Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/323830343a373330633a3a2f33322d3333203d3e20323730383932.roa
File: 323830343a373330633a3a2f33322d3333203d3e20323730383932.roa (raw, json)
Hash identifier: j4rB4jbDzaiInk1fETiZkeU7xaaMG9EQ8OwnjAAzW18=
Subject key identifier: 88:87:74:AA:0B:27:E1:36:46:EF:70:83:E0:F3:49:D2:56:8B:02:2E
Certificate issuer: /CN=D543B4EC77A49985F4D5C92C06195CDAE41CDD49
Certificate serial: 34E69D9140E8577093622BAFA876BDE5BE7ED812
Authority key identifier: D5:43:B4:EC:77:A4:99:85:F4:D5:C9:2C:06:19:5C:DA:E4:1C:DD:49
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D543B4EC77A49985F4D5C92C06195CDAE41CDD49.cer
Subject info access: rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/323830343a373330633a3a2f33322d3333203d3e20323730383932.roa
Signing time: Mon 15 Jan 2024 21:04:51 +0000
ROA not before: Mon 15 Jan 2024 20:59:51 +0000
ROA not after: Mon 13 Jan 2025 21:04:51 +0000
asID: 270892
IP address blocks: 2804:730c::/32 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:e6:9d:91:40:e8:57:70:93:62:2b:af:a8:76:bd:e5:be:7e:d8:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D543B4EC77A49985F4D5C92C06195CDAE41CDD49
Validity
Not Before: Jan 15 20:59:51 2024 GMT
Not After : Jan 13 21:04:51 2025 GMT
Subject: CN=888774AA0B27E13646EF7083E0F349D2568B022E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6a:9a:fd:d0:cd:af:17:a8:6a:3b:4a:53:c2:
fe:33:d4:e9:1a:19:df:fd:cb:25:8d:22:f3:a9:a2:
82:6a:09:ca:a0:87:41:25:2b:19:5e:9b:13:9d:3f:
3d:e3:38:9d:3d:88:9d:fa:85:69:95:86:dd:06:34:
4b:2d:18:49:b7:7f:0d:99:03:2b:29:21:fa:76:49:
da:28:b4:90:7d:ab:90:bf:8b:ec:f2:ce:3d:79:b0:
db:44:94:41:1f:64:0f:06:f8:da:72:1e:15:b9:c7:
d3:5a:83:57:3c:b3:b6:9a:17:63:44:df:6e:cf:c4:
58:12:cb:85:82:c5:b2:9c:b2:6e:7c:50:94:92:97:
a8:04:9a:fa:d3:a1:04:25:e6:5e:f0:35:3d:e2:a0:
12:36:3e:35:d3:3a:69:02:fb:24:6b:c6:88:44:47:
d3:ab:3d:ab:9f:55:b7:9c:b5:8d:52:a8:73:d6:cf:
15:df:2e:53:5e:23:75:bf:f4:f8:b9:a2:95:fd:1a:
6e:f4:9d:0a:ca:41:cf:98:4e:b2:e6:41:64:03:f9:
e0:73:1c:7a:60:3a:1c:59:1c:e9:dd:b9:03:ef:d9:
76:54:ee:73:5f:fd:84:17:d2:22:f3:ce:ff:68:ac:
81:54:f8:6b:6c:25:29:d9:82:b9:e6:11:12:88:b7:
5c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:87:74:AA:0B:27:E1:36:46:EF:70:83:E0:F3:49:D2:56:8B:02:2E
X509v3 Authority Key Identifier:
keyid:D5:43:B4:EC:77:A4:99:85:F4:D5:C9:2C:06:19:5C:DA:E4:1C:DD:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/D543B4EC77A49985F4D5C92C06195CDAE41CDD49.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D543B4EC77A49985F4D5C92C06195CDAE41CDD49.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/323830343a373330633a3a2f33322d3333203d3e20323730383932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:730c::/32
