Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a343030303a3a2f33342d3334203d3e20323638383738.roa
File: 323830343a356266303a343030303a3a2f33342d3334203d3e20323638383738.roa (raw, json)
Hash identifier: kHEUQTVNIi17uisCU5YbxHh5mtLJ5hc+0xh+mgm2pSU=
Subject key identifier: E9:0B:7C:71:84:3B:1F:43:6B:B3:BD:3E:1D:1C:DE:0B:E0:AF:84:8A
Certificate issuer: /CN=DBC42DA8F09130640B6DE00AA84DFB10862A2F59
Certificate serial: 71C6CAABB36370343F308D3DDBB3C7A8F6C8F724
Authority key identifier: DB:C4:2D:A8:F0:91:30:64:0B:6D:E0:0A:A8:4D:FB:10:86:2A:2F:59
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBC42DA8F09130640B6DE00AA84DFB10862A2F59.cer
Subject info access: rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a343030303a3a2f33342d3334203d3e20323638383738.roa
Signing time: Tue 12 Nov 2024 19:10:08 +0000
ROA not before: Tue 12 Nov 2024 19:05:08 +0000
ROA not after: Tue 11 Nov 2025 19:10:08 +0000
asID: 268878
IP address blocks: 2804:5bf0:4000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:c6:ca:ab:b3:63:70:34:3f:30:8d:3d:db:b3:c7:a8:f6:c8:f7:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBC42DA8F09130640B6DE00AA84DFB10862A2F59
Validity
Not Before: Nov 12 19:05:08 2024 GMT
Not After : Nov 11 19:10:08 2025 GMT
Subject: CN=E90B7C71843B1F436BB3BD3E1D1CDE0BE0AF848A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:81:0c:72:44:02:a4:ca:ed:a3:2a:c4:4b:fd:
b8:87:62:b4:e6:7a:ce:a5:5b:80:dc:b8:3a:6d:91:
e4:43:c8:95:5f:c0:e4:0d:3b:04:d7:ba:e2:9d:bb:
a0:f3:d4:81:fa:f9:1c:8c:5f:1d:62:6e:cb:f7:79:
c2:e1:4b:9e:5f:f5:e7:f2:85:6c:c8:16:51:06:4d:
c3:96:bd:74:46:1e:61:0e:d5:ba:9e:1f:25:d1:03:
26:33:3d:c5:df:82:83:b0:a3:95:28:86:44:80:7e:
b3:aa:f0:1b:ef:97:ef:b8:62:4a:ea:38:6b:39:6f:
74:4c:8c:cf:4e:63:06:dd:be:19:ed:0d:5d:ca:36:
2c:3c:55:2c:e0:ac:c0:e1:37:4d:72:0e:d8:b3:98:
bb:95:c9:20:ae:ec:0e:36:34:84:99:b4:1c:9c:f1:
e4:27:39:81:7b:04:31:ef:5d:62:dc:05:0a:96:30:
4b:94:11:63:6c:55:40:19:a8:31:07:42:11:9d:a1:
65:d5:9d:bb:95:9c:27:ae:a5:a1:7f:47:f1:29:d5:
22:49:06:06:40:14:2a:e3:4a:ae:cc:ea:5d:82:23:
5a:ee:eb:1f:de:0b:68:78:22:5f:1f:5a:67:56:5c:
4f:05:68:d1:41:b1:1a:4a:1b:bd:ad:5a:fa:cf:ce:
7f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0B:7C:71:84:3B:1F:43:6B:B3:BD:3E:1D:1C:DE:0B:E0:AF:84:8A
X509v3 Authority Key Identifier:
keyid:DB:C4:2D:A8:F0:91:30:64:0B:6D:E0:0A:A8:4D:FB:10:86:2A:2F:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/DBC42DA8F09130640B6DE00AA84DFB10862A2F59.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBC42DA8F09130640B6DE00AA84DFB10862A2F59.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a343030303a3a2f33342d3334203d3e20323638383738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5bf0:4000::/34
