Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/323830343a376133633a633030303a3a2f33342d3334203d3e20323731333537.roa
File: 323830343a376133633a633030303a3a2f33342d3334203d3e20323731333537.roa (raw, json)
Hash identifier: SS0zYJmUeTVQz7z4n04rjm9z+dqQEF7b5bNPzvQcDIs=
Subject key identifier: D6:FC:31:CF:45:57:29:E5:FA:07:54:D8:6E:4E:90:D5:16:4F:EA:50
Certificate issuer: /CN=557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A
Certificate serial: 100E7F35751F750EDB88162B02A6AB9A2CC23ADC
Authority key identifier: 55:7B:9A:FE:2B:83:AC:C4:BF:FA:14:90:30:06:7D:9D:FC:5A:E3:1A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/323830343a376133633a633030303a3a2f33342d3334203d3e20323731333537.roa
Signing time: Tue 24 Oct 2023 14:35:28 +0000
ROA not before: Tue 24 Oct 2023 14:30:28 +0000
ROA not after: Tue 22 Oct 2024 14:35:28 +0000
asID: 271357
IP address blocks: 2804:7a3c:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:0e:7f:35:75:1f:75:0e:db:88:16:2b:02:a6:ab:9a:2c:c2:3a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A
Validity
Not Before: Oct 24 14:30:28 2023 GMT
Not After : Oct 22 14:35:28 2024 GMT
Subject: CN=D6FC31CF455729E5FA0754D86E4E90D5164FEA50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:13:f9:9a:ae:1b:f9:6b:b9:fd:d2:cc:b3:af:
b2:49:53:97:31:0f:45:5a:03:cc:60:c4:2f:cf:05:
09:60:6b:75:32:e6:11:4d:e7:99:29:17:e3:d5:1d:
d3:0d:c7:fb:a9:5b:62:94:f3:60:0f:c2:ac:0e:8f:
86:4b:25:3f:7d:a2:ff:1e:48:10:d4:fb:ff:ce:b1:
fc:4f:b3:4b:92:35:79:b6:b0:a0:bb:cf:cc:c7:1a:
94:c0:41:60:ff:48:07:db:f9:fd:ad:03:b7:d8:42:
61:1d:53:77:9e:72:f8:86:f4:d9:e6:74:d5:07:44:
b1:87:82:5d:c2:e2:2c:35:54:1e:b6:b8:dd:0f:8c:
6a:74:4e:c3:31:fc:c1:ea:34:37:22:10:76:1e:ff:
7d:9c:39:8a:b8:7a:b9:f3:45:dd:df:e8:56:28:45:
3a:18:6b:b6:e4:cb:07:88:f2:1b:02:98:7e:35:f2:
4b:8e:35:0a:51:d1:e9:fb:6c:78:ef:bf:b4:75:34:
3a:63:d9:f7:23:9d:fc:58:76:1d:04:6c:14:97:da:
5a:eb:54:e6:1d:b3:b5:8b:1b:73:f9:3c:4e:e3:06:
8f:30:42:b9:11:1f:d0:30:fe:52:46:76:91:ab:8c:
49:53:95:0d:1b:72:66:52:a5:03:c0:13:92:70:83:
34:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FC:31:CF:45:57:29:E5:FA:07:54:D8:6E:4E:90:D5:16:4F:EA:50
X509v3 Authority Key Identifier:
keyid:55:7B:9A:FE:2B:83:AC:C4:BF:FA:14:90:30:06:7D:9D:FC:5A:E3:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/323830343a376133633a633030303a3a2f33342d3334203d3e20323731333537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7a3c:c000::/34
Signature Algorithm: sha256WithRSAEncryption
89:81:c4:64:fa:d6:1b:f8:a9:e7:53:67:78:33:05:69:2c:d4:
