Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/F3PXvdC5Um5cA1mpo7vhqQJTKAaGNy88RaMhbmpQLR85/0/323830343a353432633a323030303a3a2f33352d3335203d3e20323638363333.roa
File: 323830343a353432633a323030303a3a2f33352d3335203d3e20323638363333.roa (raw, json)
Hash identifier: 2GtQARNCBzLGvO8ODgB1u4UhIibMR2eD5FHYUYrxXhQ=
Subject key identifier: F9:66:D1:C2:8E:E3:7C:5C:6A:19:A9:91:8E:55:55:92:B0:E4:CE:2F
Certificate issuer: /CN=5DF55312EA40791D5FBE25B56560AA4348FD7B89
Certificate serial: 2C2B5B2083B1C6B7EFD867190A8E5E3C04D9BA35
Authority key identifier: 5D:F5:53:12:EA:40:79:1D:5F:BE:25:B5:65:60:AA:43:48:FD:7B:89
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DF55312EA40791D5FBE25B56560AA4348FD7B89.cer
Subject info access: rsync://rpki-repo.registro.br/repo/F3PXvdC5Um5cA1mpo7vhqQJTKAaGNy88RaMhbmpQLR85/0/323830343a353432633a323030303a3a2f33352d3335203d3e20323638363333.roa
Signing time: Mon 20 Nov 2023 18:16:36 +0000
ROA not before: Mon 20 Nov 2023 18:11:36 +0000
ROA not after: Mon 18 Nov 2024 18:16:36 +0000
asID: 268633
IP address blocks: 2804:542c:2000::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:2b:5b:20:83:b1:c6:b7:ef:d8:67:19:0a:8e:5e:3c:04:d9:ba:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DF55312EA40791D5FBE25B56560AA4348FD7B89
Validity
Not Before: Nov 20 18:11:36 2023 GMT
Not After : Nov 18 18:16:36 2024 GMT
Subject: CN=F966D1C28EE37C5C6A19A9918E555592B0E4CE2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:25:02:5b:97:38:37:fe:33:5a:92:22:00:1a:
55:11:cd:cc:7c:8a:b4:a8:f4:5c:04:13:d3:ac:5a:
69:d6:f8:c3:e4:f3:a3:4f:89:4d:b1:0b:77:6f:1a:
98:68:b2:4c:c1:86:ec:36:67:d7:5f:38:11:5c:7d:
22:92:5c:23:f5:af:05:bb:f6:80:37:5a:30:b9:9b:
db:c8:c6:a5:3d:e5:07:74:8a:77:2f:27:f0:3b:32:
f2:bb:91:1d:ae:4f:88:21:6a:eb:ed:cf:32:c1:7b:
8a:e4:88:0c:7f:79:59:57:b6:86:c3:82:30:d9:8c:
75:61:66:5a:da:e6:8a:06:e0:6e:44:8e:ab:f5:c1:
2f:ad:03:f9:68:eb:ea:e0:3c:e7:9e:12:b9:c7:3f:
15:45:49:c5:23:bb:a9:bc:61:1a:d8:5c:31:d7:9b:
46:6d:0c:ed:19:b5:8e:24:da:6c:34:7c:08:14:89:
05:d7:5f:e1:cf:3d:d6:26:e8:c8:57:8c:92:51:b7:
ac:02:de:d4:4f:9e:8f:e7:75:15:f7:f9:29:ea:da:
83:63:58:10:b0:d9:fb:72:ad:6a:95:a7:61:c0:e4:
e5:f3:bf:d0:8b:a4:36:41:4b:83:56:23:ab:cb:f9:
d8:44:a7:19:25:03:a4:cc:fc:13:81:4a:87:ee:26:
93:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:66:D1:C2:8E:E3:7C:5C:6A:19:A9:91:8E:55:55:92:B0:E4:CE:2F
X509v3 Authority Key Identifier:
keyid:5D:F5:53:12:EA:40:79:1D:5F:BE:25:B5:65:60:AA:43:48:FD:7B:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/F3PXvdC5Um5cA1mpo7vhqQJTKAaGNy88RaMhbmpQLR85/0/5DF55312EA40791D5FBE25B56560AA4348FD7B89.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DF55312EA40791D5FBE25B56560AA4348FD7B89.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/F3PXvdC5Um5cA1mpo7vhqQJTKAaGNy88RaMhbmpQLR85/0/323830343a353432633a323030303a3a2f33352d3335203d3e20323638363333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:542c:2000::/35
