Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/1/323830343a323435343a3a2f33322d3332203d3e20323634323135.roa
File: 323830343a323435343a3a2f33322d3332203d3e20323634323135.roa (raw, json)
Hash identifier: AD9mNZojNl2dGqIFcZv7nS86Kh+g2AlZduItFs1e2bk=
Subject key identifier: 7B:C0:16:82:DB:8E:15:39:E4:9D:E3:EB:93:88:4D:89:8F:8C:79:84
Certificate issuer: /CN=9F89116D43866DC49358C8871BDCAA64A5740808
Certificate serial: 351DCDCBD277A07513A4838209C384AE0F952E6E
Authority key identifier: 9F:89:11:6D:43:86:6D:C4:93:58:C8:87:1B:DC:AA:64:A5:74:08:08
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F89116D43866DC49358C8871BDCAA64A5740808.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/1/323830343a323435343a3a2f33322d3332203d3e20323634323135.roa
Signing time: Thu 20 Apr 2023 14:14:05 +0000
ROA not before: Thu 20 Apr 2023 14:09:05 +0000
ROA not after: Thu 18 Apr 2024 14:14:05 +0000
asID: 264215
IP address blocks: 2804:2454::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:1d:cd:cb:d2:77:a0:75:13:a4:83:82:09:c3:84:ae:0f:95:2e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F89116D43866DC49358C8871BDCAA64A5740808
Validity
Not Before: Apr 20 14:09:05 2023 GMT
Not After : Apr 18 14:14:05 2024 GMT
Subject: CN=7BC01682DB8E1539E49DE3EB93884D898F8C7984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a8:19:15:f9:71:10:53:37:2b:fc:16:ef:43:
19:78:8c:bd:67:7b:70:b3:fd:be:70:cc:f5:0e:cb:
c0:aa:f9:35:a2:a7:6d:0a:b1:f0:8f:66:f1:f6:c4:
42:fa:36:94:3c:cd:c2:23:04:48:a3:24:52:92:8d:
df:30:6e:71:81:df:e2:52:16:fd:4c:36:23:54:00:
df:61:b4:3b:83:58:fc:75:bd:0e:af:e8:dc:4e:de:
cd:60:2d:c6:fb:aa:90:97:aa:e9:e0:a7:04:e6:1a:
fd:cb:44:a9:82:bf:90:32:c0:c8:5b:79:5b:9b:39:
77:fd:79:9d:dd:33:d8:60:ea:92:4a:95:ca:c3:b2:
cd:87:3f:1d:1f:f9:c0:c9:a4:17:7f:64:31:f7:79:
a8:e1:ac:f7:4a:83:d4:62:95:f4:dd:f3:bc:c9:20:
af:06:eb:8e:50:25:58:ce:82:49:45:f0:1a:b9:d7:
13:2a:1b:c9:a1:4d:fb:cb:ec:67:5d:21:75:ed:8f:
e1:6b:ba:2e:98:0c:c0:05:c4:34:2e:32:df:76:94:
cc:ed:60:d2:f2:63:ac:d0:73:63:81:b5:54:09:2d:
ea:49:38:d2:a1:f7:cc:d9:ff:ec:9c:45:3e:47:35:
e5:d8:c9:8e:95:60:ba:a6:90:89:78:1f:27:20:c1:
a8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C0:16:82:DB:8E:15:39:E4:9D:E3:EB:93:88:4D:89:8F:8C:79:84
X509v3 Authority Key Identifier:
keyid:9F:89:11:6D:43:86:6D:C4:93:58:C8:87:1B:DC:AA:64:A5:74:08:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/1/9F89116D43866DC49358C8871BDCAA64A5740808.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F89116D43866DC49358C8871BDCAA64A5740808.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/1/323830343a323435343a3a2f33322d3332203d3e20323634323135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2454::/32
