Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a3a2f34382d3438203d3e20323633353431.roa
File: 323830343a313339383a3a2f34382d3438203d3e20323633353431.roa (raw, json)
Hash identifier: SAW3MiHRmRe0cwwHre5/AG8oGlWQjwXu5sCxdIBqreQ=
Subject key identifier: 15:D0:6E:85:6F:BB:0C:B3:60:B2:97:C4:A0:12:8F:6F:7A:34:7B:5D
Certificate issuer: /CN=DFA5F9058A3FC234221062FC10FD9D6253F81867
Certificate serial: 5DEEBFAE3858239E9787DCB82BCC1A1645554E97
Authority key identifier: DF:A5:F9:05:8A:3F:C2:34:22:10:62:FC:10:FD:9D:62:53:F8:18:67
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFA5F9058A3FC234221062FC10FD9D6253F81867.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a3a2f34382d3438203d3e20323633353431.roa
Signing time: Thu 09 Jan 2025 14:06:22 +0000
ROA not before: Thu 09 Jan 2025 14:01:22 +0000
ROA not after: Thu 08 Jan 2026 14:06:22 +0000
asID: 263541
IP address blocks: 2804:1398::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:ee:bf:ae:38:58:23:9e:97:87:dc:b8:2b:cc:1a:16:45:55:4e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA5F9058A3FC234221062FC10FD9D6253F81867
Validity
Not Before: Jan 9 14:01:22 2025 GMT
Not After : Jan 8 14:06:22 2026 GMT
Subject: CN=15D06E856FBB0CB360B297C4A0128F6F7A347B5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:80:d7:27:13:fe:cd:93:3b:a0:72:14:86:3d:
33:6a:3f:69:02:8e:75:45:6c:43:c5:69:7c:c4:34:
ba:cd:8e:9b:e1:91:3b:77:df:ff:65:97:82:1f:32:
96:b7:e6:d4:24:0f:2f:cd:18:fa:cb:79:df:7a:d2:
cd:dd:ed:1e:eb:7d:48:ba:64:1b:63:10:a8:0e:f9:
23:f4:3a:0f:7f:dd:a8:89:34:1f:16:b9:f2:07:d4:
14:7f:32:a8:fb:78:6a:89:c5:8c:7b:64:6d:55:47:
d5:31:3a:d5:ff:78:2c:7e:90:df:9f:1b:bd:f5:c0:
03:99:9c:d1:5e:98:21:fc:58:84:b8:17:7f:4a:a1:
51:a8:15:55:1b:e2:76:d4:43:c9:2a:01:6d:52:09:
cd:c5:54:25:ec:f7:7c:a0:09:99:17:05:ba:fd:8c:
fa:37:03:cc:dd:c7:6b:20:45:65:96:e5:00:8a:d7:
13:0c:51:4c:cc:57:dc:1d:de:46:c0:e6:1a:25:25:
1e:7c:b7:b6:a5:6c:b2:6c:ee:bb:2b:71:b1:fb:eb:
a4:87:7d:61:ec:f8:5f:26:47:04:38:d0:8c:24:3d:
91:4b:0d:15:12:4d:05:e5:92:d8:5f:5b:a3:54:51:
2c:3a:3d:b7:45:b1:9b:ed:24:6d:20:9b:db:68:58:
62:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D0:6E:85:6F:BB:0C:B3:60:B2:97:C4:A0:12:8F:6F:7A:34:7B:5D
X509v3 Authority Key Identifier:
keyid:DF:A5:F9:05:8A:3F:C2:34:22:10:62:FC:10:FD:9D:62:53:F8:18:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/DFA5F9058A3FC234221062FC10FD9D6253F81867.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFA5F9058A3FC234221062FC10FD9D6253F81867.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a3a2f34382d3438203d3e20323633353431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1398::/48
