Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/323830343a313433633a3a2f33322d3332203d3e20323633333230.roa
File: 323830343a313433633a3a2f33322d3332203d3e20323633333230.roa (raw, json)
Hash identifier: IvgbF85pEWuGowvVXoxAjo3mMfpqeQsjprnOwckQuho=
Subject key identifier: 82:DA:38:86:3A:4A:F7:01:F2:40:6A:52:46:17:7B:12:B9:AB:D9:7F
Certificate issuer: /CN=403D1CC0FEEE423B90F653F1A6A71D104DE1AA56
Certificate serial: 1F8526FDBC811CBCFBEF2704FF1BDB63352285D0
Authority key identifier: 40:3D:1C:C0:FE:EE:42:3B:90:F6:53:F1:A6:A7:1D:10:4D:E1:AA:56
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/323830343a313433633a3a2f33322d3332203d3e20323633333230.roa
Signing time: Mon 06 Jan 2025 18:42:59 +0000
ROA not before: Mon 06 Jan 2025 18:37:59 +0000
ROA not after: Mon 05 Jan 2026 18:42:59 +0000
asID: 263320
IP address blocks: 2804:143c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:85:26:fd:bc:81:1c:bc:fb:ef:27:04:ff:1b:db:63:35:22:85:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403D1CC0FEEE423B90F653F1A6A71D104DE1AA56
Validity
Not Before: Jan 6 18:37:59 2025 GMT
Not After : Jan 5 18:42:59 2026 GMT
Subject: CN=82DA38863A4AF701F2406A5246177B12B9ABD97F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:73:bd:7f:e5:85:d2:b0:5f:5d:da:df:7d:a6:
6a:42:37:9d:33:c3:3e:85:f2:43:37:9e:4c:b8:03:
f7:28:46:d6:a9:19:49:22:ba:49:a6:9d:7f:bf:59:
d9:b8:ed:17:b7:8b:ca:c8:5b:2d:75:01:0e:14:52:
00:7a:55:c9:58:dc:0a:91:9f:01:e8:d6:d1:96:01:
1f:52:4d:8b:d6:96:7e:c9:41:42:20:7d:4a:b5:a6:
a1:b4:52:0e:b9:4b:4c:46:c8:62:64:36:ea:31:15:
73:3c:6e:73:1b:09:b3:ca:17:3d:54:8a:20:13:30:
53:e9:46:a2:b1:07:39:92:12:67:ac:c8:15:30:8f:
a6:0f:74:3d:e1:17:ce:39:0d:42:b1:71:5b:a1:b4:
e5:1c:81:40:8f:27:94:a0:d2:81:a2:19:f9:69:7d:
e1:1e:63:93:e1:17:f3:4a:f2:b5:fb:70:16:3a:04:
4d:21:35:41:bb:d1:12:dd:79:0f:bf:70:45:cb:9d:
3c:03:4e:15:36:0c:33:1f:c5:83:2b:cf:e7:42:99:
69:ac:9a:e4:f5:d1:72:4e:ca:a8:2b:e9:e6:69:f3:
19:75:99:ca:82:b0:28:2c:52:90:f6:a9:a8:42:9a:
6b:f7:c9:f7:54:e4:ca:5f:2f:6d:35:96:48:83:b5:
59:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:DA:38:86:3A:4A:F7:01:F2:40:6A:52:46:17:7B:12:B9:AB:D9:7F
X509v3 Authority Key Identifier:
keyid:40:3D:1C:C0:FE:EE:42:3B:90:F6:53:F1:A6:A7:1D:10:4D:E1:AA:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/323830343a313433633a3a2f33322d3332203d3e20323633333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:143c::/32
Signature Algorithm: sha256WithRSAEncryption
12:d9:1d:06:9f:f0:41:62:1f:dd:16:76:e1:60:20:2d:0a:6d:
b1:19:b6:8a:7c:52:23:b6:d1:ae:1f:88:dc:b6:42:83:71:6a:
b7:bc:59:ff:15:2a:e9:ac:84:33:8d:26:df:6c:c2:cb:ec:a1:
c1:4f:8a:63:f5:49:99:34:3e:ef:3d:60:29:6e:a7:1f:54:fd:
0f:40:d2:dd:23:6d:e1:50:33:b8:ea:2e:14:db:5c:bf:80:5b:
1c:e6:c4:41:40:20:52:49:54:43:f9:1e:4a:f2:9d:de:38:bd:
3d:39:23:2d:71:f9:1f:74:75:5c:6d:d5:5c:84:21:1d:7b:fc:
90:d1:40:1b:6e:ff:4b:1e:e4:ad:d1:da:22:5f:db:e6:92:88:
7a:eb:66:80:a4:fd:fe:38:3f:d8:74:dd:7d:3f:fb:a6:a5:33:
d9:7d:b2:c6:38:9c:20:f3:fa:a5:c5:d5:5f:8f:3a:34:55:fd:
42:38:67:df:9f:f8:19:90:bb:2f:fe:45:82:a8:ef:65:ff:a6:
f6:a7:86:5b:c9:a4:b9:c6:16:0f:65:5a:57:01:c0:06:d3:47:
a7:b6:43:fd:36:87:6a:9d:9b:7a:ce:75:fc:a1:6e:3b:53:97:
40:03:92:20:e3:7e:aa:1c:72:03:4b:34:b4:ac:03:42:7f:cf:
60:5a:88:00
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUH4Um/byBHLz77ycE/xvbYzUihdAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDAzRDFDQzBGRUVFNDIzQjkwRjY1M0YxQTZBNzFEMTA0
REUxQUE1NjAeFw0yNTAxMDYxODM3NTlaFw0yNjAxMDUxODQyNTlaMDMxMTAvBgNV
BAMTKDgyREEzODg2M0E0QUY3MDFGMjQwNkE1MjQ2MTc3QjEyQjlBQkQ5N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/c71/5YXSsF9d2t99pmpCN50z
wz6F8kM3nky4A/coRtapGUkiukmmnX+/Wdm47Re3i8rIWy11AQ4UUgB6VclY3AqR
nwHo1tGWAR9STYvWln7JQUIgfUq1pqG0Ug65S0xGyGJkNuoxFXM8bnMbCbPKFz1U
iiATMFPpRqKxBzmSEmesyBUwj6YPdD3hF845DUKxcVuhtOUcgUCPJ5Sg0oGiGflp
feEeY5PhF/NK8rX7cBY6BE0hNUG70RLdeQ+/cEXLnTwDThU2DDMfxYMrz+dCmWms
muT10XJOyqgr6eZp8xl1mcqCsCgsUpD2qahCmmv3yfdU5MpfL201lkiDtVmZAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUgto4hjpK9wHyQGpSRhd7Ermr2X8wHwYDVR0j
BBgwFoAUQD0cwP7uQjuQ9lPxpqcdEE3hqlYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0IySkxkREVzQ01pYXczemtWa1lBTlhMN0NEeGJhTnpqV0duYjYyajhL
azcvMC80MDNEMUNDMEZFRUU0MjNCOTBGNjUzRjFBNkE3MUQxMDRERTFBQTU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwM0QxQ0MwRkVFRTQyM0I5
MEY2NTNGMUE2QTcxRDEwNERFMUFBNTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdCMkpMZERFc0NNaWF3M3prVmtZQU5YTDdDRHhiYU56aldHbmI2Mmo4S2s3LzAv
MzIzODMwMzQzYTMxMzQzMzYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMz
MzMzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQUPDANBgkqhkiG9w0BAQsFAAOCAQEAEtkdBp/w
QWIf3RZ24WAgLQptsRm2inxSI7bRrh+I3LZCg3Fqt7xZ/xUq6ayEM40m32zCy+yh
wU+KY/VJmTQ+7z1gKW6nH1T9D0DS3SNt4VAzuOouFNtcv4BbHObEQUAgUklUQ/ke
SvKd3ji9PTkjLXH5H3R1XG3VXIQhHXv8kNFAG27/Sx7krdHaIl/b5pKIeutmgKT9
/jg/2HTdfT/7pqUz2X2yxjicIPP6pcXVX486NFX9Qjhn35/4GZC7L/5FgqjvZf+m
9qeGW8mkucYWD2VaVwHABtNHp7ZD/TaHap2bes51/KFuO1OXQAOSION+qhxyA0s0
tKwDQn/PYFqIAA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 11:39:51 2025 by rpki-client