Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/323830343a323939633a383030303a3a2f33332d3333203d3e20323634303235.roa
File: 323830343a323939633a383030303a3a2f33332d3333203d3e20323634303235.roa (raw, json)
Hash identifier: dli/0+bxQVkAhuYIgCAlARol1mbSt7AoW/XA7QAQx9A=
Subject key identifier: CF:CA:BC:C7:91:7E:D3:38:21:ED:A8:45:C2:77:9F:C6:19:16:44:EF
Certificate issuer: /CN=127CA2EA4F738F0137E50B22BAD957C5E6F5AA04
Certificate serial: 5E76476CFBEA5EEE44CD31C8A89D5CD5AC3D0502
Authority key identifier: 12:7C:A2:EA:4F:73:8F:01:37:E5:0B:22:BA:D9:57:C5:E6:F5:AA:04
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/323830343a323939633a383030303a3a2f33332d3333203d3e20323634303235.roa
Signing time: Mon 11 Mar 2024 12:33:06 +0000
ROA not before: Mon 11 Mar 2024 12:28:06 +0000
ROA not after: Mon 10 Mar 2025 12:33:06 +0000
asID: 264025
IP address blocks: 2804:299c:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:76:47:6c:fb:ea:5e:ee:44:cd:31:c8:a8:9d:5c:d5:ac:3d:05:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=127CA2EA4F738F0137E50B22BAD957C5E6F5AA04
Validity
Not Before: Mar 11 12:28:06 2024 GMT
Not After : Mar 10 12:33:06 2025 GMT
Subject: CN=CFCABCC7917ED33821EDA845C2779FC6191644EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:14:89:ef:c0:51:b3:99:be:57:b5:37:a8:ad:
a0:72:28:42:9e:98:9e:e7:a1:2f:f0:88:e1:2a:e7:
9c:65:7e:7a:69:3a:48:33:d7:53:7f:f1:cb:49:7d:
10:6f:7d:e7:d4:48:2c:ba:a3:c8:dd:28:3e:4b:58:
e9:77:1c:5c:a9:69:f0:3a:9f:de:f3:a4:a8:a8:ea:
cd:a9:3e:ee:6b:0b:17:db:33:0b:93:b8:85:3f:d5:
55:40:5d:27:03:dd:cb:96:c1:c5:1e:42:38:ae:7a:
41:28:51:94:00:91:45:0b:e3:07:1a:1f:a9:9b:87:
79:14:83:05:17:c8:30:7e:01:92:75:61:ca:3d:22:
92:90:44:39:81:a1:83:ee:6a:dd:29:6f:1c:90:82:
c7:af:0f:9b:26:1d:11:70:2a:f5:70:50:02:27:cd:
bf:f9:2b:87:a4:c5:fe:62:e5:ff:bd:ef:f0:72:53:
e5:90:14:1c:8f:52:d7:fc:c6:16:c7:b6:52:38:2b:
d2:c8:12:f2:b4:ec:12:ed:9c:32:24:c5:f7:be:95:
5b:53:63:88:cc:c9:da:84:a9:27:a1:25:ba:9f:81:
ab:a8:f0:e6:0b:21:5a:a9:e0:1e:02:ec:25:ee:70:
4f:e8:51:7a:71:6f:5a:d1:31:1f:3c:07:eb:bc:be:
c0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CA:BC:C7:91:7E:D3:38:21:ED:A8:45:C2:77:9F:C6:19:16:44:EF
X509v3 Authority Key Identifier:
keyid:12:7C:A2:EA:4F:73:8F:01:37:E5:0B:22:BA:D9:57:C5:E6:F5:AA:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/323830343a323939633a383030303a3a2f33332d3333203d3e20323634303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:299c:8000::/33
Signature Algorithm: sha256WithRSAEncryption
79:63:d2:f1:fc:37:20:78:bb:7f:63:9f:b5:f0:52:98:54:60:
4e:72:67:61:7c:8a:12:82:39:5f:eb:86:4f:68:93:1b:f3:86:
36:aa:68:7d:0e:43:81:e0:8d:82:27:8d:4e:74:82:f4:e4:cd:
96:7c:b7:7b:76:68:7f:3f:6b:8f:2b:03:f4:0b:c0:43:81:e3:
a9:39:53:83:1c:bb:24:59:27:1a:33:95:4a:dd:ab:4f:1c:af:
a1:23:2f:f9:45:30:7d:f8:6e:c5:b7:9e:91:a6:7d:7c:f0:ca:
90:2d:52:39:b6:23:8c:02:9e:90:4a:68:3c:51:c4:a1:f2:85:
b4:d2:83:fd:42:33:41:97:18:d2:16:16:55:99:9a:27:00:83:
da:24:8a:d9:6b:40:94:0c:8f:cc:b9:59:95:11:ae:19:a4:ae:
10:f8:ff:c1:60:53:37:69:5f:d4:97:8c:e2:90:f8:10:02:af:
b7:36:e3:84:59:c0:f0:56:b6:99:00:c3:0b:3d:3e:c1:b8:ea:
97:ca:27:bf:9f:2c:8e:16:fa:91:9a:a9:e7:31:e6:c1:a9:eb:
b6:5a:b0:a0:fd:b3:6c:14:fb:1d:bf:22:27:1a:be:23:75:e4:
58:5c:40:fd:7d:c7:6c:cb:77:c6:09:a1:77:5b:a0:ea:f3:72:
a9:b0:c4:a9
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUXnZHbPvqXu5EzTHIqJ1c1aw9BQIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI3Q0EyRUE0RjczOEYwMTM3RTUwQjIyQkFEOTU3QzVF
NkY1QUEwNDAeFw0yNDAzMTExMjI4MDZaFw0yNTAzMTAxMjMzMDZaMDMxMTAvBgNV
BAMTKENGQ0FCQ0M3OTE3RUQzMzgyMUVEQTg0NUMyNzc5RkM2MTkxNjQ0RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBFInvwFGzmb5XtTeoraByKEKe
mJ7noS/wiOEq55xlfnppOkgz11N/8ctJfRBvfefUSCy6o8jdKD5LWOl3HFypafA6
n97zpKio6s2pPu5rCxfbMwuTuIU/1VVAXScD3cuWwcUeQjiuekEoUZQAkUUL4wca
H6mbh3kUgwUXyDB+AZJ1Yco9IpKQRDmBoYPuat0pbxyQgsevD5smHRFwKvVwUAIn
zb/5K4ekxf5i5f+97/ByU+WQFByPUtf8xhbHtlI4K9LIEvK07BLtnDIkxfe+lVtT
Y4jMydqEqSehJbqfgauo8OYLIVqp4B4C7CXucE/oUXpxb1rRMR88B+u8vsDVAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUz8q8x5F+0zgh7ahFwnefxhkWRO8wHwYDVR0j
BBgwFoAUEnyi6k9zjwE35QsiutlXxeb1qgQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtLbXBMcjFkWUIyZGFnNTR4a1VNcjNueHZDZ3pSNVJETkNDVWp3QVdW
b3gvMC8xMjdDQTJFQTRGNzM4RjAxMzdFNTBCMjJCQUQ5NTdDNUU2RjVBQTA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEyN0NBMkVBNEY3MzhGMDEz
N0U1MEIyMkJBRDk1N0M1RTZGNUFBMDQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrS21wTHIxZFlCMmRhZzU0eGtVTXIzbnh2Q2d6UjVSRE5DQ1Vqd0FXVm94LzAv
MzIzODMwMzQzYTMyMzkzOTYzM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzNDMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEKZyAMA0GCSqGSIb3DQEBCwUA
A4IBAQB5Y9Lx/DcgeLt/Y5+18FKYVGBOcmdhfIoSgjlf64ZPaJMb84Y2qmh9DkOB
4I2CJ41OdIL05M2WfLd7dmh/P2uPKwP0C8BDgeOpOVODHLskWScaM5VK3atPHK+h
Iy/5RTB9+G7Ft56Rpn188MqQLVI5tiOMAp6QSmg8UcSh8oW00oP9QjNBlxjSFhZV
mZonAIPaJIrZa0CUDI/MuVmVEa4ZpK4Q+P/BYFM3aV/Ul4zikPgQAq+3NuOEWcDw
VraZAMMLPT7BuOqXyie/nyyOFvqRmqnnMebBqeu2WrCg/bNsFPsdvyInGr4jdeRY
XED9fcdsy3fGCaF3W6Dq83KpsMSp
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org