Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/323830343a323530343a3a2f33322d3332203d3e203532373038.roa
File: 323830343a323530343a3a2f33322d3332203d3e203532373038.roa (raw, json)
Hash identifier: R1XludmtN/YF6WewllYg62aI7HGK8ktQIJHSRbWRelw=
Subject key identifier: A0:4E:E2:81:22:0C:6E:16:29:94:C7:62:A2:DD:D0:40:02:AB:69:4E
Certificate issuer: /CN=5B5B5CB9EEF23947370DA03E71D6B051CB5C7641
Certificate serial: 126CB77249067746BE3BC6701608ED5C646EF154
Authority key identifier: 5B:5B:5C:B9:EE:F2:39:47:37:0D:A0:3E:71:D6:B0:51:CB:5C:76:41
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5B5CB9EEF23947370DA03E71D6B051CB5C7641.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/323830343a323530343a3a2f33322d3332203d3e203532373038.roa
Signing time: Tue 04 Jul 2023 20:16:35 +0000
ROA not before: Tue 04 Jul 2023 20:11:35 +0000
ROA not after: Tue 02 Jul 2024 20:16:35 +0000
asID: 52708
IP address blocks: 2804:2504::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:6c:b7:72:49:06:77:46:be:3b:c6:70:16:08:ed:5c:64:6e:f1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B5B5CB9EEF23947370DA03E71D6B051CB5C7641
Validity
Not Before: Jul 4 20:11:35 2023 GMT
Not After : Jul 2 20:16:35 2024 GMT
Subject: CN=A04EE281220C6E162994C762A2DDD04002AB694E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8b:7a:5c:24:af:13:ef:78:8f:19:0e:01:c6:
a7:63:fd:69:c7:65:ac:18:0b:6f:39:35:3e:78:92:
02:6e:63:0a:be:74:d7:28:c9:06:5d:77:f1:72:33:
a8:5b:a1:d2:5f:d4:96:32:d8:2f:12:84:14:4d:8d:
1a:83:bb:19:ef:0d:dc:3a:c2:f6:53:30:09:56:0c:
84:6e:00:ab:ed:25:d7:a1:5d:5e:a6:b7:b6:21:70:
c8:3e:2b:26:e6:47:cb:28:a8:79:c0:29:78:6d:6a:
4c:57:9d:b4:10:18:c7:fe:ca:68:7f:a2:8c:47:36:
ff:ed:5e:1f:ab:8f:ed:96:59:38:f8:c7:26:d6:07:
f1:b5:2f:90:b6:3a:cc:e6:d6:5d:71:d8:22:52:bc:
83:dc:88:a6:83:ab:54:c7:b0:f3:25:30:89:af:5e:
3e:46:de:ed:38:d2:bb:15:07:a5:9d:50:82:ff:13:
16:0a:79:96:6c:4e:d9:5a:30:bd:2e:e8:24:88:20:
0b:4a:94:a3:16:1e:f0:63:4d:47:94:8f:a5:2f:0c:
98:00:f9:a9:bb:fb:69:14:86:8b:a9:34:c0:84:b0:
a7:08:ac:87:4e:fc:dc:16:66:13:41:1e:f9:bb:d5:
01:9d:c5:de:98:6b:e6:6f:6c:40:0b:80:10:39:3e:
b9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4E:E2:81:22:0C:6E:16:29:94:C7:62:A2:DD:D0:40:02:AB:69:4E
X509v3 Authority Key Identifier:
keyid:5B:5B:5C:B9:EE:F2:39:47:37:0D:A0:3E:71:D6:B0:51:CB:5C:76:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/5B5B5CB9EEF23947370DA03E71D6B051CB5C7641.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5B5CB9EEF23947370DA03E71D6B051CB5C7641.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/323830343a323530343a3a2f33322d3332203d3e203532373038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2504::/32