Signature Algorithm: sha256WithRSAEncryption
3a:b6:04:ce:5a:c0:06:e4:6e:e1:2a:1b:ed:45:df:21:4c:7b:
f8:29:98:cf:d3:4c:ef:ee:99:b3:fc:25:a3:90:ac:ec:33:54:
36:1d:57:65:ee:c6:e6:10:3c:1b:24:a3:82:9c:f4:1d:f9:3c:
a8:9e:c6:e6:d2:01:14:33:89:ac:7a:d4:fd:18:18:be:59:fa:
c4:5d:79:da:07:a5:27:3c:f0:00:46:b4:ec:83:49:4e:a7:b8:
3c:31:e0:4f:7f:b8:95:47:72:e1:bd:ba:4e:15:84:64:95:a5:
65:69:d4:ee:bf:c1:22:28:fd:ae:dc:e0:4d:a7:ec:74:77:e3:
b4:0c:1d:39:da:c8:2d:ea:72:e9:aa:2c:c5:b3:eb:c5:21:dc:
f0:ba:58:a4:5b:03:d0:f3:7f:45:7e:47:c9:0c:d7:6d:77:84:
6d:f4:6a:e8:ff:71:e8:3c:16:68:e7:55:5d:cd:d7:6a:e5:53:
72:33:6c:77:82:da:20:d8:da:fb:42:80:8d:87:48:b7:6b:33:
5c:ea:8d:53:f2:71:ca:45:4a:25:63:e4:56:1f:ca:34:f8:97:
43:4b:8c:e8:54:07:20:74:1e:31:88:55:03:00:77:c4:3b:8c:
90:76:83:35:07:c2:8c:a9:b3:26:81:ae:8d:91:3c:29:f5:ab:
d3:d0:a4:1b
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUccbKq7NjcDQ/MI0927PHqPbI9yQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREJDNDJEQThGMDkxMzA2NDBCNkRFMDBBQTg0REZCMTA4
NjJBMkY1OTAeFw0yNDExMTIxOTA1MDhaFw0yNTExMTExOTEwMDhaMDMxMTAvBgNV
BAMTKEU5MEI3QzcxODQzQjFGNDM2QkIzQkQzRTFEMUNERTBCRTBBRjg0OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMgQxyRAKkyu2jKsRL/biHYrTm
es6lW4DcuDptkeRDyJVfwOQNOwTXuuKdu6Dz1IH6+RyMXx1ibsv3ecLhS55f9efy
hWzIFlEGTcOWvXRGHmEO1bqeHyXRAyYzPcXfgoOwo5UohkSAfrOq8Bvvl++4Ykrq
OGs5b3RMjM9OYwbdvhntDV3KNiw8VSzgrMDhN01yDtizmLuVySCu7A42NISZtByc
8eQnOYF7BDHvXWLcBQqWMEuUEWNsVUAZqDEHQhGdoWXVnbuVnCeupaF/R/Ep1SJJ
BgZAFCrjSq7M6l2CI1ru6x/eC2h4Il8fWmdWXE8FaNFBsRpKG72tWvrPzn8VAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU6Qt8cYQ7H0Nrs70+HRzeC+CvhIowHwYDVR0j
BBgwFoAU28QtqPCRMGQLbeAKqE37EIYqL1kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzlLNGlkbUxtNGVlczUyUHdZTUFKUUtXWGJjVlFUODU2OTNpa1J5enNr
Ym8vMC9EQkM0MkRBOEYwOTEzMDY0MEI2REUwMEFBODRERkIxMDg2MkEyRjU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCQzQyREE4RjA5MTMwNjQw
QjZERTAwQUE4NERGQjEwODYyQTJGNTkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc5SzRpZG1MbTRlZXM1MlB3WU1BSlFLV1hiY1ZRVDg1NjkzaWtSeXpza2JvLzAv
MzIzODMwMzQzYTM1NjI2NjMwM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzODM4MzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEW/BAMA0GCSqGSIb3DQEBCwUA
A4IBAQA6tgTOWsAG5G7hKhvtRd8hTHv4KZjP00zv7pmz/CWjkKzsM1Q2HVdl7sbm
EDwbJKOCnPQd+Tyonsbm0gEUM4msetT9GBi+WfrEXXnaB6UnPPAARrTsg0lOp7g8
MeBPf7iVR3LhvbpOFYRklaVladTuv8EiKP2u3OBNp+x0d+O0DB052sgt6nLpqizF
s+vFIdzwulikWwPQ839FfkfJDNdtd4Rt9Gro/3HoPBZo51Vdzddq5VNyM2x3gtog
2Nr7QoCNh0i3azNc6o1T8nHKRUolY+RWH8o0+JdDS4zoVAcgdB4xiFUDAHfEO4yQ
doM1B8KMqbMmga6NkTwp9avT0KQb
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:47:33 2025 by rpki-client