Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/323830343a353666303a323030303a3a2f33352d3335203d3e20323638303333.roa
File: 323830343a353666303a323030303a3a2f33352d3335203d3e20323638303333.roa (raw, json)
Hash identifier: E11OuFjL5ngaUSsI9QL8D+f3Dr+NtYkstJqZFlvP2S8=
Subject key identifier: 4B:15:DF:71:FC:C9:A0:1E:81:66:E1:A4:DE:93:B1:70:0A:3A:D0:F3
Certificate issuer: /CN=EB84E09364662EDCA9ADD7153DBD782F05779B3C
Certificate serial: 3C1B93772719A9B47F1FEBD0412703E3031683A7
Authority key identifier: EB:84:E0:93:64:66:2E:DC:A9:AD:D7:15:3D:BD:78:2F:05:77:9B:3C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB84E09364662EDCA9ADD7153DBD782F05779B3C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/323830343a353666303a323030303a3a2f33352d3335203d3e20323638303333.roa
Signing time: Thu 31 Oct 2024 14:03:02 +0000
ROA not before: Thu 31 Oct 2024 13:58:02 +0000
ROA not after: Thu 30 Oct 2025 14:03:02 +0000
asID: 268033
IP address blocks: 2804:56f0:2000::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:1b:93:77:27:19:a9:b4:7f:1f:eb:d0:41:27:03:e3:03:16:83:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB84E09364662EDCA9ADD7153DBD782F05779B3C
Validity
Not Before: Oct 31 13:58:02 2024 GMT
Not After : Oct 30 14:03:02 2025 GMT
Subject: CN=4B15DF71FCC9A01E8166E1A4DE93B1700A3AD0F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:55:9f:6c:13:18:39:b6:45:77:a7:0c:7b:37:
4b:bf:04:05:9c:b2:87:0b:5c:3c:14:eb:bb:c9:db:
4e:3c:c6:f0:be:5c:9f:4e:67:72:b7:d3:19:57:50:
e8:59:a1:dd:8f:0a:ba:5f:c0:6c:3f:4e:31:1f:a4:
05:6c:05:7a:08:42:25:f4:a8:3a:bc:b8:c1:25:92:
f9:af:86:c4:13:58:6c:3e:ba:3c:b9:1a:3c:81:1e:
9b:ad:68:81:97:63:7c:a1:49:ea:14:b4:1e:43:80:
d5:e6:34:99:d1:d6:9b:a9:80:e7:9f:d0:81:d7:96:
dd:72:7f:65:6b:2b:be:c7:37:f2:4f:ca:61:36:39:
4a:b5:df:57:9b:86:27:82:2b:7b:d1:de:a9:8d:b1:
cc:6f:a2:7e:d3:6b:e0:a7:64:40:4c:38:04:48:ea:
cb:c3:16:23:86:7f:d5:f6:9f:2f:fb:0f:40:e9:24:
e3:b7:54:59:17:0e:33:2c:04:8d:85:be:a5:15:c6:
83:db:6b:fe:90:24:54:49:33:5d:c4:62:6c:40:f2:
c0:6e:8e:e7:10:d2:05:fd:02:a5:64:d2:5b:b2:96:
79:ea:90:5d:2d:54:01:b9:ec:cc:75:f8:b5:74:01:
4c:7f:42:c7:60:14:9d:2c:fa:0e:4e:36:c2:72:80:
c5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:15:DF:71:FC:C9:A0:1E:81:66:E1:A4:DE:93:B1:70:0A:3A:D0:F3
X509v3 Authority Key Identifier:
keyid:EB:84:E0:93:64:66:2E:DC:A9:AD:D7:15:3D:BD:78:2F:05:77:9B:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/EB84E09364662EDCA9ADD7153DBD782F05779B3C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB84E09364662EDCA9ADD7153DBD782F05779B3C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/323830343a353666303a323030303a3a2f33352d3335203d3e20323638303333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:56f0:2000::/35
