Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/323830343a326430303a3a2f33332d3333203d3e20323635323536.roa
File: 323830343a326430303a3a2f33332d3333203d3e20323635323536.roa (raw, json)
Hash identifier: dATJRZR3fAe0zMUR8KJ2dQSsRy7NrFStA4mDOEppRos=
Subject key identifier: 57:8E:06:F4:05:20:EA:1E:20:B1:DB:AB:21:DE:19:BD:A0:99:BC:BA
Certificate issuer: /CN=299948EC3B7F9F10DE5FFB0EA730B45215486163
Certificate serial: 38AD6D10885ABE74E55B8AD02DCB1E2E532EC91B
Authority key identifier: 29:99:48:EC:3B:7F:9F:10:DE:5F:FB:0E:A7:30:B4:52:15:48:61:63
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/299948EC3B7F9F10DE5FFB0EA730B45215486163.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/323830343a326430303a3a2f33332d3333203d3e20323635323536.roa
Signing time: Wed 24 Apr 2024 00:41:43 +0000
ROA not before: Wed 24 Apr 2024 00:36:43 +0000
ROA not after: Wed 23 Apr 2025 00:41:43 +0000
asID: 265256
IP address blocks: 2804:2d00::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:ad:6d:10:88:5a:be:74:e5:5b:8a:d0:2d:cb:1e:2e:53:2e:c9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=299948EC3B7F9F10DE5FFB0EA730B45215486163
Validity
Not Before: Apr 24 00:36:43 2024 GMT
Not After : Apr 23 00:41:43 2025 GMT
Subject: CN=578E06F40520EA1E20B1DBAB21DE19BDA099BCBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a0:03:14:3b:19:30:f9:2f:cf:c9:03:50:f2:
03:39:90:7a:7b:28:3b:6c:cb:7b:21:3c:e1:9f:fa:
db:86:a4:f6:89:cf:ef:a9:bc:b4:7a:41:b1:9f:9b:
b4:39:fd:95:a1:f9:46:ab:57:3f:27:23:2c:02:6e:
bc:c1:06:6e:0a:bd:00:23:51:7a:9d:29:d2:fb:96:
69:cb:2a:a4:31:37:4d:a8:8e:2b:b5:e4:11:c5:dd:
07:ef:c4:cc:b4:ab:01:21:36:8d:01:9e:ba:bf:9d:
93:2b:f6:67:1c:66:44:9d:7a:b3:ab:91:4a:ac:bf:
7b:fd:12:de:d0:08:ab:0c:15:c0:f6:2d:f2:91:6f:
5b:6e:d6:0c:bc:94:12:cf:42:cf:35:a8:12:74:4f:
91:ef:85:a9:55:89:f8:2a:e1:bf:bf:42:b3:46:58:
48:85:bf:98:7b:ac:4d:f7:bf:d3:0e:d4:a4:ef:24:
02:97:f4:e3:cb:26:79:b1:aa:04:1b:6f:89:dc:55:
14:04:04:f9:b3:ad:d9:10:35:5b:3b:a8:eb:98:fd:
11:46:cf:5a:7e:8c:84:15:61:78:ab:e2:e5:7e:14:
fd:22:f1:50:a6:c5:b4:d0:9d:60:25:72:a8:96:85:
ad:6c:e5:5a:ef:4f:1e:76:7c:f6:67:21:7e:d4:48:
cf:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8E:06:F4:05:20:EA:1E:20:B1:DB:AB:21:DE:19:BD:A0:99:BC:BA
X509v3 Authority Key Identifier:
keyid:29:99:48:EC:3B:7F:9F:10:DE:5F:FB:0E:A7:30:B4:52:15:48:61:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/299948EC3B7F9F10DE5FFB0EA730B45215486163.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/299948EC3B7F9F10DE5FFB0EA730B45215486163.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/323830343a326430303a3a2f33332d3333203d3e20323635323536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2d00::/33