Signature Algorithm: sha256WithRSAEncryption
5e:48:1c:17:71:1d:a6:67:7a:9d:ea:58:fb:b8:a6:9e:27:e9:
99:ed:4f:c4:60:14:c6:0a:db:d1:2e:d2:6a:62:c3:45:f6:b7:
a4:72:78:3b:0c:b3:76:9b:80:a9:6e:f9:55:a2:d6:53:a1:4c:
aa:26:f7:44:ba:3e:9e:3f:2d:48:ad:18:d6:4e:af:e2:95:1d:
8f:a4:19:a2:6b:50:55:6c:dc:5c:8e:ab:ce:c9:be:b5:40:8d:
67:cb:4f:00:6a:31:45:0c:92:e6:b8:6d:e5:2c:c6:09:3a:47:
b8:6d:bc:9f:52:50:78:57:27:3a:2d:b8:fc:a1:89:3c:dd:67:
51:c4:32:29:5c:6c:75:64:b7:08:6d:e2:a2:61:6f:05:1e:ed:
fb:0d:68:ec:90:c0:a8:1f:00:23:1a:fe:d7:d9:df:a5:9d:5f:
4d:7e:4a:73:b3:44:3d:54:f7:55:ae:88:1d:26:c6:84:41:b0:
c2:b2:ec:ca:13:84:4c:87:6b:20:94:19:21:82:53:9d:40:c5:
a0:fc:c1:29:70:80:6e:09:c1:1d:74:58:ab:b7:79:e5:81:78:
4d:bf:46:aa:a8:71:33:b9:dd:b2:7a:e4:23:e8:92:45:34:3f:
bb:b7:af:43:71:36:28:be:5c:f4:d9:bc:02:9a:bd:70:ce:a8:
dc:f3:8f:0c
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUEmy3ckkGd0a+O8ZwFgjtXGRu8VQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUI1QjVDQjlFRUYyMzk0NzM3MERBMDNFNzFENkIwNTFD
QjVDNzY0MTAeFw0yMzA3MDQyMDExMzVaFw0yNDA3MDIyMDE2MzVaMDMxMTAvBgNV
BAMTKEEwNEVFMjgxMjIwQzZFMTYyOTk0Qzc2MkEyREREMDQwMDJBQjY5NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQi3pcJK8T73iPGQ4Bxqdj/WnH
ZawYC285NT54kgJuYwq+dNcoyQZdd/FyM6hbodJf1JYy2C8ShBRNjRqDuxnvDdw6
wvZTMAlWDIRuAKvtJdehXV6mt7YhcMg+KybmR8soqHnAKXhtakxXnbQQGMf+ymh/
ooxHNv/tXh+rj+2WWTj4xybWB/G1L5C2Oszm1l1x2CJSvIPciKaDq1THsPMlMImv
Xj5G3u040rsVB6WdUIL/ExYKeZZsTtlaML0u6CSIIAtKlKMWHvBjTUeUj6UvDJgA
+am7+2kUhoupNMCEsKcIrIdO/NwWZhNBHvm71QGdxd6Ya+ZvbEALgBA5Prk7AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUoE7igSIMbhYplMdiot3QQAKraU4wHwYDVR0j
BBgwFoAUW1tcue7yOUc3DaA+cdawUctcdkEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXE2dUczYVdmQUJudEtibzh2NXBSckF0Zm9pTld5Z3dqZUxtbkVQdlhV
Z00vMC81QjVCNUNCOUVFRjIzOTQ3MzcwREEwM0U3MUQ2QjA1MUNCNUM3NjQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVCNUI1Q0I5RUVGMjM5NDcz
NzBEQTAzRTcxRDZCMDUxQ0I1Qzc2NDEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlxNnVHM2FXZkFCbnRLYm84djVwUnJBdGZvaU5XeWd3amVMbW5FUHZYVWdNLzAv
MzIzODMwMzQzYTMyMzUzMDM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzUzMjM3
MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEJQQwDQYJKoZIhvcNAQELBQADggEBAF5IHBdxHaZn
ep3qWPu4pp4n6ZntT8RgFMYK29Eu0mpiw0X2t6RyeDsMs3abgKlu+VWi1lOhTKom
90S6Pp4/LUitGNZOr+KVHY+kGaJrUFVs3FyOq87JvrVAjWfLTwBqMUUMkua4beUs
xgk6R7htvJ9SUHhXJzotuPyhiTzdZ1HEMilcbHVktwht4qJhbwUe7fsNaOyQwKgf
ACMa/tfZ36WdX01+SnOzRD1U91WuiB0mxoRBsMKy7MoThEyHayCUGSGCU51AxaD8
wSlwgG4JwR10WKu3eeWBeE2/RqqocTO53bJ65CPokkU0P7u3r0NxNii+XPTZvAKa
vXDOqNzzjww=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:42 2025 by rpki-client