Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/323830343a336261383a666630303a3a2f34302d3430203d3e20323636313633.roa
File: 323830343a336261383a666630303a3a2f34302d3430203d3e20323636313633.roa (raw, json)
Hash identifier: R0LskdA7TOQ/HNVxlbKEDLp4Zg/M0wQW+QoNWDq18po=
Subject key identifier: 2C:D0:00:5C:39:4D:9F:5E:10:19:2C:93:13:AE:A2:D9:84:45:01:6F
Certificate issuer: /CN=2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87
Certificate serial: 468679EBBC1827C1A3D06007E462CC8338A52D48
Authority key identifier: 2B:AF:E0:86:77:92:E7:C6:6C:D4:11:36:79:F3:E9:B7:AD:5F:1E:87
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/323830343a336261383a666630303a3a2f34302d3430203d3e20323636313633.roa
Signing time: Fri 20 Dec 2024 21:17:08 +0000
ROA not before: Fri 20 Dec 2024 21:12:08 +0000
ROA not after: Fri 19 Dec 2025 21:17:08 +0000
asID: 266163
IP address blocks: 2804:3ba8:ff00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:86:79:eb:bc:18:27:c1:a3:d0:60:07:e4:62:cc:83:38:a5:2d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87
Validity
Not Before: Dec 20 21:12:08 2024 GMT
Not After : Dec 19 21:17:08 2025 GMT
Subject: CN=2CD0005C394D9F5E10192C9313AEA2D98445016F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:55:84:30:56:ba:ce:e7:29:06:ae:61:5a:21:
b0:cc:06:ed:c2:6e:c1:9c:7b:4d:65:24:84:51:67:
7f:d5:d7:75:fd:b0:54:d7:c7:df:a2:fd:e4:94:50:
9b:07:9d:a4:b7:d6:df:a4:9a:57:47:87:dc:76:e6:
45:34:32:f8:e9:75:37:63:60:97:b3:f2:90:17:5b:
82:c2:c3:ac:0b:5a:85:22:e0:e8:5e:3e:af:f9:76:
b7:0b:72:1e:c2:c8:c6:e5:0b:00:a5:aa:92:7c:d9:
7b:79:31:ef:5a:aa:0c:40:1c:05:d3:ce:7a:11:73:
88:19:30:d5:2c:b2:2e:f4:63:91:ee:e1:4b:4a:f2:
2c:0e:e4:e5:24:53:b4:a4:f5:69:6c:61:9c:b6:86:
ae:cc:61:92:03:ac:4e:04:f7:81:38:8e:27:da:aa:
e4:dc:e8:9c:ba:b2:e0:cc:63:fd:c6:d8:a8:6e:3c:
62:d8:37:47:22:1a:8d:3f:ac:dd:cd:ab:9f:d3:7e:
e2:db:02:9a:32:a9:33:b6:7c:60:fd:ac:1c:41:51:
ba:a1:11:c1:ae:10:02:fe:27:9b:c3:11:38:4a:b5:
f1:0e:5a:6a:d9:18:e7:f1:d8:10:7f:82:0a:d7:fc:
dd:88:0c:34:e6:0b:d5:97:0f:6b:7b:6e:92:ef:ea:
c7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D0:00:5C:39:4D:9F:5E:10:19:2C:93:13:AE:A2:D9:84:45:01:6F
X509v3 Authority Key Identifier:
keyid:2B:AF:E0:86:77:92:E7:C6:6C:D4:11:36:79:F3:E9:B7:AD:5F:1E:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/323830343a336261383a666630303a3a2f34302d3430203d3e20323636313633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3ba8:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
37:8a:8e:71:19:99:d7:6c:98:40:4f:14:da:c1:ea:5b:56:dc:
b8:f2:f1:ce:ce:69:ad:9c:69:45:c7:49:63:e4:58:a2:e8:f1:
3b:62:30:eb:5d:26:db:1c:1c:22:9c:f5:fb:61:97:9c:d6:8c:
c0:f5:c7:25:43:04:9a:ea:2c:cd:c1:51:49:53:bc:03:e0:fa:
3a:74:bf:84:92:92:00:fe:e9:70:7d:76:72:59:44:32:6e:a5:
4a:d2:6f:25:8a:f1:68:45:92:17:5e:42:b2:01:c0:22:9d:6a:
fe:ee:a0:37:14:66:80:e5:c7:e5:7b:74:bc:a4:2c:c8:95:dd:
5d:1a:94:a4:9a:9a:bb:d0:0d:da:2c:d4:2e:70:b3:9c:62:0a:
d2:da:7f:3e:a5:7e:8e:95:46:ac:78:12:91:52:12:a4:23:9e:
cf:3d:b2:d3:0d:d8:ad:89:cf:6a:db:fa:19:7e:48:1d:ce:ff:
5b:0e:ed:41:b3:fd:2d:18:dd:63:b2:e7:71:90:52:c9:2b:d5:
8d:c6:01:12:06:19:6c:de:70:5e:80:fa:b3:49:c0:2c:ea:48:
4b:d0:b7:37:60:1a:3f:04:e8:ab:d2:93:04:b3:10:a0:21:0b:
d2:33:72:4e:4e:75:06:a8:87:03:e2:71:e3:7c:d2:df:d9:72:
50:2f:71:bf
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIURoZ567wYJ8Gj0GAH5GLMgzilLUgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJBRkUwODY3NzkyRTdDNjZDRDQxMTM2NzlGM0U5QjdB
RDVGMUU4NzAeFw0yNDEyMjAyMTEyMDhaFw0yNTEyMTkyMTE3MDhaMDMxMTAvBgNV
BAMTKDJDRDAwMDVDMzk0RDlGNUUxMDE5MkM5MzEzQUVBMkQ5ODQ0NTAxNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWVYQwVrrO5ykGrmFaIbDMBu3C
bsGce01lJIRRZ3/V13X9sFTXx9+i/eSUUJsHnaS31t+kmldHh9x25kU0MvjpdTdj
YJez8pAXW4LCw6wLWoUi4OhePq/5drcLch7CyMblCwClqpJ82Xt5Me9aqgxAHAXT
znoRc4gZMNUssi70Y5Hu4UtK8iwO5OUkU7Sk9WlsYZy2hq7MYZIDrE4E94E4jifa
quTc6Jy6suDMY/3G2KhuPGLYN0ciGo0/rN3Nq5/TfuLbApoyqTO2fGD9rBxBUbqh
EcGuEAL+J5vDEThKtfEOWmrZGOfx2BB/ggrX/N2IDDTmC9WXD2t7bpLv6serAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQULNAAXDlNn14QGSyTE66i2YRFAW8wHwYDVR0j
BBgwFoAUK6/ghneS58Zs1BE2efPpt61fHocwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUpLUHNUYzV2V2JDMmtoRmpFeWsyQnU1QkJtM3p0cjVzMXRuZ0R3VHR1
a2IvMC8yQkFGRTA4Njc3OTJFN0M2NkNENDExMzY3OUYzRTlCN0FENUYxRTg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCQUZFMDg2Nzc5MkU3QzY2
Q0Q0MTEzNjc5RjNFOUI3QUQ1RjFFODcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FKS1BzVGM1dldiQzJraEZqRXlrMkJ1NUJCbTN6dHI1czF0bmdEd1R0dWtiLzAv
MzIzODMwMzQzYTMzNjI2MTM4M2E2NjY2MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNjMxMzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEO6j/MA0GCSqGSIb3DQEBCwUA
A4IBAQA3io5xGZnXbJhATxTawepbVty48vHOzmmtnGlFx0lj5Fii6PE7YjDrXSbb
HBwinPX7YZec1ozA9cclQwSa6izNwVFJU7wD4Po6dL+EkpIA/ulwfXZyWUQybqVK
0m8livFoRZIXXkKyAcAinWr+7qA3FGaA5cfle3S8pCzIld1dGpSkmpq70A3aLNQu
cLOcYgrS2n8+pX6OlUaseBKRUhKkI57PPbLTDditic9q2/oZfkgdzv9bDu1Bs/0t
GN1jsudxkFLJK9WNxgESBhls3nBegPqzScAs6khL0Lc3YBo/BOir0pMEsxCgIQvS
M3JOTnUGqIcD4nHjfNLf2XJQL3G/
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:43:19 2025 by rpki-client