Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4UBjuvcnxJcFhohnb61SYJEBnW5k5N6odopCeTaSSkMD/0/323830343a3962383a3a2f33322d313238203d3e20323632393836.roa
File: 323830343a3962383a3a2f33322d313238203d3e20323632393836.roa (raw, json)
Hash identifier: maq5EEr9kK39pBEyROf40zVeToy9XZVp5TqOdd/FD/I=
Subject key identifier: B8:AD:73:E2:14:0E:A4:20:90:29:21:74:DB:D0:53:DE:A0:A4:74:68
Certificate issuer: /CN=F3EDC31768BA5DD3FBE74238F1A55E36A0DBFE23
Certificate serial: 60C764FF090C3DFFC4F99A7B5363328571C111B7
Authority key identifier: F3:ED:C3:17:68:BA:5D:D3:FB:E7:42:38:F1:A5:5E:36:A0:DB:FE:23
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3EDC31768BA5DD3FBE74238F1A55E36A0DBFE23.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4UBjuvcnxJcFhohnb61SYJEBnW5k5N6odopCeTaSSkMD/0/323830343a3962383a3a2f33322d313238203d3e20323632393836.roa
Signing time: Thu 11 Jan 2024 18:33:06 +0000
ROA not before: Thu 11 Jan 2024 18:28:06 +0000
ROA not after: Thu 09 Jan 2025 18:33:06 +0000
asID: 262986
IP address blocks: 2804:9b8::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:c7:64:ff:09:0c:3d:ff:c4:f9:9a:7b:53:63:32:85:71:c1:11:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3EDC31768BA5DD3FBE74238F1A55E36A0DBFE23
Validity
Not Before: Jan 11 18:28:06 2024 GMT
Not After : Jan 9 18:33:06 2025 GMT
Subject: CN=B8AD73E2140EA42090292174DBD053DEA0A47468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:00:e2:51:cb:d6:38:cc:f7:63:ed:60:be:31:
c0:c9:5d:b7:b2:f3:e6:90:36:e0:24:60:57:2e:7e:
48:97:cc:7f:d0:ca:19:32:81:e0:1c:9f:16:9d:4a:
42:99:6c:d6:d7:95:94:eb:12:70:b4:9c:35:64:79:
32:64:bb:a9:d9:94:eb:85:1f:09:6f:0b:51:d7:e8:
55:45:b8:ff:f4:0c:09:ba:19:d0:5d:f5:03:83:b7:
e6:18:a7:d1:1e:8d:31:0c:a8:bf:b9:20:02:4f:c5:
8d:91:32:fc:e1:b6:8d:37:c3:22:64:3a:a1:e3:e8:
75:2b:71:ad:d1:61:2d:21:34:97:03:d6:da:31:30:
3b:52:83:00:1b:5f:03:df:47:c8:0d:b2:37:72:7a:
61:54:31:2f:db:28:33:17:a4:68:48:60:ad:97:bb:
28:92:68:8c:61:cf:7f:f3:86:d3:9c:10:6e:78:39:
72:19:82:db:fa:3c:ad:4b:ed:02:dc:cf:01:ed:22:
19:98:3d:75:99:99:dc:23:cd:ea:38:a8:1d:f8:01:
16:b7:47:47:b9:13:dd:14:62:6d:6c:72:83:48:1a:
96:42:bb:23:b2:96:e7:76:7d:d5:52:ab:4f:ba:5f:
c6:99:ea:fc:10:16:d4:a9:48:ed:41:7b:4d:50:e2:
b9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AD:73:E2:14:0E:A4:20:90:29:21:74:DB:D0:53:DE:A0:A4:74:68
X509v3 Authority Key Identifier:
keyid:F3:ED:C3:17:68:BA:5D:D3:FB:E7:42:38:F1:A5:5E:36:A0:DB:FE:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4UBjuvcnxJcFhohnb61SYJEBnW5k5N6odopCeTaSSkMD/0/F3EDC31768BA5DD3FBE74238F1A55E36A0DBFE23.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3EDC31768BA5DD3FBE74238F1A55E36A0DBFE23.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4UBjuvcnxJcFhohnb61SYJEBnW5k5N6odopCeTaSSkMD/0/323830343a3962383a3a2f33322d313238203d3e20323632393836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:9b8::/32