Signature Algorithm: sha256WithRSAEncryption
83:cd:a9:67:62:5c:9b:5b:79:74:67:90:0b:d2:f5:75:5e:1e:
8a:2c:76:bf:02:b6:de:bc:3e:e8:2a:8f:9c:bf:08:4b:85:9f:
46:ab:34:41:1b:6b:e6:43:7c:20:5f:1c:82:64:85:e3:69:ab:
c5:6b:a7:14:ae:82:c8:21:6b:c3:d9:c6:a2:58:58:4c:36:e9:
ce:89:4f:07:78:49:2d:b3:06:6e:7b:68:b3:5d:26:5f:b5:79:
7b:fb:d6:4d:f1:0b:da:34:55:b9:53:71:18:b2:96:da:ed:3c:
e1:52:48:40:23:c7:9a:07:40:6e:2a:f4:65:75:8f:7f:2b:2f:
49:f2:75:11:66:24:a6:86:f0:37:cc:35:79:0f:70:25:b7:32:
65:18:f4:8c:5a:d9:b9:52:71:9e:e0:d5:98:74:1a:78:2c:58:
40:98:33:fb:e2:72:02:44:8a:3c:62:09:1c:d2:99:76:73:03:
72:ed:28:4c:5e:a2:86:71:70:e8:f1:07:0d:64:a5:2b:7f:41:
19:8a:f9:13:2a:9d:8f:cb:d6:52:78:52:93:79:fd:2f:a9:d0:
b2:11:ac:4b:d3:1d:62:9a:8c:19:4a:65:f9:4d:2d:0d:b6:4e:
c7:45:49:ae:a8:bf:25:4e:f6:f5:3f:e6:38:4a:9e:fa:a4:dd:
1b:16:30:35
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUPBuTdycZqbR/H+vQQScD4wMWg6cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUI4NEUwOTM2NDY2MkVEQ0E5QURENzE1M0RCRDc4MkYw
NTc3OUIzQzAeFw0yNDEwMzExMzU4MDJaFw0yNTEwMzAxNDAzMDJaMDMxMTAvBgNV
BAMTKDRCMTVERjcxRkNDOUEwMUU4MTY2RTFBNERFOTNCMTcwMEEzQUQwRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeVZ9sExg5tkV3pwx7N0u/BAWc
socLXDwU67vJ2048xvC+XJ9OZ3K30xlXUOhZod2PCrpfwGw/TjEfpAVsBXoIQiX0
qDq8uMElkvmvhsQTWGw+ujy5GjyBHputaIGXY3yhSeoUtB5DgNXmNJnR1pupgOef
0IHXlt1yf2VrK77HN/JPymE2OUq131ebhieCK3vR3qmNscxvon7Ta+CnZEBMOARI
6svDFiOGf9X2ny/7D0DpJOO3VFkXDjMsBI2FvqUVxoPba/6QJFRJM13EYmxA8sBu
jucQ0gX9AqVk0luylnnqkF0tVAG57Mx1+LV0AUx/QsdgFJ0s+g5ONsJygMXHAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUSxXfcfzJoB6BZuGk3pOxcAo60PMwHwYDVR0j
BBgwFoAU64Tgk2RmLtyprdcVPb14LwV3mzwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUY0cU5rWFVrbjRHbm1LVWRuSGZKV2dFSHV0Z2Nnd0FkWEFOZjU5UHE2
ajIvMC9FQjg0RTA5MzY0NjYyRURDQTlBREQ3MTUzREJENzgyRjA1Nzc5QjNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VCODRFMDkzNjQ2NjJFRENB
OUFERDcxNTNEQkQ3ODJGMDU3NzlCM0MuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FGNHFOa1hVa240R25tS1VkbkhmSldnRUh1dGdjZ3dBZFhBTmY1OVBxNmoyLzAv
MzIzODMwMzQzYTM1MzY2NjMwM2EzMjMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDMyMzYzODMwMzMzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEVvAgMA0GCSqGSIb3DQEBCwUA
A4IBAQCDzalnYlybW3l0Z5AL0vV1Xh6KLHa/ArbevD7oKo+cvwhLhZ9GqzRBG2vm
Q3wgXxyCZIXjaavFa6cUroLIIWvD2caiWFhMNunOiU8HeEktswZue2izXSZftXl7
+9ZN8QvaNFW5U3EYspba7TzhUkhAI8eaB0BuKvRldY9/Ky9J8nURZiSmhvA3zDV5
D3AltzJlGPSMWtm5UnGe4NWYdBp4LFhAmDP74nICRIo8Ygkc0pl2cwNy7ShMXqKG
cXDo8QcNZKUrf0EZivkTKp2Py9ZSeFKTef0vqdCyEaxL0x1imowZSmX5TS0Ntk7H
RUmuqL8lTvb1P+Y4Sp76pN0bFjA1
-----END CERTIFICATE-----
Generated at Sun Apr 13 18:25:10 2025 by rpki-client