Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/323830343a316630343a3a2f33322d3438203d3e203533303436.roa
File: 323830343a316630343a3a2f33322d3438203d3e203533303436.roa (raw, json)
Hash identifier: 3SlslTfV7qgXhUSvNVGWHN1mhK5XSbvZzPV7YmJswEw=
Subject key identifier: BB:FD:A3:E6:D6:F9:9D:09:91:C3:AD:2F:5D:9D:F9:FE:05:F8:A0:80
Certificate issuer: /CN=CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3
Certificate serial: 407DC961A334E05F42066051B726C88FA3F2E437
Authority key identifier: CE:68:7B:DF:D3:E8:EB:AC:E7:EE:1E:A8:4F:7F:C1:BB:27:8B:3C:C3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/323830343a316630343a3a2f33322d3438203d3e203533303436.roa
Signing time: Tue 04 Jun 2024 14:33:46 +0000
ROA not before: Tue 04 Jun 2024 14:28:46 +0000
ROA not after: Tue 03 Jun 2025 14:33:46 +0000
asID: 53046
IP address blocks: 2804:1f04::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:7d:c9:61:a3:34:e0:5f:42:06:60:51:b7:26:c8:8f:a3:f2:e4:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3
Validity
Not Before: Jun 4 14:28:46 2024 GMT
Not After : Jun 3 14:33:46 2025 GMT
Subject: CN=BBFDA3E6D6F99D0991C3AD2F5D9DF9FE05F8A080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b7:2f:ff:e4:2d:9b:e9:03:87:a9:d4:8c:83:
4a:c3:e5:be:f8:d9:7e:ab:72:3b:63:f2:79:c5:8c:
bb:69:98:2b:58:a0:53:71:8f:18:99:eb:37:51:cd:
bb:50:43:f3:b7:88:2c:fe:b6:76:5b:fa:8c:7f:ed:
bb:a9:18:f5:b1:ac:8d:ac:35:cc:4f:dd:19:6c:ea:
8c:f1:25:f4:a2:26:36:b5:70:8e:63:8d:8d:e7:f2:
76:86:68:62:58:ae:c2:71:68:df:4b:a0:cf:30:e6:
c9:71:1c:bb:44:52:62:10:90:37:27:0f:16:5f:6a:
e0:a7:97:eb:32:7d:46:b2:f9:27:21:ae:8c:8e:fd:
a0:e4:b5:19:86:6b:0d:3d:a9:d2:b2:a7:96:85:fb:
99:17:62:26:0b:35:7a:ca:58:22:2d:d3:13:8d:33:
d6:e6:77:c6:16:7a:0d:a1:c1:95:09:6e:c4:c2:9f:
83:39:74:e3:ca:d2:6b:36:56:e0:e0:b9:e9:9b:5f:
c1:5a:42:c2:96:12:29:8d:dd:27:c6:56:a5:1c:cb:
c9:7f:f5:3f:cb:ff:1d:78:84:e5:c5:ab:14:19:85:
55:ef:53:60:87:f2:bc:96:02:1f:e1:05:1e:fa:d9:
9d:09:8b:20:be:5a:61:25:5b:04:e3:59:11:9e:2b:
b7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FD:A3:E6:D6:F9:9D:09:91:C3:AD:2F:5D:9D:F9:FE:05:F8:A0:80
X509v3 Authority Key Identifier:
keyid:CE:68:7B:DF:D3:E8:EB:AC:E7:EE:1E:A8:4F:7F:C1:BB:27:8B:3C:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/323830343a316630343a3a2f33322d3438203d3e203533303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1f04::/32
Signature Algorithm: sha256WithRSAEncryption
81:51:47:b1:d3:c4:dd:04:83:b8:a5:3f:b0:14:1b:c8:2d:68:
15:57:23:16:e3:25:ef:5f:68:93:c7:8a:ff:bf:a7:8b:7f:bd:
c2:8e:96:da:41:ac:d7:c4:7a:97:96:94:20:8f:f1:7c:c5:e4:
28:5f:ab:77:06:c1:e8:86:c8:c6:01:71:f9:fe:4a:28:0f:49:
5d:6e:f5:77:c9:2a:72:fd:a3:5d:e0:b3:d2:56:5d:a9:e5:c7:
f0:d0:b0:84:e4:3c:29:c4:1f:3d:a2:bb:d2:96:8b:e6:75:d8:
39:41:ef:bc:2c:2e:82:f8:83:e6:05:0a:80:9f:b0:15:ef:33:
61:36:c0:c8:9c:e3:de:f2:55:f2:0c:c4:57:ea:1b:7e:3e:7c:
2b:8c:83:5b:51:11:4a:11:ab:82:61:13:d7:e5:57:48:b6:d8:
f4:d4:76:74:64:26:8f:e7:10:ed:be:0c:66:9f:82:65:e3:18:
e3:b0:d1:38:64:26:33:b4:85:52:02:e1:fe:dc:7d:3f:7e:64:
6c:e1:a2:6b:53:da:4b:03:15:a7:05:9f:8d:17:e3:36:0e:e2:
b4:cc:67:e0:43:a7:37:b1:4a:79:9a:3e:c4:ce:9e:64:d5:6a:
d6:c9:9f:29:d4:29:bc:17:eb:b1:71:36:d3:b8:91:b7:c8:b6:
56:83:f7:aa
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUQH3JYaM04F9CBmBRtybIj6Py5DcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0U2ODdCREZEM0U4RUJBQ0U3RUUxRUE4NEY3RkMxQkIy
NzhCM0NDMzAeFw0yNDA2MDQxNDI4NDZaFw0yNTA2MDMxNDMzNDZaMDMxMTAvBgNV
BAMTKEJCRkRBM0U2RDZGOTlEMDk5MUMzQUQyRjVEOURGOUZFMDVGOEEwODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtty//5C2b6QOHqdSMg0rD5b74
2X6rcjtj8nnFjLtpmCtYoFNxjxiZ6zdRzbtQQ/O3iCz+tnZb+ox/7bupGPWxrI2s
NcxP3Rls6ozxJfSiJja1cI5jjY3n8naGaGJYrsJxaN9LoM8w5slxHLtEUmIQkDcn
DxZfauCnl+syfUay+SchroyO/aDktRmGaw09qdKyp5aF+5kXYiYLNXrKWCIt0xON
M9bmd8YWeg2hwZUJbsTCn4M5dOPK0ms2VuDguembX8FaQsKWEimN3SfGVqUcy8l/
9T/L/x14hOXFqxQZhVXvU2CH8ryWAh/hBR762Z0JiyC+WmElWwTjWRGeK7erAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUu/2j5tb5nQmRw60vXZ35/gX4oIAwHwYDVR0j
BBgwFoAUzmh739Po66zn7h6oT3/BuyeLPMMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNm5jRzlzMmd1cFg4c0VMa25Yam9UMjYyOFhYVmFtRlJxZ21CYU5YRW1V
WVEvMC9DRTY4N0JERkQzRThFQkFDRTdFRTFFQTg0RjdGQzFCQjI3OEIzQ0MzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFNjg3QkRGRDNFOEVCQUNF
N0VFMUVBODRGN0ZDMUJCMjc4QjNDQzMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZuY0c5czJndXBYOHNFTGtuWGpvVDI2MjhYWFZhbUZScWdtQmFOWEVtVVlRLzAv
MzIzODMwMzQzYTMxNjYzMDM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzUzMzMw
MzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEHwQwDQYJKoZIhvcNAQELBQADggEBAIFRR7HTxN0E
g7ilP7AUG8gtaBVXIxbjJe9faJPHiv+/p4t/vcKOltpBrNfEepeWlCCP8XzF5Chf
q3cGweiGyMYBcfn+SigPSV1u9XfJKnL9o13gs9JWXanlx/DQsITkPCnEHz2iu9KW
i+Z12DlB77wsLoL4g+YFCoCfsBXvM2E2wMic497yVfIMxFfqG34+fCuMg1tREUoR
q4JhE9flV0i22PTUdnRkJo/nEO2+DGafgmXjGOOw0ThkJjO0hVIC4f7cfT9+ZGzh
omtT2ksDFacFn40X4zYO4rTMZ+BDpzexSnmaPsTOnmTVatbJnynUKbwX67FxNtO4
kbfItlaD96o=
-----END CERTIFICATE-----
Generated at Sat Apr 26 11:27:09 2025 by rpki-client