Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/323830343a336430303a3a2f33332d3333203d3e20323636323437.roa
File: 323830343a336430303a3a2f33332d3333203d3e20323636323437.roa (raw, json)
Hash identifier: OxeozPWFGH9xnpDS4whK3NBx8koR8dIdGuNefeU5478=
Subject key identifier: 85:FA:E6:6D:13:5F:81:2F:68:3B:08:38:1F:76:E9:0C:FA:96:8B:4C
Certificate issuer: /CN=33C080E6201C3118EC8E437DCF9D314BBCFC74BE
Certificate serial: 21CB2568177029930556FAB9FAE1F0CAB3E1C45D
Authority key identifier: 33:C0:80:E6:20:1C:31:18:EC:8E:43:7D:CF:9D:31:4B:BC:FC:74:BE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33C080E6201C3118EC8E437DCF9D314BBCFC74BE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/323830343a336430303a3a2f33332d3333203d3e20323636323437.roa
Signing time: Tue 18 Jan 2022 13:49:47 +0000
ROA not before: Tue 18 Jan 2022 13:44:47 +0000
ROA not after: Tue 17 Jan 2023 13:49:47 +0000
asID: 266247
IP address blocks: 2804:3d00::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:cb:25:68:17:70:29:93:05:56:fa:b9:fa:e1:f0:ca:b3:e1:c4:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33C080E6201C3118EC8E437DCF9D314BBCFC74BE
Validity
Not Before: Jan 18 13:44:47 2022 GMT
Not After : Jan 17 13:49:47 2023 GMT
Subject: CN=85FAE66D135F812F683B08381F76E90CFA968B4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ec:5e:f6:f3:0d:25:2b:20:15:f6:d3:e9:93:
b0:a7:1c:01:a0:6b:dc:1e:cc:2f:e5:1c:69:86:70:
1d:6d:23:4b:c5:19:26:35:0b:16:4e:4d:3d:9a:8f:
72:7e:ec:56:b6:b9:6f:5f:c8:2d:86:52:16:44:c3:
64:78:73:2c:31:9f:42:c9:62:68:ab:ef:a7:6d:49:
8f:f1:7c:32:08:c0:50:8d:07:67:93:80:bb:22:eb:
35:7a:f5:97:99:c8:94:36:70:63:97:4b:6e:b0:84:
7e:4e:68:6a:05:c6:92:2c:c0:7d:9a:3e:0f:b0:34:
61:aa:35:00:c1:4f:91:68:6d:c9:cf:dd:e1:50:a0:
60:10:f0:4e:c4:69:be:66:61:5c:71:3f:45:c9:81:
41:71:b0:3f:3d:97:04:64:4b:64:86:a1:91:7d:27:
bd:8d:45:cf:49:93:19:e1:0a:89:02:3e:d4:9c:f3:
59:a9:d0:df:de:69:3b:68:80:5e:66:85:af:80:c0:
f0:d5:3f:b1:63:93:7b:0a:1c:21:54:dc:a8:e7:d1:
31:69:1f:49:ed:05:ff:eb:5e:b1:84:76:7e:95:ce:
3c:c1:74:9f:cd:77:dc:fa:62:ce:59:c2:eb:59:00:
c2:f2:be:35:67:fb:4f:d4:74:4a:7c:fc:d3:81:59:
3f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:FA:E6:6D:13:5F:81:2F:68:3B:08:38:1F:76:E9:0C:FA:96:8B:4C
X509v3 Authority Key Identifier:
keyid:33:C0:80:E6:20:1C:31:18:EC:8E:43:7D:CF:9D:31:4B:BC:FC:74:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/33C080E6201C3118EC8E437DCF9D314BBCFC74BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33C080E6201C3118EC8E437DCF9D314BBCFC74BE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/323830343a336430303a3a2f33332d3333203d3e20323636323437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3d00::/33