Signature Algorithm: sha256WithRSAEncryption
66:4f:ea:78:e5:b3:7f:5d:9a:4e:b9:c7:63:7b:b0:a2:53:9f:
96:7d:83:62:e4:d6:bc:ad:a3:c8:6f:13:d9:0e:e3:cd:9f:81:
b8:54:3f:c0:e7:e8:53:b5:ff:1b:2e:1e:b2:73:5d:64:40:a4:
81:d8:d5:af:c1:de:9c:bd:49:9a:71:7f:53:ae:01:9b:79:c0:
bd:69:8d:56:04:57:06:48:c2:0e:88:f1:76:6d:f5:a5:7b:69:
2f:7f:38:c6:fb:70:81:be:5c:cf:a4:f7:ee:c9:23:3c:6f:6a:
3d:11:58:4e:94:50:1f:13:04:15:03:b0:d1:89:9f:85:ab:66:
77:b0:69:57:c6:00:7c:e5:51:d7:6b:68:c6:7e:0d:f3:1a:7a:
64:d3:6c:79:2f:85:93:13:2f:b9:02:82:33:27:4a:39:35:1b:
8b:da:75:f8:78:f3:58:cb:a3:af:b4:3e:48:16:f3:da:08:1b:
6c:a6:7f:37:36:7a:d5:02:4c:2c:e7:1c:eb:57:0c:aa:18:15:
2d:10:c8:fc:56:03:29:99:e0:19:4d:48:e1:ea:dc:a1:f0:f7:
57:c5:3f:88:f7:06:2b:7b:5a:47:95:d1:68:10:17:ce:08:23:
ba:a1:43:e7:2e:33:b7:75:bf:3f:02:d8:9b:10:9f:c0:38:cf:
24:d8:89:18
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOK1tEIhavnTlW4rQLcseLlMuyRswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjk5OTQ4RUMzQjdGOUYxMERFNUZGQjBFQTczMEI0NTIx
NTQ4NjE2MzAeFw0yNDA0MjQwMDM2NDNaFw0yNTA0MjMwMDQxNDNaMDMxMTAvBgNV
BAMTKDU3OEUwNkY0MDUyMEVBMUUyMEIxREJBQjIxREUxOUJEQTA5OUJDQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYoAMUOxkw+S/PyQNQ8gM5kHp7
KDtsy3shPOGf+tuGpPaJz++pvLR6QbGfm7Q5/ZWh+UarVz8nIywCbrzBBm4KvQAj
UXqdKdL7lmnLKqQxN02ojiu15BHF3QfvxMy0qwEhNo0Bnrq/nZMr9mccZkSderOr
kUqsv3v9Et7QCKsMFcD2LfKRb1tu1gy8lBLPQs81qBJ0T5HvhalVifgq4b+/QrNG
WEiFv5h7rE33v9MO1KTvJAKX9OPLJnmxqgQbb4ncVRQEBPmzrdkQNVs7qOuY/RFG
z1p+jIQVYXir4uV+FP0i8VCmxbTQnWAlcqiWha1s5VrvTx52fPZnIX7USM99AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUV44G9AUg6h4gsdurId4ZvaCZvLowHwYDVR0j
BBgwFoAUKZlI7Dt/nxDeX/sOpzC0UhVIYWMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWtoN1UxbWFCN0NFazk0TnljaEJwV2kxWXpYRkc5RVY1eFJhYW5MOXdW
M3YvMC8yOTk5NDhFQzNCN0Y5RjEwREU1RkZCMEVBNzMwQjQ1MjE1NDg2MTYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5OTk0OEVDM0I3RjlGMTBE
RTVGRkIwRUE3MzBCNDUyMTU0ODYxNjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVraDdVMW1hQjdDRWs5NE55Y2hCcFdpMVl6WEZHOUVWNXhSYWFuTDl3VjN2LzAv
MzIzODMwMzQzYTMyNjQzMDMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM1
MzIzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQtAAAwDQYJKoZIhvcNAQELBQADggEBAGZP6njl
s39dmk65x2N7sKJTn5Z9g2Lk1ryto8hvE9kO482fgbhUP8Dn6FO1/xsuHrJzXWRA
pIHY1a/B3py9SZpxf1OuAZt5wL1pjVYEVwZIwg6I8XZt9aV7aS9/OMb7cIG+XM+k
9+7JIzxvaj0RWE6UUB8TBBUDsNGJn4WrZnewaVfGAHzlUddraMZ+DfMaemTTbHkv
hZMTL7kCgjMnSjk1G4vadfh481jLo6+0PkgW89oIG2ymfzc2etUCTCznHOtXDKoY
FS0QyPxWAymZ4BlNSOHq3KHw91fFP4j3Bit7WkeV0WgQF84II7qhQ+cuM7d1vz8C
2JsQn8A4zyTYiRg=
-----END CERTIFICATE-----
Generated at Fri Mar 14 01:22:32 2025 by rpki-client