Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/96oBWju37PvrxkCthMwqU8pZReezqYsSr6ScyVFY8Jc3/0/323830343a323961343a3a2f33322d3332203d3e20323634303236.roa
File: 323830343a323961343a3a2f33322d3332203d3e20323634303236.roa (raw, json)
Hash identifier: 1AAKnnmimq1786Fmf7HNb8Ch/ZEPSrLzztU6mq17UzI=
Subject key identifier: C3:DC:90:D4:B4:4C:CF:A8:85:98:AE:E5:9E:4E:FE:8F:FF:B5:45:CA
Certificate issuer: /CN=40E329E137ACE9C947E72E009F44D35DDC786723
Certificate serial: 502C3E7B0C14A32D22DEBB7EBB229CFF5C598F03
Authority key identifier: 40:E3:29:E1:37:AC:E9:C9:47:E7:2E:00:9F:44:D3:5D:DC:78:67:23
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40E329E137ACE9C947E72E009F44D35DDC786723.cer
Subject info access: rsync://rpki-repo.registro.br/repo/96oBWju37PvrxkCthMwqU8pZReezqYsSr6ScyVFY8Jc3/0/323830343a323961343a3a2f33322d3332203d3e20323634303236.roa
Signing time: Sun 20 Nov 2022 13:30:37 +0000
ROA not before: Sun 20 Nov 2022 13:25:37 +0000
ROA not after: Sun 19 Nov 2023 13:30:37 +0000
asID: 264026
IP address blocks: 2804:29a4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:2c:3e:7b:0c:14:a3:2d:22:de:bb:7e:bb:22:9c:ff:5c:59:8f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40E329E137ACE9C947E72E009F44D35DDC786723
Validity
Not Before: Nov 20 13:25:37 2022 GMT
Not After : Nov 19 13:30:37 2023 GMT
Subject: CN=C3DC90D4B44CCFA88598AEE59E4EFE8FFFB545CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5a:bc:a7:f2:c1:a5:80:8a:4f:0a:17:bd:87:
8b:54:6d:3d:38:22:fe:0b:26:90:15:32:20:03:83:
61:50:2b:08:10:37:98:57:3d:c3:51:9c:9e:e1:49:
f9:8e:68:47:68:a6:25:17:53:a8:30:a9:46:95:d1:
2c:f6:df:15:59:80:a9:fc:f2:c1:77:0c:02:d6:9d:
16:27:dd:d3:62:3d:21:b0:98:3b:cf:4e:35:d2:b0:
c5:d4:83:bd:48:08:50:61:33:f0:f9:42:84:04:85:
93:74:62:bb:69:88:fb:53:2f:18:43:cb:50:66:0c:
46:a4:f4:8b:bb:24:4b:ee:ca:16:9f:3e:f9:06:2f:
b3:7d:89:94:0b:e3:eb:63:a0:cb:37:41:18:1c:b3:
20:09:4f:b8:c6:97:ad:b0:2e:05:ef:4d:70:4d:26:
2f:db:9b:a4:9c:60:a7:d3:ff:b5:5b:0e:ab:b4:46:
ea:ea:52:11:71:d4:2f:3f:4b:8c:49:aa:3a:c9:cb:
02:67:85:3a:04:40:17:d4:6d:50:1c:70:22:b1:0b:
60:01:4b:23:ab:d0:53:0c:f6:a9:04:30:9d:ff:e3:
71:54:0a:ac:98:75:ca:e2:c3:28:09:8d:1d:18:eb:
d1:bf:1d:7b:1c:2a:cd:6b:b3:18:f8:ed:7a:1c:d5:
2c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DC:90:D4:B4:4C:CF:A8:85:98:AE:E5:9E:4E:FE:8F:FF:B5:45:CA
X509v3 Authority Key Identifier:
keyid:40:E3:29:E1:37:AC:E9:C9:47:E7:2E:00:9F:44:D3:5D:DC:78:67:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/96oBWju37PvrxkCthMwqU8pZReezqYsSr6ScyVFY8Jc3/0/40E329E137ACE9C947E72E009F44D35DDC786723.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40E329E137ACE9C947E72E009F44D35DDC786723.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/96oBWju37PvrxkCthMwqU8pZReezqYsSr6ScyVFY8Jc3/0/323830343a323961343a3a2f33322d3332203d3e20323634303236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:29a4::/32
