Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5bh78nWKCbsoxzYgiUXPZjTxv2QCqPerpmZ1GqrhmDqf/1/323830343a3839383a3a2f33322d3438203d3e20323632333830.roa
File: 323830343a3839383a3a2f33322d3438203d3e20323632333830.roa (raw, json)
Hash identifier: poXy1iVMEGCql6KRUofBg76WruNwG3Dja6oWqc8/xEk=
Subject key identifier: D8:C0:67:05:75:99:96:3C:17:DC:64:46:81:B4:31:8F:FB:F7:30:DE
Certificate issuer: /CN=D7070BDA8BEE3E41041E7DF68AC2BAD465DF60DE
Certificate serial: 1EA0D5529BE405E675C9F950041D601C25ED4DB0
Authority key identifier: D7:07:0B:DA:8B:EE:3E:41:04:1E:7D:F6:8A:C2:BA:D4:65:DF:60:DE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7070BDA8BEE3E41041E7DF68AC2BAD465DF60DE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5bh78nWKCbsoxzYgiUXPZjTxv2QCqPerpmZ1GqrhmDqf/1/323830343a3839383a3a2f33322d3438203d3e20323632333830.roa
Signing time: Thu 04 Apr 2024 13:49:27 +0000
ROA not before: Thu 04 Apr 2024 13:44:27 +0000
ROA not after: Thu 03 Apr 2025 13:49:27 +0000
asID: 262380
IP address blocks: 2804:898::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:a0:d5:52:9b:e4:05:e6:75:c9:f9:50:04:1d:60:1c:25:ed:4d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7070BDA8BEE3E41041E7DF68AC2BAD465DF60DE
Validity
Not Before: Apr 4 13:44:27 2024 GMT
Not After : Apr 3 13:49:27 2025 GMT
Subject: CN=D8C067057599963C17DC644681B4318FFBF730DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bd:83:59:8b:75:65:2a:10:18:e4:ca:fa:4d:
85:4c:0c:51:80:65:9c:7c:26:44:1a:d7:d2:43:59:
83:e3:3f:82:4c:34:0c:33:73:6f:73:58:4b:e1:ec:
7d:07:e4:cc:49:e7:33:21:7d:bb:20:69:ce:55:2a:
11:a7:42:d4:bb:53:a8:dd:e8:61:c8:61:a5:5f:de:
16:7f:29:fe:5c:8a:c0:3c:48:d2:82:19:d3:e7:29:
5e:e5:be:d7:1e:89:de:23:68:6b:c8:e9:68:10:44:
c5:d4:98:7c:ac:d5:56:db:2d:77:5f:8f:59:51:67:
4b:56:b3:71:c2:e9:8b:5f:32:a7:18:55:5d:f2:41:
84:d7:ed:e4:03:85:17:76:9e:30:44:1f:c5:f7:e8:
f2:0b:11:f8:5e:a3:8a:0c:e6:96:a1:2a:8b:fa:91:
57:da:1d:82:d6:c8:5c:ce:25:2e:8c:ef:61:08:0d:
6c:d7:1d:dc:9b:5f:1d:76:9d:6c:47:11:06:f8:ad:
b0:7c:39:b1:b8:c2:dc:41:93:ad:02:64:b4:45:3d:
80:18:04:56:8c:98:25:f8:6e:86:03:2d:9c:88:ac:
36:fc:f7:c1:01:3d:0f:d0:1a:ed:f1:e8:1c:b8:36:
8b:d5:46:3a:e8:31:f7:d7:4a:f0:bf:30:8b:23:b9:
eb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C0:67:05:75:99:96:3C:17:DC:64:46:81:B4:31:8F:FB:F7:30:DE
X509v3 Authority Key Identifier:
keyid:D7:07:0B:DA:8B:EE:3E:41:04:1E:7D:F6:8A:C2:BA:D4:65:DF:60:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5bh78nWKCbsoxzYgiUXPZjTxv2QCqPerpmZ1GqrhmDqf/1/D7070BDA8BEE3E41041E7DF68AC2BAD465DF60DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7070BDA8BEE3E41041E7DF68AC2BAD465DF60DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5bh78nWKCbsoxzYgiUXPZjTxv2QCqPerpmZ1GqrhmDqf/1/323830343a3839383a3a2f33322d3438203d3e20323632333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:898::/32
