Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a613930303a3a2f34342d3434203d3e20323638373037.roa
File: 323830343a353938343a613930303a3a2f34342d3434203d3e20323638373037.roa (raw, json)
Hash identifier: I8ZclilFdhsek2U46+DK7F4D5cAIcUgAWjypH5yb4M8=
Subject key identifier: CE:69:73:2C:BD:F5:73:BB:53:E6:0F:15:74:98:44:2C:BD:4D:85:43
Certificate issuer: /CN=03378B7FC1B464DAD1E7EF2D2F20EEE810EBE08F
Certificate serial: 554BC363DE87611983A1A23CF2DC8AACD33FF78D
Authority key identifier: 03:37:8B:7F:C1:B4:64:DA:D1:E7:EF:2D:2F:20:EE:E8:10:EB:E0:8F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03378B7FC1B464DAD1E7EF2D2F20EEE810EBE08F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a613930303a3a2f34342d3434203d3e20323638373037.roa
Signing time: Mon 22 Jan 2024 20:04:11 +0000
ROA not before: Mon 22 Jan 2024 19:59:11 +0000
ROA not after: Mon 20 Jan 2025 20:04:11 +0000
asID: 268707
IP address blocks: 2804:5984:a900::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:4b:c3:63:de:87:61:19:83:a1:a2:3c:f2:dc:8a:ac:d3:3f:f7:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03378B7FC1B464DAD1E7EF2D2F20EEE810EBE08F
Validity
Not Before: Jan 22 19:59:11 2024 GMT
Not After : Jan 20 20:04:11 2025 GMT
Subject: CN=CE69732CBDF573BB53E60F157498442CBD4D8543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3a:25:f5:c8:dc:6b:e7:62:fb:fe:f8:8e:ba:
35:a6:7c:d8:26:1c:83:e6:90:75:20:a8:66:70:b7:
a1:2a:15:12:77:ee:8f:86:98:4c:94:e2:87:18:aa:
e4:c2:83:2d:58:78:96:d1:90:69:df:91:a7:b8:be:
8f:19:fa:a3:39:01:4f:f2:f0:43:53:87:4f:e0:f9:
12:aa:ec:f5:5c:a4:a0:a2:0e:8e:35:56:9e:49:61:
ee:05:bb:96:04:ae:08:9d:69:32:c1:ca:29:4d:8d:
94:95:dc:dc:2c:ab:de:84:02:3e:e3:b6:c9:f2:5e:
c3:a9:05:c0:c2:b8:04:5f:85:92:b3:37:aa:0b:38:
93:71:68:a1:f7:e7:d9:d0:16:30:95:10:be:21:a6:
c6:44:27:2f:7f:17:3d:bb:87:4c:ec:6c:78:5f:31:
5e:e5:b3:8c:0b:39:24:cf:9d:37:30:ad:bb:a2:0d:
78:bd:43:6e:6b:6c:14:85:79:3a:a7:e2:c7:d2:7c:
b5:ac:cd:ff:e5:fd:4b:ab:5a:94:a9:6b:58:0a:48:
6d:ee:68:0c:60:1b:9a:bd:e7:79:49:f2:2c:22:92:
ae:67:05:4a:65:66:8f:17:0f:5e:e7:d8:c4:02:a5:
7d:b3:5f:0e:66:9e:51:bd:42:c4:b7:6d:b6:b9:0d:
de:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:69:73:2C:BD:F5:73:BB:53:E6:0F:15:74:98:44:2C:BD:4D:85:43
X509v3 Authority Key Identifier:
keyid:03:37:8B:7F:C1:B4:64:DA:D1:E7:EF:2D:2F:20:EE:E8:10:EB:E0:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/03378B7FC1B464DAD1E7EF2D2F20EEE810EBE08F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03378B7FC1B464DAD1E7EF2D2F20EEE810EBE08F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a613930303a3a2f34342d3434203d3e20323638373037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5984:a900::/44
