Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/323830343a333032343a3a2f33322d3332203d3e20323634393332.roa
File: 323830343a333032343a3a2f33322d3332203d3e20323634393332.roa (raw, json)
Hash identifier: BevtK0DfyXLaQpek4MhrENIlqOkKty5kzZ0RZ7qQTLI=
Subject key identifier: B4:F0:23:DB:06:8D:45:A1:8F:77:7E:9B:42:A8:A9:D9:2D:36:1D:25
Certificate issuer: /CN=2D2B1C0A519E55A84D6F466E7A256F2093430E1D
Certificate serial: 33E60D6F1898047EF04048AFFB6CA734C9F4B4
Authority key identifier: 2D:2B:1C:0A:51:9E:55:A8:4D:6F:46:6E:7A:25:6F:20:93:43:0E:1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D2B1C0A519E55A84D6F466E7A256F2093430E1D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/323830343a333032343a3a2f33322d3332203d3e20323634393332.roa
Signing time: Mon 15 Jan 2024 15:04:56 +0000
ROA not before: Mon 15 Jan 2024 14:59:56 +0000
ROA not after: Mon 13 Jan 2025 15:04:56 +0000
asID: 264932
IP address blocks: 2804:3024::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:e6:0d:6f:18:98:04:7e:f0:40:48:af:fb:6c:a7:34:c9:f4:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D2B1C0A519E55A84D6F466E7A256F2093430E1D
Validity
Not Before: Jan 15 14:59:56 2024 GMT
Not After : Jan 13 15:04:56 2025 GMT
Subject: CN=B4F023DB068D45A18F777E9B42A8A9D92D361D25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:93:54:d8:67:d2:2d:18:47:3c:02:85:a7:49:
6b:06:ff:bc:c4:53:53:20:a2:34:21:32:b4:aa:e6:
0a:85:dc:b0:92:6c:62:0c:1d:1a:7b:3a:5e:37:cc:
8f:ba:62:71:4d:b2:b6:52:cf:bf:29:8c:1d:ea:d2:
8a:fa:1e:c9:47:af:47:c7:66:7b:bf:44:d8:d6:0a:
48:f4:47:f5:42:ca:94:97:57:af:0b:52:95:71:bf:
a0:17:c9:ab:74:d2:7e:44:9f:f4:c1:f7:d1:bc:8b:
3d:93:cb:b0:88:89:1e:70:8c:f4:ad:70:15:67:40:
07:fc:7e:c2:1e:c2:83:3b:29:95:3a:96:3c:97:c2:
06:a7:47:8b:de:84:bb:ac:c2:60:c9:fa:e9:11:d5:
6d:ac:bb:f1:54:be:6b:9b:43:cf:b0:e2:9b:2c:25:
81:96:4c:9f:5c:1a:95:69:18:74:48:ef:6b:1e:d2:
8b:67:3d:69:53:14:ff:36:a9:b3:1a:56:65:73:d3:
71:1c:12:eb:f4:94:e2:bd:00:ac:fd:42:9e:b6:06:
55:fc:df:11:70:84:73:66:ce:46:7f:2d:b2:8a:87:
5c:d6:bb:92:67:62:28:1d:43:e3:43:93:dc:a8:aa:
9c:0c:cc:dc:8d:9f:ff:5f:15:37:ec:90:2c:ef:3e:
f7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F0:23:DB:06:8D:45:A1:8F:77:7E:9B:42:A8:A9:D9:2D:36:1D:25
X509v3 Authority Key Identifier:
keyid:2D:2B:1C:0A:51:9E:55:A8:4D:6F:46:6E:7A:25:6F:20:93:43:0E:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/2D2B1C0A519E55A84D6F466E7A256F2093430E1D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D2B1C0A519E55A84D6F466E7A256F2093430E1D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/323830343a333032343a3a2f33322d3332203d3e20323634393332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3024::/32
Signature Algorithm: sha256WithRSAEncryption
