Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/323830343a363434303a383030303a3a2f33332d3333203d3e20323639343136.roa
File: 323830343a363434303a383030303a3a2f33332d3333203d3e20323639343136.roa (raw, json)
Hash identifier: ZK/YkOvtVoK7gWyepJYBmoXeRB/LXpj9BrkkQ/rmrIk=
Subject key identifier: D2:C9:E7:E3:39:5B:EC:2D:AE:E3:40:29:B0:82:40:0C:DA:B1:C7:7F
Certificate issuer: /CN=2431B91B2498F01C25C009C9345EE622B155100B
Certificate serial: 72B1B475639F1197988A76A6DFEC0D019EE5F62F
Authority key identifier: 24:31:B9:1B:24:98:F0:1C:25:C0:09:C9:34:5E:E6:22:B1:55:10:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B91B2498F01C25C009C9345EE622B155100B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/323830343a363434303a383030303a3a2f33332d3333203d3e20323639343136.roa
Signing time: Wed 30 Oct 2024 15:02:54 +0000
ROA not before: Wed 30 Oct 2024 14:57:54 +0000
ROA not after: Wed 29 Oct 2025 15:02:54 +0000
asID: 269416
IP address blocks: 2804:6440:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:b1:b4:75:63:9f:11:97:98:8a:76:a6:df:ec:0d:01:9e:e5:f6:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2431B91B2498F01C25C009C9345EE622B155100B
Validity
Not Before: Oct 30 14:57:54 2024 GMT
Not After : Oct 29 15:02:54 2025 GMT
Subject: CN=D2C9E7E3395BEC2DAEE34029B082400CDAB1C77F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d0:aa:d9:2c:00:35:22:86:90:65:ac:a4:2d:
8b:c5:23:29:27:89:63:c7:ba:ad:14:79:28:0b:4f:
22:74:fe:c5:f2:fe:44:ea:b1:59:53:dd:ad:71:d1:
68:24:7c:17:74:bd:75:6a:0a:22:96:51:af:aa:11:
13:0e:aa:42:00:7f:e5:87:e3:f0:ae:b9:89:ad:0a:
22:2c:a0:3b:53:54:77:85:ef:b5:b3:3b:13:7e:20:
17:b8:c4:24:3e:93:a5:85:35:3b:4d:96:d8:bd:93:
ca:89:44:19:0f:36:4e:92:e8:eb:12:0c:9d:bf:95:
7c:a2:2c:26:85:76:e0:f3:88:09:45:9b:ca:6c:78:
04:b3:0f:9b:01:c5:1c:16:31:1b:ea:59:99:5c:b7:
36:74:f6:61:53:85:37:98:6c:2c:b7:4e:f7:b6:5f:
d8:86:99:ed:89:8b:b9:a4:ca:63:24:66:61:66:61:
d5:93:f6:7b:e8:18:9a:ca:58:74:b3:39:af:86:a0:
a2:72:6a:8f:19:28:aa:1b:a1:8e:d7:b8:40:f7:0b:
f9:45:20:ef:97:af:e0:81:34:dc:d2:0b:6c:dd:5d:
c8:e6:90:c1:29:0e:c4:2e:93:45:96:96:dc:1b:4b:
95:74:e8:aa:3c:08:10:36:35:06:e1:aa:e0:d5:0c:
e5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C9:E7:E3:39:5B:EC:2D:AE:E3:40:29:B0:82:40:0C:DA:B1:C7:7F
X509v3 Authority Key Identifier:
keyid:24:31:B9:1B:24:98:F0:1C:25:C0:09:C9:34:5E:E6:22:B1:55:10:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/2431B91B2498F01C25C009C9345EE622B155100B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B91B2498F01C25C009C9345EE622B155100B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/323830343a363434303a383030303a3a2f33332d3333203d3e20323639343136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6440:8000::/33
