Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BA8kaM5eE7n2kiVizjSCEggoRsbGgBFCgpMCorxpzrmA/0/323830343a316463383a343030303a3a2f33342d3334203d3e20323634333933.roa
File: 323830343a316463383a343030303a3a2f33342d3334203d3e20323634333933.roa (raw, json)
Hash identifier: 74PyF6b8OXx/KJtoC1czoZlfcB9TJ8Aj5reBK77jrG8=
Subject key identifier: D1:11:C8:3F:1B:19:20:BE:6C:9D:26:86:6D:DF:61:A6:E2:42:13:40
Certificate issuer: /CN=9A3EAB903F3D92104C008B6C652EA21CCFACBF0D
Certificate serial: 7EB1A1364BD1C18847F099984025B63CD1998F7D
Authority key identifier: 9A:3E:AB:90:3F:3D:92:10:4C:00:8B:6C:65:2E:A2:1C:CF:AC:BF:0D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A3EAB903F3D92104C008B6C652EA21CCFACBF0D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BA8kaM5eE7n2kiVizjSCEggoRsbGgBFCgpMCorxpzrmA/0/323830343a316463383a343030303a3a2f33342d3334203d3e20323634333933.roa
Signing time: Tue 10 Jan 2023 12:18:43 +0000
ROA not before: Tue 10 Jan 2023 12:13:43 +0000
ROA not after: Tue 09 Jan 2024 12:18:43 +0000
asID: 264393
IP address blocks: 2804:1dc8:4000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:b1:a1:36:4b:d1:c1:88:47:f0:99:98:40:25:b6:3c:d1:99:8f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A3EAB903F3D92104C008B6C652EA21CCFACBF0D
Validity
Not Before: Jan 10 12:13:43 2023 GMT
Not After : Jan 9 12:18:43 2024 GMT
Subject: CN=D111C83F1B1920BE6C9D26866DDF61A6E2421340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:56:a6:71:68:a2:65:94:e3:5c:57:bf:1a:c6:
ca:17:90:46:e1:5c:32:05:aa:0a:1b:63:d1:59:a5:
33:c9:f7:17:87:c2:ab:41:71:e8:af:dc:bf:25:78:
56:29:e1:66:0a:18:29:60:e3:2d:0d:6a:3b:d0:75:
c7:48:80:54:9b:9e:72:c7:02:d6:a2:a9:31:2c:7f:
ee:a5:38:cb:20:96:a6:80:07:1f:c7:f8:81:29:a3:
6a:fd:6b:fa:bc:6c:82:ed:3e:07:f9:a1:c3:55:02:
90:c3:47:47:e3:48:c6:80:81:e5:57:44:83:06:b6:
de:b1:d8:b0:53:de:16:46:fc:c1:87:9a:21:7f:23:
3f:65:6c:db:ec:b1:c0:93:eb:5e:b7:03:85:08:d6:
d2:ec:c2:34:2f:d9:e2:f9:5d:fb:32:75:bb:0d:26:
a8:06:43:6e:da:d0:19:69:df:45:cd:8b:a3:39:f0:
2a:86:41:6c:fa:09:e6:4c:7e:ff:6e:ae:8a:7c:85:
86:5e:81:50:cc:46:54:ce:c8:ff:37:5b:63:fb:f7:
35:f0:fb:ae:cd:19:d4:7d:d4:95:79:68:13:38:fb:
f6:30:32:a7:c8:1d:70:bd:f7:23:79:d5:cc:66:ae:
c0:5d:ce:8e:b0:e8:24:51:6b:3a:0b:74:45:fe:4d:
39:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:11:C8:3F:1B:19:20:BE:6C:9D:26:86:6D:DF:61:A6:E2:42:13:40
X509v3 Authority Key Identifier:
keyid:9A:3E:AB:90:3F:3D:92:10:4C:00:8B:6C:65:2E:A2:1C:CF:AC:BF:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BA8kaM5eE7n2kiVizjSCEggoRsbGgBFCgpMCorxpzrmA/0/9A3EAB903F3D92104C008B6C652EA21CCFACBF0D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A3EAB903F3D92104C008B6C652EA21CCFACBF0D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BA8kaM5eE7n2kiVizjSCEggoRsbGgBFCgpMCorxpzrmA/0/323830343a316463383a343030303a3a2f33342d3334203d3e20323634333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1dc8:4000::/34
