Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/323830343a6463303a3a2f33322d3438203d3e203238363130.roa
File: 323830343a6463303a3a2f33322d3438203d3e203238363130.roa (raw, json)
Hash identifier: iqBKFLs2miSCmTcR0D1ftTqtnPiPgpByjxAX0wqBDwg=
Subject key identifier: A2:D5:3F:9F:EC:F6:FF:AA:4A:39:C8:3F:CB:22:8B:A7:3C:7E:5B:85
Certificate issuer: /CN=11A2F7135D8EA026B9E72BE70E3EA679F14263F4
Certificate serial: 6626269C0E3BB7CBD9A82E373A585BD7A508E3C1
Authority key identifier: 11:A2:F7:13:5D:8E:A0:26:B9:E7:2B:E7:0E:3E:A6:79:F1:42:63:F4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A2F7135D8EA026B9E72BE70E3EA679F14263F4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/323830343a6463303a3a2f33322d3438203d3e203238363130.roa
Signing time: Mon 23 Sep 2024 13:08:36 +0000
ROA not before: Mon 23 Sep 2024 13:03:36 +0000
ROA not after: Mon 22 Sep 2025 13:08:36 +0000
asID: 28610
IP address blocks: 2804:dc0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:26:26:9c:0e:3b:b7:cb:d9:a8:2e:37:3a:58:5b:d7:a5:08:e3:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11A2F7135D8EA026B9E72BE70E3EA679F14263F4
Validity
Not Before: Sep 23 13:03:36 2024 GMT
Not After : Sep 22 13:08:36 2025 GMT
Subject: CN=A2D53F9FECF6FFAA4A39C83FCB228BA73C7E5B85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4b:19:57:75:eb:76:51:31:d5:3c:7a:53:99:
56:2f:66:9e:de:d4:9e:22:56:d6:ed:b2:61:53:77:
45:f4:4e:fc:60:30:de:6a:9a:f4:56:41:cd:b6:90:
3c:da:a4:4b:ab:5a:f2:17:59:8e:6b:88:ba:63:5f:
44:72:e6:94:bb:de:08:51:e5:34:9c:44:81:80:f1:
64:c1:7d:3f:6d:cc:1a:d2:ee:44:ff:60:96:1a:0a:
b8:e6:17:87:70:dd:91:f0:2d:86:e3:93:97:21:58:
ca:ba:3c:8c:4c:c6:5a:fc:fa:4d:b7:b2:a8:f5:df:
36:17:8f:01:9f:63:53:33:00:64:b1:da:de:2f:28:
cd:52:5f:d8:d5:d3:4c:61:9d:8e:3d:73:69:a8:38:
9a:2f:dc:ba:19:ad:c4:26:c8:f5:0f:4e:ee:ab:00:
53:53:16:35:8b:c2:b2:06:ac:79:4c:62:85:da:bb:
d2:47:1c:a5:cc:f7:14:d9:57:43:52:00:84:52:24:
1e:3d:f3:f1:51:b1:1a:19:f2:80:b4:cc:4f:bb:a5:
86:9b:54:2e:fd:d9:a5:00:97:b2:08:0b:82:50:0c:
3e:52:1a:fd:2b:f1:56:6e:45:e5:f6:8a:18:3e:db:
f3:d7:e7:9b:08:58:40:c0:58:31:e7:f1:ba:b4:4e:
11:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D5:3F:9F:EC:F6:FF:AA:4A:39:C8:3F:CB:22:8B:A7:3C:7E:5B:85
X509v3 Authority Key Identifier:
keyid:11:A2:F7:13:5D:8E:A0:26:B9:E7:2B:E7:0E:3E:A6:79:F1:42:63:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/11A2F7135D8EA026B9E72BE70E3EA679F14263F4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A2F7135D8EA026B9E72BE70E3EA679F14263F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/323830343a6463303a3a2f33322d3438203d3e203238363130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:dc0::/32
