Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/0/323830343a353235633a3a2f33332d3333203d3e2030.roa
File: 323830343a353235633a3a2f33332d3333203d3e2030.roa (raw, json)
Hash identifier: BXJenNWGtVqYoENgxZM5z0v3EVNpikX60A70snlfx4U=
Subject key identifier: B7:EF:ED:F0:24:FD:34:89:E7:A4:51:3E:C0:11:34:35:6C:DB:38:0B
Certificate issuer: /CN=7D41250B864CCAC75BADB9B24712630BE0F9C265
Certificate serial: 4EAF63726B2B1D30DBB6183476A218A1F1C297A6
Authority key identifier: 7D:41:25:0B:86:4C:CA:C7:5B:AD:B9:B2:47:12:63:0B:E0:F9:C2:65
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D41250B864CCAC75BADB9B24712630BE0F9C265.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/0/323830343a353235633a3a2f33332d3333203d3e2030.roa
Signing time: Sat 02 Dec 2023 15:46:09 +0000
ROA not before: Sat 02 Dec 2023 15:41:09 +0000
ROA not after: Sat 30 Nov 2024 15:46:09 +0000
asID: 0
IP address blocks: 2804:525c::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:af:63:72:6b:2b:1d:30:db:b6:18:34:76:a2:18:a1:f1:c2:97:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D41250B864CCAC75BADB9B24712630BE0F9C265
Validity
Not Before: Dec 2 15:41:09 2023 GMT
Not After : Nov 30 15:46:09 2024 GMT
Subject: CN=B7EFEDF024FD3489E7A4513EC01134356CDB380B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a2:f5:44:0c:a5:d8:c8:c3:d5:b9:b4:01:86:
ff:61:cb:20:63:cc:1a:1d:6d:24:45:c7:7d:c5:00:
62:ea:19:14:d1:a0:c7:d3:37:e3:10:dc:c6:42:8d:
70:fb:20:47:e5:cb:04:9f:10:5f:72:65:a8:20:d4:
b4:d5:ed:93:a5:24:36:c6:dc:41:58:bb:10:84:9d:
99:b3:1f:d6:57:67:2b:8e:36:e9:13:2a:5a:28:08:
97:52:0a:e8:bc:ba:6c:65:fa:b4:c2:cc:9e:cd:cb:
1d:13:7a:4e:d5:02:2c:44:42:ba:11:63:77:36:61:
b2:47:44:7d:b3:cb:aa:a3:12:82:4d:06:82:ef:31:
4f:23:14:22:d9:87:94:61:0a:d8:53:a4:3a:03:22:
8a:48:20:4f:66:a8:66:cf:46:ea:b4:25:83:02:af:
e7:6d:32:7b:18:bc:b6:28:29:7b:2f:ef:6f:60:6d:
a6:4d:b2:4c:03:42:30:3c:89:fe:5a:86:b6:4a:00:
d9:4a:2a:2c:0e:f1:5f:23:7e:e2:6a:20:56:2a:c6:
92:b6:94:1d:b3:30:54:26:ec:44:06:eb:db:ea:41:
d0:fa:ec:04:ba:5f:e4:8d:c4:32:96:47:dc:76:82:
7d:29:b8:61:ad:88:4c:9d:c7:87:20:58:ec:d7:1d:
1e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:EF:ED:F0:24:FD:34:89:E7:A4:51:3E:C0:11:34:35:6C:DB:38:0B
X509v3 Authority Key Identifier:
keyid:7D:41:25:0B:86:4C:CA:C7:5B:AD:B9:B2:47:12:63:0B:E0:F9:C2:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/0/7D41250B864CCAC75BADB9B24712630BE0F9C265.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D41250B864CCAC75BADB9B24712630BE0F9C265.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/0/323830343a353235633a3a2f33332d3333203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:525c::/33
Signature Algorithm: sha256WithRSAEncryption
