Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/0/323830343a356365633a3a2f33322d3438203d3e20323638393339.roa
File: 323830343a356365633a3a2f33322d3438203d3e20323638393339.roa (raw, json)
Hash identifier: M1KobmcVDtfpeGYyajIGnhlp6zyRmdrsC0LJg7goBTY=
Subject key identifier: 20:F8:4C:C6:22:36:21:B8:46:47:9D:D9:9A:06:9A:91:23:E1:CD:7A
Certificate issuer: /CN=844070BFA170F9C3D85A72401D93A864B2E4ACF0
Certificate serial: 1804B76DC86089B06F92788F263502EAB8605327
Authority key identifier: 84:40:70:BF:A1:70:F9:C3:D8:5A:72:40:1D:93:A8:64:B2:E4:AC:F0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/844070BFA170F9C3D85A72401D93A864B2E4ACF0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/0/323830343a356365633a3a2f33322d3438203d3e20323638393339.roa
Signing time: Thu 15 Feb 2024 23:40:01 +0000
ROA not before: Thu 15 Feb 2024 23:35:01 +0000
ROA not after: Thu 13 Feb 2025 23:40:01 +0000
asID: 268939
IP address blocks: 2804:5cec::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:04:b7:6d:c8:60:89:b0:6f:92:78:8f:26:35:02:ea:b8:60:53:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844070BFA170F9C3D85A72401D93A864B2E4ACF0
Validity
Not Before: Feb 15 23:35:01 2024 GMT
Not After : Feb 13 23:40:01 2025 GMT
Subject: CN=20F84CC6223621B846479DD99A069A9123E1CD7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d6:65:f8:92:6c:d3:2e:0e:8a:55:54:75:2f:
d8:60:12:fa:9f:d2:19:af:c8:08:39:6d:de:97:4d:
42:d6:d7:66:91:8d:f6:dc:fe:4b:3a:57:fe:08:97:
55:a7:17:3f:28:c7:f9:65:02:37:d9:e5:68:fc:95:
94:a5:be:ce:e4:24:7b:29:a6:12:dc:f0:12:74:19:
e6:a4:a6:25:e4:da:35:ae:16:f2:5a:bc:d5:a7:df:
f2:41:0e:f0:89:46:3a:3e:22:b3:da:cd:db:9c:91:
e5:36:68:5f:a4:bc:14:32:cd:22:29:c4:a7:c3:54:
01:ab:c8:0b:cd:32:fd:d7:f3:c4:92:8b:b9:ed:6d:
62:c2:ae:ab:55:5b:b8:53:81:bc:8a:19:78:75:04:
55:22:c4:f8:e3:d0:a5:c5:82:82:35:e0:d7:13:ce:
d4:2d:14:f6:32:f9:99:a0:7e:07:68:e6:a1:32:ec:
9c:d2:1f:d9:b3:af:bb:92:44:f3:95:ec:54:81:3a:
d3:29:ca:6c:f0:a7:63:5c:08:32:cd:0f:4e:f6:0f:
7f:f3:cc:78:88:02:b4:14:96:cd:df:4d:bd:53:01:
58:91:31:4c:88:08:25:3d:f4:88:8b:65:ad:68:ef:
ca:37:fd:a5:df:c5:45:97:35:f3:c1:93:87:20:09:
87:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F8:4C:C6:22:36:21:B8:46:47:9D:D9:9A:06:9A:91:23:E1:CD:7A
X509v3 Authority Key Identifier:
keyid:84:40:70:BF:A1:70:F9:C3:D8:5A:72:40:1D:93:A8:64:B2:E4:AC:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/0/844070BFA170F9C3D85A72401D93A864B2E4ACF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/844070BFA170F9C3D85A72401D93A864B2E4ACF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/0/323830343a356365633a3a2f33322d3438203d3e20323638393339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5cec::/32
