Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/323830343a346139303a3a2f33322d3332203d3e20323637323439.roa
File: 323830343a346139303a3a2f33322d3332203d3e20323637323439.roa (raw, json)
Hash identifier: mSQe1HR1T1JYrsMu283wgjd3eVEc2dAeIqEEygPJbWU=
Subject key identifier: E3:A3:C3:2D:78:CB:0B:CD:79:AC:CE:72:DC:9D:C8:E0:B0:E2:59:60
Certificate issuer: /CN=9830A6B7098E8E3BB866650DCBD2E476C646A0C8
Certificate serial: 65401E1094665383B8884401CB586B9FF72A8D6C
Authority key identifier: 98:30:A6:B7:09:8E:8E:3B:B8:66:65:0D:CB:D2:E4:76:C6:46:A0:C8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9830A6B7098E8E3BB866650DCBD2E476C646A0C8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/323830343a346139303a3a2f33322d3332203d3e20323637323439.roa
Signing time: Fri 23 Aug 2024 19:58:34 +0000
ROA not before: Fri 23 Aug 2024 19:53:34 +0000
ROA not after: Fri 22 Aug 2025 19:58:34 +0000
asID: 267249
IP address blocks: 2804:4a90::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:40:1e:10:94:66:53:83:b8:88:44:01:cb:58:6b:9f:f7:2a:8d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9830A6B7098E8E3BB866650DCBD2E476C646A0C8
Validity
Not Before: Aug 23 19:53:34 2024 GMT
Not After : Aug 22 19:58:34 2025 GMT
Subject: CN=E3A3C32D78CB0BCD79ACCE72DC9DC8E0B0E25960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e0:7b:2d:0d:04:5e:80:f1:0d:54:39:ab:78:
9a:66:a1:56:cb:55:de:c5:06:7f:81:92:e2:a6:07:
b9:24:13:3b:b8:a4:68:22:73:8a:17:59:ae:6f:0a:
66:5f:12:1f:fb:ac:b6:d5:50:d6:60:58:41:43:24:
33:8f:bd:e4:4c:fa:1b:b7:36:b8:1c:bb:5e:e7:c8:
3c:43:f0:ac:ef:17:b7:3f:01:b7:d1:ea:7d:97:f1:
a8:6a:a7:0e:79:cf:0c:92:c3:fb:37:2e:1c:df:93:
b9:c8:20:a1:b7:1f:6c:80:b4:88:68:b0:56:14:8c:
9e:01:ea:f9:9f:3a:b7:bb:ef:dc:54:ce:3b:24:45:
2a:76:17:6f:9a:32:33:da:0d:ee:a0:b4:5b:43:ed:
40:24:69:73:cb:26:cf:01:77:9b:9c:f0:0d:75:31:
0a:02:b5:57:ab:34:2c:3f:6e:6f:6a:9c:60:29:a6:
30:91:0d:98:d6:3a:51:95:cc:f9:a3:4c:6e:b1:1a:
7f:8a:64:93:ef:4e:fc:2e:da:1a:cb:0c:b8:3c:91:
96:a6:bf:4d:64:8d:3f:28:6e:31:8d:ba:4c:98:b7:
00:28:26:42:5a:dc:d1:f0:41:b0:6a:ca:7c:79:9e:
f2:3e:11:6b:70:f6:0f:4b:94:d7:f7:2e:89:6f:52:
a5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A3:C3:2D:78:CB:0B:CD:79:AC:CE:72:DC:9D:C8:E0:B0:E2:59:60
X509v3 Authority Key Identifier:
keyid:98:30:A6:B7:09:8E:8E:3B:B8:66:65:0D:CB:D2:E4:76:C6:46:A0:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/9830A6B7098E8E3BB866650DCBD2E476C646A0C8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9830A6B7098E8E3BB866650DCBD2E476C646A0C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/323830343a346139303a3a2f33322d3332203d3e20323637323439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4a90::/32
