Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/323830343a363538303a633030303a3a2f33342d3334203d3e20323639343935.roa
File: 323830343a363538303a633030303a3a2f33342d3334203d3e20323639343935.roa (raw, json)
Hash identifier: AK+V9XNTy23qnBi75QMgtJI+Z1yhoOT+Fj9IxFiDIWg=
Subject key identifier: 57:F6:CA:8E:43:31:59:0C:0F:42:97:44:D6:3A:E0:55:68:5E:1C:E0
Certificate issuer: /CN=9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB
Certificate serial: 2E4D7513F095950451FB5338FFE4EAE032873D51
Authority key identifier: 9F:E3:B7:F3:F1:B2:F9:BC:01:D0:2D:F1:2E:5D:31:AA:14:E0:60:DB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/323830343a363538303a633030303a3a2f33342d3334203d3e20323639343935.roa
Signing time: Tue 12 Mar 2024 14:08:33 +0000
ROA not before: Tue 12 Mar 2024 14:03:33 +0000
ROA not after: Tue 11 Mar 2025 14:08:33 +0000
asID: 269495
IP address blocks: 2804:6580:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:4d:75:13:f0:95:95:04:51:fb:53:38:ff:e4:ea:e0:32:87:3d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB
Validity
Not Before: Mar 12 14:03:33 2024 GMT
Not After : Mar 11 14:08:33 2025 GMT
Subject: CN=57F6CA8E4331590C0F429744D63AE055685E1CE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:85:d6:60:46:82:51:d8:80:79:9c:9e:49:81:
a9:3e:ae:4f:9d:ec:a0:4f:3d:fc:8e:fa:2f:c5:60:
e5:fc:a8:e2:6d:04:ed:0e:a9:90:af:49:07:8a:67:
ac:56:d4:55:01:ec:7c:98:70:42:5f:ea:11:93:6b:
ed:19:3b:d3:d8:6f:d2:e8:91:b5:60:b1:5c:55:9a:
d7:97:d0:40:b6:0e:32:8b:9d:a3:c4:bf:92:ee:a4:
dc:82:41:2a:41:e1:98:86:11:10:5c:f0:7b:04:dc:
6e:9d:88:db:2a:52:11:fb:23:1e:b9:b8:e3:a8:31:
13:3c:31:08:42:b7:5e:00:93:84:a8:be:da:79:dc:
0a:df:1e:16:04:e5:a7:5e:89:76:92:0f:89:20:1e:
bc:02:1b:db:4c:fd:d7:74:33:2d:32:01:4e:1d:5d:
a6:1e:0e:c4:70:4f:c1:84:c7:95:ce:2a:b2:ff:2c:
4e:e6:67:09:4a:12:da:c2:d5:1d:c3:4e:d2:0a:39:
78:d7:b1:34:dd:d2:89:5a:5d:a6:76:3e:1e:1c:35:
54:d2:c0:b0:42:d3:89:4a:40:0b:a0:b4:f9:7d:78:
57:a6:15:0d:48:5a:9b:53:61:36:d1:a9:ec:15:6e:
81:8c:8b:74:4a:e6:0d:33:39:b0:ad:d5:4d:14:7d:
af:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F6:CA:8E:43:31:59:0C:0F:42:97:44:D6:3A:E0:55:68:5E:1C:E0
X509v3 Authority Key Identifier:
keyid:9F:E3:B7:F3:F1:B2:F9:BC:01:D0:2D:F1:2E:5D:31:AA:14:E0:60:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/323830343a363538303a633030303a3a2f33342d3334203d3e20323639343935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6580:c000::/34
Signature Algorithm: sha256WithRSAEncryption
b3:d9:28:e6:45:ee:36:73:e3:e3:72:56:1e:5d:e1:b1:2d:ca:
d4:c0:8e:d7:70:50:c2:85:7c:99:33:96:4f:a6:04:6e:91:08:
ed:61:7e:86:4c:39:40:50:65:05:1b:dc:0d:59:51:1d:57:9f:
63:91:5b:1e:61:97:c0:51:32:8f:f7:67:b6:b5:31:3f:16:70:
45:ee:2c:01:75:10:a6:8b:13:b4:a0:96:b8:cd:8f:c1:a5:cb:
73:80:74:33:05:4f:57:08:37:be:d3:52:01:b0:26:2d:26:7b:
82:fb:40:28:b2:cc:ad:82:60:29:1c:77:3b:37:86:28:f5:1e:
4c:ff:fe:57:95:ad:a4:a0:b9:e2:09:68:11:6d:1e:ce:cd:4e:
c1:23:9c:38:4f:7a:74:e5:18:6f:55:5b:54:2f:e1:4e:4f:06:
d4:0b:6c:24:57:4c:3d:68:f2:af:9e:94:b2:f6:d0:4f:d9:97:
5c:f3:c0:dc:d1:82:7a:7d:26:8b:fa:2c:4b:22:a1:c5:b8:e3:
b4:42:69:df:5c:5f:f4:61:4b:50:a2:d3:22:41:a2:2c:96:30:
78:a1:b3:27:4e:07:5a:ff:6d:ed:bf:d2:84:56:79:65:2f:ca:
41:7a:67:b1:9a:e7:4b:b3:f5:9f:7e:84:f1:aa:34:fa:3f:22:
42:3a:ff:f2
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIULk11E/CVlQRR+1M4/+Tq4DKHPVEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUZFM0I3RjNGMUIyRjlCQzAxRDAyREYxMkU1RDMxQUEx
NEUwNjBEQjAeFw0yNDAzMTIxNDAzMzNaFw0yNTAzMTExNDA4MzNaMDMxMTAvBgNV
BAMTKDU3RjZDQThFNDMzMTU5MEMwRjQyOTc0NEQ2M0FFMDU1Njg1RTFDRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwhdZgRoJR2IB5nJ5Jgak+rk+d
7KBPPfyO+i/FYOX8qOJtBO0OqZCvSQeKZ6xW1FUB7HyYcEJf6hGTa+0ZO9PYb9Lo
kbVgsVxVmteX0EC2DjKLnaPEv5LupNyCQSpB4ZiGERBc8HsE3G6diNsqUhH7Ix65
uOOoMRM8MQhCt14Ak4Sovtp53ArfHhYE5adeiXaSD4kgHrwCG9tM/dd0My0yAU4d
XaYeDsRwT8GEx5XOKrL/LE7mZwlKEtrC1R3DTtIKOXjXsTTd0olaXaZ2Ph4cNVTS
wLBC04lKQAugtPl9eFemFQ1IWptTYTbRqewVboGMi3RK5g0zObCt1U0Ufa+9AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUV/bKjkMxWQwPQpdE1jrgVWheHOAwHwYDVR0j
BBgwFoAUn+O38/Gy+bwB0C3xLl0xqhTgYNswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG5KUWtuNUFQdDJnSzJaS1QxRlhWTU4yYXhqdWpxUHJBZzhxWHM1dFJq
aHIvMC85RkUzQjdGM0YxQjJGOUJDMDFEMDJERjEyRTVEMzFBQTE0RTA2MERCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlGRTNCN0YzRjFCMkY5QkMw
MUQwMkRGMTJFNUQzMUFBMTRFMDYwREIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRuSlFrbjVBUHQyZ0syWktUMUZYVk1OMmF4anVqcVByQWc4cVhzNXRSamhyLzAv
MzIzODMwMzQzYTM2MzUzODMwM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzOTM0MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEZYDAMA0GCSqGSIb3DQEBCwUA
A4IBAQCz2SjmRe42c+PjclYeXeGxLcrUwI7XcFDChXyZM5ZPpgRukQjtYX6GTDlA
UGUFG9wNWVEdV59jkVseYZfAUTKP92e2tTE/FnBF7iwBdRCmixO0oJa4zY/Bpctz
gHQzBU9XCDe+01IBsCYtJnuC+0AossytgmApHHc7N4Yo9R5M//5Xla2koLniCWgR
bR7OzU7BI5w4T3p05RhvVVtUL+FOTwbUC2wkV0w9aPKvnpSy9tBP2Zdc88Dc0YJ6
fSaL+ixLIqHFuOO0QmnfXF/0YUtQotMiQaIsljB4obMnTgda/23tv9KEVnllL8pB
emexmudLs/WffoTxqjT6PyJCOv/y
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org