Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/323830343a356131303a3a2f33342d3334203d3e20323638373436.roa
File: 323830343a356131303a3a2f33342d3334203d3e20323638373436.roa (raw, json)
Hash identifier: 9L5cxoi4gEPEKIVPiQdyTpaDEVg6ICCNiZo9+fz5YkQ=
Subject key identifier: 3E:AB:FF:54:7B:F6:1E:03:A3:6C:C7:08:50:57:65:06:46:B2:FF:EE
Certificate issuer: /CN=D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47
Certificate serial: 279965B5005D9F02B5DDFD1A818C9234CD12943E
Authority key identifier: D1:EC:0A:15:7E:47:45:C6:E2:C4:AC:CE:96:C0:A9:2E:DE:9F:8B:47
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47.cer
Subject info access: rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/323830343a356131303a3a2f33342d3334203d3e20323638373436.roa
Signing time: Thu 04 Apr 2024 00:02:21 +0000
ROA not before: Wed 03 Apr 2024 23:57:21 +0000
ROA not after: Thu 03 Apr 2025 00:02:21 +0000
asID: 268746
IP address blocks: 2804:5a10::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:99:65:b5:00:5d:9f:02:b5:dd:fd:1a:81:8c:92:34:cd:12:94:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47
Validity
Not Before: Apr 3 23:57:21 2024 GMT
Not After : Apr 3 00:02:21 2025 GMT
Subject: CN=3EABFF547BF61E03A36CC7085057650646B2FFEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:28:8a:00:8f:c5:10:bb:cf:2e:20:b0:60:15:
e6:69:96:d6:25:bc:73:23:23:7c:50:88:3c:ba:9f:
28:2d:09:ba:61:b0:fa:87:f0:b0:6d:99:6d:29:90:
d6:b5:57:a5:a0:bf:b0:2c:76:fd:ea:54:86:0d:4b:
0c:77:6f:3d:26:cd:02:27:b3:df:64:96:6d:af:57:
9e:c1:98:a2:9e:fd:31:c1:ab:f3:7d:8d:48:5a:c8:
cb:34:f2:ea:54:cd:f7:6a:e4:54:d9:4b:ea:76:0d:
b4:8f:1b:c0:81:5f:ab:46:ff:8b:66:5d:a7:56:ca:
0f:7b:74:e6:f7:b5:49:2f:cb:99:69:dc:2f:3c:6f:
26:24:d1:e8:1e:22:f7:cb:ec:39:78:18:32:4c:59:
cd:ea:5f:d6:66:45:6a:1c:4a:b3:af:76:b0:23:b8:
87:fb:b3:ab:71:e0:c8:76:e9:78:f2:0a:94:ee:31:
a3:cd:84:f5:1d:8c:ae:73:b4:96:fa:38:0b:cb:e9:
ca:a6:48:85:88:50:fd:86:94:f0:da:e4:78:5d:87:
31:1f:bb:ec:46:ea:1c:b0:e1:c0:03:c5:28:f7:59:
36:ed:8a:87:55:29:98:11:ad:28:1d:4a:ab:1d:d9:
a0:4c:a8:32:de:92:ee:f8:53:38:ec:41:f2:f8:de:
ad:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AB:FF:54:7B:F6:1E:03:A3:6C:C7:08:50:57:65:06:46:B2:FF:EE
X509v3 Authority Key Identifier:
keyid:D1:EC:0A:15:7E:47:45:C6:E2:C4:AC:CE:96:C0:A9:2E:DE:9F:8B:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/323830343a356131303a3a2f33342d3334203d3e20323638373436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5a10::/34
Signature Algorithm: sha256WithRSAEncryption
74:d3:6d:81:25:47:4e:7c:43:5b:00:b8:39:83:f6:1a:d0:c7:
9c:00:f2:7b:c2:82:38:a2:dd:e2:30:7f:33:30:6e:a3:6d:23:
ec:63:f4:67:37:5a:31:90:be:d1:c6:ac:54:12:2e:35:8b:39:
4a:c3:14:1b:a3:03:41:aa:e8:9c:87:ee:5d:3a:df:47:12:f0:
7e:63:62:1e:64:aa:4d:09:08:59:d1:45:04:76:4a:11:a8:5b:
7b:29:e1:29:2e:5b:d5:74:b3:02:e9:22:2e:1e:8f:cb:f8:39:
d1:c2:75:42:50:cc:5c:c0:0d:77:90:fe:28:8f:f5:05:fb:ef:
49:6b:35:6f:0d:b4:b6:4f:bb:47:e0:6d:85:9f:1c:c8:9d:6e:
08:30:89:fa:39:f8:f9:89:c6:a5:27:4d:41:8e:af:c5:82:a9:
c6:e1:55:80:b4:a7:2d:38:bc:02:81:e8:d4:71:a3:01:19:b8:
14:ab:74:73:96:f1:9f:c1:59:2c:94:65:0e:96:8e:3c:03:1f:
b4:fd:36:9c:e6:74:ea:f1:ba:d7:04:95:86:c6:e6:68:4b:d0:
85:44:65:53:f0:85:3b:93:6e:8c:8e:03:57:9c:c5:47:c4:9d:
33:f8:36:f7:22:c2:70:0e:19:fd:dd:a9:80:36:08:98:23:78:
ea:4d:eb:09
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUJ5lltQBdnwK13f0agYySNM0SlD4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFFQzBBMTU3RTQ3NDVDNkUyQzRBQ0NFOTZDMEE5MkVE
RTlGOEI0NzAeFw0yNDA0MDMyMzU3MjFaFw0yNTA0MDMwMDAyMjFaMDMxMTAvBgNV
BAMTKDNFQUJGRjU0N0JGNjFFMDNBMzZDQzcwODUwNTc2NTA2NDZCMkZGRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVKIoAj8UQu88uILBgFeZpltYl
vHMjI3xQiDy6nygtCbphsPqH8LBtmW0pkNa1V6Wgv7Asdv3qVIYNSwx3bz0mzQIn
s99klm2vV57BmKKe/THBq/N9jUhayMs08upUzfdq5FTZS+p2DbSPG8CBX6tG/4tm
XadWyg97dOb3tUkvy5lp3C88byYk0egeIvfL7Dl4GDJMWc3qX9ZmRWocSrOvdrAj
uIf7s6tx4Mh26XjyCpTuMaPNhPUdjK5ztJb6OAvL6cqmSIWIUP2GlPDa5HhdhzEf
u+xG6hyw4cADxSj3WTbtiodVKZgRrSgdSqsd2aBMqDLeku74UzjsQfL43q23AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUPqv/VHv2HgOjbMcIUFdlBkay/+4wHwYDVR0j
BBgwFoAU0ewKFX5HRcbixKzOlsCpLt6fi0cwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9zUW9WWEQzdndQaEhFVGZEbTNSNlozS3BFRmVWTjhGV3Bud2FwaUFLQ3lz
LzEvRDFFQzBBMTU3RTQ3NDVDNkUyQzRBQ0NFOTZDMEE5MkVERTlGOEI0Ny5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9EMUVDMEExNTdFNDc0NUM2RTJD
NEFDQ0U5NkMwQTkyRURFOUY4QjQ3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9z
UW9WWEQzdndQaEhFVGZEbTNSNlozS3BFRmVWTjhGV3Bud2FwaUFLQ3lzLzEvMzIz
ODMwMzQzYTM1NjEzMTMwM2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjM4Mzcz
NDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/
BBIwEDAOBAIAAjAIAwYGKARaEAAwDQYJKoZIhvcNAQELBQADggEBAHTTbYElR058
Q1sAuDmD9hrQx5wA8nvCgjii3eIwfzMwbqNtI+xj9Gc3WjGQvtHGrFQSLjWLOUrD
FBujA0Gq6JyH7l0630cS8H5jYh5kqk0JCFnRRQR2ShGoW3sp4SkuW9V0swLpIi4e
j8v4OdHCdUJQzFzADXeQ/iiP9QX770lrNW8NtLZPu0fgbYWfHMidbggwifo5+PmJ
xqUnTUGOr8WCqcbhVYC0py04vAKB6NRxowEZuBSrdHOW8Z/BWSyUZQ6WjjwDH7T9
NpzmdOrxutcElYbG5mhL0IVEZVPwhTuTboyOA1ecxUfEnTP4NvciwnAOGf3dqYA2
CJgjeOpN6wk=
-----END CERTIFICATE-----
Generated at Mon Apr 7 10:48:51 2025 by rpki-client