Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/323830343a313261303a3a2f33322d3332203d3e203631393030.roa
File: 323830343a313261303a3a2f33322d3332203d3e203631393030.roa (raw, json)
Hash identifier: 6Om2W1vuscuq1WyglxmFdV/4EMXlSuDf41lyIQZMzTY=
Subject key identifier: DA:C3:FD:D4:61:40:9A:2F:0A:FC:C3:CB:32:EF:4D:57:61:29:A2:76
Certificate issuer: /CN=7032365C782465DB62283945DC9E72F6BAA6BF0A
Certificate serial: 1F7A86E13B0245A396CE6B32764F47FF99EA15B3
Authority key identifier: 70:32:36:5C:78:24:65:DB:62:28:39:45:DC:9E:72:F6:BA:A6:BF:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7032365C782465DB62283945DC9E72F6BAA6BF0A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/323830343a313261303a3a2f33322d3332203d3e203631393030.roa
Signing time: Tue 17 Dec 2024 17:07:38 +0000
ROA not before: Tue 17 Dec 2024 17:02:38 +0000
ROA not after: Tue 16 Dec 2025 17:07:38 +0000
asID: 61900
IP address blocks: 2804:12a0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:7a:86:e1:3b:02:45:a3:96:ce:6b:32:76:4f:47:ff:99:ea:15:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7032365C782465DB62283945DC9E72F6BAA6BF0A
Validity
Not Before: Dec 17 17:02:38 2024 GMT
Not After : Dec 16 17:07:38 2025 GMT
Subject: CN=DAC3FDD461409A2F0AFCC3CB32EF4D576129A276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:66:ca:51:34:ef:71:41:bf:f8:bc:16:3e:6e:
fc:0b:e3:94:1a:05:18:64:b6:ee:a9:91:8f:5e:4d:
fb:fe:21:ee:b9:13:14:0e:7d:27:d2:a7:8d:21:e0:
c3:b9:c1:74:3a:ef:7c:4e:af:17:ba:f5:70:3e:5e:
e3:72:f9:d2:e8:63:94:cc:02:42:72:e1:47:c5:ce:
3a:08:17:bc:f8:d0:b7:0b:83:c3:a7:a2:39:b1:5d:
cf:3a:46:d9:9f:71:0c:fa:ae:67:09:f9:07:04:e3:
e9:fb:27:92:41:c7:ed:9e:ca:4b:47:c9:5c:89:53:
7a:62:29:2f:51:b5:dd:77:3d:c5:ff:22:82:f2:6f:
32:db:13:24:c0:a4:88:11:3e:da:64:ef:84:5a:dc:
2e:1c:46:27:03:8c:e4:26:9f:62:3c:57:72:03:ee:
5e:d1:43:b7:ab:49:69:2a:ca:d9:f2:3b:05:2f:73:
76:a1:c0:3b:a4:ea:b0:82:39:50:b8:df:2e:06:27:
c8:4f:16:6e:dc:d9:b8:8d:72:70:89:06:0a:99:99:
1a:c9:cd:7d:20:e6:9e:5a:45:35:12:ab:9b:f0:e7:
14:e5:c1:d0:72:f6:20:38:02:6b:05:54:2b:af:a9:
d8:73:c2:db:11:68:af:9a:56:b2:d8:73:7b:12:3b:
22:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C3:FD:D4:61:40:9A:2F:0A:FC:C3:CB:32:EF:4D:57:61:29:A2:76
X509v3 Authority Key Identifier:
keyid:70:32:36:5C:78:24:65:DB:62:28:39:45:DC:9E:72:F6:BA:A6:BF:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/7032365C782465DB62283945DC9E72F6BAA6BF0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7032365C782465DB62283945DC9E72F6BAA6BF0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/323830343a313261303a3a2f33322d3332203d3e203631393030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:12a0::/32
