Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/1/323830313a38653a3a2f33322d313236203d3e203131393933.roa
File: 323830313a38653a3a2f33322d313236203d3e203131393933.roa (raw, json)
Hash identifier: Cvf0XPXjkUUSAnJmVXyXoqSlQHv63IIZJUhP72T1lCo=
Subject key identifier: 57:FC:E9:60:98:A0:39:9E:9D:5A:10:62:00:75:E7:2F:AE:1C:C8:03
Certificate issuer: /CN=D9E7A0210528723D646525CFCB73A4EC0737CC58
Certificate serial: 27724A194D51726A599AE90579B05ED2B35BA56B
Authority key identifier: D9:E7:A0:21:05:28:72:3D:64:65:25:CF:CB:73:A4:EC:07:37:CC:58
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9E7A0210528723D646525CFCB73A4EC0737CC58.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/1/323830313a38653a3a2f33322d313236203d3e203131393933.roa
Signing time: Sat 24 Feb 2024 02:29:52 +0000
ROA not before: Sat 24 Feb 2024 02:24:52 +0000
ROA not after: Sat 22 Feb 2025 02:29:52 +0000
asID: 11993
IP address blocks: 2801:8e::/32 maxlen: 126
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:72:4a:19:4d:51:72:6a:59:9a:e9:05:79:b0:5e:d2:b3:5b:a5:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D9E7A0210528723D646525CFCB73A4EC0737CC58
Validity
Not Before: Feb 24 02:24:52 2024 GMT
Not After : Feb 22 02:29:52 2025 GMT
Subject: CN=57FCE96098A0399E9D5A10620075E72FAE1CC803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:06:f3:db:73:e2:bf:c1:19:0c:2a:e5:f6:b0:
56:5d:ad:12:b7:f9:01:a0:f8:99:00:7f:91:e1:bb:
49:cb:8c:f0:8b:18:e7:a3:81:cc:1a:a2:4d:3d:08:
d2:f7:cc:e6:1a:5f:e7:10:a3:3d:fd:45:99:84:48:
21:bf:cf:bd:73:a3:1b:a0:f9:4e:dd:74:ba:e7:51:
59:a7:1f:40:81:28:95:20:14:46:c0:c4:41:69:5f:
99:85:33:29:00:f7:40:36:6d:8d:09:6c:0d:a2:39:
4b:c2:8d:3d:a0:16:9b:8e:79:5b:50:07:c3:39:99:
ba:a1:ca:3c:80:80:0e:8a:f0:b9:2f:ad:d9:9b:aa:
70:b5:79:ee:a3:4c:1c:53:4d:c0:1d:58:6c:b8:36:
5b:ac:62:2d:d8:16:52:41:c4:8d:91:72:cb:6b:bd:
f2:c8:8f:8e:a8:27:ac:f5:1d:5f:64:45:74:92:61:
a5:7d:10:fe:bd:d2:88:38:27:5d:5c:f3:62:74:57:
ee:68:0a:bc:b1:f6:ad:80:97:43:ad:56:61:75:e6:
22:36:a0:8b:a6:5a:2e:fe:b4:a8:09:6b:97:ba:85:
eb:aa:d1:78:de:22:c1:df:96:59:9a:a2:be:05:f7:
84:12:c1:e3:d0:0d:e8:de:e4:26:dd:d0:a5:1f:46:
b5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FC:E9:60:98:A0:39:9E:9D:5A:10:62:00:75:E7:2F:AE:1C:C8:03
X509v3 Authority Key Identifier:
keyid:D9:E7:A0:21:05:28:72:3D:64:65:25:CF:CB:73:A4:EC:07:37:CC:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/1/D9E7A0210528723D646525CFCB73A4EC0737CC58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9E7A0210528723D646525CFCB73A4EC0737CC58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/1/323830313a38653a3a2f33322d313236203d3e203131393933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:8e::/32