Signature Algorithm: sha256WithRSAEncryption
58:51:20:4a:76:56:a8:b2:6d:f4:9d:ae:9c:67:95:00:8a:4d:
5c:72:66:ea:c9:87:04:53:ba:06:54:4d:b1:f0:f3:94:8c:5c:
0c:af:2b:5a:67:c6:7e:5b:d9:3d:5a:c5:7b:e6:7d:f3:32:59:
82:01:1c:63:00:70:a1:8a:58:ab:66:8e:af:71:a2:74:db:be:
15:90:86:53:91:b1:fd:f2:69:cf:54:02:ab:ec:37:97:bf:ac:
4d:b7:15:c4:18:d7:3e:97:51:80:c4:42:63:f5:7f:f6:a5:24:
c4:9f:db:f7:a4:dd:a6:c9:b2:99:cf:71:e8:3c:94:74:4a:a1:
09:63:b4:38:33:71:88:04:19:eb:46:00:0b:ec:22:a3:02:95:
1f:d7:05:d2:89:be:7b:72:7f:dd:80:15:7b:29:c4:04:67:a1:
8a:23:3c:bd:2e:be:87:9f:e6:6a:87:f4:57:2a:60:b8:75:2e:
0b:47:00:7f:69:e8:8d:4d:cb:40:87:af:8d:89:cf:4a:ac:44:
a1:d2:6a:e8:69:ac:4e:99:60:2f:ce:16:88:8e:0e:7f:7d:b5:
fc:b4:23:54:64:d7:7b:a4:3f:56:ac:46:99:15:78:2f:4a:7d:
6f:96:e7:24:80:12:5d:a4:5f:70:08:42:53:cf:6b:10:6e:84:
ac:44:10:08
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUGAS3bchgibBvkniPJjUC6rhgUycwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQ0MDcwQkZBMTcwRjlDM0Q4NUE3MjQwMUQ5M0E4NjRC
MkU0QUNGMDAeFw0yNDAyMTUyMzM1MDFaFw0yNTAyMTMyMzQwMDFaMDMxMTAvBgNV
BAMTKDIwRjg0Q0M2MjIzNjIxQjg0NjQ3OUREOTlBMDY5QTkxMjNFMUNEN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq1mX4kmzTLg6KVVR1L9hgEvqf
0hmvyAg5bd6XTULW12aRjfbc/ks6V/4Il1WnFz8ox/llAjfZ5Wj8lZSlvs7kJHsp
phLc8BJ0GeakpiXk2jWuFvJavNWn3/JBDvCJRjo+IrPazduckeU2aF+kvBQyzSIp
xKfDVAGryAvNMv3X88SSi7ntbWLCrqtVW7hTgbyKGXh1BFUixPjj0KXFgoI14NcT
ztQtFPYy+Zmgfgdo5qEy7JzSH9mzr7uSRPOV7FSBOtMpymzwp2NcCDLND072D3/z
zHiIArQUls3fTb1TAViRMUyICCU99IiLZa1o78o3/aXfxUWXNfPBk4cgCYcDAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUIPhMxiI2IbhGR53ZmgaakSPhzXowHwYDVR0j
BBgwFoAUhEBwv6Fw+cPYWnJAHZOoZLLkrPAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEpjS3hCZEo1Tlg5ZTh5blRaQ3Z2VUtpdlg3UDhocWFUQXc2aEtpa1BM
N3MvMC84NDQwNzBCRkExNzBGOUMzRDg1QTcyNDAxRDkzQTg2NEIyRTRBQ0YwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg0NDA3MEJGQTE3MEY5QzNE
ODVBNzI0MDFEOTNBODY0QjJFNEFDRjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhKY0t4QmRKNU5YOWU4eW5UWkN2dlVLaXZYN1A4aHFhVEF3NmhLaWtQTDdzLzAv
MzIzODMwMzQzYTM1NjM2NTYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4
MzkzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARc7DANBgkqhkiG9w0BAQsFAAOCAQEAWFEgSnZW
qLJt9J2unGeVAIpNXHJm6smHBFO6BlRNsfDzlIxcDK8rWmfGflvZPVrFe+Z98zJZ
ggEcYwBwoYpYq2aOr3GidNu+FZCGU5Gx/fJpz1QCq+w3l7+sTbcVxBjXPpdRgMRC
Y/V/9qUkxJ/b96Tdpsmymc9x6DyUdEqhCWO0ODNxiAQZ60YAC+wiowKVH9cF0om+
e3J/3YAVeynEBGehiiM8vS6+h5/maof0VypguHUuC0cAf2nojU3LQIevjYnPSqxE
odJq6GmsTplgL84WiI4Of321/LQjVGTXe6Q/VqxGmRV4L0p9b5bnJIASXaRfcAhC
U89rEG6ErEQQCA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:41 2025 by rpki-client