Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313438633a3a2f34382d3438203d3e203131303937.roa
File: 323830313a38303a313438633a3a2f34382d3438203d3e203131303937.roa (raw, json)
Hash identifier: zAxSh39RkW7zaeOA6FK/layGWSvrEJZeGQ8mtW2vT14=
Subject key identifier: 9B:65:48:3A:4C:96:E5:F6:AD:5F:8D:91:4C:00:F3:E6:01:16:E5:03
Certificate issuer: /CN=202FA7CA4FB68A7F044DBC88811484C065334A74
Certificate serial: 6109D979525D011A751856F0B7E1F91A7AE9EDA1
Authority key identifier: 20:2F:A7:CA:4F:B6:8A:7F:04:4D:BC:88:81:14:84:C0:65:33:4A:74
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/202FA7CA4FB68A7F044DBC88811484C065334A74.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313438633a3a2f34382d3438203d3e203131303937.roa
Signing time: Sat 21 Dec 2024 00:24:26 +0000
ROA not before: Sat 21 Dec 2024 00:19:26 +0000
ROA not after: Sat 20 Dec 2025 00:24:26 +0000
asID: 11097
IP address blocks: 2801:80:148c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:09:d9:79:52:5d:01:1a:75:18:56:f0:b7:e1:f9:1a:7a:e9:ed:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202FA7CA4FB68A7F044DBC88811484C065334A74
Validity
Not Before: Dec 21 00:19:26 2024 GMT
Not After : Dec 20 00:24:26 2025 GMT
Subject: CN=9B65483A4C96E5F6AD5F8D914C00F3E60116E503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8d:95:64:47:03:02:24:b1:48:75:5d:65:c0:
cf:38:9b:3e:68:19:f6:a5:be:98:9b:ab:c3:44:b3:
09:6f:0a:41:11:18:5b:a6:3e:a8:1c:ef:7b:4b:25:
d3:49:74:12:68:bb:9c:11:5e:31:b4:c9:cb:bd:8d:
96:74:0f:a6:ff:c1:2c:1a:d7:84:8a:cb:98:76:8d:
29:b4:cb:52:44:90:c0:75:39:57:43:fa:9f:8e:d5:
06:c8:52:09:5b:a0:3c:81:c2:04:3e:14:a0:c6:21:
d1:d0:ab:3d:aa:ee:db:e6:f8:68:2e:85:bb:46:5d:
04:8c:2c:a8:5a:cc:5b:87:6e:1c:82:09:e8:00:20:
4a:64:97:19:7e:3b:c6:aa:b6:ce:5b:e1:86:dc:92:
52:6c:90:b8:60:3f:eb:50:67:9c:a5:e5:8b:3e:0c:
45:3f:54:41:bf:1f:bd:b3:6a:95:12:8a:c0:47:c5:
16:58:2b:32:9a:ab:12:82:4d:52:14:44:45:c9:f2:
6f:74:78:09:77:01:90:01:ed:92:0f:ce:3b:a3:16:
4d:49:53:6e:61:e4:59:6f:22:f2:5a:5b:8f:e2:8a:
a2:a0:4e:bf:d9:8e:0b:a9:a0:6d:ae:7e:ae:29:29:
96:aa:c5:0c:4b:e0:fa:61:44:2c:43:6f:91:42:74:
9b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:65:48:3A:4C:96:E5:F6:AD:5F:8D:91:4C:00:F3:E6:01:16:E5:03
X509v3 Authority Key Identifier:
keyid:20:2F:A7:CA:4F:B6:8A:7F:04:4D:BC:88:81:14:84:C0:65:33:4A:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/202FA7CA4FB68A7F044DBC88811484C065334A74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/202FA7CA4FB68A7F044DBC88811484C065334A74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313438633a3a2f34382d3438203d3e203131303937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:80:148c::/48
