Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/323830343a326430303a3a2f33322d3333203d3e20323635323536.roa
File: 323830343a326430303a3a2f33322d3333203d3e20323635323536.roa (raw, json)
Hash identifier: hRqrGnFNR+AD3tREeT1IZoQtdLDuNL8fbIlr4fZDZOw=
Subject key identifier: 78:D1:D5:6A:8F:E6:FB:65:28:E2:CD:FF:18:15:A2:6C:1C:EC:A3:B0
Certificate issuer: /CN=1F166217636B68045F1807E9A853E6AFB151CB62
Certificate serial: 5E68144A7A8895A25C21C613CE646F2B8B83C294
Authority key identifier: 1F:16:62:17:63:6B:68:04:5F:18:07:E9:A8:53:E6:AF:B1:51:CB:62
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F166217636B68045F1807E9A853E6AFB151CB62.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/323830343a326430303a3a2f33322d3333203d3e20323635323536.roa
Signing time: Wed 07 Feb 2024 05:22:19 +0000
ROA not before: Wed 07 Feb 2024 05:17:19 +0000
ROA not after: Wed 05 Feb 2025 05:22:19 +0000
asID: 265256
IP address blocks: 2804:2d00::/32 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:68:14:4a:7a:88:95:a2:5c:21:c6:13:ce:64:6f:2b:8b:83:c2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F166217636B68045F1807E9A853E6AFB151CB62
Validity
Not Before: Feb 7 05:17:19 2024 GMT
Not After : Feb 5 05:22:19 2025 GMT
Subject: CN=78D1D56A8FE6FB6528E2CDFF1815A26C1CECA3B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:91:66:53:04:24:a2:c1:79:51:60:cd:af:ed:
da:60:37:af:8f:95:92:85:f9:be:84:08:d0:7f:7f:
61:7c:e1:20:6f:11:ad:6c:ba:e0:3a:97:03:80:cc:
8c:95:54:a4:7a:93:8d:8f:97:4a:8a:aa:37:0d:65:
58:65:5b:2f:62:c1:f1:e2:7c:37:03:06:71:fd:5f:
da:e0:65:2d:67:88:12:82:ae:de:b1:97:12:dc:2f:
bd:53:8f:99:c2:85:b2:50:9f:3a:4d:47:d0:a5:1b:
48:77:9d:e0:7e:0b:c7:e8:d8:85:c9:1b:fd:8c:59:
ae:ae:44:09:25:65:2b:0a:f4:51:64:0b:85:73:2e:
af:b1:6c:89:d7:2d:b1:cc:69:31:2e:d1:d9:63:82:
1c:1c:dd:8b:18:18:52:3d:d6:0d:f2:13:cd:b7:13:
48:ff:3b:3b:08:43:c4:2d:0a:f9:dd:50:4b:79:d2:
f5:5f:bc:18:ae:22:e3:49:31:a0:70:ab:3f:b5:60:
7e:b8:8a:8b:a7:f2:79:30:e5:35:b8:b1:12:84:41:
63:19:ef:ec:17:3c:5b:c0:b3:7f:2d:b9:79:04:08:
c9:82:92:0c:ec:25:9e:ab:1a:60:6e:31:71:32:7e:
04:e1:f9:b4:d9:6a:a7:24:14:3a:69:5e:72:7f:29:
05:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D1:D5:6A:8F:E6:FB:65:28:E2:CD:FF:18:15:A2:6C:1C:EC:A3:B0
X509v3 Authority Key Identifier:
keyid:1F:16:62:17:63:6B:68:04:5F:18:07:E9:A8:53:E6:AF:B1:51:CB:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/1F166217636B68045F1807E9A853E6AFB151CB62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F166217636B68045F1807E9A853E6AFB151CB62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/323830343a326430303a3a2f33322d3333203d3e20323635323536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2d00::/32
