Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/323830343a333464633a3a2f33352d3335203d3e20323635343835.roa
File: 323830343a333464633a3a2f33352d3335203d3e20323635343835.roa (raw, json)
Hash identifier: ljlJXTrxSl1lBneZpHt6oBdu4A6D+DLfAxecg2t0gwQ=
Subject key identifier: 04:19:33:81:C7:75:55:DC:12:C5:70:CC:CC:BE:BF:5D:B3:37:7C:DB
Certificate issuer: /CN=DB4775FF1387265B8F4B430B70351316A66B6D44
Certificate serial: 16CD436A3268C09A70E6F311EC03715F0797B441
Authority key identifier: DB:47:75:FF:13:87:26:5B:8F:4B:43:0B:70:35:13:16:A6:6B:6D:44
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB4775FF1387265B8F4B430B70351316A66B6D44.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/323830343a333464633a3a2f33352d3335203d3e20323635343835.roa
Signing time: Fri 23 Feb 2024 23:40:58 +0000
ROA not before: Fri 23 Feb 2024 23:35:58 +0000
ROA not after: Fri 21 Feb 2025 23:40:58 +0000
asID: 265485
IP address blocks: 2804:34dc::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:cd:43:6a:32:68:c0:9a:70:e6:f3:11:ec:03:71:5f:07:97:b4:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB4775FF1387265B8F4B430B70351316A66B6D44
Validity
Not Before: Feb 23 23:35:58 2024 GMT
Not After : Feb 21 23:40:58 2025 GMT
Subject: CN=04193381C77555DC12C570CCCCBEBF5DB3377CDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:04:47:d8:68:04:2b:8e:0f:5d:58:1c:02:54:
c1:c4:9e:9b:17:86:22:bc:16:72:e4:53:a1:68:f7:
81:5d:d3:58:02:f4:87:50:85:a2:3d:4e:a0:2a:bd:
4b:77:25:84:25:1e:83:02:b7:08:dd:b5:ca:b1:07:
f5:d1:d8:79:22:23:20:fe:2e:d2:bc:c8:03:a3:bb:
0c:89:df:78:da:f0:dd:a9:9b:25:15:2b:67:51:8b:
11:28:ae:76:6a:ad:7b:c6:93:bd:e6:87:58:01:90:
0b:8d:17:97:d9:61:bb:54:6c:d7:11:2f:d7:ce:e2:
1d:32:3f:f7:e4:c5:99:3f:52:90:b0:16:d6:16:cc:
24:cc:1a:6e:60:7e:ef:c9:5b:03:5c:aa:c8:bd:a3:
ec:55:f8:44:81:0e:ab:33:c6:26:24:ba:6b:9e:b4:
6e:af:76:c4:15:af:81:bd:a0:a0:78:99:89:59:a2:
0c:ba:b5:ce:80:26:63:3c:9a:af:99:31:64:0d:7b:
59:d1:c1:85:7d:b6:6e:f8:48:62:83:15:5d:7a:47:
0d:69:75:70:ed:83:ce:7f:d6:4e:bc:cd:fb:07:7c:
df:d4:b4:e2:e5:d0:12:a2:e0:db:90:00:1a:26:51:
d7:23:1a:f3:49:8b:51:bc:82:db:07:96:c4:60:0b:
ec:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:19:33:81:C7:75:55:DC:12:C5:70:CC:CC:BE:BF:5D:B3:37:7C:DB
X509v3 Authority Key Identifier:
keyid:DB:47:75:FF:13:87:26:5B:8F:4B:43:0B:70:35:13:16:A6:6B:6D:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/DB4775FF1387265B8F4B430B70351316A66B6D44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB4775FF1387265B8F4B430B70351316A66B6D44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/323830343a333464633a3a2f33352d3335203d3e20323635343835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:34dc::/35