Signature Algorithm: sha256WithRSAEncryption
5f:f2:d1:87:9b:20:fb:2d:17:35:c6:a3:84:75:dd:9e:b1:bb:
3f:5c:9e:75:e0:ef:93:b8:5b:95:75:16:12:24:45:c0:66:b7:
e6:fc:e2:a8:8b:78:bf:80:81:97:a3:bc:ee:ad:bc:4b:f9:44:
bc:78:7d:20:77:46:8b:a9:54:38:7f:61:33:38:94:bd:72:9e:
c6:2e:92:49:ae:8c:6f:ac:8e:d5:ac:b2:05:81:50:84:d1:37:
4e:ab:c7:62:27:da:c9:62:41:e2:af:0f:87:99:57:77:8b:a9:
48:2f:21:40:37:24:a0:e4:13:7a:7a:14:08:3f:76:ed:7f:7e:
13:41:df:ae:82:4f:ba:2a:cc:87:82:7e:8c:fd:57:3c:3b:f5:
fd:73:ca:55:77:9d:b4:f7:b6:99:f1:48:58:d5:4d:4d:ef:b1:
21:b8:b9:47:59:88:0e:1e:6d:86:9c:d9:4f:be:5d:ba:f5:96:
c9:ff:20:7f:24:14:81:f7:f3:c3:95:f3:9e:a7:24:47:46:ee:
f6:c5:49:c7:11:a6:e2:86:ce:11:d5:a4:a8:be:56:76:ba:9b:
6c:a8:0b:18:40:36:cc:4c:45:37:11:3b:a6:80:ba:69:fd:0c:
46:b7:cb:c4:f3:a1:83:ca:0d:00:bc:a9:f6:d4:49:79:f6:9e:
a6:59:57:96
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIULCtbIIOxxrfv2GcZCo5ePATZujUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNURGNTUzMTJFQTQwNzkxRDVGQkUyNUI1NjU2MEFBNDM0
OEZEN0I4OTAeFw0yMzExMjAxODExMzZaFw0yNDExMTgxODE2MzZaMDMxMTAvBgNV
BAMTKEY5NjZEMUMyOEVFMzdDNUM2QTE5QTk5MThFNTU1NTkyQjBFNENFMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnJQJblzg3/jNakiIAGlURzcx8
irSo9FwEE9OsWmnW+MPk86NPiU2xC3dvGphoskzBhuw2Z9dfOBFcfSKSXCP1rwW7
9oA3WjC5m9vIxqU95Qd0incvJ/A7MvK7kR2uT4ghauvtzzLBe4rkiAx/eVlXtobD
gjDZjHVhZlra5ooG4G5Ejqv1wS+tA/lo6+rgPOeeErnHPxVFScUju6m8YRrYXDHX
m0ZtDO0ZtY4k2mw0fAgUiQXXX+HPPdYm6MhXjJJRt6wC3tRPno/ndRX3+Snq2oNj
WBCw2ftyrWqVp2HA5OXzv9CLpDZBS4NWI6vL+dhEpxklA6TM/BOBSofuJpMfAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU+WbRwo7jfFxqGamRjlVVkrDkzi8wHwYDVR0j
BBgwFoAUXfVTEupAeR1fviW1ZWCqQ0j9e4kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjNQWHZkQzVVbTVjQTFtcG83dmhxUUpUS0FhR055ODhSYU1oYm1wUUxS
ODUvMC81REY1NTMxMkVBNDA3OTFENUZCRTI1QjU2NTYwQUE0MzQ4RkQ3Qjg5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVERjU1MzEyRUE0MDc5MUQ1
RkJFMjVCNTY1NjBBQTQzNDhGRDdCODkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0YzUFh2ZEM1VW01Y0ExbXBvN3ZocVFKVEtBYUdOeTg4UmFNaGJtcFFMUjg1LzAv
MzIzODMwMzQzYTM1MzQzMjYzM2EzMjMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDMyMzYzODM2MzMzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEVCwgMA0GCSqGSIb3DQEBCwUA
A4IBAQBf8tGHmyD7LRc1xqOEdd2esbs/XJ514O+TuFuVdRYSJEXAZrfm/OKoi3i/
gIGXo7zurbxL+US8eH0gd0aLqVQ4f2EzOJS9cp7GLpJJroxvrI7VrLIFgVCE0TdO
q8diJ9rJYkHirw+HmVd3i6lILyFANySg5BN6ehQIP3btf34TQd+ugk+6KsyHgn6M
/Vc8O/X9c8pVd52097aZ8UhY1U1N77EhuLlHWYgOHm2GnNlPvl269ZbJ/yB/JBSB
9/PDlfOepyRHRu72xUnHEabihs4R1aSovlZ2uptsqAsYQDbMTEU3ETumgLpp/QxG
t8vE86GDyg0AvKn21El59p6mWVeW
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:32 2025 by rpki-client