Signature Algorithm: sha256WithRSAEncryption
2b:86:e3:85:a7:cf:f3:05:8f:db:6a:d0:5a:97:ab:98:14:76:
62:70:0f:7c:f3:cd:21:d3:97:63:58:70:28:bd:9d:78:18:fc:
78:70:d7:08:cc:d6:e3:2f:3c:5a:bf:d7:85:56:b3:2a:44:8c:
27:60:ec:43:d2:bb:b0:cb:86:20:6d:90:cb:13:3c:87:8d:4f:
76:47:75:86:7c:6c:af:2a:4e:f8:50:6f:44:67:06:e4:4a:78:
90:d4:02:dc:09:33:39:5d:ce:ee:4d:89:9c:21:a3:4d:f6:ae:
1a:a5:b9:13:7a:08:75:fb:7c:d8:17:32:ed:10:6b:9a:c7:ad:
d1:8a:18:1e:04:1b:f2:af:57:5d:c9:cc:7e:c1:0e:d3:8c:c7:
9f:5e:66:a0:2e:7a:b7:35:98:14:24:98:d7:1c:a8:60:d3:04:
9b:51:7c:19:b8:d4:57:22:67:84:b9:d2:b2:22:6f:8c:b9:c6:
46:ae:e9:12:b9:9a:8c:23:10:15:27:60:2a:41:c2:f5:3b:68:
c9:38:d3:31:07:dd:1f:83:ce:2f:9d:b4:ad:85:2c:34:b2:e1:
b5:09:55:f3:a0:51:17:0e:da:4d:32:2d:57:aa:e5:d7:2f:d6:
ab:61:bd:4d:73:33:b6:e6:01:8b:3d:af:c8:3f:cd:6a:c6:64:
1f:cf:12:cd
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUH3qG4TsCRaOWzmsydk9H/5nqFbMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzAzMjM2NUM3ODI0NjVEQjYyMjgzOTQ1REM5RTcyRjZC
QUE2QkYwQTAeFw0yNDEyMTcxNzAyMzhaFw0yNTEyMTYxNzA3MzhaMDMxMTAvBgNV
BAMTKERBQzNGREQ0NjE0MDlBMkYwQUZDQzNDQjMyRUY0RDU3NjEyOUEyNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGZspRNO9xQb/4vBY+bvwL45Qa
BRhktu6pkY9eTfv+Ie65ExQOfSfSp40h4MO5wXQ673xOrxe69XA+XuNy+dLoY5TM
AkJy4UfFzjoIF7z40LcLg8OnojmxXc86RtmfcQz6rmcJ+QcE4+n7J5JBx+2eyktH
yVyJU3piKS9Rtd13PcX/IoLybzLbEyTApIgRPtpk74Ra3C4cRicDjOQmn2I8V3ID
7l7RQ7erSWkqytnyOwUvc3ahwDuk6rCCOVC43y4GJ8hPFm7c2biNcnCJBgqZmRrJ
zX0g5p5aRTUSq5vw5xTlwdBy9iA4AmsFVCuvqdhzwtsRaK+aVrLYc3sSOyKTAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU2sP91GFAmi8K/MPLMu9NV2EponYwHwYDVR0j
BBgwFoAUcDI2XHgkZdtiKDlF3J5y9rqmvwowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG80MTRyOGtKWmloUURDdHBMakhFUm1QamN5anB4UFV5d2FSaDllaGNQ
SlgvMC83MDMyMzY1Qzc4MjQ2NURCNjIyODM5NDVEQzlFNzJGNkJBQTZCRjBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcwMzIzNjVDNzgyNDY1REI2
MjI4Mzk0NURDOUU3MkY2QkFBNkJGMEEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRvNDE0cjhrSlppaFFEQ3RwTGpIRVJtUGpjeWpweFBVeXdhUmg5ZWhjUEpYLzAv
MzIzODMwMzQzYTMxMzI2MTMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzYzMTM5
MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEEqAwDQYJKoZIhvcNAQELBQADggEBACuG44Wnz/MF
j9tq0FqXq5gUdmJwD3zzzSHTl2NYcCi9nXgY/Hhw1wjM1uMvPFq/14VWsypEjCdg
7EPSu7DLhiBtkMsTPIeNT3ZHdYZ8bK8qTvhQb0RnBuRKeJDUAtwJMzldzu5NiZwh
o032rhqluRN6CHX7fNgXMu0Qa5rHrdGKGB4EG/KvV13JzH7BDtOMx59eZqAuerc1
mBQkmNccqGDTBJtRfBm41FciZ4S50rIib4y5xkau6RK5mowjEBUnYCpBwvU7aMk4
0zEH3R+Dzi+dtK2FLDSy4bUJVfOgURcO2k0yLVeq5dcv1qthvU1zM7bmAYs9r8g/
zWrGZB/PEs0=
-----END CERTIFICATE-----
Generated at Tue Apr 8 22:23:23 2025 by rpki-client