Signature Algorithm: sha256WithRSAEncryption
3d:9e:db:ff:63:d4:a5:4c:dc:d2:45:ba:04:7d:0f:a0:30:26:
d6:a1:44:8a:bc:7f:8b:06:2f:69:5f:1f:00:94:6a:ce:de:ee:
95:fd:9c:43:a6:12:8d:64:3c:31:72:f2:d4:15:9f:77:9f:81:
bf:f9:a1:08:84:27:8f:be:81:8a:0d:8f:70:64:35:5c:4e:12:
29:85:47:00:bc:36:de:7a:17:79:a9:f0:40:55:17:2b:b5:b6:
cb:92:d5:a7:7b:81:cf:f5:52:38:da:32:dd:d7:c0:8c:42:62:
87:69:41:55:7e:ee:87:21:5d:ed:06:52:30:e5:52:55:df:e2:
86:8c:0d:89:4f:c3:7b:20:ab:30:8d:15:41:fd:73:fd:ae:e6:
32:7e:30:d7:db:8b:17:bc:2b:75:7b:fb:d4:bb:e6:c2:20:4f:
29:36:b9:bc:b3:aa:f6:88:30:24:a5:eb:b5:f8:9c:21:67:16:
df:ed:95:50:5d:94:db:78:59:1f:94:0c:b6:c0:42:9d:d8:90:
f9:00:9a:34:50:fa:25:e1:84:99:f5:8c:b0:6d:53:96:c2:8e:
72:72:3f:bd:87:db:f8:0c:69:ff:ef:4c:36:d6:98:7f:be:53:
d9:a2:82:e1:79:2b:c3:f8:a4:1e:42:1c:57:70:ff:5a:76:6d:
cd:41:cb:65
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUNOadkUDoV3CTYiuvqHa95b5+2BIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU0M0I0RUM3N0E0OTk4NUY0RDVDOTJDMDYxOTVDREFF
NDFDREQ0OTAeFw0yNDAxMTUyMDU5NTFaFw0yNTAxMTMyMTA0NTFaMDMxMTAvBgNV
BAMTKDg4ODc3NEFBMEIyN0UxMzY0NkVGNzA4M0UwRjM0OUQyNTY4QjAyMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiapr90M2vF6hqO0pTwv4z1Oka
Gd/9yyWNIvOpooJqCcqgh0ElKxlemxOdPz3jOJ09iJ36hWmVht0GNEstGEm3fw2Z
AyspIfp2SdootJB9q5C/i+zyzj15sNtElEEfZA8G+NpyHhW5x9Nag1c8s7aaF2NE
327PxFgSy4WCxbKcsm58UJSSl6gEmvrToQQl5l7wNT3ioBI2PjXTOmkC+yRrxohE
R9OrPaufVbectY1SqHPWzxXfLlNeI3W/9Pi5opX9Gm70nQrKQc+YTrLmQWQD+eBz
HHpgOhxZHOnduQPv2XZU7nNf/YQX0iLzzv9orIFU+GtsJSnZgrnmERKIt1z9AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUiId0qgsn4TZG73CD4PNJ0laLAi4wHwYDVR0j
BBgwFoAU1UO07HekmYX01cksBhlc2uQc3UkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby96bWlmamYzN21uUHFzSnpmYzdaZWJ6WkNQQTdHWEFLN1lMUzZYR2o3YUNF
LzAvRDU0M0I0RUM3N0E0OTk4NUY0RDVDOTJDMDYxOTVDREFFNDFDREQ0OS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9ENTQzQjRFQzc3QTQ5OTg1RjRE
NUM5MkMwNjE5NUNEQUU0MUNERDQ5LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby96
bWlmamYzN21uUHFzSnpmYzdaZWJ6WkNQQTdHWEFLN1lMUzZYR2o3YUNFLzAvMzIz
ODMwMzQzYTM3MzMzMDYzM2EzYTJmMzMzMjJkMzMzMzIwM2QzZTIwMzIzNzMwMzgz
OTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKARzDDANBgkqhkiG9w0BAQsFAAOCAQEAPZ7b/2PUpUzc
0kW6BH0PoDAm1qFEirx/iwYvaV8fAJRqzt7ulf2cQ6YSjWQ8MXLy1BWfd5+Bv/mh
CIQnj76Big2PcGQ1XE4SKYVHALw23noXeanwQFUXK7W2y5LVp3uBz/VSONoy3dfA
jEJih2lBVX7uhyFd7QZSMOVSVd/ihowNiU/DeyCrMI0VQf1z/a7mMn4w19uLF7wr
dXv71LvmwiBPKTa5vLOq9ogwJKXrtficIWcW3+2VUF2U23hZH5QMtsBCndiQ+QCa
NFD6JeGEmfWMsG1TlsKOcnI/vYfb+Axp/+9MNtaYf75T2aKC4Xkrw/ikHkIcV3D/
WnZtzUHLZQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 11:35:20 2025 by rpki-client