Signature Algorithm: sha256WithRSAEncryption
14:6e:41:b8:77:b9:46:5a:df:6d:bb:4d:8a:7d:ce:99:31:5a:
97:93:76:99:e5:d8:1c:c2:5e:59:66:4f:ea:17:3c:c0:84:e1:
b2:6e:89:a1:26:eb:ee:59:21:e2:80:37:60:4b:d3:1a:d7:85:
ca:c5:2b:6c:c1:0d:c1:3c:c4:62:50:41:48:8b:e3:de:b0:44:
6b:38:7b:dc:ff:5f:04:fb:d3:42:0b:19:7e:74:09:d8:6e:d3:
0c:ff:8c:ce:17:87:e6:ee:ef:cb:26:19:56:07:bc:dd:1c:8f:
f7:d1:79:2d:6d:ec:5a:71:9a:ff:24:73:cd:24:f7:0a:c4:88:
5a:c2:bb:a6:4c:0e:f3:23:05:28:8c:a5:04:28:90:4c:b5:52:
bd:05:f3:3f:92:1b:a7:cd:69:44:2f:0d:e9:41:8d:8c:47:87:
62:e3:02:16:e5:61:bd:8e:8d:e5:31:5b:47:41:d8:27:4d:c4:
3c:6e:b4:92:9e:98:49:1f:16:8e:5e:2f:4e:27:fb:7d:72:99:
aa:05:fc:85:52:e8:4c:f1:c3:13:93:56:9a:f7:fe:02:55:49:
2b:0f:f0:89:3e:b3:d4:63:10:51:5f:f7:29:d8:c2:30:db:e7:
e8:6f:7c:0f:a8:f3:9f:ac:0c:29:8d:cd:b6:00:d8:0c:1e:0f:
cb:58:f0:56
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUYMdk/wkMPf/E+Zp7U2MyhXHBEbcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjNFREMzMTc2OEJBNUREM0ZCRTc0MjM4RjFBNTVFMzZB
MERCRkUyMzAeFw0yNDAxMTExODI4MDZaFw0yNTAxMDkxODMzMDZaMDMxMTAvBgNV
BAMTKEI4QUQ3M0UyMTQwRUE0MjA5MDI5MjE3NERCRDA1M0RFQTBBNDc0NjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBAOJRy9Y4zPdj7WC+McDJXbey
8+aQNuAkYFcufkiXzH/QyhkygeAcnxadSkKZbNbXlZTrEnC0nDVkeTJku6nZlOuF
HwlvC1HX6FVFuP/0DAm6GdBd9QODt+YYp9EejTEMqL+5IAJPxY2RMvzhto03wyJk
OqHj6HUrca3RYS0hNJcD1toxMDtSgwAbXwPfR8gNsjdyemFUMS/bKDMXpGhIYK2X
uyiSaIxhz3/zhtOcEG54OXIZgtv6PK1L7QLczwHtIhmYPXWZmdwjzeo4qB34ARa3
R0e5E90UYm1scoNIGpZCuyOylud2fdVSq0+6X8aZ6vwQFtSpSO1Be01Q4rkrAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUuK1z4hQOpCCQKSF029BT3qCkdGgwHwYDVR0j
BBgwFoAU8+3DF2i6XdP750I48aVeNqDb/iMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFVCanV2Y254SmNGaG9obmI2MVNZSkVCblc1azVONm9kb3BDZVRhU1Nr
TUQvMC9GM0VEQzMxNzY4QkE1REQzRkJFNzQyMzhGMUE1NUUzNkEwREJGRTIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YzRURDMzE3NjhCQTVERDNG
QkU3NDIzOEYxQTU1RTM2QTBEQkZFMjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRVQmp1dmNueEpjRmhvaG5iNjFTWUpFQm5XNWs1TjZvZG9wQ2VUYVNTa01ELzAv
MzIzODMwMzQzYTM5NjIzODNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzIzNjMy
MzkzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQJuDANBgkqhkiG9w0BAQsFAAOCAQEAFG5BuHe5
RlrfbbtNin3OmTFal5N2meXYHMJeWWZP6hc8wIThsm6JoSbr7lkh4oA3YEvTGteF
ysUrbMENwTzEYlBBSIvj3rBEazh73P9fBPvTQgsZfnQJ2G7TDP+MzheH5u7vyyYZ
Vge83RyP99F5LW3sWnGa/yRzzST3CsSIWsK7pkwO8yMFKIylBCiQTLVSvQXzP5Ib
p81pRC8N6UGNjEeHYuMCFuVhvY6N5TFbR0HYJ03EPG60kp6YSR8Wjl4vTif7fXKZ
qgX8hVLoTPHDE5NWmvf+AlVJKw/wiT6z1GMQUV/3KdjCMNvn6G98D6jzn6wMKY3N
tgDYDB4Py1jwVg==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:46:53 2025 by rpki-client