Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/323830343a3362633a3a2f33322d313238203d3e203238363234.roa
File: 323830343a3362633a3a2f33322d313238203d3e203238363234.roa (raw, json)
Hash identifier: ORt0o4dQZEZ8IhWCGQ+wGuG2hR+tXnyx+uOWStmpoVI=
Subject key identifier: 4F:80:B0:AB:83:7D:92:A5:2D:51:CF:9C:C8:F3:A1:71:C2:44:49:A0
Certificate issuer: /CN=DDB2DA452C22543D612ECF3051FADB7B717B7886
Certificate serial: 5A24C3FFBBB1E2E8C3F6A2C430EA316D22AEADAF
Authority key identifier: DD:B2:DA:45:2C:22:54:3D:61:2E:CF:30:51:FA:DB:7B:71:7B:78:86
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDB2DA452C22543D612ECF3051FADB7B717B7886.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/323830343a3362633a3a2f33322d313238203d3e203238363234.roa
Signing time: Tue 02 Apr 2024 13:18:42 +0000
ROA not before: Tue 02 Apr 2024 13:13:42 +0000
ROA not after: Tue 01 Apr 2025 13:18:42 +0000
asID: 28624
IP address blocks: 2804:3bc::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:24:c3:ff:bb:b1:e2:e8:c3:f6:a2:c4:30:ea:31:6d:22:ae:ad:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDB2DA452C22543D612ECF3051FADB7B717B7886
Validity
Not Before: Apr 2 13:13:42 2024 GMT
Not After : Apr 1 13:18:42 2025 GMT
Subject: CN=4F80B0AB837D92A52D51CF9CC8F3A171C24449A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d2:09:d3:35:53:d7:7b:cc:0e:5a:87:bc:92:
cb:79:f4:b6:41:f2:dc:19:df:87:36:0e:5b:e9:2f:
b5:f2:91:e1:9d:98:ad:ec:d3:e5:63:49:1b:56:69:
3e:5f:3b:60:a0:6a:b5:d4:89:d2:b3:38:55:9c:ed:
8b:d5:eb:98:4c:38:ad:cb:67:71:21:a8:94:03:2c:
dc:f0:b3:ba:4b:0e:55:76:d1:d5:43:0a:fe:6e:bb:
e5:34:42:39:82:08:39:4f:15:c0:f6:1d:e3:c8:62:
62:c0:8c:3c:a0:44:99:5c:9b:11:ef:64:d0:dc:26:
8a:75:81:35:bd:e5:7b:51:5b:da:b5:2c:59:67:7e:
25:24:68:88:bc:36:4a:55:a0:5b:db:30:53:ea:9c:
6b:38:e3:d2:0d:a7:79:4e:3b:d2:9d:dc:71:2a:e5:
c3:b5:4c:c8:59:9f:ec:07:e1:8a:59:6d:d0:73:d9:
be:61:6a:2b:b8:dd:04:4d:74:71:89:f4:31:3e:b5:
85:95:00:93:ee:ae:bb:3a:58:36:95:cc:af:88:96:
a6:aa:95:4b:bd:8b:c5:a2:60:47:c0:5f:b1:a5:21:
6d:c7:d4:79:fc:11:83:b9:3d:2e:60:77:91:f2:94:
cd:bd:1a:92:9f:06:1e:90:db:34:ad:4a:96:fb:1d:
2b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:80:B0:AB:83:7D:92:A5:2D:51:CF:9C:C8:F3:A1:71:C2:44:49:A0
X509v3 Authority Key Identifier:
keyid:DD:B2:DA:45:2C:22:54:3D:61:2E:CF:30:51:FA:DB:7B:71:7B:78:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/DDB2DA452C22543D612ECF3051FADB7B717B7886.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDB2DA452C22543D612ECF3051FADB7B717B7886.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/323830343a3362633a3a2f33322d313238203d3e203238363234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3bc::/32