Signature Algorithm: sha256WithRSAEncryption
15:41:6f:08:8c:a4:70:4a:9f:67:e3:aa:17:11:12:75:54:62:
52:4a:47:b4:07:a6:32:12:28:32:1c:15:bd:54:cc:e5:4b:77:
68:b2:9e:09:cd:64:6f:25:c8:45:50:3e:84:fc:48:b5:09:c9:
57:e5:a8:f5:c5:d4:f7:19:b4:57:1c:50:9b:11:c8:38:c1:00:
c0:6b:d5:e9:0c:05:95:d5:8c:8a:72:63:8d:f9:eb:48:4a:12:
aa:13:c9:68:85:39:1a:78:5e:23:94:85:89:4c:ce:16:ac:11:
1e:e3:ce:98:46:dd:7d:8b:df:52:2b:79:9d:71:e2:55:d7:03:
c8:0d:ee:56:ab:c3:e7:07:60:18:e0:99:00:39:44:ed:25:8e:
cf:c9:07:4f:8f:97:38:92:59:72:9c:0f:31:c9:cc:fc:11:2d:
87:2b:6d:b8:68:c4:56:e5:e3:5b:4e:f8:25:82:52:a7:42:7e:
4a:d8:f6:90:1a:db:64:a9:fa:f8:48:90:ec:fb:de:50:f6:d9:
d4:8e:9e:fc:4f:19:c6:4d:38:83:53:38:3e:8c:ca:3a:1d:7c:
09:1c:b7:3f:b6:51:19:a4:bb:09:46:79:f6:59:ac:43:2f:7b:
eb:2d:53:c7:80:d0:2e:e9:fd:de:e6:9d:51:1f:b3:d3:95:63:
5b:3f:59:89
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUYQnZeVJdARp1GFbwt+H5Gnrp7aEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjAyRkE3Q0E0RkI2OEE3RjA0NERCQzg4ODExNDg0QzA2
NTMzNEE3NDAeFw0yNDEyMjEwMDE5MjZaFw0yNTEyMjAwMDI0MjZaMDMxMTAvBgNV
BAMTKDlCNjU0ODNBNEM5NkU1RjZBRDVGOEQ5MTRDMDBGM0U2MDExNkU1MDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZjZVkRwMCJLFIdV1lwM84mz5o
Gfalvpibq8NEswlvCkERGFumPqgc73tLJdNJdBJou5wRXjG0ycu9jZZ0D6b/wSwa
14SKy5h2jSm0y1JEkMB1OVdD+p+O1QbIUglboDyBwgQ+FKDGIdHQqz2q7tvm+Ggu
hbtGXQSMLKhazFuHbhyCCegAIEpklxl+O8aqts5b4YbcklJskLhgP+tQZ5yl5Ys+
DEU/VEG/H72zapUSisBHxRZYKzKaqxKCTVIUREXJ8m90eAl3AZAB7ZIPzjujFk1J
U25h5FlvIvJaW4/iiqKgTr/ZjgupoG2ufq4pKZaqxQxL4PphRCxDb5FCdJszAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUm2VIOkyW5fatX42RTADz5gEW5QMwHwYDVR0j
BBgwFoAUIC+nyk+2in8ETbyIgRSEwGUzSnQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFoybm9zVVFQYnRtQkp4V0d4RkVmMUozM1p4VTZZak5TY3NOZFAxdVBp
ZWUvMC8yMDJGQTdDQTRGQjY4QTdGMDQ0REJDODg4MTE0ODRDMDY1MzM0QTc0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwMkZBN0NBNEZCNjhBN0Yw
NDREQkM4ODgxMTQ4NEMwNjUzMzRBNzQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRaMm5vc1VRUGJ0bUJKeFdHeEZFZjFKMzNaeFU2WWpOU2NzTmRQMXVQaWVlLzAv
MzIzODMwMzEzYTM4MzAzYTMxMzQzODYzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzEzMTMwMzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBAIAUjDANBgkqhkiG9w0BAQsFAAOCAQEA
FUFvCIykcEqfZ+OqFxESdVRiUkpHtAemMhIoMhwVvVTM5Ut3aLKeCc1kbyXIRVA+
hPxItQnJV+Wo9cXU9xm0VxxQmxHIOMEAwGvV6QwFldWMinJjjfnrSEoSqhPJaIU5
GnheI5SFiUzOFqwRHuPOmEbdfYvfUit5nXHiVdcDyA3uVqvD5wdgGOCZADlE7SWO
z8kHT4+XOJJZcpwPMcnM/BEthyttuGjEVuXjW074JYJSp0J+Stj2kBrbZKn6+EiQ
7PveUPbZ1I6e/E8Zxk04g1M4PozKOh18CRy3P7ZRGaS7CUZ59lmsQy976y1Tx4DQ
Lun93uadUR+z05VjWz9ZiQ==
-----END CERTIFICATE-----
Generated at Thu May 8 10:30:11 2025 by rpki-client