Signature Algorithm: sha256WithRSAEncryption
8e:bf:f1:c2:eb:45:d5:da:4b:ef:20:00:ab:ac:08:1c:a5:ed:
9b:c4:3d:a7:e9:99:c0:bc:8e:ea:16:2d:d8:37:45:81:40:19:
e0:92:10:a8:44:4f:d6:b0:da:d4:5a:5f:f5:cd:76:8e:a3:2b:
3e:fe:8a:7e:de:ea:5a:6c:f6:da:68:eb:31:a0:3f:5a:11:e1:
0f:c5:40:e5:0c:97:de:ac:d9:ec:1f:85:73:04:52:0f:fd:13:
b7:92:b8:89:41:ce:4b:9b:90:aa:d6:46:46:61:13:9b:4c:67:
86:9e:9d:38:a5:d8:1f:5f:6f:10:81:29:ad:e1:a5:63:53:1a:
a3:99:2a:63:a4:93:7f:6f:1c:ce:72:8f:48:38:60:76:e7:5e:
a9:03:db:98:51:24:1b:21:1f:cb:24:df:15:24:54:5d:48:fe:
f6:c9:2a:25:8f:cb:3c:8c:f7:1e:dd:5f:02:64:81:c4:a1:8c:
63:d0:b8:fb:32:dc:84:4c:6e:1e:63:92:76:a2:44:36:29:62:
02:df:f2:c9:38:1a:69:fb:ca:02:d1:5f:ba:f3:f1:aa:60:69:
0d:7c:9f:b1:48:20:9b:f2:c0:4d:05:43:8e:cb:99:66:d1:1f:
3b:4b:06:50:99:b1:0d:ab:5d:e2:ba:bf:7d:a7:8c:78:92:1b:
7e:2a:cb:ac
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUHqDVUpvkBeZ1yflQBB1gHCXtTbAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDcwNzBCREE4QkVFM0U0MTA0MUU3REY2OEFDMkJBRDQ2
NURGNjBERTAeFw0yNDA0MDQxMzQ0MjdaFw0yNTA0MDMxMzQ5MjdaMDMxMTAvBgNV
BAMTKEQ4QzA2NzA1NzU5OTk2M0MxN0RDNjQ0NjgxQjQzMThGRkJGNzMwREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLvYNZi3VlKhAY5Mr6TYVMDFGA
ZZx8JkQa19JDWYPjP4JMNAwzc29zWEvh7H0H5MxJ5zMhfbsgac5VKhGnQtS7U6jd
6GHIYaVf3hZ/Kf5cisA8SNKCGdPnKV7lvtceid4jaGvI6WgQRMXUmHys1VbbLXdf
j1lRZ0tWs3HC6YtfMqcYVV3yQYTX7eQDhRd2njBEH8X36PILEfheo4oM5pahKov6
kVfaHYLWyFzOJS6M72EIDWzXHdybXx12nWxHEQb4rbB8ObG4wtxBk60CZLRFPYAY
BFaMmCX4boYDLZyIrDb898EBPQ/QGu3x6By4NovVRjroMffXSvC/MIsjueu5AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU2MBnBXWZljwX3GRGgbQxj/v3MN4wHwYDVR0j
BBgwFoAU1wcL2ovuPkEEHn32isK61GXfYN4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWJoNzhuV0tDYnNveHpZZ2lVWFBaalR4djJRQ3FQZXJwbVoxR3FyaG1E
cWYvMS9ENzA3MEJEQThCRUUzRTQxMDQxRTdERjY4QUMyQkFENDY1REY2MERFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3MDcwQkRBOEJFRTNFNDEw
NDFFN0RGNjhBQzJCQUQ0NjVERjYwREUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzViaDc4bldLQ2Jzb3h6WWdpVVhQWmpUeHYyUUNxUGVycG1aMUdxcmhtRHFmLzEv
MzIzODMwMzQzYTM4MzkzODNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMjMz
MzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgECJgwDQYJKoZIhvcNAQELBQADggEBAI6/8cLrRdXa
S+8gAKusCByl7ZvEPafpmcC8juoWLdg3RYFAGeCSEKhET9aw2tRaX/XNdo6jKz7+
in7e6lps9tpo6zGgP1oR4Q/FQOUMl96s2ewfhXMEUg/9E7eSuIlBzkubkKrWRkZh
E5tMZ4aenTil2B9fbxCBKa3hpWNTGqOZKmOkk39vHM5yj0g4YHbnXqkD25hRJBsh
H8sk3xUkVF1I/vbJKiWPyzyM9x7dXwJkgcShjGPQuPsy3IRMbh5jknaiRDYpYgLf
8sk4Gmn7ygLRX7rz8apgaQ18n7FIIJvywE0FQ47LmWbRHztLBlCZsQ2rXeK6v32n
jHiSG34qy6w=
-----END CERTIFICATE-----
Generated at Mon Apr 7 07:44:58 2025 by rpki-client