Signature Algorithm: sha256WithRSAEncryption
17:65:cb:f6:ed:0f:25:d5:ad:e2:ad:65:6f:e5:2c:a2:15:22:
78:d8:ef:87:91:fd:55:6d:e8:67:4b:bf:e6:56:a0:50:a5:12:
4f:8d:67:83:fc:de:94:a7:7c:63:a8:f3:03:de:8a:3d:aa:42:
f0:7f:89:d1:d2:1e:96:0a:17:21:db:d7:a3:c9:a0:f5:f0:a7:
58:b0:8d:97:38:de:5e:13:27:32:88:c9:34:7f:e8:71:1a:62:
70:92:95:de:50:27:cf:a0:44:48:94:86:76:59:e2:91:c8:4d:
19:d7:1b:1d:1d:05:65:6b:0b:30:62:f8:d6:19:88:c5:5f:a4:
a5:28:af:98:ab:e8:57:b3:aa:6e:31:bf:47:ee:8a:69:39:c6:
45:7b:d3:f8:49:13:a7:49:76:5d:c9:70:58:61:73:c3:d0:14:
67:27:f6:d3:8f:02:6a:76:00:e6:ad:cb:af:2f:54:5f:ab:35:
88:cd:84:b0:cf:19:32:a1:43:72:0b:9c:65:86:ed:f3:68:14:
80:48:85:70:1b:68:b3:7d:6f:66:64:f4:83:78:63:29:d5:0b:
e4:84:b2:85:ac:34:e1:54:45:df:85:bc:ae:29:00:fa:be:f3:
22:9f:91:07:2f:f5:10:74:93:55:4b:c6:13:79:cb:94:00:93:
9c:2c:8e:1f
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUfrGhNkvRwYhH8JmYQCW2PNGZj30wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUEzRUFCOTAzRjNEOTIxMDRDMDA4QjZDNjUyRUEyMUND
RkFDQkYwRDAeFw0yMzAxMTAxMjEzNDNaFw0yNDAxMDkxMjE4NDNaMDMxMTAvBgNV
BAMTKEQxMTFDODNGMUIxOTIwQkU2QzlEMjY4NjZEREY2MUE2RTI0MjEzNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/VqZxaKJllONcV78axsoXkEbh
XDIFqgobY9FZpTPJ9xeHwqtBceiv3L8leFYp4WYKGClg4y0NajvQdcdIgFSbnnLH
AtaiqTEsf+6lOMsglqaABx/H+IEpo2r9a/q8bILtPgf5ocNVApDDR0fjSMaAgeVX
RIMGtt6x2LBT3hZG/MGHmiF/Iz9lbNvsscCT6163A4UI1tLswjQv2eL5XfsydbsN
JqgGQ27a0Blp30XNi6M58CqGQWz6CeZMfv9urop8hYZegVDMRlTOyP83W2P79zXw
+67NGdR91JV5aBM4+/YwMqfIHXC99yN51cxmrsBdzo6w6CRRazoLdEX+TTlLAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU0RHIPxsZIL5snSaGbd9hpuJCE0AwHwYDVR0j
BBgwFoAUmj6rkD89khBMAItsZS6iHM+svw0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkE4a2FNNWVFN24ya2lWaXpqU0NFZ2dvUnNiR2dCRkNncE1Db3J4cHpy
bUEvMC85QTNFQUI5MDNGM0Q5MjEwNEMwMDhCNkM2NTJFQTIxQ0NGQUNCRjBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlBM0VBQjkwM0YzRDkyMTA0
QzAwOEI2QzY1MkVBMjFDQ0ZBQ0JGMEQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JBOGthTTVlRTduMmtpVml6alNDRWdnb1JzYkdnQkZDZ3BNQ29yeHB6cm1BLzAv
MzIzODMwMzQzYTMxNjQ2MzM4M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNDMzMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEHchAMA0GCSqGSIb3DQEBCwUA
A4IBAQAXZcv27Q8l1a3irWVv5SyiFSJ42O+Hkf1VbehnS7/mVqBQpRJPjWeD/N6U
p3xjqPMD3oo9qkLwf4nR0h6WChch29ejyaD18KdYsI2XON5eEycyiMk0f+hxGmJw
kpXeUCfPoERIlIZ2WeKRyE0Z1xsdHQVlawswYvjWGYjFX6SlKK+Yq+hXs6puMb9H
7oppOcZFe9P4SROnSXZdyXBYYXPD0BRnJ/bTjwJqdgDmrcuvL1RfqzWIzYSwzxky
oUNyC5xlhu3zaBSASIVwG2izfW9mZPSDeGMp1QvkhLKFrDThVEXfhbyuKQD6vvMi
n5EHL/UQdJNVS8YTecuUAJOcLI4f
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:44:24 2025 by rpki-client