Signature Algorithm: sha256WithRSAEncryption
38:6c:4c:a3:7c:68:6c:d3:7e:43:42:76:72:47:64:4e:d9:54:
79:c6:91:e5:59:07:3f:c9:9f:7a:ac:8a:1b:88:85:a4:a6:8e:
54:8b:32:6b:c8:8f:76:0e:81:ce:89:f3:01:ff:77:ea:d8:8b:
dd:f7:4e:ef:1b:dc:a7:5b:90:70:09:9a:79:00:a8:3b:6d:ba:
30:95:26:fd:82:82:91:30:13:1c:39:08:ac:11:ff:74:95:7e:
5d:53:fa:6f:ab:85:d1:68:3d:75:20:f3:b9:cc:97:b2:b0:a0:
83:c3:be:4b:99:0a:b4:84:e6:73:99:ca:2f:a8:16:fd:18:ae:
01:86:6a:36:02:01:65:ac:2f:1d:f4:b8:e5:d8:ce:ad:e7:97:
df:d9:fb:85:52:68:bd:be:14:0b:e7:0e:29:ed:4d:a0:d6:f4:
93:81:69:12:57:ef:7d:96:64:34:75:46:09:89:45:d4:49:24:
b9:b4:91:5a:30:03:e7:6c:86:37:90:93:18:61:58:50:de:0c:
dd:e1:be:bf:54:0b:fa:33:c9:09:2e:fd:3f:9c:33:7d:c4:ca:
0a:28:46:a6:7b:57:ef:f7:0b:5e:27:9f:68:a9:37:0e:79:a7:
4b:2e:4d:0b:98:24:bc:13:8b:94:b2:af:32:d6:3e:e1:cd:2a:
7b:11:82:e8
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUXe6/rjhYI56Xh9y4K8waFkVVTpcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREZBNUY5MDU4QTNGQzIzNDIyMTA2MkZDMTBGRDlENjI1
M0Y4MTg2NzAeFw0yNTAxMDkxNDAxMjJaFw0yNjAxMDgxNDA2MjJaMDMxMTAvBgNV
BAMTKDE1RDA2RTg1NkZCQjBDQjM2MEIyOTdDNEEwMTI4RjZGN0EzNDdCNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCggNcnE/7NkzugchSGPTNqP2kC
jnVFbEPFaXzENLrNjpvhkTt33/9ll4IfMpa35tQkDy/NGPrLed960s3d7R7rfUi6
ZBtjEKgO+SP0Og9/3aiJNB8WufIH1BR/Mqj7eGqJxYx7ZG1VR9UxOtX/eCx+kN+f
G731wAOZnNFemCH8WIS4F39KoVGoFVUb4nbUQ8kqAW1SCc3FVCXs93ygCZkXBbr9
jPo3A8zdx2sgRWWW5QCK1xMMUUzMV9wd3kbA5holJR58t7albLJs7rsrcbH766SH
fWHs+F8mRwQ40IwkPZFLDRUSTQXlkthfW6NUUSw6PbdFsZvtJG0gm9toWGKxAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUFdBuhW+7DLNgspfEoBKPb3o0e10wHwYDVR0j
BBgwFoAU36X5BYo/wjQiEGL8EP2dYlP4GGcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2lhenB2ZzgxUTRER00yajgxQ1ZTRmF1WVdSUWM2NFlBeU13ckdYdlJ6
U1UvMC9ERkE1RjkwNThBM0ZDMjM0MjIxMDYyRkMxMEZEOUQ2MjUzRjgxODY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGQTVGOTA1OEEzRkMyMzQy
MjEwNjJGQzEwRkQ5RDYyNTNGODE4NjcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NpYXpwdmc4MVE0REdNMmo4MUNWU0ZhdVlXUlFjNjRZQXlNd3JHWHZSelNVLzAv
MzIzODMwMzQzYTMxMzMzOTM4M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNjMz
MzUzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcAKAQTmAAAMA0GCSqGSIb3DQEBCwUAA4IBAQA4bEyj
fGhs035DQnZyR2RO2VR5xpHlWQc/yZ96rIobiIWkpo5UizJryI92DoHOifMB/3fq
2Ivd907vG9ynW5BwCZp5AKg7bbowlSb9goKRMBMcOQisEf90lX5dU/pvq4XRaD11
IPO5zJeysKCDw75LmQq0hOZzmcovqBb9GK4Bhmo2AgFlrC8d9Ljl2M6t55ff2fuF
Umi9vhQL5w4p7U2g1vSTgWkSV+99lmQ0dUYJiUXUSSS5tJFaMAPnbIY3kJMYYVhQ
3gzd4b6/VAv6M8kJLv0/nDN9xMoKKEame1fv9wteJ59oqTcOeadLLk0LmCS8E4uU
sq8y1j7hzSp7EYLo
-----END CERTIFICATE-----
Generated at Thu Apr 10 15:47:29 2025 by rpki-client