Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/323830343a326566303a3a2f33322d313238203d3e20323634383632.roa
File: 323830343a326566303a3a2f33322d313238203d3e20323634383632.roa (raw, json)
Hash identifier: JeuAiHr0bODNMujYgdEo1NV3kbL++3Unotj20piKbv4=
Subject key identifier: E2:A8:15:07:70:8F:11:E5:16:88:46:7B:45:77:60:2C:3C:1A:8B:61
Certificate issuer: /CN=6857F0F3AF899445947CD4D6ED497776C359881F
Certificate serial: 40AD2B424910B2F08C68FAE1D1F523A7BF8C24CC
Authority key identifier: 68:57:F0:F3:AF:89:94:45:94:7C:D4:D6:ED:49:77:76:C3:59:88:1F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6857F0F3AF899445947CD4D6ED497776C359881F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/323830343a326566303a3a2f33322d313238203d3e20323634383632.roa
Signing time: Fri 01 Nov 2024 20:05:56 +0000
ROA not before: Fri 01 Nov 2024 20:00:56 +0000
ROA not after: Fri 31 Oct 2025 20:05:56 +0000
asID: 264862
IP address blocks: 2804:2ef0::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:ad:2b:42:49:10:b2:f0:8c:68:fa:e1:d1:f5:23:a7:bf:8c:24:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6857F0F3AF899445947CD4D6ED497776C359881F
Validity
Not Before: Nov 1 20:00:56 2024 GMT
Not After : Oct 31 20:05:56 2025 GMT
Subject: CN=E2A81507708F11E51688467B4577602C3C1A8B61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ef:1c:64:77:24:88:ad:7a:36:c5:53:36:b6:
62:d6:b9:76:e2:a3:94:9e:26:9f:d5:b6:57:fb:1f:
46:eb:55:cb:2c:f8:3a:d3:d8:26:59:de:8a:1f:f3:
95:35:94:0a:2c:f7:9b:68:8b:a2:27:e8:78:ee:d5:
ad:40:ba:61:47:ba:63:e2:2a:05:07:16:f6:91:57:
f6:a3:13:b3:06:03:06:0e:3d:77:b1:6f:cf:e4:c9:
88:dd:be:00:fb:b2:b2:fd:aa:9a:b8:71:84:af:93:
10:b6:4d:22:9e:5d:2d:44:47:fd:fe:aa:de:9f:d4:
6b:5e:d1:20:30:48:f4:6f:69:ff:61:71:8b:4a:e5:
f0:35:08:fa:1e:48:9e:f0:6d:be:db:79:d5:04:7c:
fd:e6:45:ed:a1:8e:9e:ed:83:69:99:a4:11:ff:3e:
d4:1d:ee:0e:fe:0e:2c:b4:1b:89:74:49:05:bd:65:
5d:a4:e6:c6:6f:0f:3a:2d:26:d8:a7:9e:ff:56:2c:
43:78:dc:43:a5:25:0d:63:09:4b:21:0b:02:38:e4:
de:b8:f3:2f:eb:52:25:00:e2:36:ad:77:57:c3:54:
3b:bc:e1:db:0b:c5:f6:cc:02:33:6b:d1:cf:8d:98:
48:66:55:84:ce:f8:a1:98:39:f8:c8:89:6f:6c:bb:
11:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A8:15:07:70:8F:11:E5:16:88:46:7B:45:77:60:2C:3C:1A:8B:61
X509v3 Authority Key Identifier:
keyid:68:57:F0:F3:AF:89:94:45:94:7C:D4:D6:ED:49:77:76:C3:59:88:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/6857F0F3AF899445947CD4D6ED497776C359881F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6857F0F3AF899445947CD4D6ED497776C359881F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/323830343a326566303a3a2f33322d313238203d3e20323634383632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2ef0::/32
