Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/323830343a353838633a3a2f33322d3438203d3e20323638313335.roa
File: 323830343a353838633a3a2f33322d3438203d3e20323638313335.roa (raw, json)
Hash identifier: iLebMxqmfT+hy6rljPUl+VgOazovwP/j0/SZv28JxO8=
Subject key identifier: 1B:91:06:92:A0:AB:88:CC:03:FB:DA:AA:6F:F6:9F:97:09:28:0F:3D
Certificate issuer: /CN=F34586E5FEADD624205CA9CAA175D3DCA59D32B3
Certificate serial: 52CC5D56E7D01B07773AC4EC5AB25BFD19326A00
Authority key identifier: F3:45:86:E5:FE:AD:D6:24:20:5C:A9:CA:A1:75:D3:DC:A5:9D:32:B3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/323830343a353838633a3a2f33322d3438203d3e20323638313335.roa
Signing time: Wed 03 Apr 2024 21:26:04 +0000
ROA not before: Wed 03 Apr 2024 21:21:04 +0000
ROA not after: Wed 02 Apr 2025 21:26:04 +0000
asID: 268135
IP address blocks: 2804:588c::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:cc:5d:56:e7:d0:1b:07:77:3a:c4:ec:5a:b2:5b:fd:19:32:6a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F34586E5FEADD624205CA9CAA175D3DCA59D32B3
Validity
Not Before: Apr 3 21:21:04 2024 GMT
Not After : Apr 2 21:26:04 2025 GMT
Subject: CN=1B910692A0AB88CC03FBDAAA6FF69F9709280F3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:68:46:34:b6:2b:2b:ba:26:e5:3f:56:f0:59:
b2:eb:ce:a7:62:e2:79:f0:60:05:b2:59:6e:a8:2f:
45:93:54:f6:b9:0e:5f:66:e7:e3:0e:3f:4c:a1:1d:
13:86:ee:7e:59:72:90:75:ca:fc:af:4f:0b:d0:88:
97:46:99:ad:5e:4d:52:c5:63:07:8d:49:df:43:6a:
3a:76:cd:81:8b:68:62:20:a7:35:cb:32:a3:b4:4d:
14:94:12:0b:d5:ca:0f:30:78:da:b6:17:08:ea:fb:
02:25:33:a6:45:68:b1:74:db:d6:25:83:61:f1:72:
f0:d3:b8:ed:d3:bc:b6:80:cb:7c:97:0a:1a:fa:1a:
38:1f:d1:18:42:e6:3a:44:36:dc:35:66:b0:d7:18:
b0:ba:18:0d:c3:70:cc:ef:b4:ec:cc:6f:4a:41:b3:
5b:f6:83:df:df:fc:e0:9e:76:c0:31:a2:94:b0:4c:
40:42:f8:a6:a9:51:d9:c0:fa:be:74:d9:a1:f7:b7:
90:68:1d:71:78:d6:4d:84:a9:c3:1e:f4:49:c9:80:
4e:a2:5b:e5:9f:65:63:49:e6:41:36:c4:f3:5d:bd:
ea:cc:25:bf:08:fc:cd:ca:33:de:5d:29:61:a9:08:
bf:bb:18:6a:94:65:1c:38:c7:b7:1a:a7:d3:35:b3:
21:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:91:06:92:A0:AB:88:CC:03:FB:DA:AA:6F:F6:9F:97:09:28:0F:3D
X509v3 Authority Key Identifier:
keyid:F3:45:86:E5:FE:AD:D6:24:20:5C:A9:CA:A1:75:D3:DC:A5:9D:32:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/323830343a353838633a3a2f33322d3438203d3e20323638313335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:588c::/32
Signature Algorithm: sha256WithRSAEncryption
71:55:7a:87:94:48:4f:d9:ca:48:2d:28:fb:0e:20:34:6b:da:
45:43:30:b6:a4:11:17:6c:f8:53:d8:80:ef:d2:f4:5b:56:c8:
29:20:4c:5a:04:31:95:dc:46:e0:f9:68:d5:64:da:79:1a:bc:
89:0a:dc:65:68:0d:d9:38:f2:6e:2e:46:be:5d:96:6a:a1:ea:
47:27:dc:52:0b:16:93:13:49:10:31:4f:05:5d:d6:9d:36:12:
43:be:6c:ec:7a:b0:18:ee:67:83:66:d5:86:fe:c9:9d:56:4b:
01:12:5f:dd:22:ea:11:f5:4c:cd:d8:56:a5:ad:7c:50:1d:af:
d1:23:05:92:5a:81:31:ab:ce:d8:ff:d2:1e:e1:d7:cb:3d:2c:
e2:67:ec:e6:54:4f:3d:f6:9a:6b:90:8d:09:ba:dc:47:cc:87:
23:2d:5f:dc:0a:2f:15:f5:90:18:7c:87:47:e8:44:72:ee:9a:
8b:9e:16:26:4d:9b:ed:3e:e4:c8:6c:5b:72:ea:a0:f1:11:17:
11:43:3f:23:ea:fa:40:c9:0b:87:6a:eb:74:d3:cd:46:7f:a8:
46:4f:01:4b:e7:a2:e4:c7:f0:2d:a3:d4:4b:37:73:e3:85:46:
e9:a4:a8:35:3d:43:66:4f:cb:e6:a2:76:dd:09:89:cc:34:49:
86:8f:91:3e
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUUsxdVufQGwd3OsTsWrJb/RkyagAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM0NTg2RTVGRUFERDYyNDIwNUNBOUNBQTE3NUQzRENB
NTlEMzJCMzAeFw0yNDA0MDMyMTIxMDRaFw0yNTA0MDIyMTI2MDRaMDMxMTAvBgNV
BAMTKDFCOTEwNjkyQTBBQjg4Q0MwM0ZCREFBQTZGRjY5Rjk3MDkyODBGM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEaEY0tisruiblP1bwWbLrzqdi
4nnwYAWyWW6oL0WTVPa5Dl9m5+MOP0yhHROG7n5ZcpB1yvyvTwvQiJdGma1eTVLF
YweNSd9Dajp2zYGLaGIgpzXLMqO0TRSUEgvVyg8weNq2Fwjq+wIlM6ZFaLF029Yl
g2HxcvDTuO3TvLaAy3yXChr6Gjgf0RhC5jpENtw1ZrDXGLC6GA3DcMzvtOzMb0pB
s1v2g9/f/OCedsAxopSwTEBC+KapUdnA+r502aH3t5BoHXF41k2EqcMe9EnJgE6i
W+WfZWNJ5kE2xPNdverMJb8I/M3KM95dKWGpCL+7GGqUZRw4x7cap9M1syGdAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUG5EGkqCriMwD+9qqb/aflwkoDz0wHwYDVR0j
BBgwFoAU80WG5f6t1iQgXKnKoXXT3KWdMrMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG91czRVTVhzcG5IU3o1NE5NOUM1Tm1nRUxueUhIbXVUMXFTcENFWWdC
TDQvMS9GMzQ1ODZFNUZFQURENjI0MjA1Q0E5Q0FBMTc1RDNEQ0E1OUQzMkIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzNDU4NkU1RkVBREQ2MjQy
MDVDQTlDQUExNzVEM0RDQTU5RDMyQjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRvdXM0VU1Yc3BuSFN6NTROTTlDNU5tZ0VMbnlISG11VDFxU3BDRVlnQkw0LzEv
MzIzODMwMzQzYTM1MzgzODYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4
MzEzMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARYjDANBgkqhkiG9w0BAQsFAAOCAQEAcVV6h5RI
T9nKSC0o+w4gNGvaRUMwtqQRF2z4U9iA79L0W1bIKSBMWgQxldxG4Plo1WTaeRq8
iQrcZWgN2Tjybi5Gvl2WaqHqRyfcUgsWkxNJEDFPBV3WnTYSQ75s7HqwGO5ng2bV
hv7JnVZLARJf3SLqEfVMzdhWpa18UB2v0SMFklqBMavO2P/SHuHXyz0s4mfs5lRP
Pfaaa5CNCbrcR8yHIy1f3AovFfWQGHyHR+hEcu6ai54WJk2b7T7kyGxbcuqg8REX
EUM/I+r6QMkLh2rrdNPNRn+oRk8BS+ei5MfwLaPUSzdz44VG6aSoNT1DZk/L5qJ2
3QmJzDRJho+RPg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:23:18 2025 by rpki-client