Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/323830343a353135633a3a2f33332d3333203d3e20323638343437.roa
File: 323830343a353135633a3a2f33332d3333203d3e20323638343437.roa (raw, json)
Hash identifier: VWe4cNetKPAwPqC3/EDAXKuQo41f5a8E2zI46bvvVTc=
Subject key identifier: DE:D3:B4:BD:DE:01:24:21:77:6F:8A:0D:38:D8:D4:EF:4C:DC:2E:D8
Certificate issuer: /CN=3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B
Certificate serial: 67F18608BB940F3175D7FC77DDD1D9CCD8C0A648
Authority key identifier: 3F:F0:A5:DF:EC:FD:F8:D0:6F:63:C2:BA:6B:24:8B:FC:D4:B9:3B:4B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/323830343a353135633a3a2f33332d3333203d3e20323638343437.roa
Signing time: Mon 21 Oct 2024 13:30:57 +0000
ROA not before: Mon 21 Oct 2024 13:25:57 +0000
ROA not after: Mon 20 Oct 2025 13:30:57 +0000
asID: 268447
IP address blocks: 2804:515c::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:f1:86:08:bb:94:0f:31:75:d7:fc:77:dd:d1:d9:cc:d8:c0:a6:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B
Validity
Not Before: Oct 21 13:25:57 2024 GMT
Not After : Oct 20 13:30:57 2025 GMT
Subject: CN=DED3B4BDDE012421776F8A0D38D8D4EF4CDC2ED8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:67:60:59:45:c3:de:3f:28:c9:67:cb:b2:a0:
42:a0:5a:55:a1:56:c5:ca:f3:b3:fe:86:89:5f:1e:
23:ba:d2:32:29:6e:20:db:6c:0d:e1:5d:d0:0b:33:
11:53:1c:6b:d2:4d:27:f5:32:ba:e8:1a:32:b0:5d:
5c:05:19:31:d6:d9:42:2b:d8:48:f5:2a:be:9b:b3:
e6:18:a3:94:bc:8c:bb:8c:6a:33:a4:f8:25:51:40:
1e:9c:a5:63:d4:43:e8:80:db:ff:73:6a:31:a9:8d:
8e:a0:70:c0:cf:53:78:95:89:50:10:f0:8a:19:c2:
4b:85:27:7e:ef:f6:c7:44:ce:32:c5:ea:18:4c:65:
19:a2:87:43:1b:b6:99:27:43:12:e3:24:98:6e:e8:
c7:dd:0a:d3:3c:61:1d:fc:42:73:52:9b:a1:0d:b5:
ef:84:c8:b9:67:f9:18:5a:64:d8:c5:69:73:7f:8c:
9d:d5:66:58:df:47:cf:fc:a4:58:a9:4d:f2:cc:d1:
79:14:53:2c:b8:6e:df:6f:6b:6f:9b:60:d0:90:5b:
44:c5:d2:93:b7:ed:d6:e0:19:37:e8:c3:18:fa:c2:
12:58:39:43:e9:72:5f:56:f0:9a:22:6c:54:41:80:
c3:4f:c9:57:cb:29:f8:02:57:d5:d2:73:0e:50:be:
15:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D3:B4:BD:DE:01:24:21:77:6F:8A:0D:38:D8:D4:EF:4C:DC:2E:D8
X509v3 Authority Key Identifier:
keyid:3F:F0:A5:DF:EC:FD:F8:D0:6F:63:C2:BA:6B:24:8B:FC:D4:B9:3B:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/323830343a353135633a3a2f33332d3333203d3e20323638343437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:515c::/33
Signature Algorithm: sha256WithRSAEncryption
71:58:ea:e2:36:e6:a7:49:60:78:de:2e:1e:66:12:50:77:06:
78:68:45:e2:14:03:b1:21:f7:6d:45:d6:da:e6:a2:c2:71:d2:
c7:3e:0e:f4:9f:11:29:37:35:b8:65:8f:60:d7:b1:4a:12:64:
ad:df:26:e5:ab:56:d5:0c:4e:3a:f9:54:01:19:1f:2a:17:6a:
a4:5a:25:70:06:f1:d8:d4:88:5a:08:3c:0d:ce:49:5b:a3:5b:
59:05:8c:cd:59:ad:e4:3f:70:d7:35:98:1d:ed:7f:e4:6c:80:
10:14:91:d2:68:06:c1:9f:df:c9:cd:76:25:af:02:a7:69:37:
e0:7e:e4:36:a4:64:2a:82:53:d3:7b:0e:bf:be:28:2b:23:98:
76:89:16:1a:9f:a8:8b:63:c8:5f:92:54:de:8e:f2:99:b8:69:
1c:5a:f1:87:58:ad:cc:09:d3:a2:5f:5d:80:df:e9:b0:e2:a7:
79:56:30:ff:dd:ad:19:37:7a:f5:54:2c:fd:b3:c7:4c:0c:9c:
15:bd:d4:17:e5:9c:68:5b:2a:72:7e:f1:81:fc:b4:81:32:39:
af:a1:12:9a:dd:a8:d5:97:4c:09:cc:f0:ca:f2:d1:a6:49:8a:
2b:cd:43:97:ed:7a:09:4a:ad:e1:b4:ab:68:f3:79:7a:29:36:
5b:c5:bf:c2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZ/GGCLuUDzF11/x33dHZzNjApkgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZGMEE1REZFQ0ZERjhEMDZGNjNDMkJBNkIyNDhCRkNE
NEI5M0I0QjAeFw0yNDEwMjExMzI1NTdaFw0yNTEwMjAxMzMwNTdaMDMxMTAvBgNV
BAMTKERFRDNCNEJEREUwMTI0MjE3NzZGOEEwRDM4RDhENEVGNENEQzJFRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyZ2BZRcPePyjJZ8uyoEKgWlWh
VsXK87P+holfHiO60jIpbiDbbA3hXdALMxFTHGvSTSf1MrroGjKwXVwFGTHW2UIr
2Ej1Kr6bs+YYo5S8jLuMajOk+CVRQB6cpWPUQ+iA2/9zajGpjY6gcMDPU3iViVAQ
8IoZwkuFJ37v9sdEzjLF6hhMZRmih0MbtpknQxLjJJhu6MfdCtM8YR38QnNSm6EN
te+EyLln+RhaZNjFaXN/jJ3VZljfR8/8pFipTfLM0XkUUyy4bt9va2+bYNCQW0TF
0pO37dbgGTfowxj6whJYOUPpcl9W8JoibFRBgMNPyVfLKfgCV9XScw5QvhXfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU3tO0vd4BJCF3b4oNONjU70zcLtgwHwYDVR0j
BBgwFoAUP/Cl3+z9+NBvY8K6aySL/NS5O0swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDhrNmlmRjJrU0pmR3lqUkpXMk1QdFhVUUpZUU5lQVZUZHhLOEVMUlg0
SmsvMC8zRkYwQTVERkVDRkRGOEQwNkY2M0MyQkE2QjI0OEJGQ0Q0QjkzQjRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGRjBBNURGRUNGREY4RDA2
RjYzQzJCQTZCMjQ4QkZDRDRCOTNCNEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ4azZpZkYya1NKZkd5alJKVzJNUHRYVVFKWVFOZUFWVGR4SzhFTFJYNEprLzAv
MzIzODMwMzQzYTM1MzEzNTYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM4
MzQzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARRXAAwDQYJKoZIhvcNAQELBQADggEBAHFY6uI2
5qdJYHjeLh5mElB3BnhoReIUA7Eh921F1trmosJx0sc+DvSfESk3Nbhlj2DXsUoS
ZK3fJuWrVtUMTjr5VAEZHyoXaqRaJXAG8djUiFoIPA3OSVujW1kFjM1ZreQ/cNc1
mB3tf+RsgBAUkdJoBsGf38nNdiWvAqdpN+B+5DakZCqCU9N7Dr++KCsjmHaJFhqf
qItjyF+SVN6O8pm4aRxa8YdYrcwJ06JfXYDf6bDip3lWMP/drRk3evVULP2zx0wM
nBW91BflnGhbKnJ+8YH8tIEyOa+hEprdqNWXTAnM8Mry0aZJiivNQ5fteglKreG0
q2jzeXopNlvFv8I=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:45:49 2025 by rpki-client