Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/323830343a316464343a3a2f33322d3332203d3e20323634333937.roa
File: 323830343a316464343a3a2f33322d3332203d3e20323634333937.roa (raw, json)
Hash identifier: sZN3r1UavbIauWYvPWtAi1rkzC5X9/zX63C75dkWwVo=
Subject key identifier: 45:B0:BC:01:3E:C5:61:01:5F:9C:48:E5:45:0E:7B:F2:35:FA:3C:58
Certificate issuer: /CN=D40D71C26E8C990D22430A76496945930ECE72FE
Certificate serial: 7F97D89CC5D9C545DA64D8253F84EBBF483E133F
Authority key identifier: D4:0D:71:C2:6E:8C:99:0D:22:43:0A:76:49:69:45:93:0E:CE:72:FE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40D71C26E8C990D22430A76496945930ECE72FE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/323830343a316464343a3a2f33322d3332203d3e20323634333937.roa
Signing time: Mon 16 Dec 2024 16:27:45 +0000
ROA not before: Mon 16 Dec 2024 16:22:45 +0000
ROA not after: Mon 15 Dec 2025 16:27:45 +0000
asID: 264397
IP address blocks: 2804:1dd4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:97:d8:9c:c5:d9:c5:45:da:64:d8:25:3f:84:eb:bf:48:3e:13:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D40D71C26E8C990D22430A76496945930ECE72FE
Validity
Not Before: Dec 16 16:22:45 2024 GMT
Not After : Dec 15 16:27:45 2025 GMT
Subject: CN=45B0BC013EC561015F9C48E5450E7BF235FA3C58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ee:48:ac:6d:b8:21:a6:1e:00:14:77:6b:e0:
05:c7:06:01:77:db:57:e3:b7:68:00:96:14:fc:fb:
14:ee:2f:29:f0:7a:1d:79:99:57:36:41:20:52:2f:
99:a9:be:b8:1c:ba:60:8c:db:7c:35:27:32:41:90:
7d:1d:26:de:fe:5d:38:f4:8f:4d:05:c4:cb:ea:30:
0d:05:04:48:a6:11:be:4f:c2:8d:89:c6:3c:2c:7e:
c1:62:40:57:d2:31:59:95:6e:49:74:e5:04:bc:f5:
d1:b8:09:46:3c:76:c9:89:9a:ae:26:68:f9:1f:f0:
69:87:8a:55:e1:c1:b5:38:27:b4:25:b6:31:1d:a7:
1c:38:f5:21:32:af:10:29:1a:07:d7:ab:35:51:59:
a4:7c:33:30:7f:30:36:c4:63:76:6d:30:4e:e5:06:
95:06:db:6c:ce:c8:28:1d:c8:b3:a2:eb:1c:0c:d8:
e4:2a:f3:a4:88:47:a7:a1:25:fb:cc:42:c6:37:25:
80:bd:17:56:53:85:4b:e6:14:f4:c0:81:7d:72:eb:
48:a2:ef:2e:f2:44:6d:b4:d1:df:af:f6:16:1c:50:
62:e0:e9:1e:af:26:2b:22:95:6e:1c:e3:8d:5d:46:
a4:a0:c5:82:80:a9:8a:b6:ed:34:43:a5:a6:0f:2b:
48:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B0:BC:01:3E:C5:61:01:5F:9C:48:E5:45:0E:7B:F2:35:FA:3C:58
X509v3 Authority Key Identifier:
keyid:D4:0D:71:C2:6E:8C:99:0D:22:43:0A:76:49:69:45:93:0E:CE:72:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/D40D71C26E8C990D22430A76496945930ECE72FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40D71C26E8C990D22430A76496945930ECE72FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/323830343a316464343a3a2f33322d3332203d3e20323634333937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1dd4::/32
