Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/323830343a326661343a3a2f33322d3438203d3e203532373731.roa
File: 323830343a326661343a3a2f33322d3438203d3e203532373731.roa (raw, json)
Hash identifier: IAlR2kUhfcSywJwu67hDhsscO7vzsbiXNtGAkH7UKe4=
Subject key identifier: 65:FA:14:7B:81:CF:25:FF:3F:E5:B4:E2:60:8F:2A:53:16:48:75:F5
Certificate issuer: /CN=3929491D59EC78DBDEC7423B04D06034C1A59303
Certificate serial: 409F89F111B05C79D5F8238DB987F40D52846EF5
Authority key identifier: 39:29:49:1D:59:EC:78:DB:DE:C7:42:3B:04:D0:60:34:C1:A5:93:03
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/323830343a326661343a3a2f33322d3438203d3e203532373731.roa
Signing time: Thu 04 Apr 2024 10:53:09 +0000
ROA not before: Thu 04 Apr 2024 10:48:09 +0000
ROA not after: Thu 03 Apr 2025 10:53:09 +0000
asID: 52771
IP address blocks: 2804:2fa4::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:9f:89:f1:11:b0:5c:79:d5:f8:23:8d:b9:87:f4:0d:52:84:6e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3929491D59EC78DBDEC7423B04D06034C1A59303
Validity
Not Before: Apr 4 10:48:09 2024 GMT
Not After : Apr 3 10:53:09 2025 GMT
Subject: CN=65FA147B81CF25FF3FE5B4E2608F2A53164875F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9f:a5:84:67:12:26:a2:9e:ba:7b:13:c9:2f:
89:c9:da:f4:0b:87:7c:b4:2e:3f:40:f5:87:6b:8f:
59:a1:be:81:0a:36:30:73:51:d2:ee:2f:e3:5b:15:
72:9f:1e:a9:ef:71:35:f9:ff:8b:af:34:f3:e8:7c:
76:18:24:2f:0e:03:46:27:02:52:a2:cc:72:80:01:
1f:52:cd:32:ab:d3:37:ff:c7:d8:a7:37:c4:61:5d:
81:2b:89:f7:54:d9:12:ad:4c:7f:b3:9a:34:e9:f6:
21:88:3b:61:70:16:f7:89:b0:0f:e6:bf:16:8b:c4:
4e:bf:81:61:ea:90:ad:5e:84:fb:82:41:77:c3:c7:
b5:7e:9e:e2:f1:d8:02:f3:39:3b:96:61:6d:8e:e9:
ca:fc:c3:38:e0:53:79:3c:26:8f:79:ab:75:e7:72:
6f:54:3b:59:75:61:81:26:03:07:c0:7f:a9:04:ff:
ea:25:8d:55:e8:43:93:13:57:70:69:ce:9f:44:b2:
15:e9:8d:35:10:bf:82:7e:5d:f7:7d:cf:8f:a0:37:
25:89:91:a0:d0:50:6d:da:01:5b:39:ea:74:77:a0:
4d:b8:e5:e1:1e:c2:89:d2:0a:a1:8c:98:fc:73:07:
33:04:4e:45:fc:bf:ea:84:28:92:50:cf:db:38:7a:
7c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FA:14:7B:81:CF:25:FF:3F:E5:B4:E2:60:8F:2A:53:16:48:75:F5
X509v3 Authority Key Identifier:
keyid:39:29:49:1D:59:EC:78:DB:DE:C7:42:3B:04:D0:60:34:C1:A5:93:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/323830343a326661343a3a2f33322d3438203d3e203532373731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2fa4::/32
Signature Algorithm: sha256WithRSAEncryption
26:69:d0:96:08:ff:8f:8a:6c:2b:cc:be:02:7e:73:87:07:b1:
33:09:bf:d7:48:c1:25:da:9b:70:3a:98:37:28:7b:a8:e3:65:
