Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/323830343a346232383a3a2f33322d313238203d3e20323637323837.roa
File: 323830343a346232383a3a2f33322d313238203d3e20323637323837.roa (raw, json)
Hash identifier: h+myaBof2ybwSg8/QbhahxDZHKYWOT7xfXNJ33nCUDo=
Subject key identifier: E8:89:33:14:A3:69:D5:7D:B5:F4:41:47:D7:16:D1:C7:3E:FF:E7:B6
Certificate issuer: /CN=698C63C0B116FDB7C67589592569AFB3F854EBAE
Certificate serial: 3854F2598325BAE7DFF62868E251D0D6ADF29B43
Authority key identifier: 69:8C:63:C0:B1:16:FD:B7:C6:75:89:59:25:69:AF:B3:F8:54:EB:AE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698C63C0B116FDB7C67589592569AFB3F854EBAE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/323830343a346232383a3a2f33322d313238203d3e20323637323837.roa
Signing time: Sat 11 May 2024 13:44:18 +0000
ROA not before: Sat 11 May 2024 13:39:18 +0000
ROA not after: Sat 10 May 2025 13:44:18 +0000
asID: 267287
IP address blocks: 2804:4b28::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:54:f2:59:83:25:ba:e7:df:f6:28:68:e2:51:d0:d6:ad:f2:9b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=698C63C0B116FDB7C67589592569AFB3F854EBAE
Validity
Not Before: May 11 13:39:18 2024 GMT
Not After : May 10 13:44:18 2025 GMT
Subject: CN=E8893314A369D57DB5F44147D716D1C73EFFE7B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ea:b1:1a:97:58:54:99:08:05:cc:41:c2:2a:
b1:e1:99:8e:9b:88:c4:6a:ac:95:d1:82:3f:6d:ce:
24:d9:a7:64:65:47:20:56:ce:bc:33:ae:8b:27:97:
c3:51:63:4d:0f:b3:cb:44:1d:85:ab:6b:ab:d5:ed:
be:82:d8:2c:94:94:75:df:6d:23:dc:a8:ec:d7:9c:
6a:cd:f8:ae:24:dc:18:fd:ce:46:3a:0d:01:71:c9:
ae:79:1d:99:f7:78:d1:14:e9:ae:93:3a:de:3f:40:
cc:ed:9f:9e:c6:55:4f:dc:78:df:3d:c2:4e:93:f0:
83:f9:ea:3f:68:69:80:4b:c1:fb:76:3b:04:16:df:
86:31:58:c1:0e:ef:3d:f9:93:1a:20:77:53:3b:49:
6e:95:73:20:f4:75:83:27:55:7f:b0:f3:d3:83:23:
48:b3:71:43:db:44:3e:9d:83:44:a9:1c:63:41:0b:
28:cb:20:33:ac:16:25:7a:c4:53:5a:fb:83:a1:c7:
75:a0:54:a7:69:3b:c3:b1:ff:59:46:17:2d:d9:a0:
5c:fc:6d:dc:f8:3d:78:40:f1:96:69:33:97:f8:73:
a0:5a:f0:16:12:92:ad:34:fc:b7:d2:c5:64:da:71:
a1:1b:8d:b9:b3:91:9b:38:10:9f:b7:d9:f3:bb:22:
73:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:89:33:14:A3:69:D5:7D:B5:F4:41:47:D7:16:D1:C7:3E:FF:E7:B6
X509v3 Authority Key Identifier:
keyid:69:8C:63:C0:B1:16:FD:B7:C6:75:89:59:25:69:AF:B3:F8:54:EB:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/698C63C0B116FDB7C67589592569AFB3F854EBAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698C63C0B116FDB7C67589592569AFB3F854EBAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/323830343a346232383a3a2f33322d313238203d3e20323637323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4b28::/32
