Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a373030303a3a2f33362d3336203d3e20323634313431.roa
File: 323830343a316530633a373030303a3a2f33362d3336203d3e20323634313431.roa (raw, json)
Hash identifier: QLHbBsEi8sQN0vYG1l1MpAgJAyK/dIT0dZl/slM5tTg=
Subject key identifier: C7:CA:B5:DB:01:46:A7:73:61:18:81:CA:39:E0:DF:17:FF:5D:1B:EF
Certificate issuer: /CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Certificate serial: 68F0091DA592999624AAB23B9676554867C0C787
Authority key identifier: A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a373030303a3a2f33362d3336203d3e20323634313431.roa
Signing time: Thu 02 Jan 2025 20:02:51 +0000
ROA not before: Thu 02 Jan 2025 19:57:51 +0000
ROA not after: Thu 01 Jan 2026 20:02:51 +0000
asID: 264141
IP address blocks: 2804:1e0c:7000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:f0:09:1d:a5:92:99:96:24:aa:b2:3b:96:76:55:48:67:c0:c7:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Validity
Not Before: Jan 2 19:57:51 2025 GMT
Not After : Jan 1 20:02:51 2026 GMT
Subject: CN=C7CAB5DB0146A773611881CA39E0DF17FF5D1BEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9d:1e:77:65:23:00:56:c7:63:0c:e9:13:ee:
4e:4d:29:7f:af:28:66:b5:aa:19:6b:75:65:04:e7:
1c:18:b0:db:33:c1:02:dd:df:b2:d0:57:4e:af:0f:
4b:98:9a:98:bb:aa:5a:18:7d:a8:53:0e:03:a2:f6:
02:4d:0c:f8:d9:07:f0:b4:b2:a8:7f:8e:e5:2f:aa:
37:7a:3f:2e:5b:70:62:46:64:64:2e:e8:2e:9c:0b:
de:8a:0a:d3:59:e9:66:3c:2e:f3:2d:7e:ca:cf:e4:
4b:ca:7c:88:b3:dc:9c:04:24:48:82:95:59:84:82:
0f:b1:88:f2:30:d0:c8:a0:9b:66:57:ba:22:74:7e:
65:d2:1e:7e:a5:3f:d6:e1:21:ad:a2:ac:a8:2b:04:
a5:bb:d6:7e:88:8a:53:59:8a:88:40:88:8c:72:d8:
f2:62:6e:f7:a1:cd:51:89:aa:f5:f9:a2:19:ef:f9:
77:e4:91:1b:1e:f6:a8:4b:36:df:69:70:25:28:e7:
ef:38:41:99:8c:52:92:f5:7d:30:59:13:95:3b:6b:
e2:2a:98:ff:95:f9:f0:74:a0:26:ab:fc:a0:f8:4d:
35:fd:22:60:ef:03:a0:c1:06:fd:75:9a:a1:79:9d:
d8:3c:8a:38:6a:64:eb:a3:ff:4c:cb:0c:ea:6b:5e:
50:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:CA:B5:DB:01:46:A7:73:61:18:81:CA:39:E0:DF:17:FF:5D:1B:EF
X509v3 Authority Key Identifier:
keyid:A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a373030303a3a2f33362d3336203d3e20323634313431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1e0c:7000::/36
Signature Algorithm: sha256WithRSAEncryption
61:d0:2f:ad:cc:87:cd:f2:45:c8:48:26:f2:cd:38:77:d7:98:
26:91:38:f4:3a:04:e5:8e:11:2d:1c:ed:45:02:27:33:a4:46:
af:d8:f2:b9:49:5a:56:02:24:f8:18:ce:4f:dd:0d:17:5d:ff:
