Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a323430303a3a2f33382d3338203d3e20323639343633.roa
File: 323830343a363530343a323430303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier: HRkiL6waxPuzfBfdZ7/48kBIgjnjHzOXo1nj1N5KbaA=
Subject key identifier: CF:07:F3:53:68:2E:0F:8E:57:1D:2D:6D:EE:53:6A:48:A0:FF:DC:03
Certificate issuer: /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial: 24F8E8B9F1088F0A9896A4958284F9748B7938B9
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a323430303a3a2f33382d3338203d3e20323639343633.roa
Signing time: Thu 03 Nov 2022 18:43:28 +0000
ROA not before: Thu 03 Nov 2022 18:38:28 +0000
ROA not after: Thu 02 Nov 2023 18:43:28 +0000
asID: 269463
IP address blocks: 2804:6504:2400::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:f8:e8:b9:f1:08:8f:0a:98:96:a4:95:82:84:f9:74:8b:79:38:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Validity
Not Before: Nov 3 18:38:28 2022 GMT
Not After : Nov 2 18:43:28 2023 GMT
Subject: CN=CF07F353682E0F8E571D2D6DEE536A48A0FFDC03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c4:b0:00:4f:3f:44:88:03:9f:6b:ef:d2:3a:
80:ec:c4:05:f3:e8:3a:0c:f7:f4:af:8b:96:cf:25:
42:e3:9d:ee:f8:6c:58:f9:22:85:c3:5a:d5:9a:c4:
6d:b6:62:54:7e:24:23:4c:08:cb:a0:4e:a4:90:26:
0e:61:12:19:85:36:40:43:8a:77:b3:75:ee:83:5b:
0a:77:76:35:37:db:5b:c4:8a:3c:71:12:a6:6a:1c:
15:40:b8:68:77:bd:bf:4a:86:ea:91:48:f1:3f:d3:
a5:c7:1f:7e:e0:75:be:1b:63:ed:22:86:ab:15:7c:
87:54:25:5e:c7:dc:4b:f0:86:66:b9:9e:eb:c4:bc:
28:03:7c:90:9a:41:86:80:f7:f7:03:9b:99:41:54:
3a:bb:8e:66:60:58:4a:fa:f6:b7:93:ea:05:c1:2c:
92:c1:0f:32:0f:62:58:db:37:97:96:89:3d:cb:52:
0d:6b:86:48:04:a4:ac:70:a6:b7:45:9d:d9:e3:1e:
6b:fd:15:7c:09:a9:cc:ef:b4:31:79:70:70:11:41:
2a:5c:48:ac:44:23:16:8a:ee:3a:00:a7:fc:c8:ff:
43:9c:6e:9c:27:0c:82:61:50:91:b1:b6:67:8f:79:
43:71:65:03:03:c2:88:40:91:9d:0a:46:b7:84:1a:
0c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:07:F3:53:68:2E:0F:8E:57:1D:2D:6D:EE:53:6A:48:A0:FF:DC:03
X509v3 Authority Key Identifier:
keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a323430303a3a2f33382d3338203d3e20323639343633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6504:2400::/38
Signature Algorithm: sha256WithRSAEncryption
a3:b3:3c:bf:ae:ec:f7:96:76:a6:61:44:7c:66:d0:70:7a:27:
f3:f8:e3:ce:a9:be:41:f8:70:e5:63:09:d6:c5:57:47:6c:ae:
06:9e:8a:d0:6d:b5:af:54:03:90:36:c9:4a:0e:56:43:90:7f:
93:14:3c:d7:f5:ae:09:a3:fe:4d:f1:29:54:74:06:ea:44:7b:
6a:fb:ce:61:0b:bc:23:88:eb:29:f3:ab:21:c5:5c:9f:71:c1:
e3:48:e8:73:b7:a2:03:0a:f9:0b:69:13:dd:4a:2a:30:da:b2:
d0:96:ed:dd:3e:9d:a9:66:be:25:dd:30:b1:a3:6c:7d:ce:4a:
34:c8:35:c4:e8:97:46:3e:0f:49:d1:4b:8f:a6:b0:7e:48:17:
4d:e9:a0:7f:d1:e9:ae:10:05:33:48:43:75:52:b3:22:0f:d9:
60:a4:77:44:8e:a4:a1:6c:e4:7c:71:80:4f:52:19:df:a4:da:
0b:48:9b:27:3c:f2:a8:e9:da:22:a9:67:90:1c:d9:27:86:c2:
9d:b2:db:60:7e:f6:76:1f:e5:5d:b0:07:92:1d:c0:61:0c:4d:
76:44:24:7e:f6:e8:26:27:fb:6b:5b:ea:bb:1f:2b:99:07:37:
36:bb:f5:f0:8a:bb:9c:f3:c3:71:a2:a8:c1:bd:cc:8e:09:05:
bd:f1:07:8c
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUJPjoufEIjwqYlqSVgoT5dIt5OLkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDg1RUZDQTYxRkYxRkJGQUU5QzBEMUMzQ0IzOUIwNjMw
MDJDM0M1OTAeFw0yMjExMDMxODM4MjhaFw0yMzExMDIxODQzMjhaMDMxMTAvBgNV
BAMTKENGMDdGMzUzNjgyRTBGOEU1NzFEMkQ2REVFNTM2QTQ4QTBGRkRDMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9xLAATz9EiAOfa+/SOoDsxAXz
6DoM9/Svi5bPJULjne74bFj5IoXDWtWaxG22YlR+JCNMCMugTqSQJg5hEhmFNkBD
inezde6DWwp3djU321vEijxxEqZqHBVAuGh3vb9KhuqRSPE/06XHH37gdb4bY+0i
hqsVfIdUJV7H3Evwhma5nuvEvCgDfJCaQYaA9/cDm5lBVDq7jmZgWEr69reT6gXB
LJLBDzIPYljbN5eWiT3LUg1rhkgEpKxwprdFndnjHmv9FXwJqczvtDF5cHARQSpc
SKxEIxaK7joAp/zI/0OcbpwnDIJhUJGxtmePeUNxZQMDwohAkZ0KRreEGgyhAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUzwfzU2guD45XHS1t7lNqSKD/3AMwHwYDVR0j
BBgwFoAU2F78ph/x+/rpwNHDyzmwYwAsPFkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2lDd2JBUzFMbmc1TG9UY3F5RHJKY3FCbnY3ZVdmcXVMakRqN1gxTmhN
Mk0vMC9EODVFRkNBNjFGRjFGQkZBRTlDMEQxQzNDQjM5QjA2MzAwMkMzQzU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q4NUVGQ0E2MUZGMUZCRkFF
OUMwRDFDM0NCMzlCMDYzMDAyQzNDNTkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dpQ3diQVMxTG5nNUxvVGNxeURySmNxQm52N2VXZnF1TGpEajdYMU5oTTJNLzAv
MzIzODMwMzQzYTM2MzUzMDM0M2EzMjM0MzAzMDNhM2EyZjMzMzgyZDMzMzgyMDNk
M2UyMDMyMzYzOTM0MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAigEZQQkMA0GCSqGSIb3DQEBCwUA
A4IBAQCjszy/ruz3lnamYUR8ZtBweifz+OPOqb5B+HDlYwnWxVdHbK4GnorQbbWv
VAOQNslKDlZDkH+TFDzX9a4Jo/5N8SlUdAbqRHtq+85hC7wjiOsp86shxVyfccHj
SOhzt6IDCvkLaRPdSiow2rLQlu3dPp2pZr4l3TCxo2x9zko0yDXE6JdGPg9J0UuP
prB+SBdN6aB/0emuEAUzSEN1UrMiD9lgpHdEjqShbOR8cYBPUhnfpNoLSJsnPPKo
6doiqWeQHNknhsKdsttgfvZ2H+VdsAeSHcBhDE12RCR+9ugmJ/trW+q7HyuZBzc2
u/Xwiruc88NxoqjBvcyOCQW98QeM
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:24:46 2025 by rpki-client