Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/323830343a323732303a3a2f33332d3333203d3e20323633383738.roa
File: 323830343a323732303a3a2f33332d3333203d3e20323633383738.roa (raw, json)
Hash identifier: gwzGM91/e9c9nw8b/tPvKB9AMHByvZhpruSf+xUkUI0=
Subject key identifier: 53:75:F7:0B:C3:B1:6E:28:4C:DB:8B:E5:E4:50:48:CE:86:47:9F:66
Certificate issuer: /CN=3479A07990261201A4636EAD12C16D32507ECB61
Certificate serial: 7CC244083E8DAFD7BC59B643B3BC797F29EDE9F7
Authority key identifier: 34:79:A0:79:90:26:12:01:A4:63:6E:AD:12:C1:6D:32:50:7E:CB:61
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3479A07990261201A4636EAD12C16D32507ECB61.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/323830343a323732303a3a2f33332d3333203d3e20323633383738.roa
Signing time: Tue 12 Dec 2023 14:05:07 +0000
ROA not before: Tue 12 Dec 2023 14:00:07 +0000
ROA not after: Tue 10 Dec 2024 14:05:07 +0000
asID: 263878
IP address blocks: 2804:2720::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:c2:44:08:3e:8d:af:d7:bc:59:b6:43:b3:bc:79:7f:29:ed:e9:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3479A07990261201A4636EAD12C16D32507ECB61
Validity
Not Before: Dec 12 14:00:07 2023 GMT
Not After : Dec 10 14:05:07 2024 GMT
Subject: CN=5375F70BC3B16E284CDB8BE5E45048CE86479F66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ab:ca:d7:c7:40:b5:e9:7b:cf:f1:55:69:b0:
4e:a4:54:8f:f3:0f:33:87:8d:d7:e6:c8:c6:5d:90:
a9:db:11:8f:88:de:ca:09:d9:e6:30:7a:c5:bd:49:
94:4d:dd:97:5d:ba:a3:ac:a1:54:bc:91:d2:77:9c:
73:d2:c8:ee:1f:ef:b0:de:4d:ee:4a:73:3b:ec:d3:
47:ee:ff:5e:04:4d:ea:1c:43:1d:8a:6f:4c:be:77:
a1:1a:94:89:2d:c3:08:6b:0d:06:34:02:27:3a:df:
2e:67:50:ab:7c:7f:5a:f1:cd:6c:e3:c2:96:2b:8b:
e5:9a:40:01:9a:63:db:33:10:66:3a:ea:c0:0e:58:
89:01:a9:d0:1e:db:3b:b4:36:97:87:d6:31:7b:ed:
e1:3b:72:38:72:d1:eb:3f:51:8e:e8:44:e5:81:35:
69:59:1f:9b:e6:28:01:eb:62:ad:81:fa:34:40:f3:
18:5d:6b:b2:ab:e0:c0:a9:b9:eb:ba:52:1e:05:41:
ec:50:5e:50:43:0f:d0:6f:cd:91:d8:c6:3e:c0:08:
2b:a5:76:b8:22:f0:05:6d:4d:b4:6f:72:76:8a:91:
e7:db:be:e4:af:6b:37:74:9e:d1:c7:3c:ee:0a:cf:
2b:1f:21:83:00:64:99:8d:54:1e:9a:85:31:20:30:
19:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:75:F7:0B:C3:B1:6E:28:4C:DB:8B:E5:E4:50:48:CE:86:47:9F:66
X509v3 Authority Key Identifier:
keyid:34:79:A0:79:90:26:12:01:A4:63:6E:AD:12:C1:6D:32:50:7E:CB:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/3479A07990261201A4636EAD12C16D32507ECB61.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3479A07990261201A4636EAD12C16D32507ECB61.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/323830343a323732303a3a2f33332d3333203d3e20323633383738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2720::/33
