Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/323830343a356131303a3a2f33332d3333203d3e20323638373436.roa
File: 323830343a356131303a3a2f33332d3333203d3e20323638373436.roa (raw, json)
Hash identifier: WEtxuA7lYVOpKZmSRaWkFyhFxre0OD4How7Jx6d9MYg=
Subject key identifier: C7:6E:90:19:63:2B:5A:67:78:06:D2:A9:22:6B:F2:FC:1B:19:99:9E
Certificate issuer: /CN=D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47
Certificate serial: 586705E23D34E8313F4DEEFDBB0FF09D2E612F75
Authority key identifier: D1:EC:0A:15:7E:47:45:C6:E2:C4:AC:CE:96:C0:A9:2E:DE:9F:8B:47
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47.cer
Subject info access: rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/323830343a356131303a3a2f33332d3333203d3e20323638373436.roa
Signing time: Thu 04 Apr 2024 00:02:21 +0000
ROA not before: Wed 03 Apr 2024 23:57:21 +0000
ROA not after: Thu 03 Apr 2025 00:02:21 +0000
asID: 268746
IP address blocks: 2804:5a10::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:67:05:e2:3d:34:e8:31:3f:4d:ee:fd:bb:0f:f0:9d:2e:61:2f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47
Validity
Not Before: Apr 3 23:57:21 2024 GMT
Not After : Apr 3 00:02:21 2025 GMT
Subject: CN=C76E9019632B5A677806D2A9226BF2FC1B19999E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:85:64:df:87:7b:cb:da:29:b3:22:41:1f:2e:
96:7f:a4:30:1d:b4:f3:b4:6a:c7:a3:db:33:eb:58:
70:71:52:fe:64:96:89:03:5c:27:b5:42:75:49:6b:
09:de:91:a8:76:42:92:d3:65:1f:00:80:60:f8:ff:
d6:ec:e4:3b:bc:47:6d:80:6a:23:41:a9:f1:1c:1c:
fd:3a:1a:48:ed:7e:0a:02:94:df:de:d5:69:4f:9a:
fd:85:25:d1:aa:df:85:6e:b6:f6:96:69:96:96:61:
fc:9a:23:39:c8:c5:d5:ee:df:38:df:29:db:90:f4:
28:bd:0d:90:46:57:c1:dc:dd:11:f5:d6:58:4f:a6:
5a:ad:aa:73:9d:be:0d:38:8b:ac:b6:4c:07:42:95:
c5:47:e5:d7:36:61:6f:78:63:67:a3:89:c1:6a:5e:
de:c5:70:02:54:06:13:b8:5b:ef:f7:3a:56:a9:5d:
d4:b1:4a:46:64:b9:6b:7d:b1:e2:d7:9b:d0:e3:79:
64:67:30:2c:2b:8f:24:57:41:6e:41:11:3d:15:a9:
c8:5a:c4:0a:a9:09:2d:79:81:b9:06:76:17:8f:d4:
c5:fb:0f:51:42:28:2e:64:9e:47:a1:c8:ac:06:a9:
82:4c:37:0e:29:5b:44:da:4d:96:fb:07:c7:2b:41:
38:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6E:90:19:63:2B:5A:67:78:06:D2:A9:22:6B:F2:FC:1B:19:99:9E
X509v3 Authority Key Identifier:
keyid:D1:EC:0A:15:7E:47:45:C6:E2:C4:AC:CE:96:C0:A9:2E:DE:9F:8B:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/323830343a356131303a3a2f33332d3333203d3e20323638373436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5a10::/33
Signature Algorithm: sha256WithRSAEncryption
92:d3:5b:36:4c:79:0a:85:45:66:a0:63:23:36:ea:cd:4a:4e:
34:0b:83:5a:21:ba:11:94:6c:3c:cf:72:4a:f8:35:23:df:89:
09:2d:db:b2:4a:51:88:62:ec:02:29:83:ae:a0:77:51:cc:8e:
1c:32:ed:01:80:b3:60:7a:f5:0c:87:94:7d:ec:68:55:a0:0d:
79:92:93:5f:88:d0:50:02:d7:7b:e7:b9:e4:22:ae:f0:76:b6:
2d:f3:62:22:44:fb:a7:91:4a:7a:44:7e:94:47:00:40:c0:cc:
76:3c:f9:15:bf:5d:9d:29:3c:02:19:95:fd:4f:3e:0f:c0:12:
3d:5a:c1:5c:93:7d:13:e3:e5:92:ae:75:fa:d7:b9:8d:7d:6c:
b5:ac:75:1f:4a:bd:ab:fb:86:e4:b3:57:79:0e:34:47:f8:5b:
1b:00:96:f7:04:73:83:b3:9b:c7:5d:96:14:cb:7a:bb:de:36:
a1:cd:17:86:59:f1:a1:4b:11:25:3a:45:73:f4:2b:db:d4:22:
9b:ed:e1:0c:58:03:cf:68:9f:6f:06:a6:84:0f:7a:ed:77:58:
7d:78:32:a8:69:19:14:b7:96:09:90:86:b9:5f:7b:c0:8e:2d:
2b:a6:ac:e5:f5:50:f8:23:52:9d:e0:2e:06:69:39:19:a7:c1:
5d:8c:6f:6b
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUWGcF4j006DE/Te79uw/wnS5hL3UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFFQzBBMTU3RTQ3NDVDNkUyQzRBQ0NFOTZDMEE5MkVE
RTlGOEI0NzAeFw0yNDA0MDMyMzU3MjFaFw0yNTA0MDMwMDAyMjFaMDMxMTAvBgNV
BAMTKEM3NkU5MDE5NjMyQjVBNjc3ODA2RDJBOTIyNkJGMkZDMUIxOTk5OUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOhWTfh3vL2imzIkEfLpZ/pDAd
tPO0asej2zPrWHBxUv5klokDXCe1QnVJawnekah2QpLTZR8AgGD4/9bs5Du8R22A
aiNBqfEcHP06GkjtfgoClN/e1WlPmv2FJdGq34VutvaWaZaWYfyaIznIxdXu3zjf
KduQ9Ci9DZBGV8Hc3RH11lhPplqtqnOdvg04i6y2TAdClcVH5dc2YW94Y2ejicFq
Xt7FcAJUBhO4W+/3OlapXdSxSkZkuWt9seLXm9DjeWRnMCwrjyRXQW5BET0Vqcha
xAqpCS15gbkGdheP1MX7D1FCKC5knkehyKwGqYJMNw4pW0TaTZb7B8crQTg5AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUx26QGWMrWmd4BtKpImvy/BsZmZ4wHwYDVR0j
BBgwFoAU0ewKFX5HRcbixKzOlsCpLt6fi0cwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9zUW9WWEQzdndQaEhFVGZEbTNSNlozS3BFRmVWTjhGV3Bud2FwaUFLQ3lz
LzEvRDFFQzBBMTU3RTQ3NDVDNkUyQzRBQ0NFOTZDMEE5MkVERTlGOEI0Ny5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9EMUVDMEExNTdFNDc0NUM2RTJD
NEFDQ0U5NkMwQTkyRURFOUY4QjQ3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9z
UW9WWEQzdndQaEhFVGZEbTNSNlozS3BFRmVWTjhGV3Bud2FwaUFLQ3lzLzEvMzIz
ODMwMzQzYTM1NjEzMTMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM4Mzcz
NDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/
BBIwEDAOBAIAAjAIAwYHKARaEAAwDQYJKoZIhvcNAQELBQADggEBAJLTWzZMeQqF
RWagYyM26s1KTjQLg1ohuhGUbDzPckr4NSPfiQkt27JKUYhi7AIpg66gd1HMjhwy
7QGAs2B69QyHlH3saFWgDXmSk1+I0FAC13vnueQirvB2ti3zYiJE+6eRSnpEfpRH
AEDAzHY8+RW/XZ0pPAIZlf1PPg/AEj1awVyTfRPj5ZKudfrXuY19bLWsdR9Kvav7
huSzV3kONEf4WxsAlvcEc4Ozm8ddlhTLerveNqHNF4ZZ8aFLESU6RXP0K9vUIpvt
4QxYA89on28GpoQPeu13WH14MqhpGRS3lgmQhrlfe8COLSumrOX1UPgjUp3gLgZp
ORmnwV2Mb2s=
-----END CERTIFICATE-----
Generated at Mon Apr 7 10:53:28 2025 by rpki-client