323632383437.roa (raw, json)
Hash identifier: F2221L/31LC3aeYrlz4TC2Pe2Rd6GXenYwOLnhwnYnU=
Subject key identifier: 7A:D9:86:EF:B3:36:68:00:42:03:C1:38:36:EC:04:E4:AA:DC:DA:B2
Certificate issuer: /CN=259825BFF3ECA64245B68FAE07CEECBC25E35500
Certificate serial: 49A9D4C1FEAEED82D5396FD9F5B825D586B0D4A9
Authority key identifier: 25:98:25:BF:F3:EC:A6:42:45:B6:8F:AE:07:CE:EC:BC:25:E3:55:00
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a383034303a3a2f34322d3432203d3e20323632383437.roa
Signing time: Sun 11 Dec 2022 18:40:45 +0000
ROA not before: Sun 11 Dec 2022 18:35:45 +0000
ROA not after: Sun 10 Dec 2023 18:40:45 +0000
asID: 262847
IP address blocks: 2804:2e8:8040::/42 maxlen: 42
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:a9:d4:c1:fe:ae:ed:82:d5:39:6f:d9:f5:b8:25:d5:86:b0:d4:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259825BFF3ECA64245B68FAE07CEECBC25E35500
Validity
Not Before: Dec 11 18:35:45 2022 GMT
Not After : Dec 10 18:40:45 2023 GMT
Subject: CN=7AD986EFB33668004203C13836EC04E4AADCDAB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:45:5e:37:72:8f:c1:d4:f8:20:fa:90:f8:b1:
7c:33:b3:43:d8:e3:f7:b3:4b:52:84:8c:fb:a1:15:
2d:b3:6d:4b:f4:1e:81:39:1a:7e:47:3e:74:58:15:
13:f2:95:44:13:5b:7f:02:ad:13:81:e6:f4:57:6f:
0e:7d:66:fd:b0:29:ac:ff:78:6e:3c:36:f4:2c:42:
3d:a6:a4:b7:4d:57:09:b8:8e:f3:15:69:f0:08:ec:
b7:9a:18:0b:4e:ad:6d:96:60:8d:d3:0b:25:c0:0c:
f1:cf:28:f5:c6:6f:b8:e2:09:f4:83:8a:e4:11:c8:
ec:c1:1f:f0:ed:f3:87:7f:ee:c9:09:2f:71:d8:f4:
fa:c6:d3:2f:7a:1a:31:bf:8e:44:3f:00:eb:4b:2f:
cc:63:3b:61:21:5a:35:13:6b:8b:49:69:33:e4:07:
a5:b3:b6:e7:2e:0f:03:dd:86:40:46:5e:60:44:92:
a6:50:bc:45:1f:1d:e1:cb:49:8f:3b:85:60:3f:d3:
0f:5a:33:d3:d1:0e:8d:08:14:d2:3a:9e:4a:5c:7d:
83:e4:1b:57:a1:12:ee:11:8f:f3:a2:91:76:61:6d:
7c:6a:d9:51:a3:70:c3:79:45:3d:e7:3b:3d:a3:6a:
22:17:7f:7b:23:f6:74:0f:8d:2f:be:71:57:67:d9:
44:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D9:86:EF:B3:36:68:00:42:03:C1:38:36:EC:04:E4:AA:DC:DA:B2
X509v3 Authority Key Identifier:
keyid:25:98:25:BF:F3:EC:A6:42:45:B6:8F:AE:07:CE:EC:BC:25:E3:55:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a383034303a3a2f34322d3432203d3e20323632383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2e8:8040::/42
Signature Algorithm: sha256WithRSAEncryption
b3:37:80:48:0d:08:50:1e:9a:b6:81:7e:e5:07:75:c7:ef:4d:
61:a4:70:81:bc:03:9d:56:0f:d4:a8:f1:97:73:d5:cc:87:a3:
8f:99:09:d9:e6:84:a2:c5:fe:25:e3:50:92:c3:2c:75:6e:42:
6d:31:5b:11:67:76:92:9c:63:76:04:e4:bf:ee:9f:20:03:a4:
c9:43:10:4d:38:38:0e:1c:ac:6c:d8:d8:c6:3f:1c:af:79:83:
f4:eb:96:28:cf:d4:ab:1d:bc:1e:9f:74:a2:22:61:d7:60:5e:
f8:d2:8e:30:df:f7:ea:05:f2:a5:1e:ef:22:3d:bd:94:fd:ec:
6d:bc:a0:d3:3b:99:f5:97:32:10:1c:9e:0c:ea:57:ea:15:ac:
82:33:30:18:19:66:7e:13:7e:ff:e5:4e:b4:f5:f7:66:c1:99:
97:54:8d:e9:16:c0:22:23:2b:79:6c:a0:14:44:d6:ac:13:71:
87:61:2a:c2:e5:a2:33:19:7f:b7:76:df:d0:65:91:ed:16:f3:
f0:08:95:d2:da:60:f8:1c:9e:c7:95:86:b7:19:54:3b:fc:9b:
24:21:6c:3a:d6:e0:41:38:78:9f:0b:f7:0a:12:ab:c4:00:2a:
2d:a8:07:1d:c3:83:f3:e1:7e:c4:a5:bd:da:31:77:3b:f2:26:
48:ee:b0:51
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUSanUwf6u7YLVOW/Z9bgl1Yaw1KkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjU5ODI1QkZGM0VDQTY0MjQ1QjY4RkFFMDdDRUVDQkMy
NUUzNTUwMDAeFw0yMjEyMTExODM1NDVaFw0yMzEyMTAxODQwNDVaMDMxMTAvBgNV
BAMTKDdBRDk4NkVGQjMzNjY4MDA0MjAzQzEzODM2RUMwNEU0QUFEQ0RBQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5RV43co/B1Pgg+pD4sXwzs0PY
4/ezS1KEjPuhFS2zbUv0HoE5Gn5HPnRYFRPylUQTW38CrROB5vRXbw59Zv2wKaz/
eG48NvQsQj2mpLdNVwm4jvMVafAI7LeaGAtOrW2WYI3TCyXADPHPKPXGb7jiCfSD
iuQRyOzBH/Dt84d/7skJL3HY9PrG0y96GjG/jkQ/AOtLL8xjO2EhWjUTa4tJaTPk
B6WztucuDwPdhkBGXmBEkqZQvEUfHeHLSY87hWA/0w9aM9PRDo0IFNI6nkpcfYPk
G1ehEu4Rj/OikXZhbXxq2VGjcMN5RT3nOz2jaiIXf3sj9nQPjS++cVdn2UR3AgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUetmG77M2aABCA8E4NuwE5Krc2rIwHwYDVR0j
BBgwFoAUJZglv/PspkJFto+uB87svCXjVQAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2JBYmJaNng1RnJ3QTRKNmFkNjFKZW90d2RZQ3hSM3Z2ZER1VjdoSEdx
QmYvMC8yNTk4MjVCRkYzRUNBNjQyNDVCNjhGQUUwN0NFRUNCQzI1RTM1NTAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI1OTgyNUJGRjNFQ0E2NDI0
NUI2OEZBRTA3Q0VFQ0JDMjVFMzU1MDAuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNiQWJiWjZ4NUZyd0E0SjZhZDYxSmVvdHdkWUN4UjN2dmREdVY3aEhHcUJmLzAv
MzIzODMwMzQzYTMyNjUzODNhMzgzMDM0MzAzYTNhMmYzNDMyMmQzNDMyMjAzZDNl
MjAzMjM2MzIzODM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwYoBALogEAwDQYJKoZIhvcNAQELBQAD
ggEBALM3gEgNCFAemraBfuUHdcfvTWGkcIG8A51WD9So8Zdz1cyHo4+ZCdnmhKLF
/iXjUJLDLHVuQm0xWxFndpKcY3YE5L/unyADpMlDEE04OA4crGzY2MY/HK95g/Tr
lijP1KsdvB6fdKIiYddgXvjSjjDf9+oF8qUe7yI9vZT97G28oNM7mfWXMhAcngzq
V+oVrIIzMBgZZn4Tfv/lTrT192bBmZdUjekWwCIjK3lsoBRE1qwTcYdhKsLlojMZ
f7d239Blke0W8/AIldLaYPgcnseVhrcZVDv8myQhbDrW4EE4eJ8L9woSq8QAKi2o
Bx3Dg/PhfsSlvdoxdzvyJkjusFE=
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:08:14 2025 by rpki-client