Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/323830343a376266383a3a2f33342d3334203d3e20323731343636.roa
File: 323830343a376266383a3a2f33342d3334203d3e20323731343636.roa (raw, json)
Hash identifier: ZEopB9Xk0WFEwfPzxsvCdPPq0cYCFKrnPBIND8Z5xHs=
Subject key identifier: 95:28:06:BC:09:19:42:C2:4D:BF:63:1C:1E:89:C0:67:8D:7A:56:2F
Certificate issuer: /CN=00F57635F3A650812E4B7FA20D349EEC4B3C25E5
Certificate serial: 76AD3530903651376F5A5C3962E61D3B5936DF64
Authority key identifier: 00:F5:76:35:F3:A6:50:81:2E:4B:7F:A2:0D:34:9E:EC:4B:3C:25:E5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00F57635F3A650812E4B7FA20D349EEC4B3C25E5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/323830343a376266383a3a2f33342d3334203d3e20323731343636.roa
Signing time: Wed 28 Feb 2024 20:15:51 +0000
ROA not before: Wed 28 Feb 2024 20:10:51 +0000
ROA not after: Wed 26 Feb 2025 20:15:51 +0000
asID: 271466
IP address blocks: 2804:7bf8::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:ad:35:30:90:36:51:37:6f:5a:5c:39:62:e6:1d:3b:59:36:df:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00F57635F3A650812E4B7FA20D349EEC4B3C25E5
Validity
Not Before: Feb 28 20:10:51 2024 GMT
Not After : Feb 26 20:15:51 2025 GMT
Subject: CN=952806BC091942C24DBF631C1E89C0678D7A562F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3d:81:41:4e:3d:06:12:de:72:c2:ab:32:e3:
8c:55:3e:95:a9:67:8b:f6:05:af:09:f6:8b:f0:35:
fa:b2:02:be:89:b5:75:0f:e4:28:98:df:18:ce:7c:
83:8c:ec:dd:7f:a9:03:9a:34:a6:b9:ab:8a:ee:f2:
47:87:23:70:7e:d7:82:7b:85:3d:0e:c1:3d:04:0e:
c5:36:dd:41:19:6a:d2:52:02:e1:e7:c7:09:b6:05:
17:06:e9:81:4d:42:3f:4a:a5:d2:a4:a9:81:35:4c:
14:e8:24:d6:a2:20:d7:a1:87:ff:bb:a2:71:24:a3:
06:d2:2f:74:77:fd:64:a4:f6:97:98:0a:05:aa:ea:
54:93:e0:12:bf:9f:a1:ab:34:af:73:f4:ec:25:e7:
b7:5b:f8:85:7e:6b:c9:94:6c:d8:60:92:56:33:81:
cf:f1:06:1a:22:a9:b3:46:d2:b0:00:b2:55:8e:af:
68:a0:ec:2e:1d:9a:56:b0:13:a3:34:50:e6:b5:23:
2a:4d:a0:d0:f7:c4:4a:76:87:dd:2c:19:cb:ef:95:
58:40:23:40:81:7a:7a:c8:63:b6:c9:a9:3f:f8:f7:
ce:6e:7e:29:6b:f3:17:07:98:6d:39:c0:00:85:b6:
6d:4b:09:c8:53:08:80:7d:9a:82:7f:0d:c5:5f:8c:
92:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:28:06:BC:09:19:42:C2:4D:BF:63:1C:1E:89:C0:67:8D:7A:56:2F
X509v3 Authority Key Identifier:
keyid:00:F5:76:35:F3:A6:50:81:2E:4B:7F:A2:0D:34:9E:EC:4B:3C:25:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/00F57635F3A650812E4B7FA20D349EEC4B3C25E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00F57635F3A650812E4B7FA20D349EEC4B3C25E5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/323830343a376266383a3a2f33342d3334203d3e20323731343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7bf8::/34
