Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/0/323830313a38303a3a2f34382d3438203d3e203238363436.roa
File: 323830313a38303a3a2f34382d3438203d3e203238363436.roa (raw, json)
Hash identifier: ewguFnFX0UNZRSOKh8cpy497Fy7lNlNuscRO5CfcpfI=
Subject key identifier: 31:69:48:09:62:7D:29:AE:9D:76:ED:5C:ED:B0:B2:CD:83:AE:86:B4
Certificate issuer: /CN=D33B838B6A42A35FB4291F4D13A1F247DFB53A22
Certificate serial: 291E9991B3760C6E4564225357F7B4636211E190
Authority key identifier: D3:3B:83:8B:6A:42:A3:5F:B4:29:1F:4D:13:A1:F2:47:DF:B5:3A:22
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D33B838B6A42A35FB4291F4D13A1F247DFB53A22.cer
Subject info access: rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/0/323830313a38303a3a2f34382d3438203d3e203238363436.roa
Signing time: Fri 16 Feb 2024 17:03:06 +0000
ROA not before: Fri 16 Feb 2024 16:58:06 +0000
ROA not after: Fri 14 Feb 2025 17:03:06 +0000
asID: 28646
IP address blocks: 2801:80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:1e:99:91:b3:76:0c:6e:45:64:22:53:57:f7:b4:63:62:11:e1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D33B838B6A42A35FB4291F4D13A1F247DFB53A22
Validity
Not Before: Feb 16 16:58:06 2024 GMT
Not After : Feb 14 17:03:06 2025 GMT
Subject: CN=31694809627D29AE9D76ED5CEDB0B2CD83AE86B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:97:26:e8:e9:eb:c2:17:5e:68:5a:e8:9c:70:
b0:4a:be:d2:d2:5c:01:b3:1a:42:69:31:2d:48:58:
fd:af:ad:0a:a6:68:7c:9d:90:a6:78:51:ee:d5:ab:
6a:ef:08:f7:e6:7a:f1:74:ef:93:b5:2f:0b:13:06:
30:45:09:71:fb:db:ef:f5:2c:4b:46:0e:ab:a7:cf:
09:77:1c:57:48:a7:f3:ba:43:49:20:79:8e:8a:90:
cb:f2:92:ed:2d:80:b8:f8:88:d5:90:fe:74:98:2d:
e5:5e:4c:6f:ee:b6:3c:e5:c1:d6:cd:76:e6:da:76:
fc:c8:6d:61:57:25:5b:5e:29:a1:e7:c4:1e:b7:ef:
fa:ad:a2:71:1e:35:78:3f:10:7b:6e:2e:93:13:e2:
63:87:8a:c3:09:b8:8b:3f:cc:2f:79:ec:bb:ff:80:
89:a3:26:7f:cc:0a:34:25:63:71:dd:2f:05:7f:a8:
62:cf:2b:dd:fb:e9:35:7d:21:99:a6:a9:cd:a1:78:
b6:94:63:64:18:76:bc:a0:23:73:7e:b2:89:a4:23:
53:be:f4:e9:a0:9f:69:43:b1:58:aa:e8:a9:c8:7d:
c1:59:68:34:82:db:3f:2c:12:9d:2a:f2:69:95:d2:
4c:b0:3d:bc:c1:5c:0b:69:41:76:ac:87:ae:77:49:
85:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:69:48:09:62:7D:29:AE:9D:76:ED:5C:ED:B0:B2:CD:83:AE:86:B4
X509v3 Authority Key Identifier:
keyid:D3:3B:83:8B:6A:42:A3:5F:B4:29:1F:4D:13:A1:F2:47:DF:B5:3A:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/0/D33B838B6A42A35FB4291F4D13A1F247DFB53A22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D33B838B6A42A35FB4291F4D13A1F247DFB53A22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/0/323830313a38303a3a2f34382d3438203d3e203238363436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:80::/48
Signature Algorithm: sha256WithRSAEncryption
