Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/323830343a313433633a666663303a3a2f34342d3434203d3e20323633333230.roa
File: 323830343a313433633a666663303a3a2f34342d3434203d3e20323633333230.roa (raw, json)
Hash identifier: HnFS+XFsITJzkznUO4414djN5P5Zs/YkwYgTv/7tpLM=
Subject key identifier: 38:30:F8:ED:54:86:82:F8:30:8D:E2:9F:92:7D:69:0A:91:61:59:02
Certificate issuer: /CN=403D1CC0FEEE423B90F653F1A6A71D104DE1AA56
Certificate serial: 382F82CEDCF3C62C0A017AD4E3A3DC0E59010398
Authority key identifier: 40:3D:1C:C0:FE:EE:42:3B:90:F6:53:F1:A6:A7:1D:10:4D:E1:AA:56
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/323830343a313433633a666663303a3a2f34342d3434203d3e20323633333230.roa
Signing time: Mon 06 Jan 2025 18:42:59 +0000
ROA not before: Mon 06 Jan 2025 18:37:59 +0000
ROA not after: Mon 05 Jan 2026 18:42:59 +0000
asID: 263320
IP address blocks: 2804:143c:ffc0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:2f:82:ce:dc:f3:c6:2c:0a:01:7a:d4:e3:a3:dc:0e:59:01:03:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403D1CC0FEEE423B90F653F1A6A71D104DE1AA56
Validity
Not Before: Jan 6 18:37:59 2025 GMT
Not After : Jan 5 18:42:59 2026 GMT
Subject: CN=3830F8ED548682F8308DE29F927D690A91615902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:85:bc:09:3e:5a:e7:d1:34:61:82:01:a8:c8:
25:5e:78:0c:b9:00:b2:9c:3a:23:80:84:cb:f7:e6:
a5:b8:4d:c9:d6:9b:41:39:bd:57:3d:ca:69:b8:7b:
13:8c:5e:04:8b:d3:a5:fd:de:a9:6a:04:4f:b8:ea:
d2:29:02:53:ff:0d:f9:50:81:70:1e:06:df:10:9c:
c2:28:ce:e7:09:47:09:17:20:0e:bd:d0:14:9b:2a:
e9:fd:d6:c9:f5:66:87:db:39:57:17:96:0d:b5:18:
82:88:e6:a4:9f:cc:6b:dc:7c:58:1b:80:fe:a0:fc:
31:9b:42:66:e1:47:43:84:cf:1a:f8:52:b9:5e:34:
b4:19:2b:2f:24:91:2d:8e:c5:f8:5e:5c:cf:1f:60:
09:a1:da:e9:f4:9d:cd:50:75:78:fe:ad:1d:02:71:
06:e0:9c:66:7a:98:2d:b2:0a:f3:5b:2d:ed:1f:62:
38:eb:82:4b:e3:aa:db:7b:10:de:1e:f2:12:ca:b4:
e4:fb:14:9d:e3:1a:61:65:3e:e7:ed:4e:d1:f4:27:
c3:66:db:25:bf:82:1a:c6:de:da:e4:5b:be:ec:a9:
c2:db:75:c0:92:ea:3e:56:80:dd:d8:ec:d4:c6:98:
e1:23:45:92:f1:d3:a0:e8:11:9f:52:e1:93:6f:3e:
17:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:30:F8:ED:54:86:82:F8:30:8D:E2:9F:92:7D:69:0A:91:61:59:02
X509v3 Authority Key Identifier:
keyid:40:3D:1C:C0:FE:EE:42:3B:90:F6:53:F1:A6:A7:1D:10:4D:E1:AA:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/323830343a313433633a666663303a3a2f34342d3434203d3e20323633333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:143c:ffc0::/44
Signature Algorithm: sha256WithRSAEncryption
43:09:e2:ac:16:ea:55:93:f9:35:34:7f:b8:97:96:c6:39:f5:
5f:8c:a3:7e:0f:04:de:32:8c:eb:fb:07:5c:2a:9b:c9:6f:f4:
c5:18:ef:d6:00:cf:19:4b:82:96:0a:50:a9:3d:c0:89:b8:8c:
58:a2:9c:f0:c9:b1:5b:e4:c6:43:db:37:14:e6:63:14:4d:97:
63:95:a8:f0:e6:6d:5c:96:8d:07:9c:1c:93:86:e8:47:68:99:
4c:a6:d6:cc:0d:15:4b:29:b4:e6:55:c6:23:2a:27:2d:5f:cc:
6c:f1:59:38:cd:a3:af:cf:83:f2:3f:19:a3:20:5a:5b:6e:e7:
b1:9e:e1:46:34:13:17:96:f1:69:00:74:ad:de:00:ed:03:88:
60:74:83:db:f9:7b:f8:06:07:ae:ef:45:60:0c:0c:70:f3:aa:
cb:95:9c:ba:bb:3d:32:71:82:06:70:3f:82:6a:64:dc:58:8c:
7b:28:fa:cd:a1:65:44:7d:56:49:2a:59:72:72:ce:63:f1:ce:
62:7f:5e:f0:9e:dc:13:2f:9a:ff:73:bb:77:3a:70:cc:af:e2:
ee:f0:42:bf:8c:54:48:52:dd:eb:9f:cf:28:ac:db:ac:4e:42:
f8:3f:bf:f2:cf:40:e4:f9:f2:34:e8:3c:f3:94:5b:5e:8e:c4:
45:52:3f:7f
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUOC+CztzzxiwKAXrU46PcDlkBA5gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDAzRDFDQzBGRUVFNDIzQjkwRjY1M0YxQTZBNzFEMTA0
REUxQUE1NjAeFw0yNTAxMDYxODM3NTlaFw0yNjAxMDUxODQyNTlaMDMxMTAvBgNV
BAMTKDM4MzBGOEVENTQ4NjgyRjgzMDhERTI5RjkyN0Q2OTBBOTE2MTU5MDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYhbwJPlrn0TRhggGoyCVeeAy5
ALKcOiOAhMv35qW4TcnWm0E5vVc9ymm4exOMXgSL06X93qlqBE+46tIpAlP/DflQ
gXAeBt8QnMIozucJRwkXIA690BSbKun91sn1ZofbOVcXlg21GIKI5qSfzGvcfFgb
gP6g/DGbQmbhR0OEzxr4UrleNLQZKy8kkS2OxfheXM8fYAmh2un0nc1QdXj+rR0C
cQbgnGZ6mC2yCvNbLe0fYjjrgkvjqtt7EN4e8hLKtOT7FJ3jGmFlPuftTtH0J8Nm
2yW/ghrG3trkW77sqcLbdcCS6j5WgN3Y7NTGmOEjRZLx06DoEZ9S4ZNvPhf5AgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUODD47VSGgvgwjeKfkn1pCpFhWQIwHwYDVR0j
BBgwFoAUQD0cwP7uQjuQ9lPxpqcdEE3hqlYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0IySkxkREVzQ01pYXczemtWa1lBTlhMN0NEeGJhTnpqV0duYjYyajhL
azcvMC80MDNEMUNDMEZFRUU0MjNCOTBGNjUzRjFBNkE3MUQxMDRERTFBQTU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwM0QxQ0MwRkVFRTQyM0I5
MEY2NTNGMUE2QTcxRDEwNERFMUFBNTYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdCMkpMZERFc0NNaWF3M3prVmtZQU5YTDdDRHhiYU56aldHbmI2Mmo4S2s3LzAv
MzIzODMwMzQzYTMxMzQzMzYzM2E2NjY2NjMzMDNhM2EyZjM0MzQyZDM0MzQyMDNk
M2UyMDMyMzYzMzMzMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCgEFDz/wDANBgkqhkiG9w0BAQsF
AAOCAQEAQwnirBbqVZP5NTR/uJeWxjn1X4yjfg8E3jKM6/sHXCqbyW/0xRjv1gDP
GUuClgpQqT3AibiMWKKc8MmxW+TGQ9s3FOZjFE2XY5Wo8OZtXJaNB5wck4boR2iZ
TKbWzA0VSym05lXGIyonLV/MbPFZOM2jr8+D8j8ZoyBaW27nsZ7hRjQTF5bxaQB0
rd4A7QOIYHSD2/l7+AYHru9FYAwMcPOqy5Wcurs9MnGCBnA/gmpk3FiMeyj6zaFl
RH1WSSpZcnLOY/HOYn9e8J7cEy+a/3O7dzpwzK/i7vBCv4xUSFLd65/PKKzbrE5C
+D+/8s9A5PnyNOg885RbXo7ERVI/fw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:01:35 2025 by rpki-client