Signature Algorithm: sha256WithRSAEncryption
26:d7:64:f3:d4:d8:41:92:7c:00:c7:63:cc:f4:6d:8a:63:53:
2b:d8:ed:b0:5b:4c:66:d3:75:63:5e:6b:26:c2:97:47:fa:42:
57:77:b9:38:29:bb:fa:0e:e5:36:c8:83:87:2d:e8:a6:c4:cf:
a8:45:cc:11:a7:69:38:80:cc:7d:91:86:53:e6:f0:cf:85:86:
26:99:5a:de:96:65:94:79:2f:6b:2d:47:e5:21:20:07:38:5c:
9a:8d:6a:78:ef:0c:0f:16:6a:2e:cc:17:b4:00:56:f4:cd:5e:
85:6d:53:0a:20:a1:a0:40:da:2e:b8:53:e0:50:ea:a6:38:2a:
a6:56:20:80:67:d9:73:f5:f2:84:ce:b2:0d:05:3a:4d:8c:9b:
a6:9c:53:17:80:81:f7:78:0a:2c:a6:c5:e6:5a:c7:fd:c9:70:
94:e4:7a:96:74:48:d2:0c:37:14:b6:40:52:94:a0:70:32:f1:
e0:d8:5f:27:23:51:0a:d5:89:0e:0b:35:fa:8c:92:ee:94:17:
07:34:65:88:79:89:7d:3c:53:9e:bf:a7:8e:3b:1b:59:aa:a8:
d7:a7:46:96:37:a4:d1:09:ba:a8:0c:72:4d:69:35:a2:ef:cc:
b9:f5:29:57:ec:96:b4:a8:03:54:1b:b6:75:53:2e:3c:ff:f6:
d1:33:ad:7a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUZUAeEJRmU4O4iEQBy1hrn/cqjWwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTgzMEE2QjcwOThFOEUzQkI4NjY2NTBEQ0JEMkU0NzZD
NjQ2QTBDODAeFw0yNDA4MjMxOTUzMzRaFw0yNTA4MjIxOTU4MzRaMDMxMTAvBgNV
BAMTKEUzQTNDMzJENzhDQjBCQ0Q3OUFDQ0U3MkRDOURDOEUwQjBFMjU5NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa4HstDQRegPENVDmreJpmoVbL
Vd7FBn+BkuKmB7kkEzu4pGgic4oXWa5vCmZfEh/7rLbVUNZgWEFDJDOPveRM+hu3
Nrgcu17nyDxD8KzvF7c/AbfR6n2X8ahqpw55zwySw/s3Lhzfk7nIIKG3H2yAtIho
sFYUjJ4B6vmfOre779xUzjskRSp2F2+aMjPaDe6gtFtD7UAkaXPLJs8Bd5uc8A11
MQoCtVerNCw/bm9qnGAppjCRDZjWOlGVzPmjTG6xGn+KZJPvTvwu2hrLDLg8kZam
v01kjT8objGNukyYtwAoJkJa3NHwQbBqynx5nvI+EWtw9g9LlNf3LolvUqUVAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU46PDLXjLC815rM5y3J3I4LDiWWAwHwYDVR0j
BBgwFoAUmDCmtwmOjju4ZmUNy9LkdsZGoMgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGttb2lxN2hINFF0YXJLTmtZTU5UdVVMamJLYTdoNzFqdnJmV3l1RzY1
NlUvMC85ODMwQTZCNzA5OEU4RTNCQjg2NjY1MERDQkQyRTQ3NkM2NDZBMEM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4MzBBNkI3MDk4RThFM0JC
ODY2NjUwRENCRDJFNDc2QzY0NkEwQzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RrbW9pcTdoSDRRdGFyS05rWU1OVHVVTGpiS2E3aDcxanZyZld5dUc2NTZVLzAv
MzIzODMwMzQzYTM0NjEzOTMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM3
MzIzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARKkDANBgkqhkiG9w0BAQsFAAOCAQEAJtdk89TY
QZJ8AMdjzPRtimNTK9jtsFtMZtN1Y15rJsKXR/pCV3e5OCm7+g7lNsiDhy3opsTP
qEXMEadpOIDMfZGGU+bwz4WGJpla3pZllHkvay1H5SEgBzhcmo1qeO8MDxZqLswX
tABW9M1ehW1TCiChoEDaLrhT4FDqpjgqplYggGfZc/XyhM6yDQU6TYybppxTF4CB
93gKLKbF5lrH/clwlOR6lnRI0gw3FLZAUpSgcDLx4NhfJyNRCtWJDgs1+oyS7pQX
BzRliHmJfTxTnr+njjsbWaqo16dGljek0Qm6qAxyTWk1ou/MufUpV+yWtKgDVBu2
dVMuPP/20TOteg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:14 2025 by rpki-client