Signature Algorithm: sha256WithRSAEncryption
96:59:65:49:57:84:a0:d8:72:98:85:71:eb:b4:6e:09:ee:1a:
3a:f6:c5:68:2e:be:c8:29:d4:2f:04:c3:1a:9b:e1:c9:70:b7:
67:ca:c7:cc:30:e9:17:d5:ee:e7:26:5c:c6:c8:e9:23:6d:6e:
41:86:62:8c:40:26:f8:ec:c4:8b:ca:34:13:4e:3e:31:d3:b1:
91:5f:92:ee:63:19:37:c8:88:d4:67:10:ac:fd:a0:5f:ca:76:
a5:83:d5:8e:a1:37:a3:78:7e:91:a6:1b:8b:dc:da:ef:3d:4d:
30:09:e4:c4:48:d6:b3:02:ca:90:95:c1:13:05:7a:e8:1b:22:
cf:77:ee:3b:fe:96:d7:b7:e7:85:b8:f8:e3:c6:1e:3d:a1:5b:
7f:18:ce:72:93:57:50:15:ee:26:33:0d:13:d7:a8:15:85:6c:
04:1b:6d:22:9c:ae:9f:a7:30:07:42:17:89:10:f5:2c:5f:5a:
76:54:f4:9d:20:15:61:fb:49:51:46:e6:f6:1f:c2:ae:9e:cd:
d0:08:30:fe:b9:1c:7a:eb:98:31:91:57:2d:1b:ac:81:f2:ed:
af:19:51:44:93:ac:1c:ac:2b:27:d0:90:ba:79:3d:df:76:4e:
16:0f:e3:84:b9:12:86:11:ae:2d:d0:79:d5:3c:5f:fa:08:96:
c9:43:3a:f3
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUFs1DajJowJpw5vMR7ANxXweXtEEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREI0Nzc1RkYxMzg3MjY1QjhGNEI0MzBCNzAzNTEzMTZB
NjZCNkQ0NDAeFw0yNDAyMjMyMzM1NThaFw0yNTAyMjEyMzQwNThaMDMxMTAvBgNV
BAMTKDA0MTkzMzgxQzc3NTU1REMxMkM1NzBDQ0NDQkVCRjVEQjMzNzdDREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnBEfYaAQrjg9dWBwCVMHEnpsX
hiK8FnLkU6Fo94Fd01gC9IdQhaI9TqAqvUt3JYQlHoMCtwjdtcqxB/XR2HkiIyD+
LtK8yAOjuwyJ33ja8N2pmyUVK2dRixEornZqrXvGk73mh1gBkAuNF5fZYbtUbNcR
L9fO4h0yP/fkxZk/UpCwFtYWzCTMGm5gfu/JWwNcqsi9o+xV+ESBDqszxiYkumue
tG6vdsQVr4G9oKB4mYlZogy6tc6AJmM8mq+ZMWQNe1nRwYV9tm74SGKDFV16Rw1p
dXDtg85/1k68zfsHfN/UtOLl0BKi4NuQABomUdcjGvNJi1G8gtsHlsRgC+yrAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUBBkzgcd1VdwSxXDMzL6/XbM3fNswHwYDVR0j
BBgwFoAU20d1/xOHJluPS0MLcDUTFqZrbUQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby81ZGt0d3B0M1FFWG4zb0NXenB0ZkoxTHpQS1JIbUtuS25rb3JLMTd5WWpq
LzAvREI0Nzc1RkYxMzg3MjY1QjhGNEI0MzBCNzAzNTEzMTZBNjZCNkQ0NC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9EQjQ3NzVGRjEzODcyNjVCOEY0
QjQzMEI3MDM1MTMxNkE2NkI2RDQ0LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81
ZGt0d3B0M1FFWG4zb0NXenB0ZkoxTHpQS1JIbUtuS25rb3JLMTd5WWpqLzAvMzIz
ODMwMzQzYTMzMzQ2NDYzM2EzYTJmMzMzNTJkMzMzNTIwM2QzZTIwMzIzNjM1MzQz
ODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/
BBIwEDAOBAIAAjAIAwYFKAQ03AAwDQYJKoZIhvcNAQELBQADggEBAJZZZUlXhKDY
cpiFceu0bgnuGjr2xWguvsgp1C8Ewxqb4clwt2fKx8ww6RfV7ucmXMbI6SNtbkGG
YoxAJvjsxIvKNBNOPjHTsZFfku5jGTfIiNRnEKz9oF/KdqWD1Y6hN6N4fpGmG4vc
2u89TTAJ5MRI1rMCypCVwRMFeugbIs937jv+lte354W4+OPGHj2hW38YznKTV1AV
7iYzDRPXqBWFbAQbbSKcrp+nMAdCF4kQ9SxfWnZU9J0gFWH7SVFG5vYfwq6ezdAI
MP65HHrrmDGRVy0brIHy7a8ZUUSTrBysKyfQkLp5Pd92ThYP44S5EoYRri3QedU8
X/oIlslDOvM=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:42 2025 by rpki-client