Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5demt9N3CBU7Q7d8ANB41shVk9fD3PUB8paAUbDrWA2/0/323830343a346239343a3a2f33322d313238203d3e20323637333136.roa
File: 323830343a346239343a3a2f33322d313238203d3e20323637333136.roa (raw, json)
Hash identifier: 5Ks4NXVxnjqFCrrDausj6dx+xv1aZnDfemlXBX5QMtI=
Subject key identifier: 2B:62:5C:00:2B:70:D7:7F:F3:A0:1E:22:EB:C9:B7:8B:21:EE:12:B0
Certificate issuer: /CN=4AF555507F76387C67C13DE0BC2B700D6D33121B
Certificate serial: 3E2AC45E9217FA497193441EEE85AFB261791F02
Authority key identifier: 4A:F5:55:50:7F:76:38:7C:67:C1:3D:E0:BC:2B:70:0D:6D:33:12:1B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AF555507F76387C67C13DE0BC2B700D6D33121B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5demt9N3CBU7Q7d8ANB41shVk9fD3PUB8paAUbDrWA2/0/323830343a346239343a3a2f33322d313238203d3e20323637333136.roa
Signing time: Mon 02 Sep 2024 18:23:23 +0000
ROA not before: Mon 02 Sep 2024 18:18:23 +0000
ROA not after: Mon 01 Sep 2025 18:23:23 +0000
asID: 267316
IP address blocks: 2804:4b94::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:2a:c4:5e:92:17:fa:49:71:93:44:1e:ee:85:af:b2:61:79:1f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AF555507F76387C67C13DE0BC2B700D6D33121B
Validity
Not Before: Sep 2 18:18:23 2024 GMT
Not After : Sep 1 18:23:23 2025 GMT
Subject: CN=2B625C002B70D77FF3A01E22EBC9B78B21EE12B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8d:31:bd:f5:9b:3f:f4:cf:06:21:b5:67:a3:
64:7b:12:dd:0f:a9:93:ee:56:56:0e:c4:82:8a:da:
b9:02:c1:36:fb:4e:8e:38:2d:28:1b:c1:e1:8e:7c:
17:e0:06:f1:5c:7c:4a:1f:8e:fc:26:f9:0e:88:ce:
46:ee:7b:bf:9e:e6:d0:a9:ec:ef:bc:b9:1d:5f:61:
93:02:b4:9e:77:78:ed:d7:69:be:36:a2:c2:aa:6c:
b0:fe:1a:7f:b6:3e:0e:87:9a:12:d3:b6:6d:ae:0c:
3f:1d:a7:00:89:90:f0:10:35:a4:a1:27:9b:46:9e:
1e:ff:4f:cb:8f:83:f0:ed:78:34:b8:d4:03:ab:90:
d0:6c:2c:19:81:41:df:d2:47:eb:b6:21:be:6f:84:
af:c7:40:ae:37:e1:54:c0:02:06:65:93:cc:ff:cc:
a1:a7:1c:b1:ef:18:92:c2:0b:a1:82:56:05:34:05:
36:da:2e:27:18:70:61:15:51:99:5d:65:f9:02:b5:
f7:1d:e7:92:07:28:6c:e0:6f:13:81:0b:22:43:76:
b0:47:d3:81:f8:c6:0d:ee:6d:dc:40:fb:c4:56:9d:
a2:55:27:0a:50:ef:65:1c:0e:09:2e:45:c1:64:ce:
4c:2f:1f:af:98:72:7f:55:bd:63:2d:f6:71:6a:16:
22:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:62:5C:00:2B:70:D7:7F:F3:A0:1E:22:EB:C9:B7:8B:21:EE:12:B0
X509v3 Authority Key Identifier:
keyid:4A:F5:55:50:7F:76:38:7C:67:C1:3D:E0:BC:2B:70:0D:6D:33:12:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5demt9N3CBU7Q7d8ANB41shVk9fD3PUB8paAUbDrWA2/0/4AF555507F76387C67C13DE0BC2B700D6D33121B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AF555507F76387C67C13DE0BC2B700D6D33121B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5demt9N3CBU7Q7d8ANB41shVk9fD3PUB8paAUbDrWA2/0/323830343a346239343a3a2f33322d313238203d3e20323637333136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4b94::/32