Signature Algorithm: sha256WithRSAEncryption
6c:83:ae:0a:a9:1e:d2:21:99:6e:2c:71:e6:8f:f0:e1:9a:78:
d6:07:c3:0b:26:54:a7:7b:76:5b:12:6a:c5:83:72:dd:20:09:
d6:84:81:d4:6b:95:e6:b3:99:6f:8f:81:e7:0e:7d:0e:02:86:
8f:76:59:db:7f:b2:36:84:bb:30:00:f0:5b:38:29:e3:b0:87:
0e:32:19:b3:36:f2:fd:3a:3c:6c:0d:d3:19:8d:d1:0a:29:bf:
b4:54:20:2d:8b:04:08:e0:7b:16:9e:88:75:ed:23:d8:31:3c:
08:ec:dd:6a:e8:4d:7e:ca:85:cb:f8:6b:38:57:29:ce:d1:b5:
d2:cd:68:22:21:27:f8:41:e0:35:55:0f:b2:db:83:05:ce:a5:
c5:ff:1a:2f:26:3e:81:92:33:fd:66:58:3b:20:22:a6:e3:73:
d6:c6:04:29:1d:11:e0:b0:17:0e:02:62:cc:e7:bf:81:7d:bf:
7f:63:c4:6f:a2:25:68:d5:d1:fc:20:f5:08:56:9f:01:41:f4:
d8:b7:26:97:70:b8:e6:a0:0b:90:f9:84:b6:e2:c7:96:0e:f2:
ed:13:b2:df:cc:c9:58:e9:89:04:b7:21:14:52:a3:bc:31:2c:
35:af:42:ff:21:33:68:d6:d9:8b:c1:7e:c9:ce:af:49:cf:c6:
46:43:c4:e6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdq01MJA2UTdvWlw5YuYdO1k232QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDBGNTc2MzVGM0E2NTA4MTJFNEI3RkEyMEQzNDlFRUM0
QjNDMjVFNTAeFw0yNDAyMjgyMDEwNTFaFw0yNTAyMjYyMDE1NTFaMDMxMTAvBgNV
BAMTKDk1MjgwNkJDMDkxOTQyQzI0REJGNjMxQzFFODlDMDY3OEQ3QTU2MkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8PYFBTj0GEt5ywqsy44xVPpWp
Z4v2Ba8J9ovwNfqyAr6JtXUP5CiY3xjOfIOM7N1/qQOaNKa5q4ru8keHI3B+14J7
hT0OwT0EDsU23UEZatJSAuHnxwm2BRcG6YFNQj9KpdKkqYE1TBToJNaiINehh/+7
onEkowbSL3R3/WSk9peYCgWq6lST4BK/n6GrNK9z9Owl57db+IV+a8mUbNhgklYz
gc/xBhoiqbNG0rAAslWOr2ig7C4dmlawE6M0UOa1IypNoND3xEp2h90sGcvvlVhA
I0CBenrIY7bJqT/4985ufilr8xcHmG05wACFtm1LCchTCIB9moJ/DcVfjJK/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUlSgGvAkZQsJNv2McHonAZ416Vi8wHwYDVR0j
BBgwFoAUAPV2NfOmUIEuS3+iDTSe7Es8JeUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdFUnNYOXhrakMzNFRYeWpSekNITFZrS2dGaXhLb0pDQlplVExFSnFU
ZWovMC8wMEY1NzYzNUYzQTY1MDgxMkU0QjdGQTIwRDM0OUVFQzRCM0MyNUU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzAwRjU3NjM1RjNBNjUwODEy
RTRCN0ZBMjBEMzQ5RUVDNEIzQzI1RTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHRVJzWDl4a2pDMzRUWHlqUnpDSExWa0tnRml4S29KQ0JaZVRMRUpxVGVqLzAv
MzIzODMwMzQzYTM3NjI2NjM4M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNzMx
MzQzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKAR7+AAwDQYJKoZIhvcNAQELBQADggEBAGyDrgqp
HtIhmW4sceaP8OGaeNYHwwsmVKd7dlsSasWDct0gCdaEgdRrleazmW+PgecOfQ4C
ho92Wdt/sjaEuzAA8Fs4KeOwhw4yGbM28v06PGwN0xmN0Qopv7RUIC2LBAjgexae
iHXtI9gxPAjs3WroTX7Khcv4azhXKc7RtdLNaCIhJ/hB4DVVD7LbgwXOpcX/Gi8m
PoGSM/1mWDsgIqbjc9bGBCkdEeCwFw4CYsznv4F9v39jxG+iJWjV0fwg9QhWnwFB
9Ni3JpdwuOagC5D5hLbix5YO8u0Tst/MyVjpiQS3IRRSo7wxLDWvQv8hM2jW2YvB
fsnOr0nPxkZDxOY=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:08 2025 by rpki-client