Signature Algorithm: sha256WithRSAEncryption
86:cc:65:23:39:2a:86:0b:98:de:f4:c6:6e:b6:be:7c:e5:0b:
9e:14:9e:ed:85:22:b2:c6:93:c5:dc:ad:e9:f1:4f:12:d7:8a:
ba:f3:5f:2c:06:8b:b3:88:da:da:ad:99:01:6a:29:ce:ac:74:
b4:11:fc:7c:d6:5c:37:50:c8:21:cd:52:8b:56:58:6a:48:b7:
06:f2:41:d2:e0:8c:9f:7f:f1:22:78:a7:ee:24:a9:b9:55:07:
a5:3a:09:3b:17:70:98:88:65:6d:71:05:d8:43:f7:60:c1:fa:
2b:cf:48:72:7b:47:73:f4:72:a6:7f:42:40:56:aa:dc:68:8a:
29:53:11:1d:cc:e4:b8:61:47:33:b1:55:6d:fc:88:14:c0:77:
2c:d5:2b:6e:b3:bc:2d:62:91:b4:4f:03:70:c0:d7:47:b4:d7:
e1:30:c5:49:54:14:f2:c2:fd:75:5c:cf:00:a6:15:98:3f:a4:
1c:fd:03:a7:4a:49:91:6e:10:51:b5:1d:a2:db:a6:86:e8:de:
5a:7a:0d:aa:33:7b:ac:4c:56:02:3e:87:a9:f4:17:1c:3e:b4:
40:b7:77:7f:fb:d1:d5:b9:0d:6d:2c:01:84:41:d0:98:1a:53:
6c:f8:f1:db:28:7d:45:77:05:66:7d:30:34:f7:9b:24:42:2d:
8b:0c:10:7b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIcslaBdwKZMFVvq5+uHwyrPhxF0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzNDMDgwRTYyMDFDMzExOEVDOEU0MzdEQ0Y5RDMxNEJC
Q0ZDNzRCRTAeFw0yMjAxMTgxMzQ0NDdaFw0yMzAxMTcxMzQ5NDdaMDMxMTAvBgNV
BAMTKDg1RkFFNjZEMTM1RjgxMkY2ODNCMDgzODFGNzZFOTBDRkE5NjhCNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv7F728w0lKyAV9tPpk7CnHAGg
a9wezC/lHGmGcB1tI0vFGSY1CxZOTT2aj3J+7Fa2uW9fyC2GUhZEw2R4cywxn0LJ
Ymir76dtSY/xfDIIwFCNB2eTgLsi6zV69ZeZyJQ2cGOXS26whH5OaGoFxpIswH2a
Pg+wNGGqNQDBT5FobcnP3eFQoGAQ8E7Eab5mYVxxP0XJgUFxsD89lwRkS2SGoZF9
J72NRc9JkxnhCokCPtSc81mp0N/eaTtogF5mha+AwPDVP7Fjk3sKHCFU3Kjn0TFp
H0ntBf/rXrGEdn6VzjzBdJ/Nd9z6Ys5ZwutZAMLyvjVn+0/UdEp8/NOBWT9VAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUhfrmbRNfgS9oOwg4H3bpDPqWi0wwHwYDVR0j
BBgwFoAUM8CA5iAcMRjsjkN9z50xS7z8dL4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTlWa3RBeW55bmY0QmJLNHRwZGdCNmZSeTJjQnZTNW1rU2JjVmhYY2tk
N2IvMC8zM0MwODBFNjIwMUMzMTE4RUM4RTQzN0RDRjlEMzE0QkJDRkM3NEJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMzQzA4MEU2MjAxQzMxMThF
QzhFNDM3RENGOUQzMTRCQkNGQzc0QkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E5Vmt0QXlueW5mNEJiSzR0cGRnQjZmUnkyY0J2UzVta1NiY1ZoWGNrZDdiLzAv
MzIzODMwMzQzYTMzNjQzMDMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM2
MzIzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQ9AAAwDQYJKoZIhvcNAQELBQADggEBAIbMZSM5
KoYLmN70xm62vnzlC54Unu2FIrLGk8XcrenxTxLXirrzXywGi7OI2tqtmQFqKc6s
dLQR/HzWXDdQyCHNUotWWGpItwbyQdLgjJ9/8SJ4p+4kqblVB6U6CTsXcJiIZW1x
BdhD92DB+ivPSHJ7R3P0cqZ/QkBWqtxoiilTER3M5LhhRzOxVW38iBTAdyzVK26z
vC1ikbRPA3DA10e01+EwxUlUFPLC/XVczwCmFZg/pBz9A6dKSZFuEFG1HaLbpobo
3lp6Daoze6xMVgI+h6n0Fxw+tEC3d3/70dW5DW0sAYRB0JgaU2z48dsofUV3BWZ9
MDT3myRCLYsMEHs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org