Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/323830343a316464343a383030303a3a2f33332d3333203d3e20323634333937.roa
File: 323830343a316464343a383030303a3a2f33332d3333203d3e20323634333937.roa (raw, json)
Hash identifier: 8jeA8NoUKAM6V9ngWUvnA7n4Tszvpn+TY2zwVDUsEzc=
Subject key identifier: EE:61:C8:D4:58:39:FB:0D:3D:37:CB:15:88:89:A4:49:B6:20:AA:6B
Certificate issuer: /CN=D40D71C26E8C990D22430A76496945930ECE72FE
Certificate serial: 71883F01538587B7EF0FCA06A2ABC6CC457AD4E2
Authority key identifier: D4:0D:71:C2:6E:8C:99:0D:22:43:0A:76:49:69:45:93:0E:CE:72:FE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40D71C26E8C990D22430A76496945930ECE72FE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/323830343a316464343a383030303a3a2f33332d3333203d3e20323634333937.roa
Signing time: Mon 16 Dec 2024 16:27:46 +0000
ROA not before: Mon 16 Dec 2024 16:22:46 +0000
ROA not after: Mon 15 Dec 2025 16:27:46 +0000
asID: 264397
IP address blocks: 2804:1dd4:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:88:3f:01:53:85:87:b7:ef:0f:ca:06:a2:ab:c6:cc:45:7a:d4:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D40D71C26E8C990D22430A76496945930ECE72FE
Validity
Not Before: Dec 16 16:22:46 2024 GMT
Not After : Dec 15 16:27:46 2025 GMT
Subject: CN=EE61C8D45839FB0D3D37CB158889A449B620AA6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6a:ef:4c:00:54:8a:da:7a:96:15:06:a8:26:
4c:0b:a3:94:9d:90:fc:1a:67:67:45:dd:5b:9c:d9:
25:fe:48:30:89:59:3c:69:52:54:1e:44:7f:54:fd:
ba:a4:c9:e9:46:e4:44:05:ad:5e:72:67:4e:0f:db:
97:05:64:52:43:95:58:e0:91:50:6f:fc:d0:4a:85:
e5:e4:82:e3:63:64:39:a9:5a:98:96:99:9a:34:0e:
76:9a:80:62:c5:0b:ba:f7:47:72:4b:44:6f:cf:df:
df:66:5f:00:7d:20:24:11:ee:22:17:a0:8e:24:31:
9f:7e:9d:dd:e8:4c:4f:83:98:08:68:76:65:e8:44:
8d:ca:70:24:14:9d:36:6c:30:0e:83:f8:6e:88:fd:
c2:ff:14:01:fc:1e:cd:85:db:dd:b0:a1:e9:5a:a5:
ab:06:c7:fd:e2:d8:27:b4:12:89:44:ce:84:71:66:
a4:36:5e:0e:63:0f:08:e9:3f:8a:5f:38:c4:50:4b:
35:e4:c7:91:d8:54:a5:f2:7c:3c:48:74:bb:77:44:
58:04:af:81:ab:a9:ca:d5:9c:55:52:bf:28:24:ce:
3c:b3:fd:3d:a5:e5:07:44:e8:88:73:87:e6:69:b3:
be:32:b4:8f:8d:a5:a6:fc:fc:43:81:6b:18:d2:41:
3c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:61:C8:D4:58:39:FB:0D:3D:37:CB:15:88:89:A4:49:B6:20:AA:6B
X509v3 Authority Key Identifier:
keyid:D4:0D:71:C2:6E:8C:99:0D:22:43:0A:76:49:69:45:93:0E:CE:72:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/D40D71C26E8C990D22430A76496945930ECE72FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40D71C26E8C990D22430A76496945930ECE72FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/323830343a316464343a383030303a3a2f33332d3333203d3e20323634333937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1dd4:8000::/33
