Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/0/323830343a343331633a3a2f33322d313238203d3e20323637353439.roa
File: 323830343a343331633a3a2f33322d313238203d3e20323637353439.roa (raw, json)
Hash identifier: 5oskpKrX6Yed09V8tcDmN+l2x+9isaRoaS026EnczIE=
Subject key identifier: B9:FC:96:BF:4A:A0:97:B7:7E:41:20:BE:EC:1B:8A:DB:8A:C3:B7:B9
Certificate issuer: /CN=212F087EBCC43B9BA592104DEB42E5A1FFA94122
Certificate serial: 452F82D3F73FB251166B7B1D59CB551A3F72C22B
Authority key identifier: 21:2F:08:7E:BC:C4:3B:9B:A5:92:10:4D:EB:42:E5:A1:FF:A9:41:22
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/212F087EBCC43B9BA592104DEB42E5A1FFA94122.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/0/323830343a343331633a3a2f33322d313238203d3e20323637353439.roa
Signing time: Mon 22 Jan 2024 12:12:30 +0000
ROA not before: Mon 22 Jan 2024 12:07:30 +0000
ROA not after: Mon 20 Jan 2025 12:12:30 +0000
asID: 267549
IP address blocks: 2804:431c::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:2f:82:d3:f7:3f:b2:51:16:6b:7b:1d:59:cb:55:1a:3f:72:c2:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212F087EBCC43B9BA592104DEB42E5A1FFA94122
Validity
Not Before: Jan 22 12:07:30 2024 GMT
Not After : Jan 20 12:12:30 2025 GMT
Subject: CN=B9FC96BF4AA097B77E4120BEEC1B8ADB8AC3B7B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:49:68:be:b1:45:df:73:92:ae:6d:51:9b:05:
cc:d9:ff:90:15:b2:d5:00:10:92:2e:07:d1:07:18:
35:64:44:7d:ba:53:fc:1a:d3:c8:bf:23:f6:ff:7d:
61:5f:61:ac:66:ec:7e:30:99:bd:d9:d5:60:5f:a7:
3f:bc:c8:06:f3:36:c8:3f:85:d2:a6:0f:3e:94:e4:
e0:c2:01:13:18:b1:48:82:2a:03:98:75:65:22:f7:
2c:97:98:ec:ac:de:cf:ec:09:fa:ae:b8:a8:c9:f6:
d4:dc:e4:ff:72:2e:94:8a:40:33:0a:67:fd:4b:dd:
58:54:1d:be:ed:79:d9:3a:89:e1:68:56:82:41:31:
b3:c6:a3:1c:4a:c8:08:93:4c:30:ad:6c:bd:ce:eb:
73:19:5f:47:9c:fd:75:db:f9:57:0e:65:85:f6:66:
62:e0:3a:e0:80:07:a6:4f:81:a7:7a:0e:b6:03:f9:
1f:81:6d:ae:02:1d:5e:e7:22:8a:e7:1a:f3:c5:78:
ad:92:aa:d4:3f:eb:1c:69:3d:aa:fe:bd:16:14:fd:
63:05:9d:0a:2a:3c:85:59:78:6c:79:14:87:10:8c:
36:49:0f:c1:6e:0d:c1:12:22:ff:9a:a0:bf:65:02:
1a:5f:3c:bb:8c:9f:4f:9e:3f:43:9a:18:bf:8b:4c:
f7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FC:96:BF:4A:A0:97:B7:7E:41:20:BE:EC:1B:8A:DB:8A:C3:B7:B9
X509v3 Authority Key Identifier:
keyid:21:2F:08:7E:BC:C4:3B:9B:A5:92:10:4D:EB:42:E5:A1:FF:A9:41:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/0/212F087EBCC43B9BA592104DEB42E5A1FFA94122.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/212F087EBCC43B9BA592104DEB42E5A1FFA94122.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/0/323830343a343331633a3a2f33322d313238203d3e20323637353439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:431c::/32
