Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5GYgLBHiiKr9vYiRx2GUhnVeY5Nc7VaGycEzqwEQhgF/0/323830343a373233633a3a2f33322d313238203d3e20323730383431.roa
File: 323830343a373233633a3a2f33322d313238203d3e20323730383431.roa (raw, json)
Hash identifier: QPg2MQIz6qMClCBUVKhgJOL8OTRxUIdf/TWu+IaZL00=
Subject key identifier: CD:5E:B8:20:C7:BB:12:91:CB:FE:4D:03:D4:A7:29:58:D4:64:EF:90
Certificate issuer: /CN=D8F49F3218C4D5667C4F19919B730D15A529FFDA
Certificate serial: 1DFE7DD343EAECE3A0E0242216D01C1C66BA8F44
Authority key identifier: D8:F4:9F:32:18:C4:D5:66:7C:4F:19:91:9B:73:0D:15:A5:29:FF:DA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8F49F3218C4D5667C4F19919B730D15A529FFDA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5GYgLBHiiKr9vYiRx2GUhnVeY5Nc7VaGycEzqwEQhgF/0/323830343a373233633a3a2f33322d313238203d3e20323730383431.roa
Signing time: Sat 30 Sep 2023 15:03:58 +0000
ROA not before: Sat 30 Sep 2023 14:58:58 +0000
ROA not after: Sat 28 Sep 2024 15:03:58 +0000
asID: 270841
IP address blocks: 2804:723c::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:fe:7d:d3:43:ea:ec:e3:a0:e0:24:22:16:d0:1c:1c:66:ba:8f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8F49F3218C4D5667C4F19919B730D15A529FFDA
Validity
Not Before: Sep 30 14:58:58 2023 GMT
Not After : Sep 28 15:03:58 2024 GMT
Subject: CN=CD5EB820C7BB1291CBFE4D03D4A72958D464EF90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3b:a6:84:41:32:82:26:74:84:2f:07:dd:c3:
b6:4f:01:eb:52:49:07:86:f0:34:69:14:14:9e:79:
5e:5d:12:c5:ea:f5:15:e1:a7:d3:56:87:d5:e5:c0:
0c:a8:27:e6:8a:c4:2d:42:cc:1d:89:8e:b7:57:32:
75:af:15:e4:46:50:20:db:82:a2:b8:44:d6:23:e5:
8c:db:79:83:15:6b:22:40:e9:52:41:f6:3a:f2:56:
b6:d7:9e:59:99:97:77:8d:66:6e:a0:ba:00:3e:bb:
e2:10:cd:fa:f8:db:43:ff:10:57:19:fe:a5:55:6d:
8b:c1:ab:09:04:b9:e0:1c:5d:db:5f:b8:1e:4d:88:
f3:ef:ae:79:28:d2:5f:00:5f:e7:b1:d2:79:c9:6c:
e6:25:62:5c:61:e3:25:fc:49:3a:5a:33:3f:9b:89:
af:7b:64:b0:39:50:46:b5:ac:a7:a8:fc:a1:25:cc:
33:79:99:e0:ae:bc:47:42:fb:d0:74:31:10:e7:ce:
64:0c:b4:0e:2b:15:88:be:11:f8:1c:d4:3f:ad:af:
16:7c:65:8a:ac:aa:42:5d:da:6c:85:02:bc:a1:ec:
fe:a8:fc:2d:1c:22:e4:5a:4e:31:1f:c2:40:ac:1e:
e7:f5:e2:2f:ce:da:35:7a:6d:a2:75:06:60:d0:3c:
9b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5E:B8:20:C7:BB:12:91:CB:FE:4D:03:D4:A7:29:58:D4:64:EF:90
X509v3 Authority Key Identifier:
keyid:D8:F4:9F:32:18:C4:D5:66:7C:4F:19:91:9B:73:0D:15:A5:29:FF:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5GYgLBHiiKr9vYiRx2GUhnVeY5Nc7VaGycEzqwEQhgF/0/D8F49F3218C4D5667C4F19919B730D15A529FFDA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8F49F3218C4D5667C4F19919B730D15A529FFDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GYgLBHiiKr9vYiRx2GUhnVeY5Nc7VaGycEzqwEQhgF/0/323830343a373233633a3a2f33322d313238203d3e20323730383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:723c::/32