Signature Algorithm: sha256WithRSAEncryption
8d:74:c7:64:01:5c:26:d0:de:ed:99:ab:88:55:4a:0e:93:c0:
e5:71:04:e7:a9:0e:12:89:50:71:f2:ab:4e:30:12:b5:dd:c2:
cd:02:3e:32:5b:e7:e5:c5:4f:84:01:18:52:1d:6a:8f:dc:84:
6f:d3:f6:35:0f:e3:4a:8d:fd:a6:24:4c:b6:3b:03:0f:aa:e7:
e3:ad:5f:8d:cc:cb:cd:b8:c2:96:20:b0:f9:a1:46:21:d9:2c:
c3:9d:1e:ae:21:69:40:c6:f7:ea:64:c1:0f:77:c2:35:52:80:
d4:d2:a9:82:5c:34:8d:5a:bd:02:c5:fb:78:9b:6f:67:fc:39:
97:11:a5:47:b9:ac:88:02:fd:79:d2:aa:d7:61:61:a9:95:b8:
46:a0:a5:c5:39:a2:17:61:6e:a0:9b:28:54:84:8c:79:87:fb:
59:5e:94:88:95:95:26:e7:ac:4b:6b:66:19:02:c1:1c:da:32:
d3:a5:c2:b9:77:d3:61:fb:d0:2b:f5:d1:86:c8:46:b4:b1:69:
d4:25:36:e1:91:4a:b2:27:42:07:df:d5:a2:78:9c:fc:4e:ff:
c9:05:4a:08:d3:15:86:ba:1b:5b:42:55:c5:3f:cc:b1:51:1d:
3c:b9:76:24:30:a8:54:7d:e2:67:64:9c:1e:cc:61:c9:df:f9:
ef:45:fd:a3
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUUCw+ewwUoy0i3rt+uyKc/1xZjwMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBFMzI5RTEzN0FDRTlDOTQ3RTcyRTAwOUY0NEQzNURE
Qzc4NjcyMzAeFw0yMjExMjAxMzI1MzdaFw0yMzExMTkxMzMwMzdaMDMxMTAvBgNV
BAMTKEMzREM5MEQ0QjQ0Q0NGQTg4NTk4QUVFNTlFNEVGRThGRkZCNTQ1Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlWryn8sGlgIpPChe9h4tUbT04
Iv4LJpAVMiADg2FQKwgQN5hXPcNRnJ7hSfmOaEdopiUXU6gwqUaV0Sz23xVZgKn8
8sF3DALWnRYn3dNiPSGwmDvPTjXSsMXUg71ICFBhM/D5QoQEhZN0YrtpiPtTLxhD
y1BmDEak9Iu7JEvuyhafPvkGL7N9iZQL4+tjoMs3QRgcsyAJT7jGl62wLgXvTXBN
Ji/bm6ScYKfT/7VbDqu0RurqUhFx1C8/S4xJqjrJywJnhToEQBfUbVAccCKxC2AB
SyOr0FMM9qkEMJ3/43FUCqyYdcriwygJjR0Y69G/HXscKs1rsxj47Xoc1SwdAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUw9yQ1LRMz6iFmK7lnk7+j/+1RcowHwYDVR0j
BBgwFoAUQOMp4Tes6clH5y4An0TTXdx4ZyMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTZvQldqdTM3UHZyeGtDdGhNd3FVOHBaUmVlenFZc1NyNlNjeVZGWThK
YzMvMC80MEUzMjlFMTM3QUNFOUM5NDdFNzJFMDA5RjQ0RDM1RERDNzg2NzIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQwRTMyOUUxMzdBQ0U5Qzk0
N0U3MkUwMDlGNDREMzVEREM3ODY3MjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzk2b0JXanUzN1B2cnhrQ3RoTXdxVThwWlJlZXpxWXNTcjZTY3lWRlk4SmMzLzAv
MzIzODMwMzQzYTMyMzk2MTM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzAzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQppDANBgkqhkiG9w0BAQsFAAOCAQEAjXTHZAFc
JtDe7ZmriFVKDpPA5XEE56kOEolQcfKrTjAStd3CzQI+Mlvn5cVPhAEYUh1qj9yE
b9P2NQ/jSo39piRMtjsDD6rn461fjczLzbjCliCw+aFGIdksw50eriFpQMb36mTB
D3fCNVKA1NKpglw0jVq9AsX7eJtvZ/w5lxGlR7msiAL9edKq12FhqZW4RqClxTmi
F2FuoJsoVISMeYf7WV6UiJWVJuesS2tmGQLBHNoy06XCuXfTYfvQK/XRhshGtLFp
1CU24ZFKsidCB9/Vonic/E7/yQVKCNMVhrobW0JVxT/MsVEdPLl2JDCoVH3iZ2Sc
Hsxhyd/570X9ow==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:27:16 2025 by rpki-client