Signature Algorithm: sha256WithRSAEncryption
3d:9b:01:35:e4:f5:f8:ae:50:c4:54:9a:e6:15:41:f2:87:52:
e3:81:51:02:20:78:6c:28:a5:97:5c:2a:d0:60:0b:e5:d0:30:
33:12:bb:c5:c5:94:d1:a5:17:3c:26:46:55:11:de:cb:fc:d2:
bc:ae:80:b8:98:2e:5f:be:00:38:93:8c:80:ac:57:aa:ca:ca:
12:41:82:61:4c:58:f4:78:5f:83:c0:a9:5f:4b:9d:84:60:5e:
cb:86:1d:07:4d:6e:88:98:e3:90:b2:c5:0e:2b:f2:34:cb:81:
e8:63:36:7d:0a:d8:1d:d7:b9:a7:e1:f8:9c:d7:a5:df:03:ca:
ff:b1:8a:b9:2a:3b:eb:a0:fb:71:89:2a:e6:1e:6c:67:c3:32:
8b:e7:02:2e:f7:8f:7f:47:ab:c6:f5:2a:aa:21:7d:22:d2:ff:
66:f6:f8:f9:d4:46:41:aa:6b:c7:19:13:2d:21:2e:41:c8:9c:
4b:91:df:0a:45:e0:ae:68:c2:78:a6:01:69:bc:75:a6:0e:61:
f9:cb:72:ff:bf:34:7c:09:ea:44:c1:2c:f1:a2:17:0a:8e:d1:
5a:eb:4a:78:34:b5:b9:fe:6a:b5:ea:23:27:4f:0f:70:3c:bd:
ba:a8:7a:31:5b:75:f1:a9:b5:55:61:8e:35:23:f7:28:4e:12:
9b:ec:4d:ca
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUf5fYnMXZxUXaZNglP4Trv0g+Ez8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQwRDcxQzI2RThDOTkwRDIyNDMwQTc2NDk2OTQ1OTMw
RUNFNzJGRTAeFw0yNDEyMTYxNjIyNDVaFw0yNTEyMTUxNjI3NDVaMDMxMTAvBgNV
BAMTKDQ1QjBCQzAxM0VDNTYxMDE1RjlDNDhFNTQ1MEU3QkYyMzVGQTNDNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE7kisbbghph4AFHdr4AXHBgF3
21fjt2gAlhT8+xTuLynweh15mVc2QSBSL5mpvrgcumCM23w1JzJBkH0dJt7+XTj0
j00FxMvqMA0FBEimEb5Pwo2JxjwsfsFiQFfSMVmVbkl05QS89dG4CUY8dsmJmq4m
aPkf8GmHilXhwbU4J7QltjEdpxw49SEyrxApGgfXqzVRWaR8MzB/MDbEY3ZtME7l
BpUG22zOyCgdyLOi6xwM2OQq86SIR6ehJfvMQsY3JYC9F1ZThUvmFPTAgX1y60ii
7y7yRG200d+v9hYcUGLg6R6vJisilW4c441dRqSgxYKAqYq27TRDpaYPK0iRAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQURbC8AT7FYQFfnEjlRQ578jX6PFgwHwYDVR0j
BBgwFoAU1A1xwm6MmQ0iQwp2SWlFkw7Ocv4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ296WldhRGZkdTNCYmhrRmZTZmJzMzNnYUdnTXlSZkRCRURYUnI4eFNy
OGEvMC9ENDBENzFDMjZFOEM5OTBEMjI0MzBBNzY0OTY5NDU5MzBFQ0U3MkZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0MEQ3MUMyNkU4Qzk5MEQy
MjQzMEE3NjQ5Njk0NTkzMEVDRTcyRkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NvelpXYURmZHUzQmJoa0ZmU2ZiczMzZ2FHZ015UmZEQkVEWFJyOHhTcjhhLzAv
MzIzODMwMzQzYTMxNjQ2NDM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzMzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQd1DANBgkqhkiG9w0BAQsFAAOCAQEAPZsBNeT1
+K5QxFSa5hVB8odS44FRAiB4bCill1wq0GAL5dAwMxK7xcWU0aUXPCZGVRHey/zS
vK6AuJguX74AOJOMgKxXqsrKEkGCYUxY9Hhfg8CpX0udhGBey4YdB01uiJjjkLLF
DivyNMuB6GM2fQrYHde5p+H4nNel3wPK/7GKuSo766D7cYkq5h5sZ8Myi+cCLveP
f0erxvUqqiF9ItL/Zvb4+dRGQaprxxkTLSEuQcicS5HfCkXgrmjCeKYBabx1pg5h
+cty/780fAnqRMEs8aIXCo7RWutKeDS1uf5qteojJ08PcDy9uqh6MVt18am1VWGO
NSP3KE4Sm+xNyg==
-----END CERTIFICATE-----
Generated at Fri Mar 14 01:17:36 2025 by rpki-client