9b:6c:7e:56:f0:ca:4e:fa:a0:45:af:e1:4c:60:69:91:0e:b3:
5a:b2:12:70:7e:47:3f:a1:76:4c:11:61:14:bc:86:0d:78:44:
ce:78:f4:84:90:05:0d:61:a4:13:76:13:1c:91:da:2c:99:4d:
69:f5:b8:1f:b3:c1:2c:61:7d:aa:e4:9f:b2:52:7c:9d:11:be:
3b:9d:bb:bb:c4:c2:a5:14:aa:3d:e4:eb:6e:af:a3:86:b4:a6:
7f:89:eb:e5:3e:76:96:82:0a:e8:23:93:12:8d:84:8e:d5:42:
6a:40:63:8a:87:f2:48:63:03:1f:47:c7:f2:29:71:04:01:53:
d8:46:55:ff:23:2d:28:5d:4e:1f:a9:86:e4:5d:93:8a:e9:ce:
f4:5a:09:2e:7f:bf:93:35:57:bd:ab:17:f7:b0:0c:af:80:d9:
dd:71:cf:5e:29:8e:22:c5:b6:b4:3f:59:ae:50:1a:d7:21:3d:
1b:39:a4:7c:b6:07:14:91:dd:db:59:64:80:77:04:53:8c:73:
6b:2e:75:8e:12:15:cf:1d:73:cc:87:41:fc:2e:58:43:4e:50:
81:5d:cc:95:01:7d:55:39:6f:54:9f:13:bb:9b:bd:57:51:a2:
57:df:97:e6:e1:cb:b1:cc:9d:a6:1a:ca:d0:20:17:f0:13:52:
2e:ae:05:ef
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUKR6ZkbN2DG5FZCJTV/e0Y2IR4ZAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDMzQjgzOEI2QTQyQTM1RkI0MjkxRjREMTNBMUYyNDdE
RkI1M0EyMjAeFw0yNDAyMTYxNjU4MDZaFw0yNTAyMTQxNzAzMDZaMDMxMTAvBgNV
BAMTKDMxNjk0ODA5NjI3RDI5QUU5RDc2RUQ1Q0VEQjBCMkNEODNBRTg2QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVlybo6evCF15oWuiccLBKvtLS
XAGzGkJpMS1IWP2vrQqmaHydkKZ4Ue7Vq2rvCPfmevF075O1LwsTBjBFCXH72+/1
LEtGDqunzwl3HFdIp/O6Q0kgeY6KkMvyku0tgLj4iNWQ/nSYLeVeTG/utjzlwdbN
dubadvzIbWFXJVteKaHnxB637/qtonEeNXg/EHtuLpMT4mOHisMJuIs/zC957Lv/
gImjJn/MCjQlY3HdLwV/qGLPK9376TV9IZmmqc2heLaUY2QYdrygI3N+somkI1O+
9Omgn2lDsViq6KnIfcFZaDSC2z8sEp0q8mmV0kywPbzBXAtpQXash653SYURAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUMWlICWJ9Ka6ddu1c7bCyzYOuhrQwHwYDVR0j
BBgwFoAU0zuDi2pCo1+0KR9NE6HyR9+1OiIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTFkc0dUc3hXQ3hQRUdUUVF1YWpOU2E0OFI0dkRFNE1nVnc1dkJhYmdF
THgvMC9EMzNCODM4QjZBNDJBMzVGQjQyOTFGNEQxM0ExRjI0N0RGQjUzQTIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QzM0I4MzhCNkE0MkEzNUZC
NDI5MUY0RDEzQTFGMjQ3REZCNTNBMjIuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCB
kwYIKwYBBQUHMAuGgYZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzkxZHNHVHN4V0N4UEVHVFFRdWFqTlNhNDhSNHZERTRNZ1Z3NXZCYWJnRUx4LzAv
MzIzODMwMzEzYTM4MzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM4MzYzNDM2
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMw
ETAPBAIAAjAJAwcAKAEAgAAAMA0GCSqGSIb3DQEBCwUAA4IBAQCbbH5W8MpO+qBF
r+FMYGmRDrNashJwfkc/oXZMEWEUvIYNeETOePSEkAUNYaQTdhMckdosmU1p9bgf
s8EsYX2q5J+yUnydEb47nbu7xMKlFKo95Otur6OGtKZ/ievlPnaWggroI5MSjYSO
1UJqQGOKh/JIYwMfR8fyKXEEAVPYRlX/Iy0oXU4fqYbkXZOK6c70Wgkuf7+TNVe9
qxf3sAyvgNndcc9eKY4ixba0P1muUBrXIT0bOaR8tgcUkd3bWWSAdwRTjHNrLnWO
EhXPHXPMh0H8LlhDTlCBXcyVAX1VOW9UnxO7m71XUaJX35fm4cuxzJ2mGsrQIBfw
E1IurgXv
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:45 2025 by rpki-client