Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/1/323830343a333530383a3a2f33322d3332203d3e20323635343936.roa
File: 323830343a333530383a3a2f33322d3332203d3e20323635343936.roa (raw, json)
Hash identifier: LxGFZT95zdKvrkYefLxWYJgIVh0EgwXNM5HWyulKbmI=
Subject key identifier: F2:B8:74:CE:FD:F8:4B:AD:2A:48:D8:4E:E3:ED:B6:45:43:5E:B0:0F
Certificate issuer: /CN=F37624DFD975EAF07625C6087B663470695A2CB4
Certificate serial: 0B6B87E6DA360860E8D9D6D24A3C09DFC0FA87D3
Authority key identifier: F3:76:24:DF:D9:75:EA:F0:76:25:C6:08:7B:66:34:70:69:5A:2C:B4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F37624DFD975EAF07625C6087B663470695A2CB4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/1/323830343a333530383a3a2f33322d3332203d3e20323635343936.roa
Signing time: Wed 31 May 2023 02:32:37 +0000
ROA not before: Wed 31 May 2023 02:27:37 +0000
ROA not after: Wed 29 May 2024 02:32:37 +0000
asID: 265496
IP address blocks: 2804:3508::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:6b:87:e6:da:36:08:60:e8:d9:d6:d2:4a:3c:09:df:c0:fa:87:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F37624DFD975EAF07625C6087B663470695A2CB4
Validity
Not Before: May 31 02:27:37 2023 GMT
Not After : May 29 02:32:37 2024 GMT
Subject: CN=F2B874CEFDF84BAD2A48D84EE3EDB645435EB00F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:28:0d:4c:3b:3f:80:85:e1:05:c6:f3:4b:77:
93:8a:69:b3:c9:0a:f1:ad:16:48:e2:fd:8e:24:4c:
0d:87:30:a0:42:34:4a:7a:7f:f6:65:12:d5:5d:08:
96:cf:50:77:3d:1d:29:c9:be:f9:b6:21:d3:35:d7:
c0:ff:26:86:e5:9c:29:80:46:cc:19:7a:85:78:0b:
1c:e0:7a:8e:6c:f0:46:2f:1e:c9:a0:e6:a3:82:4b:
e1:ee:71:36:11:1c:7f:78:8c:c2:25:bf:81:5d:56:
2c:1d:56:38:62:c7:eb:65:89:b9:84:58:65:e5:fa:
6a:fd:f3:a0:72:a5:4d:a8:c0:57:f9:e2:52:c5:e2:
10:20:9c:21:d7:ee:3f:6c:a2:24:77:72:ee:fb:da:
93:17:24:b1:c4:7a:5a:4f:fc:70:8a:2a:e2:3a:41:
1f:f0:95:da:60:a3:46:55:84:e1:17:55:e6:c9:ff:
e2:ac:92:40:f0:9d:9e:71:84:b6:88:dc:fc:11:c7:
9e:e4:eb:65:d1:6f:8b:26:3a:d0:6d:09:80:22:bd:
24:10:72:4a:56:6c:78:60:e0:b0:82:75:ef:7b:04:
b5:8a:43:38:01:89:49:96:3f:ad:7e:c4:56:f5:8a:
2f:fa:4b:75:66:73:5c:3d:a8:86:5c:d6:11:bd:9e:
45:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B8:74:CE:FD:F8:4B:AD:2A:48:D8:4E:E3:ED:B6:45:43:5E:B0:0F
X509v3 Authority Key Identifier:
keyid:F3:76:24:DF:D9:75:EA:F0:76:25:C6:08:7B:66:34:70:69:5A:2C:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/1/F37624DFD975EAF07625C6087B663470695A2CB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F37624DFD975EAF07625C6087B663470695A2CB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/1/323830343a333530383a3a2f33322d3332203d3e20323635343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3508::/32