Signature Algorithm: sha256WithRSAEncryption
0b:fb:5e:a9:fa:57:6e:8c:a3:94:06:a7:4e:77:c4:f8:cf:52:
e6:91:92:a2:61:33:ac:7a:30:73:77:ca:ec:da:10:62:fb:89:
58:bb:50:e3:37:8c:c0:fe:c1:65:b1:ae:88:7b:d0:53:f1:72:
00:ac:38:a1:3b:69:27:8c:25:8d:77:7b:b9:f7:ae:a0:ae:f5:
39:95:7e:0e:c1:84:79:dd:78:3a:01:ed:bf:82:f5:5c:9d:a5:
da:a7:ac:0e:29:ac:a2:7b:3c:89:1e:88:f5:18:a0:34:66:cc:
4e:7c:39:63:11:c9:b1:91:0b:6b:ae:db:18:86:40:5c:d0:13:
a3:8e:9e:ca:a3:a1:ce:9c:c9:10:ed:de:59:8a:cf:41:08:49:
a0:66:b5:fa:0e:dc:c1:7e:48:67:20:49:54:f3:55:85:73:fc:
66:0e:9a:6c:1f:f3:aa:b5:b0:60:c1:1f:4d:6f:fd:ec:07:3f:
57:63:ed:0b:08:11:33:58:31:87:49:4a:a9:42:62:53:85:02:
1f:5a:9e:19:38:a9:03:87:99:c4:c7:41:2c:bc:65:65:85:9b:
39:20:69:3f:d9:e5:a5:5c:86:5b:23:12:27:8b:0d:87:a0:f6:
e8:63:9b:73:0d:ce:87:e3:f0:e4:ac:b9:db:31:b4:35:a1:3e:
e8:99:39:7b
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIURS+C0/c/slEWa3sdWctVGj9ywiswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjEyRjA4N0VCQ0M0M0I5QkE1OTIxMDRERUI0MkU1QTFG
RkE5NDEyMjAeFw0yNDAxMjIxMjA3MzBaFw0yNTAxMjAxMjEyMzBaMDMxMTAvBgNV
BAMTKEI5RkM5NkJGNEFBMDk3Qjc3RTQxMjBCRUVDMUI4QURCOEFDM0I3QjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqSWi+sUXfc5KubVGbBczZ/5AV
stUAEJIuB9EHGDVkRH26U/wa08i/I/b/fWFfYaxm7H4wmb3Z1WBfpz+8yAbzNsg/
hdKmDz6U5ODCARMYsUiCKgOYdWUi9yyXmOys3s/sCfquuKjJ9tTc5P9yLpSKQDMK
Z/1L3VhUHb7tedk6ieFoVoJBMbPGoxxKyAiTTDCtbL3O63MZX0ec/XXb+VcOZYX2
ZmLgOuCAB6ZPgad6DrYD+R+Bba4CHV7nIornGvPFeK2SqtQ/6xxpPar+vRYU/WMF
nQoqPIVZeGx5FIcQjDZJD8FuDcESIv+aoL9lAhpfPLuMn0+eP0OaGL+LTPf/AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUufyWv0qgl7d+QSC+7BuK24rDt7kwHwYDVR0j
BBgwFoAUIS8IfrzEO5ulkhBN60Llof+pQSIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0FpNEJkY0JOYjJrQlNKWWdOTkZZQ1FlcXp4NHVmamVVdDJ6U0hIVEJI
a3QvMC8yMTJGMDg3RUJDQzQzQjlCQTU5MjEwNERFQjQyRTVBMUZGQTk0MTIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzIxMkYwODdFQkNDNDNCOUJB
NTkyMTA0REVCNDJFNUExRkZBOTQxMjIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NBaTRCZGNCTmIya0JTSllnTk5GWUNRZXF6eDR1ZmplVXQyelNISFRCSGt0LzAv
MzIzODMwMzQzYTM0MzMzMTYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzczNTM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBEMcMA0GCSqGSIb3DQEBCwUAA4IBAQAL+16p
+ldujKOUBqdOd8T4z1LmkZKiYTOsejBzd8rs2hBi+4lYu1DjN4zA/sFlsa6Ie9BT
8XIArDihO2knjCWNd3u5966grvU5lX4OwYR53Xg6Ae2/gvVcnaXap6wOKayiezyJ
Hoj1GKA0ZsxOfDljEcmxkQtrrtsYhkBc0BOjjp7Ko6HOnMkQ7d5Zis9BCEmgZrX6
DtzBfkhnIElU81WFc/xmDppsH/OqtbBgwR9Nb/3sBz9XY+0LCBEzWDGHSUqpQmJT
hQIfWp4ZOKkDh5nEx0EsvGVlhZs5IGk/2eWlXIZbIxIniw2HoPboY5tzDc6H4/Dk
rLnbMbQ1oT7omTl7
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:27 2025 by rpki-client