62:dd:bb:48:5e:e1:2a:2c:62:6e:92:d9:e8:a3:5a:7a:3d:fc:
e0:f9:fe:8e:37:99:f7:50:17:63:09:12:cd:7a:1b:da:07:29:
06:91:e0:88:75:c9:b0:4e:2e:e9:96:ed:9e:fa:b8:af:2f:21:
92:f5:98:eb:df:5d:ba:b7:14:c4:9a:1a:e7:f7:a3:dc:8c:57:
49:64:7e:82:16:9c:37:61:aa:97:5f:57:b9:43:74:64:17:ad:
39:f9:53:53:55:df:42:cb:5d:c1:07:46:73:20:de:09:29:26:
3b:fe:dc:e6:f1:67:8c:34:b1:dc:0b:3e:a6:81:19:09:fc:2b:
78:cc:43:8d:32:f2:59:54:2c:cd:81:06:0d:1c:bf:45:3a:ae:
a8:c3:f1:37:2d:56:85:06:5d:91:18:64:0b:04:c5:b0:27:31:
cc:fa:ba:6c:43:23:b9:f5:99:5a:bf:90:4d:e4:cb:86:2d:5f:
bb:8f:00:f1:39:15:73:f2:46:d8:13:c0:d7:a2:94:db:45:40:
4a:30:e4:e2
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUaPAJHaWSmZYkqrI7lnZVSGfAx4cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTJCOTZGOEI1M0IwNkVFNDQ4QTUxNzA5QjhEMjMwQUU0
OURCRjMwRDAeFw0yNTAxMDIxOTU3NTFaFw0yNjAxMDEyMDAyNTFaMDMxMTAvBgNV
BAMTKEM3Q0FCNURCMDE0NkE3NzM2MTE4ODFDQTM5RTBERjE3RkY1RDFCRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDinR53ZSMAVsdjDOkT7k5NKX+v
KGa1qhlrdWUE5xwYsNszwQLd37LQV06vD0uYmpi7qloYfahTDgOi9gJNDPjZB/C0
sqh/juUvqjd6Py5bcGJGZGQu6C6cC96KCtNZ6WY8LvMtfsrP5EvKfIiz3JwEJEiC
lVmEgg+xiPIw0Migm2ZXuiJ0fmXSHn6lP9bhIa2irKgrBKW71n6IilNZiohAiIxy
2PJibvehzVGJqvX5ohnv+XfkkRse9qhLNt9pcCUo5+84QZmMUpL1fTBZE5U7a+Iq
mP+V+fB0oCar/KD4TTX9ImDvA6DBBv11mqF5ndg8ijhqZOuj/0zLDOprXlDBAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUx8q12wFGp3NhGIHKOeDfF/9dG+8wHwYDVR0j
BBgwFoAUorlvi1OwbuRIpRcJuNIwrknb8w0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjVrQVVZanBwS2ppOWNWY01kTlR4d052ZGtZbzEzejJqRnV5Wm81OHVY
ZmkvMC9BMkI5NkY4QjUzQjA2RUU0NDhBNTE3MDlCOEQyMzBBRTQ5REJGMzBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyQjk2RjhCNTNCMDZFRTQ0
OEE1MTcwOUI4RDIzMEFFNDlEQkYzMEQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I1a0FVWWpwcEtqaTljVmNNZE5UeHdOdmRrWW8xM3oyakZ1eVpvNTh1WGZpLzAv
MzIzODMwMzQzYTMxNjUzMDYzM2EzNzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNDMxMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEHgxwMA0GCSqGSIb3DQEBCwUA
A4IBAQBh0C+tzIfN8kXISCbyzTh315gmkTj0OgTljhEtHO1FAiczpEav2PK5SVpW
AiT4GM5P3Q0XXf9i3btIXuEqLGJuktnoo1p6Pfzg+f6ON5n3UBdjCRLNehvaBykG
keCIdcmwTi7plu2e+rivLyGS9Zjr3126txTEmhrn96PcjFdJZH6CFpw3YaqXX1e5
Q3RkF605+VNTVd9Cy13BB0ZzIN4JKSY7/tzm8WeMNLHcCz6mgRkJ/Ct4zEONMvJZ
VCzNgQYNHL9FOq6ow/E3LVaFBl2RGGQLBMWwJzHM+rpsQyO59Zlav5BN5MuGLV+7
jwDxORVz8kbYE8DXopTbRUBKMOTi
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:03:28 2025 by rpki-client