Signature Algorithm: sha256WithRSAEncryption
96:7e:13:1a:75:40:e1:1e:0c:aa:0d:52:78:74:1d:12:c0:c0:
e3:ac:1c:ea:27:1a:ab:bc:41:29:40:1f:69:44:2a:95:dd:45:
3f:7e:72:90:b3:b4:94:00:92:f4:a2:8b:98:17:cd:94:ce:5e:
f5:c9:8a:1d:9e:12:58:fc:d7:19:cf:ea:0b:ef:45:dd:30:5e:
8c:34:53:a8:3c:32:6e:ad:0b:fe:89:b0:5f:cf:16:e4:4c:92:
a8:36:ba:fc:f4:a0:7d:8d:bc:9b:5d:4e:bf:35:b0:1b:11:b7:
bd:0a:70:e0:6b:67:8c:92:b8:a5:e6:1d:40:d6:d6:ec:d5:62:
cb:cf:3b:8f:3f:fa:5f:26:44:01:81:db:33:9b:fd:c6:ae:01:
0f:50:98:75:b5:33:c1:ee:2c:bc:17:03:01:40:36:9d:fb:d6:
db:bc:97:2c:5c:72:9c:a7:11:7c:6d:52:db:7d:3f:95:e3:fa:
ca:c9:57:9f:26:3a:ba:69:1c:70:16:12:ef:e4:65:45:2a:dc:
e5:44:85:3d:4e:39:ae:66:d1:d2:36:3a:bf:9f:7d:dd:2f:71:
de:c1:3a:2a:ff:67:6b:77:4d:c4:c5:7b:e4:34:7c:14:05:39:
3d:44:ca:e7:f1:ed:f0:9b:45:c6:68:e1:8d:ea:2c:d9:66:72:
e9:26:de:8b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUC2uH5to2CGDo2dbSSjwJ38D6h9MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM3NjI0REZEOTc1RUFGMDc2MjVDNjA4N0I2NjM0NzA2
OTVBMkNCNDAeFw0yMzA1MzEwMjI3MzdaFw0yNDA1MjkwMjMyMzdaMDMxMTAvBgNV
BAMTKEYyQjg3NENFRkRGODRCQUQyQTQ4RDg0RUUzRURCNjQ1NDM1RUIwMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOKA1MOz+AheEFxvNLd5OKabPJ
CvGtFkji/Y4kTA2HMKBCNEp6f/ZlEtVdCJbPUHc9HSnJvvm2IdM118D/JoblnCmA
RswZeoV4Cxzgeo5s8EYvHsmg5qOCS+HucTYRHH94jMIlv4FdViwdVjhix+tlibmE
WGXl+mr986BypU2owFf54lLF4hAgnCHX7j9soiR3cu772pMXJLHEelpP/HCKKuI6
QR/wldpgo0ZVhOEXVebJ/+KskkDwnZ5xhLaI3PwRx57k62XRb4smOtBtCYAivSQQ
ckpWbHhg4LCCde97BLWKQzgBiUmWP61+xFb1ii/6S3Vmc1w9qIZc1hG9nkXrAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU8rh0zv34S60qSNhO4+22RUNesA8wHwYDVR0j
BBgwFoAU83Yk39l16vB2JcYIe2Y0cGlaLLQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTY4UWtLaWc1bzZtcjR1VFRhZFZ3SGVvNll0TUVzemtLOXhRY3FZQjFh
QXYvMS9GMzc2MjRERkQ5NzVFQUYwNzYyNUM2MDg3QjY2MzQ3MDY5NUEyQ0I0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YzNzYyNERGRDk3NUVBRjA3
NjI1QzYwODdCNjYzNDcwNjk1QTJDQjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzk2OFFrS2lnNW82bXI0dVRUYWRWd0hlbzZZdE1Fc3prSzl4UWNxWUIxYUF2LzEv
MzIzODMwMzQzYTMzMzUzMDM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzQzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ1CDANBgkqhkiG9w0BAQsFAAOCAQEAln4TGnVA
4R4Mqg1SeHQdEsDA46wc6icaq7xBKUAfaUQqld1FP35ykLO0lACS9KKLmBfNlM5e
9cmKHZ4SWPzXGc/qC+9F3TBejDRTqDwybq0L/omwX88W5EySqDa6/PSgfY28m11O
vzWwGxG3vQpw4GtnjJK4peYdQNbW7NViy887jz/6XyZEAYHbM5v9xq4BD1CYdbUz
we4svBcDAUA2nfvW27yXLFxynKcRfG1S230/leP6yslXnyY6umkccBYS7+RlRSrc
5USFPU45rmbR0jY6v5993S9x3sE6Kv9na3dNxMV75DR8FAU5PUTK5/Ht8JtFxmjh
jeos2WZy6Sbeiw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 12:15:58 2025 by rpki-client