Signature Algorithm: sha256WithRSAEncryption
3d:b8:49:57:fc:ba:76:58:16:a3:e8:94:f8:26:b4:8e:97:56:
c5:6e:38:21:5b:92:bc:0d:78:9e:ba:a7:55:cf:c3:cc:56:0f:
b9:06:19:cc:e6:d2:45:26:a4:b4:df:46:28:60:fb:74:81:a5:
0b:26:b0:d2:02:21:73:3d:c0:00:83:2b:dc:76:6e:ad:d6:82:
81:3c:57:c6:3d:e4:4a:02:5b:0a:a9:e1:85:d1:60:99:6d:d1:
c6:a9:44:82:bb:6c:79:95:40:47:16:9b:5b:e2:b8:e3:1a:d8:
b2:bd:ab:9f:e8:85:7d:9f:0f:8b:52:4c:79:d0:86:f8:af:0c:
e3:d8:e0:e2:20:bb:5e:75:c4:4c:4f:7b:45:49:9b:bd:dd:a6:
1a:c2:30:f1:6b:68:2f:33:e2:e3:be:57:3a:67:d4:d9:51:18:
a5:62:db:8b:38:f8:52:db:2a:7c:df:77:20:c5:37:5c:a6:b8:
3b:c5:44:16:25:fa:84:5a:0a:00:8b:62:35:61:ba:df:56:69:
b4:11:59:87:5b:d9:e4:31:69:f9:b0:27:54:85:3a:c6:06:71:
a5:7d:1e:a0:a6:40:2d:80:20:5f:54:22:f6:f9:46:af:20:6c:
5e:61:02:40:e3:b2:ed:b4:2d:93:7c:c1:89:b6:44:01:0b:ef:
63:ec:a5:e8
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUJ3JKGU1RcmpZmukFebBe0rNbpWswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDlFN0EwMjEwNTI4NzIzRDY0NjUyNUNGQ0I3M0E0RUMw
NzM3Q0M1ODAeFw0yNDAyMjQwMjI0NTJaFw0yNTAyMjIwMjI5NTJaMDMxMTAvBgNV
BAMTKDU3RkNFOTYwOThBMDM5OUU5RDVBMTA2MjAwNzVFNzJGQUUxQ0M4MDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvBvPbc+K/wRkMKuX2sFZdrRK3
+QGg+JkAf5Hhu0nLjPCLGOejgcwaok09CNL3zOYaX+cQoz39RZmESCG/z71zoxug
+U7ddLrnUVmnH0CBKJUgFEbAxEFpX5mFMykA90A2bY0JbA2iOUvCjT2gFpuOeVtQ
B8M5mbqhyjyAgA6K8LkvrdmbqnC1ee6jTBxTTcAdWGy4NlusYi3YFlJBxI2Rcstr
vfLIj46oJ6z1HV9kRXSSYaV9EP690og4J11c82J0V+5oCryx9q2Al0OtVmF15iI2
oIumWi7+tKgJa5e6heuq0XjeIsHfllmaor4F94QSwePQDeje5Cbd0KUfRrU7AgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUV/zpYJigOZ6dWhBiAHXnL64cyAMwHwYDVR0j
BBgwFoAU2eegIQUocj1kZSXPy3Ok7Ac3zFgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEtzN0xmWXB3d3lDalJZUk1RbWtDQ0oyMjY3ZFo1Y2toZVY3SEtSUlJF
SlkvMS9EOUU3QTAyMTA1Mjg3MjNENjQ2NTI1Q0ZDQjczQTRFQzA3MzdDQzU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q5RTdBMDIxMDUyODcyM0Q2
NDY1MjVDRkNCNzNBNEVDMDczN0NDNTguY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRLczdMZllwd3d5Q2pSWVJNUW1rQ0NKMjI2N2RaNWNraGVWN0hLUlJSRUpZLzEv
MzIzODMwMzEzYTM4NjUzYTNhMmYzMzMyMmQzMTMyMzYyMDNkM2UyMDMxMzEzOTM5
MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoAQCOMA0GCSqGSIb3DQEBCwUAA4IBAQA9uElX/Lp2WBaj
6JT4JrSOl1bFbjghW5K8DXieuqdVz8PMVg+5BhnM5tJFJqS030YoYPt0gaULJrDS
AiFzPcAAgyvcdm6t1oKBPFfGPeRKAlsKqeGF0WCZbdHGqUSCu2x5lUBHFptb4rjj
Gtiyvauf6IV9nw+LUkx50Ib4rwzj2ODiILtedcRMT3tFSZu93aYawjDxa2gvM+Lj
vlc6Z9TZURilYtuLOPhS2yp833cgxTdcprg7xUQWJfqEWgoAi2I1YbrfVmm0EVmH
W9nkMWn5sCdUhTrGBnGlfR6gpkAtgCBfVCL2+UavIGxeYQJA47LttC2TfMGJtkQB
C+9j7KXo
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:28 2025 by rpki-client