Signature Algorithm: sha256WithRSAEncryption
c8:99:0e:80:d5:76:b1:a5:1a:a0:6e:25:00:da:9d:af:b7:a4:
c1:2c:a1:08:b6:94:77:e6:7b:5f:66:3e:6a:b2:37:b0:9c:e0:
0a:da:59:ed:20:c0:6b:d2:72:4d:77:7a:a9:85:10:c6:7e:15:
98:ea:dd:4f:2f:df:18:f3:65:77:23:07:fd:05:18:b1:ff:25:
74:7e:42:48:77:ad:e4:75:63:33:66:55:dd:37:46:53:83:5e:
d6:e2:b7:99:46:82:6b:b0:c6:26:ea:37:6c:7b:cc:43:13:cc:
aa:06:ca:bd:56:2a:48:ea:3c:ea:f1:8d:9e:fa:90:af:fd:3e:
b9:ab:c0:bd:b2:15:d2:90:d9:d1:f3:75:31:66:9e:f3:53:a8:
74:84:3e:dc:ac:22:90:78:d8:39:0f:86:90:42:f4:cf:f6:ff:
dc:07:5e:13:99:2a:d5:49:cc:19:0b:c5:87:27:09:6f:e2:80:
21:21:da:a3:41:46:07:77:85:4e:fe:c7:81:e0:4d:d7:38:0c:
35:01:3c:9c:2d:d5:e5:ef:0a:61:a9:c9:13:33:1f:e8:d9:66:
20:2a:1f:62:22:bb:df:2a:4d:00:2c:40:67:3d:22:65:20:f9:
46:ef:33:00:a2:47:50:0d:04:b5:6f:f9:41:9f:ac:24:ef:aa:
22:ab:2b:99
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPirEXpIX+klxk0Qe7oWvsmF5HwIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEFGNTU1NTA3Rjc2Mzg3QzY3QzEzREUwQkMyQjcwMEQ2
RDMzMTIxQjAeFw0yNDA5MDIxODE4MjNaFw0yNTA5MDExODIzMjNaMDMxMTAvBgNV
BAMTKDJCNjI1QzAwMkI3MEQ3N0ZGM0EwMUUyMkVCQzlCNzhCMjFFRTEyQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLjTG99Zs/9M8GIbVno2R7Et0P
qZPuVlYOxIKK2rkCwTb7To44LSgbweGOfBfgBvFcfEofjvwm+Q6Izkbue7+e5tCp
7O+8uR1fYZMCtJ53eO3Xab42osKqbLD+Gn+2Pg6HmhLTtm2uDD8dpwCJkPAQNaSh
J5tGnh7/T8uPg/DteDS41AOrkNBsLBmBQd/SR+u2Ib5vhK/HQK434VTAAgZlk8z/
zKGnHLHvGJLCC6GCVgU0BTbaLicYcGEVUZldZfkCtfcd55IHKGzgbxOBCyJDdrBH
04H4xg3ubdxA+8RWnaJVJwpQ72UcDgkuRcFkzkwvH6+Ycn9VvWMt9nFqFiLlAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUK2JcACtw13/zoB4i68m3iyHuErAwHwYDVR0j
BBgwFoAUSvVVUH92OHxnwT3gvCtwDW0zEhswDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby81ZGVtdDlOM0NCVTdRN2Q4QU5CNDFzaFZrOWZEM1BVQjhwYUFVYkRyV0Ey
LzAvNEFGNTU1NTA3Rjc2Mzg3QzY3QzEzREUwQkMyQjcwMEQ2RDMzMTIxQi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80QUY1NTU1MDdGNzYzODdDNjdD
MTNERTBCQzJCNzAwRDZEMzMxMjFCLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81
ZGVtdDlOM0NCVTdRN2Q4QU5CNDFzaFZrOWZEM1BVQjhwYUFVYkRyV0EyLzAvMzIz
ODMwMzQzYTM0NjIzOTM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2Mzcz
MzMxMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB
Af8EETAPMA0EAgACMAcDBQAoBEuUMA0GCSqGSIb3DQEBCwUAA4IBAQDImQ6A1Xax
pRqgbiUA2p2vt6TBLKEItpR35ntfZj5qsjewnOAK2lntIMBr0nJNd3qphRDGfhWY
6t1PL98Y82V3Iwf9BRix/yV0fkJId63kdWMzZlXdN0ZTg17W4reZRoJrsMYm6jds
e8xDE8yqBsq9VipI6jzq8Y2e+pCv/T65q8C9shXSkNnR83UxZp7zU6h0hD7crCKQ
eNg5D4aQQvTP9v/cB14TmSrVScwZC8WHJwlv4oAhIdqjQUYHd4VO/seB4E3XOAw1
ATycLdXl7wphqckTMx/o2WYgKh9iIrvfKk0ALEBnPSJlIPlG7zMAokdQDQS1b/lB
n6wk76oiqyuZ
-----END CERTIFICATE-----
Generated at Mon Apr 28 14:53:15 2025 by rpki-client