Signature Algorithm: sha256WithRSAEncryption
ad:95:24:36:c9:61:6b:78:0d:2b:4c:ee:1f:a6:19:d1:b0:72:
4e:fc:33:d1:ee:43:fc:3f:d3:40:26:0b:34:98:e2:25:2a:15:
05:46:24:01:e3:61:14:39:6b:20:7f:fd:20:bb:7d:2c:8b:19:
27:c1:5f:d8:62:00:69:53:76:bc:af:82:47:21:84:b4:32:26:
5f:1c:95:c6:45:74:a3:76:df:ab:ea:18:1c:7d:b4:04:4c:99:
11:f4:00:96:06:42:4a:b2:dc:9f:4e:9a:59:29:e8:5c:a1:e0:
e2:cd:3c:81:4d:a3:ae:5b:65:ac:dc:2b:23:d6:5a:8f:ff:cc:
86:46:a0:54:63:57:80:6c:92:2b:65:a5:cd:8c:a7:7a:b8:c1:
2e:62:d4:9f:82:03:c6:1d:29:19:9b:fb:e5:2a:87:95:d0:18:
07:bd:19:78:a1:f8:d0:04:56:f9:da:2c:ca:11:48:65:ac:eb:
68:7d:e3:7b:7e:d3:b5:8b:88:ee:75:bf:b5:ab:e5:ff:37:26:
23:b1:a4:f0:35:c3:14:b1:0f:0c:82:a9:a7:b5:74:47:15:b2:
58:24:d2:65:a4:a0:30:36:1a:0b:d4:73:37:55:dc:56:b0:90:
da:5c:36:a7:5e:69:f4:a9:40:97:b0:c0:8f:40:35:b6:87:9e:
06:69:53:d0
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUcrG0dWOfEZeYinam3+wNAZ7l9i8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQzMUI5MUIyNDk4RjAxQzI1QzAwOUM5MzQ1RUU2MjJC
MTU1MTAwQjAeFw0yNDEwMzAxNDU3NTRaFw0yNTEwMjkxNTAyNTRaMDMxMTAvBgNV
BAMTKEQyQzlFN0UzMzk1QkVDMkRBRUUzNDAyOUIwODI0MDBDREFCMUM3N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU0KrZLAA1IoaQZaykLYvFIykn
iWPHuq0UeSgLTyJ0/sXy/kTqsVlT3a1x0WgkfBd0vXVqCiKWUa+qERMOqkIAf+WH
4/CuuYmtCiIsoDtTVHeF77WzOxN+IBe4xCQ+k6WFNTtNlti9k8qJRBkPNk6S6OsS
DJ2/lXyiLCaFduDziAlFm8pseASzD5sBxRwWMRvqWZlctzZ09mFThTeYbCy3Tve2
X9iGme2Ji7mkymMkZmFmYdWT9nvoGJrKWHSzOa+GoKJyao8ZKKoboY7XuED3C/lF
IO+Xr+CBNNzSC2zdXcjmkMEpDsQuk0WWltwbS5V06Ko8CBA2NQbhquDVDOWRAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU0snn4zlb7C2u40ApsIJADNqxx38wHwYDVR0j
BBgwFoAUJDG5GySY8BwlwAnJNF7mIrFVEAswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGhVWDM1Wk1VQ2JSaFl1RUNMUXVRaXlpcUNYNHo5THZSaXJKdzNiQlV3
eVgvMC8yNDMxQjkxQjI0OThGMDFDMjVDMDA5QzkzNDVFRTYyMkIxNTUxMDBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0MzFCOTFCMjQ5OEYwMUMy
NUMwMDlDOTM0NUVFNjIyQjE1NTEwMEIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RoVVgzNVpNVUNiUmhZdUVDTFF1UWl5aXFDWDR6OUx2UmlySnczYkJVd3lYLzAv
MzIzODMwMzQzYTM2MzQzNDMwM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzOTM0MzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEZECAMA0GCSqGSIb3DQEBCwUA
A4IBAQCtlSQ2yWFreA0rTO4fphnRsHJO/DPR7kP8P9NAJgs0mOIlKhUFRiQB42EU
OWsgf/0gu30sixknwV/YYgBpU3a8r4JHIYS0MiZfHJXGRXSjdt+r6hgcfbQETJkR
9ACWBkJKstyfTppZKehcoeDizTyBTaOuW2Ws3Csj1lqP/8yGRqBUY1eAbJIrZaXN
jKd6uMEuYtSfggPGHSkZm/vlKoeV0BgHvRl4ofjQBFb52izKEUhlrOtofeN7ftO1
i4judb+1q+X/NyYjsaTwNcMUsQ8MgqmntXRHFbJYJNJlpKAwNhoL1HM3VdxWsJDa
XDanXmn0qUCXsMCPQDW2h54GaVPQ
-----END CERTIFICATE-----
Generated at Wed Apr 9 09:27:25 2025 by rpki-client