Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/323830343a3836633a3a2f33322d3438203d3e20323632333639.roa
File: 323830343a3836633a3a2f33322d3438203d3e20323632333639.roa (raw, json)
Hash identifier: UoB2HUzxRXptHQskZehmB1K9LBQOPNpQDdzm2bPamVY=
Subject key identifier: B2:3A:E4:F8:FF:F9:D5:61:14:4F:F5:5C:9F:81:8C:29:97:64:53:1F
Certificate issuer: /CN=04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C
Certificate serial: 55F0CD34B672C6FD76E3055952C53B86BD50B15B
Authority key identifier: 04:DE:26:8B:81:8B:BF:0D:E9:CD:EF:A1:FD:97:66:12:FE:D7:BE:9C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/323830343a3836633a3a2f33322d3438203d3e20323632333639.roa
Signing time: Wed 22 Nov 2023 13:08:09 +0000
ROA not before: Wed 22 Nov 2023 13:03:09 +0000
ROA not after: Wed 20 Nov 2024 13:08:09 +0000
asID: 262369
IP address blocks: 2804:86c::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:f0:cd:34:b6:72:c6:fd:76:e3:05:59:52:c5:3b:86:bd:50:b1:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C
Validity
Not Before: Nov 22 13:03:09 2023 GMT
Not After : Nov 20 13:08:09 2024 GMT
Subject: CN=B23AE4F8FFF9D561144FF55C9F818C299764531F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9f:8c:70:28:2e:32:20:b7:81:65:c3:84:ff:
74:09:1b:4c:a2:9d:74:72:b3:b5:b3:c4:cc:36:bb:
f8:99:66:6d:36:e0:65:83:50:34:61:5c:53:f2:26:
69:8f:8f:43:69:38:73:8b:ea:c0:d4:c4:ab:16:e9:
9c:bb:50:b8:fa:ae:78:1f:70:88:d2:50:f5:b2:8e:
8b:5a:77:ec:0b:60:4b:d9:40:e0:56:58:4c:99:0a:
1c:1d:ea:e4:3f:29:7a:02:f6:04:78:cc:ea:24:2a:
db:2e:53:b7:a0:fa:a9:3b:d2:74:5c:a2:d4:7d:da:
27:d2:46:f0:6e:00:55:34:17:db:a2:64:71:44:31:
ce:67:4d:26:87:f5:82:12:06:47:58:df:7f:b5:e9:
9a:c9:20:f0:a1:1c:8b:cd:b5:e4:2d:3a:b1:72:ae:
9b:64:75:a6:a6:b5:2f:0b:7e:46:5b:8a:b4:8f:97:
d8:92:19:5c:fc:09:45:7d:d0:cf:1a:49:dc:ff:19:
f4:69:4a:7f:96:14:2f:04:2c:94:dc:57:fc:a7:26:
f0:13:37:1e:c1:9f:f1:8d:94:11:d9:ee:13:a8:8a:
80:29:7d:da:6b:7c:6a:e9:08:bf:7f:c6:40:3f:23:
82:94:79:e3:97:6b:cc:56:c5:3a:24:9e:d3:a6:9f:
a6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3A:E4:F8:FF:F9:D5:61:14:4F:F5:5C:9F:81:8C:29:97:64:53:1F
X509v3 Authority Key Identifier:
keyid:04:DE:26:8B:81:8B:BF:0D:E9:CD:EF:A1:FD:97:66:12:FE:D7:BE:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/323830343a3836633a3a2f33322d3438203d3e20323632333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:86c::/32
Signature Algorithm: sha256WithRSAEncryption
23:a2:41:e9:2e:a3:2d:20:1d:9d:e9:c3:5b:d0:72:f0:eb:2f:
58:64:11:9d:d5:5a:f0:41:99:15:4e:ff:6d:dc:47:da:f9:2d:
