Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/323830343a313934633a3a2f34382d3438203d3e203631373835.roa
File: 323830343a313934633a3a2f34382d3438203d3e203631373835.roa (raw, json)
Hash identifier: iDLgx2OSm5hq7M2GE4ayVsqgWr9WoL1ba+335M8fkMI=
Subject key identifier: B4:F7:4A:DD:56:A8:71:33:24:F3:B9:A9:3C:E5:8F:27:85:1D:F3:94
Certificate issuer: /CN=5D02A9D5EA4562DFA1998A8F4C882ACD6908671E
Certificate serial: 65B7E46844F453B5DFDC3D65E8EF62FA65B6A8E4
Authority key identifier: 5D:02:A9:D5:EA:45:62:DF:A1:99:8A:8F:4C:88:2A:CD:69:08:67:1E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D02A9D5EA4562DFA1998A8F4C882ACD6908671E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/323830343a313934633a3a2f34382d3438203d3e203631373835.roa
Signing time: Tue 21 Jan 2025 14:07:45 +0000
ROA not before: Tue 21 Jan 2025 14:02:45 +0000
ROA not after: Tue 20 Jan 2026 14:07:45 +0000
asID: 61785
IP address blocks: 2804:194c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:b7:e4:68:44:f4:53:b5:df:dc:3d:65:e8:ef:62:fa:65:b6:a8:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D02A9D5EA4562DFA1998A8F4C882ACD6908671E
Validity
Not Before: Jan 21 14:02:45 2025 GMT
Not After : Jan 20 14:07:45 2026 GMT
Subject: CN=B4F74ADD56A8713324F3B9A93CE58F27851DF394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:74:dc:3b:e7:b6:46:b3:ff:96:ae:28:c9:81:
c0:c2:27:8b:d4:c9:88:83:58:cb:bf:a0:4c:05:cb:
79:1c:23:76:86:2b:b9:c1:c8:7e:25:af:ce:45:49:
13:4f:58:60:3b:09:74:b9:36:25:de:79:c3:da:8e:
0d:b0:ce:a1:2c:2e:23:8c:1e:f3:89:9d:63:08:ae:
55:bf:97:26:23:52:fc:8b:b3:c7:7f:5a:9d:3c:6e:
7b:9a:fe:0a:67:f7:3b:d2:16:46:05:1e:73:e6:94:
3c:2b:80:21:c4:b9:1c:e0:b6:d2:b5:81:36:f6:7c:
80:16:e1:84:7b:33:25:a3:28:1d:24:75:c6:12:b3:
99:a7:1f:42:94:e0:61:ac:b0:85:fc:ba:8c:56:47:
8a:b8:10:b8:ca:03:0c:1a:5d:24:d2:6b:cc:c5:03:
c5:61:e9:e2:bf:7d:af:30:69:f9:f1:73:59:a5:18:
7c:36:4d:5d:a0:5e:a1:f4:c9:37:42:5c:f7:25:d9:
28:a4:81:e9:05:0b:0b:bc:39:93:84:1c:20:8d:18:
5a:e4:7f:98:d8:87:01:67:22:84:5f:72:bf:1d:2a:
c7:3e:2d:50:4c:7f:5c:f8:d0:ad:75:4e:61:05:ff:
ea:ca:16:4e:70:79:5c:d9:4f:19:78:a7:00:90:24:
3e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F7:4A:DD:56:A8:71:33:24:F3:B9:A9:3C:E5:8F:27:85:1D:F3:94
X509v3 Authority Key Identifier:
keyid:5D:02:A9:D5:EA:45:62:DF:A1:99:8A:8F:4C:88:2A:CD:69:08:67:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/5D02A9D5EA4562DFA1998A8F4C882ACD6908671E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D02A9D5EA4562DFA1998A8F4C882ACD6908671E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/323830343a313934633a3a2f34382d3438203d3e203631373835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:194c::/48
