Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/323830343a3462633a3a2f33322d3332203d3e20323632343632.roa
File: 323830343a3462633a3a2f33322d3332203d3e20323632343632.roa (raw, json)
Hash identifier: NuNKsu2UINYtbx6niejf+E4XCeJViiaIUAdQS5JNImw=
Subject key identifier: D2:D9:59:E4:5E:16:A9:9C:3B:50:46:E1:C7:54:E3:04:92:29:C9:12
Certificate issuer: /CN=2DFCA0403E5CA09E3F5AF4BA63E2CDFDEBA0032D
Certificate serial: 05E3959F82DBE2F57C137CB23D4CD552949F3F74
Authority key identifier: 2D:FC:A0:40:3E:5C:A0:9E:3F:5A:F4:BA:63:E2:CD:FD:EB:A0:03:2D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DFCA0403E5CA09E3F5AF4BA63E2CDFDEBA0032D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/323830343a3462633a3a2f33322d3332203d3e20323632343632.roa
Signing time: Wed 27 Sep 2023 23:52:40 +0000
ROA not before: Wed 27 Sep 2023 23:47:40 +0000
ROA not after: Wed 25 Sep 2024 23:52:40 +0000
asID: 262462
IP address blocks: 2804:4bc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:e3:95:9f:82:db:e2:f5:7c:13:7c:b2:3d:4c:d5:52:94:9f:3f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DFCA0403E5CA09E3F5AF4BA63E2CDFDEBA0032D
Validity
Not Before: Sep 27 23:47:40 2023 GMT
Not After : Sep 25 23:52:40 2024 GMT
Subject: CN=D2D959E45E16A99C3B5046E1C754E3049229C912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a8:89:14:3e:b1:77:b8:b7:4d:96:d7:42:89:
51:27:f2:83:f3:55:b5:50:a0:56:24:52:e7:bb:69:
db:7c:07:81:46:99:61:f4:05:20:2f:45:9e:7d:8c:
44:03:65:cc:a1:4c:a7:65:a7:d0:7a:8d:ee:11:8a:
39:68:2d:4b:23:4b:6a:34:29:ce:45:d7:d9:3c:db:
13:1a:00:3b:79:4f:19:03:f3:50:1a:54:5d:2f:bc:
a9:cc:b6:d3:7d:74:79:b1:15:a8:05:4d:57:0b:80:
a6:98:83:f4:30:7b:1f:3b:a0:5a:1f:67:a7:53:6b:
fe:83:28:38:1f:a4:b6:2c:e2:03:fd:c0:47:2e:b7:
7b:83:bf:8c:61:ef:62:56:60:ab:41:0e:0d:4b:bb:
19:0f:44:c3:88:96:07:6d:3e:cb:8d:47:1b:f5:a8:
72:1d:91:df:03:ba:e3:dd:8b:26:48:f3:61:99:62:
a3:dd:56:51:33:0f:a8:e2:72:ba:82:32:0b:95:a8:
b3:4e:54:72:d3:2a:bc:d3:ce:e5:c2:ce:d6:d6:bf:
cb:84:9f:af:70:e0:d0:56:47:d9:77:89:7b:8d:cc:
1b:c6:17:65:a2:59:b0:57:33:79:a1:3c:83:62:45:
86:08:a2:fe:a8:91:00:a8:fe:da:76:2b:65:eb:85:
92:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D9:59:E4:5E:16:A9:9C:3B:50:46:E1:C7:54:E3:04:92:29:C9:12
X509v3 Authority Key Identifier:
keyid:2D:FC:A0:40:3E:5C:A0:9E:3F:5A:F4:BA:63:E2:CD:FD:EB:A0:03:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/2DFCA0403E5CA09E3F5AF4BA63E2CDFDEBA0032D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DFCA0403E5CA09E3F5AF4BA63E2CDFDEBA0032D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/323830343a3462633a3a2f33322d3332203d3e20323632343632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4bc::/32