12:82:fa:3f:5c:20:c2:ca:73:cc:33:34:e7:dc:46:a8:cd:c9:
6d:a0:6e:d2:15:03:07:f7:0b:5d:39:c3:33:7c:94:59:8c:dd:
cb:39:17:c2:7f:59:8b:12:32:36:c2:38:34:19:13:b8:cd:4e:
af:71:fc:d2:3d:8c:3c:84:e7:a4:3f:76:62:ec:d5:fe:04:8a:
31:a1:19:c9:40:f3:c9:ea:2e:a4:6a:7e:23:03:eb:c3:f1:72:
1f:07:1b:98:c9:07:6d:1c:2e:51:2e:5c:c3:1b:cc:83:9b:5f:
6e:72:a0:d8:49:fc:55:ca:de:91:f6:c2:b3:c9:1d:ab:92:a3:
64:fa:e9:ab:0c:48:13:db:5f:1e:36:99:0b:ba:02:08:35:d7:
80:be:7a:dc:b7:38:72:3d:95:36:48:45:96:1a:ce:01:11:13:
10:17:e1:4b:cb:b4:78:69:51:b8:cf:92:4f:ae:22:0b:06:f3:
0b:a5:77:b8:88:44:1e:08:0e:7d:22:71:3b:84:b2:c5:42:9e:
57:f7:eb:e9:64:2b:1b:61:dd:bd:14:a6:c0:c5:e7:91:a4:02:
58:37:09:23
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUQJ+J8RGwXHnV+CONuYf0DVKEbvUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzkyOTQ5MUQ1OUVDNzhEQkRFQzc0MjNCMDREMDYwMzRD
MUE1OTMwMzAeFw0yNDA0MDQxMDQ4MDlaFw0yNTA0MDMxMDUzMDlaMDMxMTAvBgNV
BAMTKDY1RkExNDdCODFDRjI1RkYzRkU1QjRFMjYwOEYyQTUzMTY0ODc1RjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIn6WEZxImop66exPJL4nJ2vQL
h3y0Lj9A9Ydrj1mhvoEKNjBzUdLuL+NbFXKfHqnvcTX5/4uvNPPofHYYJC8OA0Yn
AlKizHKAAR9SzTKr0zf/x9inN8RhXYErifdU2RKtTH+zmjTp9iGIO2FwFveJsA/m
vxaLxE6/gWHqkK1ehPuCQXfDx7V+nuLx2ALzOTuWYW2O6cr8wzjgU3k8Jo95q3Xn
cm9UO1l1YYEmAwfAf6kE/+oljVXoQ5MTV3Bpzp9EshXpjTUQv4J+Xfd9z4+gNyWJ
kaDQUG3aAVs56nR3oE245eEewonSCqGMmPxzBzMETkX8v+qEKJJQz9s4enxzAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUZfoUe4HPJf8/5bTiYI8qUxZIdfUwHwYDVR0j
BBgwFoAUOSlJHVnseNvex0I7BNBgNMGlkwMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG1GZjNFdFBKandxWVlZRHoybzZESFR3VUtYMXRGdjlTRDgxcjI3d1py
NGkvMS8zOTI5NDkxRDU5RUM3OERCREVDNzQyM0IwNEQwNjAzNEMxQTU5MzAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5Mjk0OTFENTlFQzc4REJE
RUM3NDIzQjA0RDA2MDM0QzFBNTkzMDMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRtRmYzRXRQSmp3cVlZWUR6Mm82REhUd1VLWDF0RnY5U0Q4MXIyN3dacjRpLzEv
MzIzODMwMzQzYTMyNjY2MTM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzUzMjM3
MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEL6QwDQYJKoZIhvcNAQELBQADggEBACZp0JYI/4+K
bCvMvgJ+c4cHsTMJv9dIwSXam3A6mDcoe6jjZRKC+j9cIMLKc8wzNOfcRqjNyW2g
btIVAwf3C105wzN8lFmM3cs5F8J/WYsSMjbCODQZE7jNTq9x/NI9jDyE56Q/dmLs
1f4EijGhGclA88nqLqRqfiMD68Pxch8HG5jJB20cLlEuXMMbzIObX25yoNhJ/FXK
3pH2wrPJHauSo2T66asMSBPbXx42mQu6Agg114C+ety3OHI9lTZIRZYazgERExAX
4UvLtHhpUbjPkk+uIgsG8wuld7iIRB4IDn0icTuEssVCnlf36+lkKxth3b0UpsDF
55GkAlg3CSM=
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:12:45 2025 by rpki-client