Signature Algorithm: sha256WithRSAEncryption
3a:98:4d:4a:6a:ec:a2:d4:04:9a:d1:89:d1:a5:0c:d5:e3:09:
40:96:3a:ea:7b:b9:c3:d2:de:9c:86:73:f7:3a:c6:61:d7:b3:
58:4f:81:d8:d8:2d:7a:ec:66:a1:ae:86:77:96:a0:30:c7:96:
80:1e:d1:7e:9e:2c:c9:c1:cf:4c:71:00:f6:84:52:34:c6:8a:
d2:85:0a:59:c7:06:63:22:e4:30:bc:a0:70:ec:d7:23:75:33:
ad:ae:61:1e:ce:79:9d:ee:b7:c3:20:3d:d4:e9:cd:42:32:5e:
f5:53:1e:99:8f:27:09:96:c0:ab:26:12:6c:07:55:46:95:e3:
86:d3:0a:ae:c1:2c:ba:67:d8:a0:85:29:9d:62:6c:bc:75:2e:
0b:bd:31:df:b6:78:2b:e7:7f:da:01:10:9a:c3:b1:12:7b:19:
b0:c4:a6:2c:18:75:1e:e1:ba:da:ab:6d:90:60:ca:0d:1c:f6:
04:bd:b9:17:54:d4:c1:32:e0:b9:e4:94:84:a4:c4:6a:33:6b:
91:e5:ba:76:4f:b7:35:a7:b8:21:0c:0c:4a:c4:0d:05:d5:4c:
00:02:2c:ed:2b:38:a7:b2:b9:d7:e6:a5:5f:7d:2c:38:b3:ce:
49:98:6b:b6:30:0f:68:aa:08:d9:54:ef:99:15:2d:1f:72:de:
93:9e:2d:38
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHf5900Pq7OOg4CQiFtAcHGa6j0QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhGNDlGMzIxOEM0RDU2NjdDNEYxOTkxOUI3MzBEMTVB
NTI5RkZEQTAeFw0yMzA5MzAxNDU4NThaFw0yNDA5MjgxNTAzNThaMDMxMTAvBgNV
BAMTKENENUVCODIwQzdCQjEyOTFDQkZFNEQwM0Q0QTcyOTU4RDQ2NEVGOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCO6aEQTKCJnSELwfdw7ZPAetS
SQeG8DRpFBSeeV5dEsXq9RXhp9NWh9XlwAyoJ+aKxC1CzB2JjrdXMnWvFeRGUCDb
gqK4RNYj5YzbeYMVayJA6VJB9jryVrbXnlmZl3eNZm6gugA+u+IQzfr420P/EFcZ
/qVVbYvBqwkEueAcXdtfuB5NiPPvrnko0l8AX+ex0nnJbOYlYlxh4yX8STpaMz+b
ia97ZLA5UEa1rKeo/KElzDN5meCuvEdC+9B0MRDnzmQMtA4rFYi+Efgc1D+trxZ8
ZYqsqkJd2myFAryh7P6o/C0cIuRaTjEfwkCsHuf14i/O2jV6baJ1BmDQPJv3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUzV64IMe7EpHL/k0D1KcpWNRk75AwHwYDVR0j
BBgwFoAU2PSfMhjE1WZ8TxmRm3MNFaUp/9owDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby81R1lnTEJIaWlLcjl2WWlSeDJHVWhuVmVZNU5jN1ZhR3ljRXpxd0VRaGdG
LzAvRDhGNDlGMzIxOEM0RDU2NjdDNEYxOTkxOUI3MzBEMTVBNTI5RkZEQS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9EOEY0OUYzMjE4QzRENTY2N0M0
RjE5OTE5QjczMEQxNUE1MjlGRkRBLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81
R1lnTEJIaWlLcjl2WWlSeDJHVWhuVmVZNU5jN1ZhR3ljRXpxd0VRaGdGLzAvMzIz
ODMwMzQzYTM3MzIzMzYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3MzAz
ODM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB
Af8EETAPMA0EAgACMAcDBQAoBHI8MA0GCSqGSIb3DQEBCwUAA4IBAQA6mE1Kauyi
1ASa0YnRpQzV4wlAljrqe7nD0t6chnP3OsZh17NYT4HY2C167GahroZ3lqAwx5aA
HtF+nizJwc9McQD2hFI0xorShQpZxwZjIuQwvKBw7NcjdTOtrmEeznmd7rfDID3U
6c1CMl71Ux6ZjycJlsCrJhJsB1VGleOG0wquwSy6Z9ighSmdYmy8dS4LvTHftngr
53/aARCaw7ESexmwxKYsGHUe4braq22QYMoNHPYEvbkXVNTBMuC55JSEpMRqM2uR
5bp2T7c1p7ghDAxKxA0F1UwAAiztKzinsrnX5qVffSw4s85JmGu2MA9oqgjZVO+Z
FS0fct6Tni04
-----END CERTIFICATE-----
Generated at Fri Apr 18 02:18:22 2025 by rpki-client