Signature Algorithm: sha256WithRSAEncryption
b6:7f:aa:f0:8e:8c:4e:cf:01:d3:c2:d6:a5:bf:54:c7:72:1a:
55:0b:9c:31:24:bd:2e:84:b9:88:25:25:9b:b9:1b:02:8d:ed:
d5:83:b0:e1:59:a3:17:35:b0:f7:81:4b:47:12:e0:a0:29:3a:
cc:49:b2:4e:c0:7b:70:ad:00:47:e7:3a:c7:8f:77:a8:10:93:
77:98:87:e1:e0:79:49:f2:91:02:fa:b6:6a:53:17:19:3f:eb:
42:cb:b8:95:5b:48:f5:8e:12:d8:fc:29:7f:88:a8:a5:aa:c3:
34:71:82:6a:2c:1f:2e:9a:41:66:ef:a0:a1:df:5f:d6:23:81:
46:c9:b7:e6:bb:43:cc:1b:5d:e7:76:fc:6f:4d:8f:58:50:93:
e9:14:2d:28:50:af:21:9d:01:db:31:e8:19:23:43:96:94:00:
01:ce:7f:60:e8:e5:b5:4c:13:e3:eb:fa:b3:85:36:23:69:42:
17:25:ff:d8:e4:af:b5:1e:9e:9a:35:d1:99:7c:d9:9e:d8:d1:
a6:79:f2:22:1a:f5:fb:74:0c:98:6f:72:e9:70:7b:86:a2:1d:
4e:6e:fd:e4:33:4a:19:ab:0c:43:6c:4e:f5:2b:59:69:6a:56:
bf:ca:6b:9c:45:88:c8:ab:38:69:7f:27:e0:f0:27:67:e1:b2:
27:e6:94:f5
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUNR3Ny9J3oHUTpIOCCcOErg+VLm4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY4OTExNkQ0Mzg2NkRDNDkzNThDODg3MUJEQ0FBNjRB
NTc0MDgwODAeFw0yMzA0MjAxNDA5MDVaFw0yNDA0MTgxNDE0MDVaMDMxMTAvBgNV
BAMTKDdCQzAxNjgyREI4RTE1MzlFNDlERTNFQjkzODg0RDg5OEY4Qzc5ODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8qBkV+XEQUzcr/BbvQxl4jL1n
e3Cz/b5wzPUOy8Cq+TWip20KsfCPZvH2xEL6NpQ8zcIjBEijJFKSjd8wbnGB3+JS
Fv1MNiNUAN9htDuDWPx1vQ6v6NxO3s1gLcb7qpCXqungpwTmGv3LRKmCv5AywMhb
eVubOXf9eZ3dM9hg6pJKlcrDss2HPx0f+cDJpBd/ZDH3eajhrPdKg9RilfTd87zJ
IK8G645QJVjOgklF8Bq51xMqG8mhTfvL7GddIXXtj+Frui6YDMAFxDQuMt92lMzt
YNLyY6zQc2OBtVQJLepJONKh98zZ/+ycRT5HNeXYyY6VYLqmkIl4HycgwajDAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUe8AWgtuOFTnknePrk4hNiY+MeYQwHwYDVR0j
BBgwFoAUn4kRbUOGbcSTWMiHG9yqZKV0CAgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR05EdkpLV2h3Y0Z5V3JZWG9ZN1l4NlJoRmpYeEVpTUVzdHZOVnZGWTdx
SlIvMS85Rjg5MTE2RDQzODY2REM0OTM1OEM4ODcxQkRDQUE2NEE1NzQwODA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlGODkxMTZENDM4NjZEQzQ5
MzU4Qzg4NzFCRENBQTY0QTU3NDA4MDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dORHZKS1dod2NGeVdyWVhvWTdZeDZSaEZqWHhFaU1Fc3R2TlZ2Rlk3cUpSLzEv
MzIzODMwMzQzYTMyMzQzNTM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzIzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQkVDANBgkqhkiG9w0BAQsFAAOCAQEAtn+q8I6M
Ts8B08LWpb9Ux3IaVQucMSS9LoS5iCUlm7kbAo3t1YOw4VmjFzWw94FLRxLgoCk6
zEmyTsB7cK0AR+c6x493qBCTd5iH4eB5SfKRAvq2alMXGT/rQsu4lVtI9Y4S2Pwp
f4ioparDNHGCaiwfLppBZu+god9f1iOBRsm35rtDzBtd53b8b02PWFCT6RQtKFCv
IZ0B2zHoGSNDlpQAAc5/YOjltUwT4+v6s4U2I2lCFyX/2OSvtR6emjXRmXzZntjR
pnnyIhr1+3QMmG9y6XB7hqIdTm795DNKGasMQ2xO9StZaWpWv8prnEWIyKs4aX8n
4PAnZ+GyJ+aU9Q==
-----END CERTIFICATE-----
Generated at Sun Apr 20 22:45:23 2025 by rpki-client