cc:11:22:52:1e:aa:00:a8:52:8f:08:f7:c3:ba:60:87:ee:62:
5f:f5:a7:78:47:bb:dd:e8:80:c5:e8:d8:46:a9:f9:ff:b9:b7:
0e:65:1a:bf:bf:32:a0:b0:c9:37:2e:82:07:ae:47:fc:52:0b:
7c:9b:1f:fa:d4:dc:44:0b:db:93:32:82:8b:ed:97:2f:53:8b:
8a:66:50:d8:2d:ca:39:c0:a3:ae:6e:8d:2e:b4:0e:eb:85:d2:
1e:5c:ca:98:3f:2c:66:11:3d:12:87:67:8a:11:8d:75:04:f1:
49:eb:48:75:9a:c6:24:fd:78:8c:17:62:02:53:13:e8:d5:d1:
42:c3:3b:d0:9a:21:57:e9:0f:42:78:65:1e:66:da:64:15:3f:
1a:77:f8:df:60:df:57:c7:ed:9e:bb:eb:00:e6:50:a6:52:f1:
d1:85:61:78:5f:a5:d9:12:4d:d5:a6:f7:7f:01:ea:3f:68:91:
31:ee:c0:50:7d:d8:be:65:b5:e1:5b:1e:45:54:a5:f3:d4:e9:
7b:3c:1b:a4:cf:82:d2:ba:78:f3:5b:8d:97:b0:fc:ea:71:2a:
9d:33:55:48:b5:cb:b7:eb:9d:da:ad:54:eb:51:13:30:7f:8e:
4b:ab:da:02
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUEA5/NXUfdQ7biBYrAqarmizCOtwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTU3QjlBRkUyQjgzQUNDNEJGRkExNDkwMzAwNjdEOURG
QzVBRTMxQTAeFw0yMzEwMjQxNDMwMjhaFw0yNDEwMjIxNDM1MjhaMDMxMTAvBgNV
BAMTKEQ2RkMzMUNGNDU1NzI5RTVGQTA3NTREODZFNEU5MEQ1MTY0RkVBNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiE/marhv5a7n90syzr7JJU5cx
D0VaA8xgxC/PBQlga3Uy5hFN55kpF+PVHdMNx/upW2KU82APwqwOj4ZLJT99ov8e
SBDU+//OsfxPs0uSNXm2sKC7z8zHGpTAQWD/SAfb+f2tA7fYQmEdU3eecviG9Nnm
dNUHRLGHgl3C4iw1VB62uN0PjGp0TsMx/MHqNDciEHYe/32cOYq4ernzRd3f6FYo
RToYa7bkyweI8hsCmH418kuONQpR0en7bHjvv7R1NDpj2fcjnfxYdh0EbBSX2lrr
VOYds7WLG3P5PE7jBo8wQrkRH9Aw/lJGdpGrjElTlQ0bcmZSpQPAE5JwgzTpAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU1vwxz0VXKeX6B1TYbk6Q1RZP6lAwHwYDVR0j
BBgwFoAUVXua/iuDrMS/+hSQMAZ9nfxa4xowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVUxQWNSeHFwbVZaalJnM3ZnU1V3NmVpV0pKYU50MTZldkVTdktEOWVi
U1EvMC81NTdCOUFGRTJCODNBQ0M0QkZGQTE0OTAzMDA2N0Q5REZDNUFFMzFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU1N0I5QUZFMkI4M0FDQzRC
RkZBMTQ5MDMwMDY3RDlERkM1QUUzMUEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVVMUFjUnhxcG1WWmpSZzN2Z1NVdzZlaVdKSmFOdDE2ZXZFU3ZLRDllYlNRLzAv
MzIzODMwMzQzYTM3NjEzMzYzM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMTMzMzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEejzAMA0GCSqGSIb3DQEBCwUA
A4IBAQCJgcRk+tYb+KnnU2d4MwVpLNTMESJSHqoAqFKPCPfDumCH7mJf9ad4R7vd
6IDF6NhGqfn/ubcOZRq/vzKgsMk3LoIHrkf8Ugt8mx/61NxEC9uTMoKL7ZcvU4uK
ZlDYLco5wKOubo0utA7rhdIeXMqYPyxmET0Sh2eKEY11BPFJ60h1msYk/XiMF2IC
UxPo1dFCwzvQmiFX6Q9CeGUeZtpkFT8ad/jfYN9Xx+2eu+sA5lCmUvHRhWF4X6XZ
Ek3Vpvd/Aeo/aJEx7sBQfdi+ZbXhWx5FVKXz1Ol7PBukz4LSunjzW42XsPzqcSqd
M1VItcu3653arVTrURMwf45Lq9oC
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org