Signature Algorithm: sha256WithRSAEncryption
87:75:90:1c:d0:2a:be:95:0f:0b:da:7d:35:57:39:b0:d6:96:
f5:4d:85:e1:73:bc:63:92:e1:ba:ae:7f:60:ab:1c:f5:7b:27:
7c:e8:af:3d:14:c7:3a:ba:08:19:cc:c2:c9:06:5b:6e:be:85:
b3:73:33:ff:d1:d5:0a:a2:96:28:12:d8:2b:d1:bd:a4:d8:23:
61:c5:0b:8d:61:10:62:74:63:47:98:e1:a9:1a:46:39:df:f9:
68:2c:f1:5b:47:9b:15:20:8a:b1:f4:0c:ab:ce:27:29:50:66:
0a:94:0b:e9:a9:f9:3b:d5:05:33:dd:a0:3d:c1:9a:5c:10:1e:
5c:57:66:7f:cb:2b:c6:d5:a3:5e:86:54:70:7c:35:6e:59:78:
d3:ba:c0:14:35:e2:a7:d7:92:86:40:44:aa:fc:19:f6:1c:91:
95:57:9b:88:ce:ce:8c:f7:01:a1:a7:e0:ae:fd:42:71:a4:11:
2b:5b:9c:1f:7c:16:92:bd:76:62:8c:39:d7:35:a6:1f:f5:5f:
93:a0:22:c6:af:35:ae:d2:67:76:06:d0:bf:7f:be:2c:f6:de:
a1:38:7e:38:c9:9b:df:3b:37:d8:dd:d8:e9:d7:66:dd:c1:79:
88:69:69:e7:c4:e7:4e:fe:a0:22:82:15:72:0a:55:b4:11:c1:
15:22:27:79
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfMJECD6Nr9e8WbZDs7x5fynt6fcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQ3OUEwNzk5MDI2MTIwMUE0NjM2RUFEMTJDMTZEMzI1
MDdFQ0I2MTAeFw0yMzEyMTIxNDAwMDdaFw0yNDEyMTAxNDA1MDdaMDMxMTAvBgNV
BAMTKDUzNzVGNzBCQzNCMTZFMjg0Q0RCOEJFNUU0NTA0OENFODY0NzlGNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrq8rXx0C16XvP8VVpsE6kVI/z
DzOHjdfmyMZdkKnbEY+I3soJ2eYwesW9SZRN3ZdduqOsoVS8kdJ3nHPSyO4f77De
Te5Kczvs00fu/14ETeocQx2Kb0y+d6EalIktwwhrDQY0Aic63y5nUKt8f1rxzWzj
wpYri+WaQAGaY9szEGY66sAOWIkBqdAe2zu0NpeH1jF77eE7cjhy0es/UY7oROWB
NWlZH5vmKAHrYq2B+jRA8xhda7Kr4MCpueu6Uh4FQexQXlBDD9BvzZHYxj7ACCul
drgi8AVtTbRvcnaKkefbvuSvazd0ntHHPO4KzysfIYMAZJmNVB6ahTEgMBlVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUU3X3C8OxbihM24vl5FBIzoZHn2YwHwYDVR0j
BBgwFoAUNHmgeZAmEgGkY26tEsFtMlB+y2EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEg5YlJSUkNEVnFmY21hSnp3NzZwOVVYWE1Rb2FIaXd4cGRldWhuZVpG
VFgvMC8zNDc5QTA3OTkwMjYxMjAxQTQ2MzZFQUQxMkMxNkQzMjUwN0VDQjYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM0NzlBMDc5OTAyNjEyMDFB
NDYzNkVBRDEyQzE2RDMyNTA3RUNCNjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRIOWJSUlJDRFZxZmNtYUp6dzc2cDlVWFhNUW9hSGl3eHBkZXVobmVaRlRYLzAv
MzIzODMwMzQzYTMyMzczMjMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjMz
MzgzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQnIAAwDQYJKoZIhvcNAQELBQADggEBAId1kBzQ
Kr6VDwvafTVXObDWlvVNheFzvGOS4bquf2CrHPV7J3zorz0Uxzq6CBnMwskGW26+
hbNzM//R1QqiligS2CvRvaTYI2HFC41hEGJ0Y0eY4akaRjnf+Wgs8VtHmxUgirH0
DKvOJylQZgqUC+mp+TvVBTPdoD3BmlwQHlxXZn/LK8bVo16GVHB8NW5ZeNO6wBQ1
4qfXkoZARKr8GfYckZVXm4jOzoz3AaGn4K79QnGkEStbnB98FpK9dmKMOdc1ph/1
X5OgIsavNa7SZ3YG0L9/viz23qE4fjjJm987N9jd2OnXZt3BeYhpaefE507+oCKC
FXIKVbQRwRUiJ3k=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:47:36 2025 by rpki-client