Signature Algorithm: sha256WithRSAEncryption
17:11:2c:fd:84:d5:58:66:9a:ff:f0:b4:50:c3:bb:4c:33:70:
e7:a2:fa:58:69:97:27:85:61:2f:57:32:85:b5:ca:23:b3:45:
10:2d:0f:01:3f:cb:f7:0d:5c:5b:d9:de:84:97:e9:66:5a:e4:
57:8c:33:57:26:e9:1e:1d:73:1f:dc:77:c3:10:11:36:b8:6b:
a9:dc:b5:e8:bc:78:43:bf:9a:eb:b7:0d:f7:1f:f7:93:03:cd:
7e:95:b1:50:be:36:5b:30:f2:c7:e4:9c:2c:53:c0:da:c7:e9:
25:f5:e5:c9:7d:9b:77:29:f8:ce:33:cc:6b:ab:11:38:c4:2b:
0c:0d:d5:ff:db:01:77:de:5e:b3:33:93:be:b8:6b:e7:ea:90:
fe:4e:c8:4e:f9:29:05:38:39:cd:c9:98:cf:e1:04:5f:de:2f:
29:55:17:47:d3:54:15:3e:87:60:04:5e:67:86:6d:89:15:0b:
4e:37:20:0c:78:5a:23:fd:e4:bf:f6:c4:c3:3a:30:98:04:6e:
8c:00:79:4f:bc:05:87:1f:60:51:34:28:d2:1f:78:b8:67:24:
12:0a:00:ab:95:d7:7a:03:4e:b8:f7:83:98:25:6d:96:63:9d:
01:28:30:e5:9a:2e:14:ed:dc:c9:53:c5:ef:4e:5f:9b:7a:58:
0e:00:c8:11
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUOFTyWYMluuff9iho4lHQ1q3ym0MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk4QzYzQzBCMTE2RkRCN0M2NzU4OTU5MjU2OUFGQjNG
ODU0RUJBRTAeFw0yNDA1MTExMzM5MThaFw0yNTA1MTAxMzQ0MThaMDMxMTAvBgNV
BAMTKEU4ODkzMzE0QTM2OUQ1N0RCNUY0NDE0N0Q3MTZEMUM3M0VGRkU3QjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH6rEal1hUmQgFzEHCKrHhmY6b
iMRqrJXRgj9tziTZp2RlRyBWzrwzrosnl8NRY00Ps8tEHYWra6vV7b6C2CyUlHXf
bSPcqOzXnGrN+K4k3Bj9zkY6DQFxya55HZn3eNEU6a6TOt4/QMztn57GVU/ceN89
wk6T8IP56j9oaYBLwft2OwQW34YxWMEO7z35kxogd1M7SW6VcyD0dYMnVX+w89OD
I0izcUPbRD6dg0SpHGNBCyjLIDOsFiV6xFNa+4Ohx3WgVKdpO8Ox/1lGFy3ZoFz8
bdz4PXhA8ZZpM5f4c6Ba8BYSkq00/LfSxWTacaEbjbmzkZs4EJ+32fO7InMhAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU6IkzFKNp1X219EFH1xbRxz7/57YwHwYDVR0j
BBgwFoAUaYxjwLEW/bfGdYlZJWmvs/hU664wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQk52U0d0U0ZCYzh1azhEbTRqR212NHpZMTVLUE5YU2Z0aG8yTFRXdmdG
eGIvMC82OThDNjNDMEIxMTZGREI3QzY3NTg5NTkyNTY5QUZCM0Y4NTRFQkFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5OEM2M0MwQjExNkZEQjdD
Njc1ODk1OTI1NjlBRkIzRjg1NEVCQUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JOdlNHdFNGQmM4dWs4RG00akdtdjR6WTE1S1BOWFNmdGhvMkxUV3ZnRnhiLzAv
MzIzODMwMzQzYTM0NjIzMjM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzczMjM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBEsoMA0GCSqGSIb3DQEBCwUAA4IBAQAXESz9
hNVYZpr/8LRQw7tMM3DnovpYaZcnhWEvVzKFtcojs0UQLQ8BP8v3DVxb2d6El+lm
WuRXjDNXJukeHXMf3HfDEBE2uGup3LXovHhDv5rrtw33H/eTA81+lbFQvjZbMPLH
5JwsU8Dax+kl9eXJfZt3KfjOM8xrqxE4xCsMDdX/2wF33l6zM5O+uGvn6pD+TshO
+SkFODnNyZjP4QRf3i8pVRdH01QVPodgBF5nhm2JFQtONyAMeFoj/eS/9sTDOjCY
BG6MAHlPvAWHH2BRNCjSH3i4ZyQSCgCrldd6A06494OYJW2WY50BKDDlmi4U7dzJ
U8XvTl+belgOAMgR
-----END CERTIFICATE-----
Generated at Mon Apr 7 08:27:06 2025 by rpki-client