Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/323830343a3538303a3a2f33332d3333203d3e20323632353138.roa
File: 323830343a3538303a3a2f33332d3333203d3e20323632353138.roa (raw, json)
Hash identifier: +lOagFlZA/zboGORyA40UaSMftpJ2mEUZU+khUCdV0Y=
Subject key identifier: 42:1B:9B:36:9F:9A:3B:02:2B:40:BA:44:94:70:CB:EA:D9:DB:A2:8A
Certificate issuer: /CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
Certificate serial: 4CDB40062479207FEFEA6D6775478A5B74CC00F2
Authority key identifier: A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/323830343a3538303a3a2f33332d3333203d3e20323632353138.roa
Signing time: Tue 11 Jul 2023 11:41:19 +0000
ROA not before: Tue 11 Jul 2023 11:36:19 +0000
ROA not after: Tue 09 Jul 2024 11:41:19 +0000
asID: 262518
IP address blocks: 2804:580::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:db:40:06:24:79:20:7f:ef:ea:6d:67:75:47:8a:5b:74:cc:00:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
Validity
Not Before: Jul 11 11:36:19 2023 GMT
Not After : Jul 9 11:41:19 2024 GMT
Subject: CN=421B9B369F9A3B022B40BA449470CBEAD9DBA28A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ae:f5:16:7a:74:c9:5b:7e:60:78:7d:b6:9d:
f3:e7:d6:99:c2:cd:50:96:e7:b6:f9:64:2d:76:de:
b5:38:f5:f9:d6:8c:75:02:fd:b6:86:3c:dd:a1:d9:
83:7c:02:86:67:da:fb:ef:fc:b6:cc:26:63:02:93:
c8:b9:05:01:9c:78:da:22:4d:2e:dd:03:3b:6c:0d:
08:4e:b0:ff:74:1f:08:8a:9f:b1:69:2d:75:4a:0e:
15:fb:51:50:d6:aa:f4:e2:1d:57:4a:f6:9f:65:7e:
0a:f4:e5:94:79:b7:d9:56:fb:c3:3f:a5:5d:47:c8:
f0:73:10:2a:4e:b3:98:d8:90:9c:94:99:9e:66:d7:
40:cd:be:e5:b9:f5:96:a4:ba:b7:a5:09:2a:7a:6e:
79:81:4b:8d:7c:f3:0b:41:6d:28:84:9e:74:e3:44:
df:19:d9:48:75:36:43:ac:dc:6c:ee:29:bd:3e:25:
4a:e2:af:01:76:cc:ad:ca:f4:37:e5:11:2a:24:ad:
a9:eb:7f:11:35:48:78:13:ac:d7:70:0f:47:54:bb:
b6:c5:1e:81:80:54:93:e7:c8:4b:bd:80:cb:3a:9b:
36:5b:47:70:80:28:1c:51:66:8d:b2:91:83:9e:13:
af:61:4c:51:48:6c:c6:73:c6:16:f2:fd:c0:7c:a6:
22:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1B:9B:36:9F:9A:3B:02:2B:40:BA:44:94:70:CB:EA:D9:DB:A2:8A
X509v3 Authority Key Identifier:
keyid:A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/323830343a3538303a3a2f33332d3333203d3e20323632353138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:580::/33
Signature Algorithm: sha256WithRSAEncryption
cf:d1:2a:c5:c0:ce:e9:e3:9a:21:31:67:3f:af:c0:a0:7f:9c:
81:a4:3f:71:f5:29:53:28:f7:92:6d:95:f7:e4:89:3f:17:b1:
cb:a9:ed:fb:19:d3:b0:2b:63:8f:48:ee:50:57:02:e3:67:b0:
64:e3:6d:ed:f0:ac:83:ce:27:99:7e:24:48:5d:2d:ae:b3:2f:
f9:13:1a:83:98:0d:b8:36:fd:78:b5:0f:1d:51:22:13:79:39:
2a:8c:9a:cc:3b:0c:c0:fd:dd:c9:af:06:b2:84:a3:78:4f:a0:
01:c1:86:2b:dc:1c:87:a0:5f:de:c0:08:f7:bd:23:08:60:d3:
97:16:ba:fa:02:7d:55:53:8e:99:29:92:80:70:84:93:38:a2:
de:03:72:82:f3:f1:48:3a:45:c4:a0:73:35:06:6f:3d:18:b0:
c2:3b:c1:00:36:4e:ce:d7:6e:7c:7c:50:b5:3f:05:22:87:51:
ca:5e:9f:8e:1c:8a:88:21:3d:94:7a:52:dc:07:f7:45:3e:b6:
a9:7a:a4:28:da:e9:3d:64:22:3b:c9:1a:bf:6d:89:8f:f3:b8:
01:f8:ec:c3:fb:6e:22:f0:b2:b7:cf:d6:c7:41:3c:0c:ec:2b:
8a:5c:ba:de:4f:27:72:8b:0f:f4:f8:1f:f3:a6:4c:4e:2a:c9:
6c:e6:aa:1d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTNtABiR5IH/v6m1ndUeKW3TMAPIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTFCRTI1QkFBRTkwRjc5MDhFRTU3N0MzQzM3NTJGRTA4
QUYzRUM0NjAeFw0yMzA3MTExMTM2MTlaFw0yNDA3MDkxMTQxMTlaMDMxMTAvBgNV
BAMTKDQyMUI5QjM2OUY5QTNCMDIyQjQwQkE0NDk0NzBDQkVBRDlEQkEyOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/rvUWenTJW35geH22nfPn1pnC
zVCW57b5ZC123rU49fnWjHUC/baGPN2h2YN8AoZn2vvv/LbMJmMCk8i5BQGceNoi
TS7dAztsDQhOsP90HwiKn7FpLXVKDhX7UVDWqvTiHVdK9p9lfgr05ZR5t9lW+8M/
pV1HyPBzECpOs5jYkJyUmZ5m10DNvuW59ZakurelCSp6bnmBS4188wtBbSiEnnTj
RN8Z2Uh1NkOs3GzuKb0+JUrirwF2zK3K9DflESokranrfxE1SHgTrNdwD0dUu7bF
HoGAVJPnyEu9gMs6mzZbR3CAKBxRZo2ykYOeE69hTFFIbMZzxhby/cB8piK3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUQhubNp+aOwIrQLpElHDL6tnbooowHwYDVR0j
BBgwFoAUob4luq6Q95CO5XfDw3Uv4Irz7EYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGg3bXdKTEpCQjRBejRmanpXMnRXUWt3dlhrNXNOcDRqd0R5TlRZckgz
U3IvMC9BMUJFMjVCQUFFOTBGNzkwOEVFNTc3QzNDMzc1MkZFMDhBRjNFQzQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ExQkUyNUJBQUU5MEY3OTA4
RUU1NzdDM0MzNzUyRkUwOEFGM0VDNDYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RoN213SkxKQkI0QXo0Zmp6VzJ0V1Frd3ZYazVzTnA0andEeU5UWXJIM1NyLzAv
MzIzODMwMzQzYTM1MzgzMDNhM2EyZjMzMzMyZDMzMzMyMDNkM2UyMDMyMzYzMjM1
MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGBygEBYAAMA0GCSqGSIb3DQEBCwUAA4IBAQDP0SrFwM7p
45ohMWc/r8Cgf5yBpD9x9SlTKPeSbZX35Ik/F7HLqe37GdOwK2OPSO5QVwLjZ7Bk
423t8KyDzieZfiRIXS2usy/5ExqDmA24Nv14tQ8dUSITeTkqjJrMOwzA/d3Jrway
hKN4T6ABwYYr3ByHoF/ewAj3vSMIYNOXFrr6An1VU46ZKZKAcISTOKLeA3KC8/FI
OkXEoHM1Bm89GLDCO8EANk7O1258fFC1PwUih1HKXp+OHIqIIT2UelLcB/dFPrap
eqQo2uk9ZCI7yRq/bYmP87gB+OzD+24i8LK3z9bHQTwM7CuKXLreTydyiw/0+B/z
pkxOKsls5qod
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org