10:cc:c7:fb:84:3e:fd:6b:37:1a:46:be:99:19:7e:65:d3:59:
1f:78:92:93:60:41:23:42:00:e8:1f:cc:ca:45:ea:53:bb:fc:
23:e3:70:92:32:c2:26:34:2c:4a:81:1d:81:cc:2e:a0:2a:df:
ee:ad:3a:d2:a2:2f:63:2a:50:14:b4:c3:01:33:f5:0d:0f:13:
54:1a:66:1a:86:64:c1:68:e8:62:f8:da:60:8e:9a:5a:27:49:
5e:10:05:d1:d3:8f:46:fe:10:c6:63:b3:db:84:08:ea:08:b3:
74:af:80:a8:b6:ac:8e:e2:67:b5:f6:12:58:1b:bd:65:b1:b2:
98:94:e0:4d:79:1e:23:18:bd:60:12:8f:04:30:8f:fc:4c:41:
18:d8:5c:cf:ad:a0:79:5b:88:cd:3b:8f:93:20:36:9f:00:86:
88:2c:0e:85:62:b1:89:3d:1f:cc:0e:1f:95:fd:52:7f:15:3f:
6e:ed:13:22:fa:59:59:72:45:64:10:c3:7c:07:f7:97:4b:9f:
f2:ca:d7:1b:fa:a1:81:09:da:d1:9a:62:8a:cd:72:8b:0a:f8:
ae:3d:06:8a
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUVfDNNLZyxv124wVZUsU7hr1QsVswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDRERTI2OEI4MThCQkYwREU5Q0RFRkExRkQ5NzY2MTJG
RUQ3QkU5QzAeFw0yMzExMjIxMzAzMDlaFw0yNDExMjAxMzA4MDlaMDMxMTAvBgNV
BAMTKEIyM0FFNEY4RkZGOUQ1NjExNDRGRjU1QzlGODE4QzI5OTc2NDUzMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWn4xwKC4yILeBZcOE/3QJG0yi
nXRys7WzxMw2u/iZZm024GWDUDRhXFPyJmmPj0NpOHOL6sDUxKsW6Zy7ULj6rngf
cIjSUPWyjotad+wLYEvZQOBWWEyZChwd6uQ/KXoC9gR4zOokKtsuU7eg+qk70nRc
otR92ifSRvBuAFU0F9uiZHFEMc5nTSaH9YISBkdY33+16ZrJIPChHIvNteQtOrFy
rptkdaamtS8LfkZbirSPl9iSGVz8CUV90M8aSdz/GfRpSn+WFC8ELJTcV/ynJvAT
Nx7Bn/GNlBHZ7hOoioApfdprfGrpCL9/xkA/I4KUeeOXa8xWxTokntOmn6Y3AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUsjrk+P/51WEUT/Vcn4GMKZdkUx8wHwYDVR0j
BBgwFoAUBN4mi4GLvw3pze+h/ZdmEv7XvpwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWFyYWZGZ25SYVk1TGlhWE5HYVZpdWlGU3RWd0dvS1dqMUs1N3I1dzJ3
dXIvMC8wNERFMjY4QjgxOEJCRjBERTlDREVGQTFGRDk3NjYxMkZFRDdCRTlDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA0REUyNjhCODE4QkJGMERF
OUNERUZBMUZEOTc2NjEyRkVEN0JFOUMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VhcmFmRmduUmFZNUxpYVhOR2FWaXVpRlN0VndHb0tXajFLNTdyNXcyd3VyLzAv
MzIzODMwMzQzYTM4MzY2MzNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMjMz
MzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgECGwwDQYJKoZIhvcNAQELBQADggEBACOiQekuoy0g
HZ3pw1vQcvDrL1hkEZ3VWvBBmRVO/23cR9r5LRDMx/uEPv1rNxpGvpkZfmXTWR94
kpNgQSNCAOgfzMpF6lO7/CPjcJIywiY0LEqBHYHMLqAq3+6tOtKiL2MqUBS0wwEz
9Q0PE1QaZhqGZMFo6GL42mCOmlonSV4QBdHTj0b+EMZjs9uECOoIs3SvgKi2rI7i
Z7X2ElgbvWWxspiU4E15HiMYvWASjwQwj/xMQRjYXM+toHlbiM07j5MgNp8Ahogs
DoVisYk9H8wOH5X9Un8VP27tEyL6WVlyRWQQw3wH95dLn/LK1xv6oYEJ2tGaYorN
cosK+K49Boo=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:40:17 2025 by rpki-client