Signature Algorithm: sha256WithRSAEncryption
17:95:27:e9:2a:9d:22:e2:4d:02:2d:49:78:3a:44:86:43:ff:
5c:dc:be:ba:58:7d:48:0d:14:a1:37:1b:ea:1e:8a:69:7a:a8:
50:62:ed:7f:b3:62:3a:a5:17:40:86:fe:1b:d9:9f:10:87:11:
9e:38:ab:2a:a0:cb:08:ae:ee:4d:bc:e0:74:10:36:c9:46:65:
ad:43:7c:0e:47:fc:f7:89:52:d3:61:b1:ba:4d:24:cd:50:d9:
77:a6:d1:ef:a1:cd:f8:69:5a:7d:db:8f:81:1f:ca:e3:c9:be:
16:5c:df:36:db:79:51:49:26:a1:c2:95:25:58:04:33:b4:b2:
33:90:78:37:28:7d:fc:e1:99:e4:ce:e5:ce:22:1d:67:46:ac:
2a:e8:7e:92:97:39:61:25:82:61:67:c5:49:96:8a:7b:18:dc:
10:56:90:e3:32:1e:f9:f0:cb:38:09:d9:d7:7b:6f:84:ec:af:
66:94:c7:65:db:70:4b:cf:5b:34:c3:05:b8:68:0f:25:9c:71:
c2:55:11:37:29:10:8c:20:b1:1b:76:77:56:d0:cc:27:20:d2:
4b:65:fe:9f:d4:f8:a4:e0:6d:58:44:6b:53:b0:8a:81:d6:6c:
db:27:5a:df:b0:51:f4:83:f5:13:4d:90:b1:74:0e:5e:4e:53:
c9:15:c2:41
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUZiYmnA47t8vZqC43Olhb16UI48EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFBMkY3MTM1RDhFQTAyNkI5RTcyQkU3MEUzRUE2NzlG
MTQyNjNGNDAeFw0yNDA5MjMxMzAzMzZaFw0yNTA5MjIxMzA4MzZaMDMxMTAvBgNV
BAMTKEEyRDUzRjlGRUNGNkZGQUE0QTM5QzgzRkNCMjI4QkE3M0M3RTVCODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFSxlXdet2UTHVPHpTmVYvZp7e
1J4iVtbtsmFTd0X0TvxgMN5qmvRWQc22kDzapEurWvIXWY5riLpjX0Ry5pS73ghR
5TScRIGA8WTBfT9tzBrS7kT/YJYaCrjmF4dw3ZHwLYbjk5chWMq6PIxMxlr8+k23
sqj13zYXjwGfY1MzAGSx2t4vKM1SX9jV00xhnY49c2moOJov3LoZrcQmyPUPTu6r
AFNTFjWLwrIGrHlMYoXau9JHHKXM9xTZV0NSAIRSJB498/FRsRoZ8oC0zE+7pYab
VC792aUAl7IIC4JQDD5SGv0r8VZuReX2ihg+2/PX55sIWEDAWDHn8bq0ThFDAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUotU/n+z2/6pKOcg/yyKLpzx+W4UwHwYDVR0j
BBgwFoAUEaL3E12OoCa55yvnDj6mefFCY/QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmYyd2tGOXdYWWFEcEZKYkJaaWZSMjVrRkdVNkVEa0NZNUdLZGk4Nmda
a0gvMC8xMUEyRjcxMzVEOEVBMDI2QjlFNzJCRTcwRTNFQTY3OUYxNDI2M0Y0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExQTJGNzEzNUQ4RUEwMjZC
OUU3MkJFNzBFM0VBNjc5RjE0MjYzRjQuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJmMndrRjl3WFlhRHBGSmJCWmlmUjI1a0ZHVTZFRGtDWTVHS2RpODZnWmtILzAv
MzIzODMwMzQzYTY0NjMzMDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzgzNjMx
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBA3AMA0GCSqGSIb3DQEBCwUAA4IBAQAXlSfpKp0i4k0C
LUl4OkSGQ/9c3L66WH1IDRShNxvqHoppeqhQYu1/s2I6pRdAhv4b2Z8QhxGeOKsq
oMsIru5NvOB0EDbJRmWtQ3wOR/z3iVLTYbG6TSTNUNl3ptHvoc34aVp924+BH8rj
yb4WXN8223lRSSahwpUlWAQztLIzkHg3KH384ZnkzuXOIh1nRqwq6H6SlzlhJYJh
Z8VJlop7GNwQVpDjMh758Ms4CdnXe2+E7K9mlMdl23BLz1s0wwW4aA8lnHHCVRE3
KRCMILEbdndW0MwnINJLZf6f1Pik4G1YRGtTsIqB1mzbJ1rfsFH0g/UTTZCxdA5e
TlPJFcJB
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:12:47 2025 by rpki-client