Signature Algorithm: sha256WithRSAEncryption
a3:ed:27:18:88:05:4e:a6:94:5b:d1:4a:1c:e8:f3:b6:33:46:
0a:8d:61:5f:a8:84:49:64:ae:1e:12:55:ee:2e:9a:64:c9:ca:
a1:42:a8:f1:7a:57:b8:c5:43:de:5f:f6:f0:34:2a:29:87:1e:
70:2a:7e:31:56:c9:36:4a:f5:39:1d:b0:96:11:a6:90:27:34:
16:86:58:13:e5:79:29:3d:ce:7d:bb:53:17:0a:1f:e4:31:5d:
f5:09:de:02:b5:d9:72:cd:e0:2b:e7:8b:c9:85:41:d6:63:ab:
4c:a7:4f:7b:32:da:99:1a:e6:f0:75:d6:bd:80:53:42:c4:bf:
91:0d:41:59:6d:c4:76:02:3c:87:ca:8f:76:0a:a7:a5:8a:04:
9f:3a:f9:0a:f0:26:8c:29:03:3a:d3:81:4d:c4:a9:a2:f7:56:
09:c1:c0:f0:73:a9:6c:5a:a1:68:3d:98:e8:69:7a:c1:ae:6d:
41:47:8d:9d:61:60:4a:c9:0d:84:5b:27:76:0a:7c:b7:91:72:
15:86:13:ca:d4:b0:69:45:c4:13:1c:2d:e3:65:76:26:2d:45:
61:be:21:a2:03:34:03:57:49:03:c5:b1:96:7c:3a:3a:e3:2b:
79:64:58:25:fe:5c:67:5a:d5:bd:63:fe:14:a8:77:13:b2:95:
df:63:fa:f6
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUXmgUSnqIlaJcIcYTzmRvK4uDwpQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUYxNjYyMTc2MzZCNjgwNDVGMTgwN0U5QTg1M0U2QUZC
MTUxQ0I2MjAeFw0yNDAyMDcwNTE3MTlaFw0yNTAyMDUwNTIyMTlaMDMxMTAvBgNV
BAMTKDc4RDFENTZBOEZFNkZCNjUyOEUyQ0RGRjE4MTVBMjZDMUNFQ0EzQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCkWZTBCSiwXlRYM2v7dpgN6+P
lZKF+b6ECNB/f2F84SBvEa1suuA6lwOAzIyVVKR6k42Pl0qKqjcNZVhlWy9iwfHi
fDcDBnH9X9rgZS1niBKCrt6xlxLcL71Tj5nChbJQnzpNR9ClG0h3neB+C8fo2IXJ
G/2MWa6uRAklZSsK9FFkC4VzLq+xbInXLbHMaTEu0dljghwc3YsYGFI91g3yE823
E0j/OzsIQ8QtCvndUEt50vVfvBiuIuNJMaBwqz+1YH64ioun8nkw5TW4sRKEQWMZ
7+wXPFvAs38tuXkECMmCkgzsJZ6rGmBuMXEyfgTh+bTZaqckFDppXnJ/KQU3AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUeNHVao/m+2Uo4s3/GBWibBzso7AwHwYDVR0j
BBgwFoAUHxZiF2NraARfGAfpqFPmr7FRy2IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWtoN1UxbWFCN0NFazk0TnljaEJwV2kxWXpYRkc5RVY1eFJhYW5MOXdW
M3YvMC8xRjE2NjIxNzYzNkI2ODA0NUYxODA3RTlBODUzRTZBRkIxNTFDQjYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFGMTY2MjE3NjM2QjY4MDQ1
RjE4MDdFOUE4NTNFNkFGQjE1MUNCNjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVraDdVMW1hQjdDRWs5NE55Y2hCcFdpMVl6WEZHOUVWNXhSYWFuTDl3VjN2LzAv
MzIzODMwMzQzYTMyNjQzMDMwM2EzYTJmMzMzMjJkMzMzMzIwM2QzZTIwMzIzNjM1
MzIzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQtADANBgkqhkiG9w0BAQsFAAOCAQEAo+0nGIgF
TqaUW9FKHOjztjNGCo1hX6iESWSuHhJV7i6aZMnKoUKo8XpXuMVD3l/28DQqKYce
cCp+MVbJNkr1OR2wlhGmkCc0FoZYE+V5KT3OfbtTFwof5DFd9QneArXZcs3gK+eL
yYVB1mOrTKdPezLamRrm8HXWvYBTQsS/kQ1BWW3EdgI8h8qPdgqnpYoEnzr5CvAm
jCkDOtOBTcSpovdWCcHA8HOpbFqhaD2Y6Gl6wa5tQUeNnWFgSskNhFsndgp8t5Fy
FYYTytSwaUXEExwt42V2Ji1FYb4hogM0A1dJA8Wxlnw6OuMreWRYJf5cZ1rVvWP+
FKh3E7KV32P69g==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:47:30 2025 by rpki-client