Signature Algorithm: sha256WithRSAEncryption
08:f9:31:83:4a:a6:53:40:3f:aa:b3:17:1c:22:82:89:75:7d:
00:a1:f3:04:56:b2:bd:b2:8c:2e:4a:ef:20:71:2b:14:e6:ad:
d8:a7:61:f2:13:14:63:8b:26:a6:15:45:53:84:f4:f1:eb:37:
39:44:9f:aa:5a:99:02:fa:26:05:55:8e:6d:14:55:07:e1:21:
7b:ca:af:2c:fb:eb:d5:9d:83:1b:e1:2d:ff:03:a3:8c:96:25:
31:ef:b7:3d:9d:f6:43:08:01:aa:99:91:69:dd:2f:6d:a3:ef:
65:0e:7c:40:cd:de:19:4c:d0:d5:6e:a3:29:bf:16:c1:ba:c1:
49:43:7d:78:12:55:09:d3:ec:ab:1c:6e:f5:71:5d:a6:52:4a:
5f:db:81:33:72:0a:83:de:d4:00:e0:0f:39:6a:e5:ea:24:ba:
5a:3b:e7:b0:dc:fe:a0:99:6d:9d:a6:7c:fd:63:d0:74:d7:cb:
e8:bc:e8:bd:d8:2e:45:0a:ff:db:01:11:7b:f1:3a:5c:93:83:
36:67:19:ad:c8:7b:f4:4d:43:5f:f7:a6:59:f2:20:5a:41:e3:
22:8a:85:19:89:78:12:91:6a:12:55:70:84:14:24:1d:24:c0:
6e:60:74:dd:cd:d5:1b:e7:bb:f0:5b:ed:66:c2:9e:6d:a1:a6:
d0:bd:93:d7
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUcYg/AVOFh7fvD8oGoqvGzEV61OIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQwRDcxQzI2RThDOTkwRDIyNDMwQTc2NDk2OTQ1OTMw
RUNFNzJGRTAeFw0yNDEyMTYxNjIyNDZaFw0yNTEyMTUxNjI3NDZaMDMxMTAvBgNV
BAMTKEVFNjFDOEQ0NTgzOUZCMEQzRDM3Q0IxNTg4ODlBNDQ5QjYyMEFBNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnau9MAFSK2nqWFQaoJkwLo5Sd
kPwaZ2dF3Vuc2SX+SDCJWTxpUlQeRH9U/bqkyelG5EQFrV5yZ04P25cFZFJDlVjg
kVBv/NBKheXkguNjZDmpWpiWmZo0DnaagGLFC7r3R3JLRG/P399mXwB9ICQR7iIX
oI4kMZ9+nd3oTE+DmAhodmXoRI3KcCQUnTZsMA6D+G6I/cL/FAH8Hs2F292woela
pasGx/3i2Ce0EolEzoRxZqQ2Xg5jDwjpP4pfOMRQSzXkx5HYVKXyfDxIdLt3RFgE
r4GrqcrVnFVSvygkzjyz/T2l5QdE6Ihzh+Zps74ytI+Npab8/EOBaxjSQTxjAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU7mHI1Fg5+w09N8sViImkSbYgqmswHwYDVR0j
BBgwFoAU1A1xwm6MmQ0iQwp2SWlFkw7Ocv4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ296WldhRGZkdTNCYmhrRmZTZmJzMzNnYUdnTXlSZkRCRURYUnI4eFNy
OGEvMC9ENDBENzFDMjZFOEM5OTBEMjI0MzBBNzY0OTY5NDU5MzBFQ0U3MkZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0MEQ3MUMyNkU4Qzk5MEQy
MjQzMEE3NjQ5Njk0NTkzMEVDRTcyRkUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NvelpXYURmZHUzQmJoa0ZmU2ZiczMzZ2FHZ015UmZEQkVEWFJyOHhTcjhhLzAv
MzIzODMwMzQzYTMxNjQ2NDM0M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzNDMzMzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEHdSAMA0GCSqGSIb3DQEBCwUA
A4IBAQAI+TGDSqZTQD+qsxccIoKJdX0AofMEVrK9sowuSu8gcSsU5q3Yp2HyExRj
iyamFUVThPTx6zc5RJ+qWpkC+iYFVY5tFFUH4SF7yq8s++vVnYMb4S3/A6OMliUx
77c9nfZDCAGqmZFp3S9to+9lDnxAzd4ZTNDVbqMpvxbBusFJQ314ElUJ0+yrHG71
cV2mUkpf24EzcgqD3tQA4A85auXqJLpaO+ew3P6gmW2dpnz9Y9B018vovOi92C5F
Cv/bARF78Tpck4M2ZxmtyHv0TUNf96ZZ8iBaQeMiioUZiXgSkWoSVXCEFCQdJMBu
YHTdzdUb57vwW+1mwp5toabQvZPX
-----END CERTIFICATE-----
Generated at Wed Apr 9 16:30:22 2025 by rpki-client