Signature Algorithm: sha256WithRSAEncryption
aa:37:84:54:d0:36:15:88:01:ba:84:9f:27:5d:87:d3:cd:28:
9a:0a:0e:aa:c7:5f:c6:1a:c1:83:99:2a:6f:45:3c:6a:90:f4:
cb:90:25:a8:88:1d:fe:23:a6:86:1e:c1:8b:68:a0:9d:56:52:
5e:1c:b2:a6:69:b0:fc:28:29:4c:c9:9f:fe:ce:7e:0f:9c:30:
63:a5:d0:9b:6a:92:2c:6a:a9:97:bd:0a:56:90:15:a7:87:9f:
c0:d3:b0:01:9e:62:f9:48:51:d9:59:5a:d2:fd:6e:37:0a:ca:
40:da:1d:98:9f:70:91:54:ce:ce:1a:cc:a3:53:69:dc:e3:08:
15:9e:14:66:96:6d:59:d7:4c:46:73:ef:1e:33:cd:f6:71:fe:
28:83:a8:2a:c4:20:dd:4d:e2:6f:5f:77:29:c3:e2:e8:95:e1:
57:28:ea:00:1b:90:62:18:8d:d0:b2:7d:44:ee:85:39:71:0e:
8a:c9:be:c1:d4:a0:9c:53:cb:3b:31:84:76:75:d8:59:41:41:
39:3b:5c:f7:af:18:30:c8:f5:3c:03:dd:4c:d2:59:59:eb:ef:
63:dc:7e:8e:85:d0:f9:40:1f:03:40:db:86:f4:c9:ee:5e:42:
5c:1c:ed:bb:42:68:5e:e7:04:b5:70:d5:85:66:0b:46:44:cf:
d2:8b:e5:6a
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUQK0rQkkQsvCMaPrh0fUjp7+MJMwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg1N0YwRjNBRjg5OTQ0NTk0N0NENEQ2RUQ0OTc3NzZD
MzU5ODgxRjAeFw0yNDExMDEyMDAwNTZaFw0yNTEwMzEyMDA1NTZaMDMxMTAvBgNV
BAMTKEUyQTgxNTA3NzA4RjExRTUxNjg4NDY3QjQ1Nzc2MDJDM0MxQThCNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS7xxkdySIrXo2xVM2tmLWuXbi
o5SeJp/Vtlf7H0brVcss+DrT2CZZ3oof85U1lAos95toi6In6Hju1a1AumFHumPi
KgUHFvaRV/ajE7MGAwYOPXexb8/kyYjdvgD7srL9qpq4cYSvkxC2TSKeXS1ER/3+
qt6f1Gte0SAwSPRvaf9hcYtK5fA1CPoeSJ7wbb7bedUEfP3mRe2hjp7tg2mZpBH/
PtQd7g7+Diy0G4l0SQW9ZV2k5sZvDzotJtinnv9WLEN43EOlJQ1jCUshCwI45N64
8y/rUiUA4jatd1fDVDu84dsLxfbMAjNr0c+NmEhmVYTO+KGYOfjIiW9suxEBAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU4qgVB3CPEeUWiEZ7RXdgLDwai2EwHwYDVR0j
BBgwFoAUaFfw86+JlEWUfNTW7Ul3dsNZiB8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEdYY2gybm9CZGtHa2poTk05bXVnUnNnYWtwSzlEcHRIZlFqY0g2RldX
Y20vMC82ODU3RjBGM0FGODk5NDQ1OTQ3Q0Q0RDZFRDQ5Nzc3NkMzNTk4ODFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4NTdGMEYzQUY4OTk0NDU5
NDdDRDRENkVENDk3Nzc2QzM1OTg4MUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhHWGNoMm5vQmRrR2tqaE5NOW11Z1JzZ2FrcEs5RHB0SGZRamNINkZXV2NtLzAv
MzIzODMwMzQzYTMyNjU2NjMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzQzODM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBC7wMA0GCSqGSIb3DQEBCwUAA4IBAQCqN4RU
0DYViAG6hJ8nXYfTzSiaCg6qx1/GGsGDmSpvRTxqkPTLkCWoiB3+I6aGHsGLaKCd
VlJeHLKmabD8KClMyZ/+zn4PnDBjpdCbapIsaqmXvQpWkBWnh5/A07ABnmL5SFHZ
WVrS/W43CspA2h2Yn3CRVM7OGsyjU2nc4wgVnhRmlm1Z10xGc+8eM832cf4og6gq
xCDdTeJvX3cpw+LoleFXKOoAG5BiGI3Qsn1E7oU5cQ6Kyb7B1KCcU8s7MYR2ddhZ
QUE5O1z3rxgwyPU8A91M0llZ6+9j3H6OhdD5QB8DQNuG9MnuXkJcHO27Qmhe5wS1
cNWFZgtGRM/Si+Vq
-----END CERTIFICATE-----
Generated at Fri Mar 14 02:53:15 2025 by rpki-client