Signature Algorithm: sha256WithRSAEncryption
1a:2d:bb:5a:72:99:d5:9d:13:85:a2:99:cb:2e:99:de:18:45:
27:b5:8e:2b:9b:ac:f8:9a:0e:62:09:24:d7:8b:69:1d:65:18:
09:a9:fb:1d:2e:77:41:c7:64:5c:cb:57:0e:9a:de:07:25:bd:
86:fd:13:f3:dc:98:0f:ba:c2:aa:81:6f:32:6e:8a:f3:e7:1a:
ac:75:48:14:6b:41:db:46:b4:4c:ed:dd:1f:82:62:7f:28:2d:
c7:6e:cc:a2:0d:0d:9a:9c:d1:9a:4a:ec:c5:95:f9:82:8f:17:
89:4a:ea:66:6d:d4:26:54:13:85:bd:63:bd:67:fd:23:d3:bc:
ad:4c:52:95:02:02:39:e1:ab:86:9a:85:ee:44:ae:05:35:b9:
52:ed:1d:0c:30:ef:ec:5d:31:65:84:0e:34:67:a9:59:fe:eb:
fd:5f:cc:82:1f:1e:02:46:f0:66:47:fd:cb:29:8c:86:d1:80:
69:28:2a:6e:8c:62:c8:0b:11:c9:d8:d5:4e:49:b4:e0:c6:17:
8c:37:6f:40:ea:fc:cf:8d:dc:8f:51:5d:5f:01:a3:db:dd:ca:
85:dd:db:e7:2c:10:82:c3:3b:41:90:5d:f1:e7:a1:9b:6a:d2:
dd:4a:1d:6f:06:6a:1a:27:70:62:bf:37:5a:59:c2:43:3d:ee:
4c:ba:71:03
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUVUvDY96HYRmDoaI88tyKrNM/940wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDMzNzhCN0ZDMUI0NjREQUQxRTdFRjJEMkYyMEVFRTgx
MEVCRTA4RjAeFw0yNDAxMjIxOTU5MTFaFw0yNTAxMjAyMDA0MTFaMDMxMTAvBgNV
BAMTKENFNjk3MzJDQkRGNTczQkI1M0U2MEYxNTc0OTg0NDJDQkQ0RDg1NDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmOiX1yNxr52L7/viOujWmfNgm
HIPmkHUgqGZwt6EqFRJ37o+GmEyU4ocYquTCgy1YeJbRkGnfkae4vo8Z+qM5AU/y
8ENTh0/g+RKq7PVcpKCiDo41Vp5JYe4Fu5YErgidaTLByilNjZSV3Nwsq96EAj7j
tsnyXsOpBcDCuARfhZKzN6oLOJNxaKH359nQFjCVEL4hpsZEJy9/Fz27h0zsbHhf
MV7ls4wLOSTPnTcwrbuiDXi9Q25rbBSFeTqn4sfSfLWszf/l/UurWpSpa1gKSG3u
aAxgG5q953lJ8iwikq5nBUplZo8XD17n2MQCpX2zXw5mnlG9QsS3bba5Dd4RAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUzmlzLL31c7tT5g8VdJhELL1NhUMwHwYDVR0j
BBgwFoAUAzeLf8G0ZNrR5+8tLyDu6BDr4I8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXFFRHF1NVJOaDhGdE1qZXlHbmtXaFBDVmdMUzJ1cWY0eW1SaFVLN3I5
RVYvMC8wMzM3OEI3RkMxQjQ2NERBRDFFN0VGMkQyRjIwRUVFODEwRUJFMDhGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzAzMzc4QjdGQzFCNDY0REFE
MUU3RUYyRDJGMjBFRUU4MTBFQkUwOEYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FxRURxdTVSTmg4RnRNamV5R25rV2hQQ1ZnTFMydXFmNHltUmhVSzdyOUVWLzAv
MzIzODMwMzQzYTM1MzkzODM0M2E2MTM5MzAzMDNhM2EyZjM0MzQyZDM0MzQyMDNk
M2UyMDMyMzYzODM3MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCgEWYSpADANBgkqhkiG9w0BAQsF
AAOCAQEAGi27WnKZ1Z0ThaKZyy6Z3hhFJ7WOK5us+JoOYgkk14tpHWUYCan7HS53
QcdkXMtXDpreByW9hv0T89yYD7rCqoFvMm6K8+carHVIFGtB20a0TO3dH4Jifygt
x27Mog0NmpzRmkrsxZX5go8XiUrqZm3UJlQThb1jvWf9I9O8rUxSlQICOeGrhpqF
7kSuBTW5Uu0dDDDv7F0xZYQONGepWf7r/V/Mgh8eAkbwZkf9yymMhtGAaSgqboxi
yAsRydjVTkm04MYXjDdvQOr8z43cj1FdXwGj293Khd3b5ywQgsM7QZBd8eehm2rS
3UodbwZqGidwYr83WlnCQz3uTLpxAw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:32 2024 by rpki-client on console-ams.rpki-client.org