Signature Algorithm: sha256WithRSAEncryption
74:2a:66:e9:8d:bf:81:02:65:22:a4:10:d0:20:8c:1d:cf:ba:
3e:25:b0:f0:0c:e3:57:1a:6a:22:e4:87:59:2e:ae:c8:73:8f:
fc:7a:e9:09:da:cd:05:dd:36:c7:85:b3:cb:2f:14:7f:a0:db:
7a:56:c4:a9:70:91:7f:54:10:f2:36:6f:2e:3a:c8:30:ca:53:
32:dd:40:d6:89:c0:b1:1a:2b:bf:54:95:5e:e2:cb:58:d2:a4:
69:81:15:7a:94:1c:d6:9c:e4:c1:93:bf:58:f3:3f:10:79:81:
b9:22:4d:91:b5:87:02:dc:28:2d:a4:ec:d0:b1:db:07:4c:fd:
01:23:b8:2e:60:1e:df:17:42:50:04:73:88:74:63:97:d3:08:
5b:df:15:60:28:1e:19:66:11:ba:cd:31:0b:3b:2a:ab:66:cc:
a0:f1:d2:db:d5:1d:79:84:a1:93:95:77:ef:89:4e:bf:61:46:
31:50:ea:75:d6:0d:1b:dd:7a:59:06:a5:b3:32:c1:7c:60:8e:
82:02:6c:e1:e8:36:01:50:20:2c:c3:c1:ac:76:1f:a1:61:06:
33:f2:dd:31:d1:af:ad:af:5f:58:e3:55:f0:1b:50:bc:ed:72:
81:f7:e1:ab:e0:1c:77:79:25:47:ca:4e:ca:eb:cd:fa:89:aa:
81:04:8f:ce
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUZbfkaET0U7Xf3D1l6O9i+mW2qOQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQwMkE5RDVFQTQ1NjJERkExOTk4QThGNEM4ODJBQ0Q2
OTA4NjcxRTAeFw0yNTAxMjExNDAyNDVaFw0yNjAxMjAxNDA3NDVaMDMxMTAvBgNV
BAMTKEI0Rjc0QURENTZBODcxMzMyNEYzQjlBOTNDRTU4RjI3ODUxREYzOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSdNw757ZGs/+WrijJgcDCJ4vU
yYiDWMu/oEwFy3kcI3aGK7nByH4lr85FSRNPWGA7CXS5NiXeecPajg2wzqEsLiOM
HvOJnWMIrlW/lyYjUvyLs8d/Wp08bnua/gpn9zvSFkYFHnPmlDwrgCHEuRzgttK1
gTb2fIAW4YR7MyWjKB0kdcYSs5mnH0KU4GGssIX8uoxWR4q4ELjKAwwaXSTSa8zF
A8Vh6eK/fa8wafnxc1mlGHw2TV2gXqH0yTdCXPcl2SikgekFCwu8OZOEHCCNGFrk
f5jYhwFnIoRfcr8dKsc+LVBMf1z40K11TmEF/+rKFk5weVzZTxl4pwCQJD4/AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUtPdK3VaocTMk87mpPOWPJ4Ud85QwHwYDVR0j
BBgwFoAUXQKp1epFYt+hmYqPTIgqzWkIZx4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjRyUE5CWDdzcEt3OVZFRkd0czViR3JnTWhnWWdtcFEzUzZRVWZkTjd2
NDUvMC81RDAyQTlENUVBNDU2MkRGQTE5OThBOEY0Qzg4MkFDRDY5MDg2NzFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVEMDJBOUQ1RUE0NTYyREZB
MTk5OEE4RjRDODgyQUNENjkwODY3MUUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I0clBOQlg3c3BLdzlWRUZHdHM1YkdyZ01oZ1lnbXBRM1M2UVVmZE43djQ1LzAv
MzIzODMwMzQzYTMxMzkzNDYzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzYzMTM3
MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB
/wQTMBEwDwQCAAIwCQMHACgEGUwAADANBgkqhkiG9w0BAQsFAAOCAQEAdCpm6Y2/
gQJlIqQQ0CCMHc+6PiWw8AzjVxpqIuSHWS6uyHOP/HrpCdrNBd02x4Wzyy8Uf6Db
elbEqXCRf1QQ8jZvLjrIMMpTMt1A1onAsRorv1SVXuLLWNKkaYEVepQc1pzkwZO/
WPM/EHmBuSJNkbWHAtwoLaTs0LHbB0z9ASO4LmAe3xdCUARziHRjl9MIW98VYCge
GWYRus0xCzsqq2bMoPHS29UdeYShk5V374lOv2FGMVDqddYNG916WQalszLBfGCO
ggJs4eg2AVAgLMPBrHYfoWEGM/LdMdGvra9fWONV8BtQvO1ygffhq+Acd3klR8pO
yuvN+omqgQSPzg==
-----END CERTIFICATE-----
Generated at Sat Feb 22 04:58:46 2025 by rpki-client