Signature Algorithm: sha256WithRSAEncryption
95:29:2d:ad:73:4b:27:b4:82:52:23:d5:6d:ce:03:8c:d2:46:
e7:91:fe:32:36:41:e7:61:c5:82:3c:1f:73:2b:94:08:a0:d4:
7b:dd:3f:09:2b:cd:1d:2e:5f:a1:8c:69:a9:ad:e4:29:ab:5b:
02:65:d5:fa:1a:29:da:b6:ed:8e:9b:e3:98:46:7c:e5:e0:4b:
e3:7d:98:20:61:70:cb:b8:a6:9e:87:18:2c:18:4c:86:ae:eb:
15:be:f7:01:6f:a1:36:38:d1:fd:d6:b5:40:ea:ee:40:fd:1c:
5b:c0:7d:e7:72:89:d9:cb:50:18:35:41:cf:3c:0a:9a:ad:52:
1b:32:3d:61:39:20:c3:04:80:4a:04:e8:1e:60:ee:f4:fa:dc:
c4:80:54:94:2f:4d:c9:f8:79:ae:b6:a8:7c:d3:ed:69:0b:ba:
75:d6:e5:7e:89:db:f5:56:f0:ea:7b:7a:24:e9:d7:47:17:bb:
0f:1a:5a:5b:b5:41:2e:e0:a8:b0:54:6b:3c:a7:0a:0b:1e:bf:
cf:7b:28:78:79:6b:54:06:60:ce:99:ff:1c:d8:4a:dd:17:eb:
56:86:0c:0f:f2:fa:9e:79:21:09:85:24:05:95:52:8e:a0:6a:
9e:e9:e9:3a:fb:66:f1:db:18:50:52:fb:5c:7f:c0:96:60:5c:
aa:21:d6:27
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUWiTD/7ux4ujD9qLEMOoxbSKura8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRERCMkRBNDUyQzIyNTQzRDYxMkVDRjMwNTFGQURCN0I3
MTdCNzg4NjAeFw0yNDA0MDIxMzEzNDJaFw0yNTA0MDExMzE4NDJaMDMxMTAvBgNV
BAMTKDRGODBCMEFCODM3RDkyQTUyRDUxQ0Y5Q0M4RjNBMTcxQzI0NDQ5QTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq0gnTNVPXe8wOWoe8kst59LZB
8twZ34c2DlvpL7XykeGdmK3s0+VjSRtWaT5fO2CgarXUidKzOFWc7YvV65hMOK3L
Z3EhqJQDLNzws7pLDlV20dVDCv5uu+U0QjmCCDlPFcD2HePIYmLAjDygRJlcmxHv
ZNDcJop1gTW95XtRW9q1LFlnfiUkaIi8NkpVoFvbMFPqnGs449INp3lOO9Kd3HEq
5cO1TMhZn+wH4YpZbdBz2b5haiu43QRNdHGJ9DE+tYWVAJPurrs6WDaVzK+Ilqaq
lUu9i8WiYEfAX7GlIW3H1Hn8EYO5PS5gd5HylM29GpKfBh6Q2zStSpb7HSvVAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUT4Cwq4N9kqUtUc+cyPOhccJESaAwHwYDVR0j
BBgwFoAU3bLaRSwiVD1hLs8wUfrbe3F7eIYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUxjNmR5OWl3d1d0MmE4VzNBcXhhN21lNDRVRzJ2b21nZ000Wm11MlF2
S3EvMC9EREIyREE0NTJDMjI1NDNENjEyRUNGMzA1MUZBREI3QjcxN0I3ODg2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0REQjJEQTQ1MkMyMjU0M0Q2
MTJFQ0YzMDUxRkFEQjdCNzE3Qjc4ODYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVMYzZkeTlpd3dXdDJhOFczQXF4YTdtZTQ0VUcydm9tZ2dNNFptdTJRdktxLzAv
MzIzODMwMzQzYTMzNjI2MzNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzIzODM2
MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEA7wwDQYJKoZIhvcNAQELBQADggEBAJUpLa1zSye0
glIj1W3OA4zSRueR/jI2QedhxYI8H3MrlAig1HvdPwkrzR0uX6GMaamt5CmrWwJl
1foaKdq27Y6b45hGfOXgS+N9mCBhcMu4pp6HGCwYTIau6xW+9wFvoTY40f3WtUDq
7kD9HFvAfedyidnLUBg1Qc88CpqtUhsyPWE5IMMEgEoE6B5g7vT63MSAVJQvTcn4
ea62qHzT7WkLunXW5X6J2/VW8Op7eiTp10cXuw8aWlu1QS7gqLBUazynCgsev897
KHh5a1QGYM6Z/xzYSt0X61aGDA/y+p55IQmFJAWVUo6gap7p6Tr7ZvHbGFBS+1x/
wJZgXKoh1ic=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org