Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/323830343a316332343a3a2f33322d3438203d3e203238363730.roa
File: 323830343a316332343a3a2f33322d3438203d3e203238363730.roa (raw, json)
Hash identifier: +TDxYAnVsPID27nBhQMm7/l7Ah845871Q9Ijswo4tW4=
Subject key identifier: EF:24:CF:B9:34:18:2F:0A:96:92:1C:54:66:01:7E:AC:5D:1A:41:5F
Certificate issuer: /CN=4E7EB31B6D4532D1C10444DB3B88D1F6D002F236
Certificate serial: 3A9104BCAA3876EFDC2E03B51B1C4AFEAD167E3D
Authority key identifier: 4E:7E:B3:1B:6D:45:32:D1:C1:04:44:DB:3B:88:D1:F6:D0:02:F2:36
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/323830343a316332343a3a2f33322d3438203d3e203238363730.roa
Signing time: Tue 30 Jul 2024 15:03:10 +0000
ROA not before: Tue 30 Jul 2024 14:58:10 +0000
ROA not after: Tue 29 Jul 2025 15:03:10 +0000
asID: 28670
IP address blocks: 2804:1c24::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:91:04:bc:aa:38:76:ef:dc:2e:03:b5:1b:1c:4a:fe:ad:16:7e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E7EB31B6D4532D1C10444DB3B88D1F6D002F236
Validity
Not Before: Jul 30 14:58:10 2024 GMT
Not After : Jul 29 15:03:10 2025 GMT
Subject: CN=EF24CFB934182F0A96921C5466017EAC5D1A415F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:73:f9:2d:d4:a0:72:43:a4:8b:1c:d3:b5:
5d:82:47:e2:e2:a7:7c:93:d0:8f:f4:4a:b8:51:fb:
e0:ad:2b:5f:ca:1b:26:97:eb:04:2a:54:5a:7f:15:
0b:b9:ff:2d:94:51:32:e1:5f:4c:db:a5:86:77:ba:
b5:64:3d:15:43:dc:d1:a7:6b:7e:6b:99:0f:93:8b:
5b:20:96:82:1c:01:57:c9:31:eb:f6:bc:33:1a:1c:
c0:53:ef:b9:0c:c9:f4:d1:37:73:0b:0e:00:ad:cc:
cf:d4:dd:90:cd:76:2c:a6:25:b6:7e:ae:c6:18:68:
74:b3:34:ea:05:dc:d4:fe:36:dc:86:65:f7:6d:78:
3b:50:6d:ab:82:e0:53:bb:8e:da:d1:26:22:80:52:
5b:23:b1:60:90:98:87:84:7c:2f:d7:60:5a:5d:cd:
f5:61:15:f9:6d:ea:3f:47:56:62:30:36:78:5a:2b:
57:1a:4c:ec:85:9e:6b:06:b9:94:93:cd:2d:4e:3d:
c4:59:6d:8b:03:4b:aa:5b:b8:48:30:dc:ba:05:e9:
a2:47:01:d3:9b:0f:d8:ef:0e:62:75:fd:f7:6c:08:
13:3c:38:fc:5e:05:91:ec:db:b3:1f:87:9b:f4:dd:
a9:96:48:3a:02:b1:c3:32:21:fe:61:61:f2:d2:8a:
b1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:24:CF:B9:34:18:2F:0A:96:92:1C:54:66:01:7E:AC:5D:1A:41:5F
X509v3 Authority Key Identifier:
keyid:4E:7E:B3:1B:6D:45:32:D1:C1:04:44:DB:3B:88:D1:F6:D0:02:F2:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/323830343a316332343a3a2f33322d3438203d3e203238363730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1c24::/32
Signature Algorithm: sha256WithRSAEncryption
39:f0:75:26:04:0d:51:94:a0:a5:76:86:17:ee:49:55:b4:47:
e3:bd:86:3e:78:71:5c:3e:cf:01:61:84:8b:94:91:ce:ae:e2:
4b:1b:df:98:8e:27:da:37:89:27:c3:35:e2:22:b0:ea:cf:70:
84:63:07:7b:db:7e:00:1a:ce:36:7b:dd:8c:56:34:a0:8d:8c:
82:61:c9:a0:30:09:ec:1a:55:32:ba:94:9c:aa:34:94:8e:d7:
3f:22:c1:33:d5:cd:c9:de:47:18:cf:7a:8c:fc:83:ca:49:5f:
cf:b2:0a:ce:0b:07:e1:e0:63:ca:b3:6a:bb:11:a0:f6:6c:66:
17:71:42:f4:13:34:c4:a7:74:77:af:05:ad:b9:13:21:fa:b5:
1e:1c:ec:eb:62:75:ed:20:0c:1f:50:86:91:69:2e:3d:fb:5d:
6c:28:11:f8:fa:86:84:0d:35:34:a7:b2:8a:3d:6e:d8:0f:a7:
2b:d1:81:0d:82:88:14:9b:f1:9c:11:45:9d:a2:53:c4:df:f4:
82:e1:42:80:44:23:e4:85:1d:91:db:e4:77:49:f0:b8:7e:10:
26:35:dd:7d:62:62:6b:dc:a1:91:fc:f6:cf:88:d0:3b:10:14:
d6:12:e6:9d:15:d1:69:ef:e1:6c:07:20:43:7a:3d:4e:8b:e3:
89:14:e7:fc
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUOpEEvKo4du/cLgO1GxxK/q0Wfj0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEU3RUIzMUI2RDQ1MzJEMUMxMDQ0NERCM0I4OEQxRjZE
MDAyRjIzNjAeFw0yNDA3MzAxNDU4MTBaFw0yNTA3MjkxNTAzMTBaMDMxMTAvBgNV
BAMTKEVGMjRDRkI5MzQxODJGMEE5NjkyMUM1NDY2MDE3RUFDNUQxQTQxNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC07XP5LdSgckOkixzTtV2CR+Li
p3yT0I/0SrhR++CtK1/KGyaX6wQqVFp/FQu5/y2UUTLhX0zbpYZ3urVkPRVD3NGn
a35rmQ+Ti1sgloIcAVfJMev2vDMaHMBT77kMyfTRN3MLDgCtzM/U3ZDNdiymJbZ+
rsYYaHSzNOoF3NT+NtyGZfdteDtQbauC4FO7jtrRJiKAUlsjsWCQmIeEfC/XYFpd
zfVhFflt6j9HVmIwNnhaK1caTOyFnmsGuZSTzS1OPcRZbYsDS6pbuEgw3LoF6aJH
AdObD9jvDmJ1/fdsCBM8OPxeBZHs27Mfh5v03amWSDoCscMyIf5hYfLSirGfAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU7yTPuTQYLwqWkhxUZgF+rF0aQV8wHwYDVR0j
BBgwFoAUTn6zG21FMtHBBETbO4jR9tAC8jYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnJXenhZc2NqaFRqUkw5R2FVWDNGbVR6aXp2em5CZVNSTEc3aTYyRm5a
UEwvMC80RTdFQjMxQjZENDUzMkQxQzEwNDQ0REIzQjg4RDFGNkQwMDJGMjM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRFN0VCMzFCNkQ0NTMyRDFD
MTA0NDREQjNCODhEMUY2RDAwMkYyMzYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZyV3p4WXNjamhUalJMOUdhVVgzRm1Ueml6dnpuQmVTUkxHN2k2MkZuWlBMLzAv
MzIzODMwMzQzYTMxNjMzMjM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzODM2
MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEHCQwDQYJKoZIhvcNAQELBQADggEBADnwdSYEDVGU
oKV2hhfuSVW0R+O9hj54cVw+zwFhhIuUkc6u4ksb35iOJ9o3iSfDNeIisOrPcIRj
B3vbfgAazjZ73YxWNKCNjIJhyaAwCewaVTK6lJyqNJSO1z8iwTPVzcneRxjPeoz8
g8pJX8+yCs4LB+HgY8qzarsRoPZsZhdxQvQTNMSndHevBa25EyH6tR4c7Otide0g
DB9QhpFpLj37XWwoEfj6hoQNNTSnsoo9btgPpyvRgQ2CiBSb8ZwRRZ2iU8Tf9ILh
QoBEI+SFHZHb5HdJ8Lh+ECY13X1iYmvcoZH89s+I0DsQFNYS5p0V0Wnv4WwHIEN6
PU6L44kU5/w=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:56:45 2025 by rpki-client