Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a343330303a3a2f34302d3430203d3e20323637343538.roa
File: 323830343a343164303a343330303a3a2f34302d3430203d3e20323637343538.roa (raw, json)
Hash identifier: k2hdwDspKDg5oD1kbSlP1adH/rwiB6qoIBSoSYbm01Q=
Subject key identifier: 95:1F:2A:60:90:77:A5:D1:5A:58:AC:FA:20:27:9E:27:34:6E:9A:A6
Certificate issuer: /CN=7F2D68010D759A0F44F99D8397541824AD9D9781
Certificate serial: 372004CA7622DA7C7059090E42CFDF68B93074EE
Authority key identifier: 7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a343330303a3a2f34302d3430203d3e20323637343538.roa
Signing time: Fri 08 Mar 2024 18:46:17 +0000
ROA not before: Fri 08 Mar 2024 18:41:17 +0000
ROA not after: Fri 07 Mar 2025 18:46:17 +0000
asID: 267458
IP address blocks: 2804:41d0:4300::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:20:04:ca:76:22:da:7c:70:59:09:0e:42:cf:df:68:b9:30:74:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F2D68010D759A0F44F99D8397541824AD9D9781
Validity
Not Before: Mar 8 18:41:17 2024 GMT
Not After : Mar 7 18:46:17 2025 GMT
Subject: CN=951F2A609077A5D15A58ACFA20279E27346E9AA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:95:57:49:ab:c0:8d:07:9e:67:61:e8:27:ab:
83:61:d2:2d:ff:d6:c3:a5:a2:f6:72:9f:20:54:10:
c0:aa:d3:81:63:cf:c0:4b:4e:94:2c:d3:0d:ad:87:
47:f1:27:af:46:1b:2c:45:58:b1:a4:5f:d8:88:7e:
95:ab:49:6c:c3:0c:34:67:c5:0d:ae:91:3e:ba:4c:
b7:5f:d7:08:2d:10:38:db:05:a7:e1:0d:1d:01:d2:
b4:68:67:2b:75:27:26:29:72:d4:67:f9:d2:00:7d:
3b:42:6d:a0:89:0e:0b:e3:9b:16:e2:01:08:bc:5d:
b5:b8:95:dc:d2:64:23:04:0c:15:84:6e:27:f7:43:
9e:9f:cb:be:22:e1:5c:38:f3:07:5d:b0:92:5d:34:
bb:b1:c3:b7:fc:ef:7a:16:c2:ae:e9:be:15:ec:75:
e0:5e:c0:e7:f2:bd:46:2f:27:51:d5:28:5a:d5:3b:
a4:4d:c4:e5:2e:05:b7:5a:36:2d:aa:38:59:2e:69:
76:06:54:c2:11:95:d2:89:f6:f6:9c:d9:2f:e9:45:
81:f6:10:cb:24:68:2b:11:25:b1:ee:86:13:a9:63:
ef:51:8f:35:7f:a7:b9:81:a8:16:10:e4:8f:4f:24:
cf:88:be:66:f1:52:52:03:36:21:7a:0d:7e:ad:df:
ab:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1F:2A:60:90:77:A5:D1:5A:58:AC:FA:20:27:9E:27:34:6E:9A:A6
X509v3 Authority Key Identifier:
keyid:7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/7F2D68010D759A0F44F99D8397541824AD9D9781.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a343330303a3a2f34302d3430203d3e20323637343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:41d0:4300::/40
Signature Algorithm: sha256WithRSAEncryption
51:75:33:40:c1:85:c9:dc:40:f3:4e:5f:83:1c:bc:6a:aa:a6:
3f:2b:1e:22:ec:6f:e2:c2:7c:60:38:ef:58:67:6a:ea:0b:f6:
1d:2e:92:a3:20:42:30:6a:e5:7c:09:fd:17:f9:aa:75:68:0d:
69:d4:35:e2:22:38:67:ed:4c:6f:99:f5:79:68:0e:40:2c:e2:
89:36:8b:ca:ac:ff:62:46:12:8f:4d:ad:ba:fa:ef:96:ce:65:
61:63:ea:d8:c3:df:06:83:a4:7c:30:eb:7b:77:4c:dd:9d:84:
b1:34:d0:27:11:c0:ae:d5:f6:74:3d:8b:88:db:c8:5a:7e:67:
b1:8f:28:a1:d2:f9:38:b6:e4:2b:a9:aa:86:42:7b:34:9d:90:
5f:77:dc:64:d9:2d:13:f3:a7:52:0b:8e:d4:6a:3f:01:10:d0:
aa:a9:9a:c7:66:d6:31:2a:9b:21:af:94:a9:57:27:1d:d9:0e:
d2:ce:d7:d3:20:c0:c6:67:a3:bd:4f:90:65:c8:dc:9e:02:25:
61:7c:e3:2a:14:e4:4c:6a:48:be:ec:6d:e6:e4:12:41:65:98:
64:80:7e:21:0a:f7:2b:66:4b:c1:01:58:d2:f4:19:22:67:41:
8a:ed:6e:5c:72:20:cb:28:92:f6:7c:50:91:65:0b:ce:48:0f:
6f:ac:27:2d
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUNyAEynYi2nxwWQkOQs/faLkwdO4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0YyRDY4MDEwRDc1OUEwRjQ0Rjk5RDgzOTc1NDE4MjRB
RDlEOTc4MTAeFw0yNDAzMDgxODQxMTdaFw0yNTAzMDcxODQ2MTdaMDMxMTAvBgNV
BAMTKDk1MUYyQTYwOTA3N0E1RDE1QTU4QUNGQTIwMjc5RTI3MzQ2RTlBQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCelVdJq8CNB55nYegnq4Nh0i3/
1sOlovZynyBUEMCq04Fjz8BLTpQs0w2th0fxJ69GGyxFWLGkX9iIfpWrSWzDDDRn
xQ2ukT66TLdf1wgtEDjbBafhDR0B0rRoZyt1JyYpctRn+dIAfTtCbaCJDgvjmxbi
AQi8XbW4ldzSZCMEDBWEbif3Q56fy74i4Vw48wddsJJdNLuxw7f873oWwq7pvhXs
deBewOfyvUYvJ1HVKFrVO6RNxOUuBbdaNi2qOFkuaXYGVMIRldKJ9vac2S/pRYH2
EMskaCsRJbHuhhOpY+9RjzV/p7mBqBYQ5I9PJM+IvmbxUlIDNiF6DX6t36tJAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUlR8qYJB3pdFaWKz6ICeeJzRumqYwHwYDVR0j
BBgwFoAUfy1oAQ11mg9E+Z2Dl1QYJK2dl4EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2FRZmEzdThCOEFkYUpkOGtBNVZBVU55OG9jUmFBY2tCeWNmckhVcUFh
WXYvMC83RjJENjgwMTBENzU5QTBGNDRGOTlEODM5NzU0MTgyNEFEOUQ5NzgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdGMkQ2ODAxMEQ3NTlBMEY0
NEY5OUQ4Mzk3NTQxODI0QUQ5RDk3ODEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dhUWZhM3U4QjhBZGFKZDhrQTVWQVVOeThvY1JhQWNrQnljZnJIVXFBYVl2LzAv
MzIzODMwMzQzYTM0MzE2NDMwM2EzNDMzMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNzM0MzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEQdBDMA0GCSqGSIb3DQEBCwUA
A4IBAQBRdTNAwYXJ3EDzTl+DHLxqqqY/Kx4i7G/iwnxgOO9YZ2rqC/YdLpKjIEIw
auV8Cf0X+ap1aA1p1DXiIjhn7UxvmfV5aA5ALOKJNovKrP9iRhKPTa26+u+WzmVh
Y+rYw98Gg6R8MOt7d0zdnYSxNNAnEcCu1fZ0PYuI28hafmexjyih0vk4tuQrqaqG
Qns0nZBfd9xk2S0T86dSC47Uaj8BENCqqZrHZtYxKpshr5SpVycd2Q7SztfTIMDG
Z6O9T5BlyNyeAiVhfOMqFORMaki+7G3m5BJBZZhkgH4hCvcrZkvBAVjS9BkiZ0GK
7W5cciDLKJL2fFCRZQvOSA9vrCct
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:53 2024 by rpki-client on console-fra.rpki-client.org