a9:cd:7c:9c:1d:08:eb:f8:6b:c4:f0:82:c9:dc:f5:ed:d2:01:
52:0a:6b:96:ef:32:8f:ac:1a:f9:e8:3c:27:37:6b:a3:57:cd:
fb:92:9d:f9:4e:ea:c5:bb:92:d9:7f:59:dc:be:5a:ec:4e:43:
4f:48:27:8c:d0:9b:47:0a:c5:63:f5:3d:0b:f1:79:51:1f:97:
37:ad:31:22:f4:a8:d2:27:a0:a0:da:d7:a2:f8:c4:1b:96:23:
67:23:d5:bc:b5:ff:e6:07:6d:f2:d0:a9:77:e1:be:7b:cc:b9:
33:af:ae:9f:46:28:52:c7:dc:37:70:8e:c7:99:f9:f0:9d:c7:
83:41:46:9c:74:74:51:80:cb:06:11:e8:21:df:95:78:f2:a0:
ac:7c:1a:31:25:01:35:27:38:3c:41:d0:0d:8d:c9:69:b3:ab:
07:10:59:b9:97:80:59:17:1a:3d:53:50:8e:88:01:9a:7f:d5:
0e:af:d3:2b:61:df:ed:8b:ac:67:29:6a:82:37:3c:26:c4:e9:
99:6a:fe:f2:89:af:38:c2:9e:e6:b0:7e:b0:aa:92:f8:c1:38:
14:59:fb:d8:d0:0c:b2:83:98:cf:a9:0f:9f:62:24:e2:d7:be:
fe:96:97:e4:f1:32:2d:94:5c:37:2f:db:9c:b8:54:4d:4a:33:
d7:6a:a4:b5
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgITM+YNbxiYBH7wQEiv+2ynNMn0tDANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEygyRDJCMUMwQTUxOUU1NUE4NEQ2RjQ2NkU3QTI1NkYyMDkz
NDMwRTFEMB4XDTI0MDExNTE0NTk1NloXDTI1MDExMzE1MDQ1NlowMzExMC8GA1UE
AxMoQjRGMDIzREIwNjhENDVBMThGNzc3RTlCNDJBOEE5RDkyRDM2MUQyNTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKWTVNhn0i0YRzwChadJawb/vMRT
UyCiNCEytKrmCoXcsJJsYgwdGns6XjfMj7picU2ytlLPvymMHerSivoeyUevR8dm
e79E2NYKSPRH9ULKlJdXrwtSlXG/oBfJq3TSfkSf9MH30byLPZPLsIiJHnCM9K1w
FWdAB/x+wh7CgzsplTqWPJfCBqdHi96Eu6zCYMn66RHVbay78VS+a5tDz7Dimywl
gZZMn1walWkYdEjvax7Si2c9aVMU/zapsxpWZXPTcRwS6/SU4r0ArP1CnrYGVfzf
EXCEc2bORn8tsoqHXNa7kmdiKB1D40OT3KiqnAzM3I2f/18VN+yQLO8+99sCAwEA
AaOCAlAwggJMMB0GA1UdDgQWBBS08CPbBo1FoY93fptCqKnZLTYdJTAfBgNVHSME
GDAWgBQtKxwKUZ5VqE1vRm56JW8gk0MOHTAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9IRHpYSnR4WHZYUmtqVmE2ZmlVRURUZmRhY3RCOUtObmhuQktHVTJnUWlX
Mi8wLzJEMkIxQzBBNTE5RTU1QTg0RDZGNDY2RTdBMjU2RjIwOTM0MzBFMUQuY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvMkQyQjFDMEE1MTlFNTVBODRE
NkY0NjZFN0EyNTZGMjA5MzQzMEUxRC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZ
BggrBgEFBQcwC4aBjHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SER6WEp0eFh2WFJralZhNmZpVUVEVGZkYWN0QjlLTm5obkJLR1UyZ1FpVzIvMC8z
MjM4MzAzNDNhMzMzMDMyMzQzYTNhMmYzMzMyMmQzMzMyMjAzZDNlMjAzMjM2MzQz
OTMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB
Af8EETAPMA0EAgACMAcDBQAoBDAkMA0GCSqGSIb3DQEBCwUAA4IBAQCpzXycHQjr
+GvE8ILJ3PXt0gFSCmuW7zKPrBr56DwnN2ujV837kp35TurFu5LZf1ncvlrsTkNP
SCeM0JtHCsVj9T0L8XlRH5c3rTEi9KjSJ6Cg2tei+MQbliNnI9W8tf/mB23y0Kl3
4b57zLkzr66fRihSx9w3cI7HmfnwnceDQUacdHRRgMsGEegh35V48qCsfBoxJQE1
Jzg8QdANjclps6sHEFm5l4BZFxo9U1COiAGaf9UOr9MrYd/ti6xnKWqCNzwmxOmZ
av7yia84wp7msH6wqpL4wTgUWfvY0Ayyg5jPqQ+fYiTi177+lpfk8TItlFw3L9uc
uFRNSjPXaqS1
-----END CERTIFICATE-----
Generated at Mon Apr 21 16:33:04 2025 by rpki-client