Signature Algorithm: sha256WithRSAEncryption
77:3a:78:38:40:bc:32:ce:64:9e:c8:ea:37:bb:36:32:47:36:
b5:8a:19:a4:65:48:7b:07:82:93:7a:e5:5a:71:6a:37:79:15:
13:9d:58:5f:ca:82:1a:6f:8b:0e:ad:0d:fa:d6:c0:fd:cd:9a:
b2:7c:0f:26:fc:cf:8e:89:c1:0f:38:83:fe:d3:94:00:64:bb:
c0:aa:67:56:45:99:90:6d:52:4f:44:c2:4f:59:45:85:d4:d9:
76:c6:eb:62:2d:19:2e:56:36:45:1e:a3:e2:ad:2d:d8:60:0a:
67:e9:e6:47:02:7e:da:81:f0:76:b7:cf:fa:a0:7b:d4:ac:4b:
a0:9f:66:53:1e:32:90:8b:46:47:9d:c0:10:5a:a1:c4:31:02:
77:30:80:22:7c:69:e0:59:6e:f3:83:dd:6b:d9:fe:22:46:52:
3d:66:7e:73:06:4f:e0:fc:e7:87:ca:c1:b1:74:e8:c5:dc:71:
ef:6e:44:84:4a:c8:71:2e:10:83:1b:83:40:13:f6:cf:76:1d:
9d:7b:39:99:3b:49:20:cb:26:79:e5:24:86:80:18:57:1e:8a:
1f:81:26:34:55:71:cd:6f:22:1a:9b:19:da:7d:f9:fc:ea:c9:
39:39:59:f4:48:78:85:d6:8f:7b:b6:a2:35:2e:37:fe:3e:a7:
9a:f4:91:bd
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUBeOVn4Lb4vV8E3yyPUzVUpSfP3QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkRGQ0EwNDAzRTVDQTA5RTNGNUFGNEJBNjNFMkNERkRF
QkEwMDMyRDAeFw0yMzA5MjcyMzQ3NDBaFw0yNDA5MjUyMzUyNDBaMDMxMTAvBgNV
BAMTKEQyRDk1OUU0NUUxNkE5OUMzQjUwNDZFMUM3NTRFMzA0OTIyOUM5MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/qIkUPrF3uLdNltdCiVEn8oPz
VbVQoFYkUue7adt8B4FGmWH0BSAvRZ59jEQDZcyhTKdlp9B6je4RijloLUsjS2o0
Kc5F19k82xMaADt5TxkD81AaVF0vvKnMttN9dHmxFagFTVcLgKaYg/Qwex87oFof
Z6dTa/6DKDgfpLYs4gP9wEcut3uDv4xh72JWYKtBDg1LuxkPRMOIlgdtPsuNRxv1
qHIdkd8DuuPdiyZI82GZYqPdVlEzD6jicrqCMguVqLNOVHLTKrzTzuXCztbWv8uE
n69w4NBWR9l3iXuNzBvGF2WiWbBXM3mhPINiRYYIov6okQCo/tp2K2XrhZLrAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU0tlZ5F4WqZw7UEbhx1TjBJIpyRIwHwYDVR0j
BBgwFoAULfygQD5coJ4/WvS6Y+LN/eugAy0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFpvSE1zUkRBMkdNQjRTVVJkcmk5Y29GblBCUUJHNWVpaEtZZ2hGbWJu
VTQvMC8yREZDQTA0MDNFNUNBMDlFM0Y1QUY0QkE2M0UyQ0RGREVCQTAwMzJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJERkNBMDQwM0U1Q0EwOUUz
RjVBRjRCQTYzRTJDREZERUJBMDAzMkQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRab0hNc1JEQTJHTUI0U1VSZHJpOWNvRm5QQlFCRzVlaWhLWWdoRm1iblU0LzAv
MzIzODMwMzQzYTM0NjI2MzNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMjM0
MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEBLwwDQYJKoZIhvcNAQELBQADggEBAHc6eDhAvDLO
ZJ7I6je7NjJHNrWKGaRlSHsHgpN65Vpxajd5FROdWF/Kghpviw6tDfrWwP3NmrJ8
Dyb8z46JwQ84g/7TlABku8CqZ1ZFmZBtUk9Ewk9ZRYXU2XbG62ItGS5WNkUeo+Kt
LdhgCmfp5kcCftqB8Ha3z/qge9SsS6CfZlMeMpCLRkedwBBaocQxAncwgCJ8aeBZ
bvOD3WvZ/iJGUj1mfnMGT+D854fKwbF06MXcce9uRIRKyHEuEIMbg0AT9s92HZ17
OZk7SSDLJnnlJIaAGFceih+BJjRVcc1vIhqbGdp9+fzqyTk5WfRIeIXWj3u2ojUu
N/4+p5r0kb0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org