6b:18:64:0b:17:f9:9d:08:d0:cf:bf:65:2f:26:10:c1:b2:d0:
ef:03:51:ca:f3:68:96:80:67:91:9f:2d:a2:bf:c9:30:a3:b7:
dd:bf:18:91:9f:33:10:e8:7d:34:9f:40:d5:a4:dd:1a:6d:2d:
43:8f:5c:4d:8d:fb:de:3e:b1:46:94:8f:ff:e3:67:59:1d:06:
62:80:ee:7c:2f:3d:66:d3:0e:12:4e:39:5c:37:e4:32:25:4b:
33:97:33:d8:63:b5:7b:d5:a3:55:76:f6:dd:d3:bf:3c:45:60:
7d:d7:ae:b5:e8:38:c1:2c:69:52:a3:a6:20:25:a0:87:dd:66:
9e:68:c2:8e:f4:df:d4:7f:f3:b0:d1:fd:ea:22:72:c8:e9:c7:
d0:04:fe:c2:24:b1:72:3c:5c:f6:2e:00:a0:f9:d2:04:ba:69:
fe:93:51:a0:3f:6f:84:37:45:bc:70:9a:bd:13:ac:c1:03:11:
d5:64:46:14:6d:88:1c:d3:0e:10:7d:3d:f4:ca:2a:4c:7b:6e:
dc:0a:76:ad:b1:e4:36:73:ef:fd:86:62:01:85:12:0f:63:61:
c1:3d:d7:21:4d:4c:4b:f8:9f:3c:38:89:d0:af:0d:18:17:1e:
56:5e:16:98:1b:c2:e6:34:75:98:72:74:03:fb:80:34:76:a0:
b3:3a:2c:4a
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUTq9jcmsrHTDbthg0dqIYofHCl6YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Q0MTI1MEI4NjRDQ0FDNzVCQURCOUIyNDcxMjYzMEJF
MEY5QzI2NTAeFw0yMzEyMDIxNTQxMDlaFw0yNDExMzAxNTQ2MDlaMDMxMTAvBgNV
BAMTKEI3RUZFREYwMjRGRDM0ODlFN0E0NTEzRUMwMTEzNDM1NkNEQjM4MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClovVEDKXYyMPVubQBhv9hyyBj
zBodbSRFx33FAGLqGRTRoMfTN+MQ3MZCjXD7IEflywSfEF9yZagg1LTV7ZOlJDbG
3EFYuxCEnZmzH9ZXZyuONukTKlooCJdSCui8umxl+rTCzJ7Nyx0Tek7VAixEQroR
Y3c2YbJHRH2zy6qjEoJNBoLvMU8jFCLZh5RhCthTpDoDIopIIE9mqGbPRuq0JYMC
r+dtMnsYvLYoKXsv729gbaZNskwDQjA8if5ahrZKANlKKiwO8V8jfuJqIFYqxpK2
lB2zMFQm7EQG69vqQdD67AS6X+SNxDKWR9x2gn0puGGtiEydx4cgWOzXHR7HAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUt+/t8CT9NInnpFE+wBE0NWzbOAswHwYDVR0j
BBgwFoAUfUElC4ZMysdbrbmyRxJjC+D5wmUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGZhdnBQVVlFdGFEWHp1bUJvQmo0ZmhQVTV2Y21Ld0ozSEJ1cmRlWkJi
b2IvMC83RDQxMjUwQjg2NENDQUM3NUJBREI5QjI0NzEyNjMwQkUwRjlDMjY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdENDEyNTBCODY0Q0NBQzc1
QkFEQjlCMjQ3MTI2MzBCRTBGOUMyNjUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCB
jwYIKwYBBQUHMAuGgYJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRmYXZwUFVZRXRhRFh6dW1Cb0JqNGZoUFU1dmNtS3dKM0hCdXJkZVpCYm9iLzAv
MzIzODMwMzQzYTM1MzIzNTYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzAucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgcoBFJcADANBgkqhkiG9w0BAQsFAAOCAQEAaxhkCxf5nQjQz79lLyYQ
wbLQ7wNRyvNoloBnkZ8tor/JMKO33b8YkZ8zEOh9NJ9A1aTdGm0tQ49cTY373j6x
RpSP/+NnWR0GYoDufC89ZtMOEk45XDfkMiVLM5cz2GO1e9WjVXb23dO/PEVgfdeu
teg4wSxpUqOmICWgh91mnmjCjvTf1H/zsNH96iJyyOnH0AT+wiSxcjxc9i4AoPnS
BLpp/pNRoD9vhDdFvHCavROswQMR1WRGFG2IHNMOEH099MoqTHtu3Ap2rbHkNnPv
/YZiAYUSD2NhwT3XIU1MS/ifPDiJ0K8NGBceVl4WmBvC5jR1mHJ0A/uANHagszos
Sg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org