Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/1/323830343a6431633a3a2f33322d313238203d3e203532363030.roa
File: 323830343a6431633a3a2f33322d313238203d3e203532363030.roa (raw, json)
Hash identifier: 4itlm5KV5vLMmZdclH+JcOfGbzantqBanEabQqyO8Mg=
Subject key identifier: E7:90:29:AD:5B:D7:49:D9:28:3D:89:7C:B6:0D:91:87:72:76:F6:C0
Certificate issuer: /CN=59F73133C9108C206FE9409E22591FE97847518A
Certificate serial: 2892B4BCB3F60F39F8A9EA4992A0B80CF481CCCF
Authority key identifier: 59:F7:31:33:C9:10:8C:20:6F:E9:40:9E:22:59:1F:E9:78:47:51:8A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59F73133C9108C206FE9409E22591FE97847518A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/1/323830343a6431633a3a2f33322d313238203d3e203532363030.roa
Signing time: Thu 04 Apr 2024 18:36:43 +0000
ROA not before: Thu 04 Apr 2024 18:31:43 +0000
ROA not after: Thu 03 Apr 2025 18:36:43 +0000
asID: 52600
IP address blocks: 2804:d1c::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:92:b4:bc:b3:f6:0f:39:f8:a9:ea:49:92:a0:b8:0c:f4:81:cc:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59F73133C9108C206FE9409E22591FE97847518A
Validity
Not Before: Apr 4 18:31:43 2024 GMT
Not After : Apr 3 18:36:43 2025 GMT
Subject: CN=E79029AD5BD749D9283D897CB60D91877276F6C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4b:ab:e0:93:ed:5e:70:7b:3b:21:c4:dc:11:
11:fe:fa:2f:97:a9:4d:b6:32:dd:b7:b9:fb:5e:1b:
94:30:97:22:38:29:2b:70:b9:95:78:23:61:0b:1e:
d5:32:e5:69:e3:df:3a:74:68:22:d7:95:a9:8a:cb:
3b:a3:bd:1a:9a:eb:c7:44:9b:ca:58:5b:85:2c:be:
c9:06:4a:e0:35:cc:32:f8:f1:c2:f7:8e:00:3e:a2:
41:19:d4:f6:2f:af:78:9a:71:06:74:0e:b2:2c:ae:
df:b2:28:b2:a7:94:83:8f:c8:e2:36:a0:3d:47:78:
12:76:34:f5:d8:be:88:9f:15:c3:c2:79:9e:81:3e:
bd:0a:6e:78:87:04:44:cb:24:b5:6d:47:3a:7b:ed:
59:8b:00:cb:82:74:e8:ff:0f:e6:d7:bd:2f:c5:e5:
96:bb:ba:d6:d6:d3:d8:f8:2f:54:5a:98:cf:9c:b9:
6d:fb:85:b7:a6:74:2b:23:73:55:98:82:06:6c:74:
a8:c1:be:48:3c:ef:af:75:a3:15:bf:49:03:6b:d7:
39:69:56:61:75:0d:c9:c3:d2:c5:01:4b:31:21:56:
99:af:99:c6:94:a0:ea:6b:d3:33:59:7a:23:ec:3b:
fd:75:e1:4f:c0:fc:08:71:47:5f:ca:c6:e0:6a:f1:
f6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:90:29:AD:5B:D7:49:D9:28:3D:89:7C:B6:0D:91:87:72:76:F6:C0
X509v3 Authority Key Identifier:
keyid:59:F7:31:33:C9:10:8C:20:6F:E9:40:9E:22:59:1F:E9:78:47:51:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/1/59F73133C9108C206FE9409E22591FE97847518A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59F73133C9108C206FE9409E22591FE97847518A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/1/323830343a6431633a3a2f33322d313238203d3e203532363030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:d1c::/32
Signature Algorithm: sha256WithRSAEncryption
37:4f:30:b7:42:1d:79:87:d0:85:f8:d1:2f:78:79:00:d9:95:
c2:46:3e:e5:23:23:5b:e4:5a:b7:5b:33:ab:8e:87:dc:62:85:
1c:23:27:4a:be:9b:8e:fd:7f:35:36:ff:59:48:39:49:49:50:
6f:1f:53:91:60:dd:4d:5d:34:c3:0a:27:6d:cb:89:ce:48:9d:
99:c2:39:c2:ec:4e:be:dd:6c:ee:fd:95:6c:a6:5f:2f:f0:f9:
0d:5f:d1:36:68:18:87:ec:3f:b1:49:5e:46:b2:3f:93:cd:41:
d3:76:b4:24:65:8a:48:87:db:cb:5c:c4:5d:55:a1:eb:19:b3:
26:13:fe:46:89:51:a4:30:df:70:a4:98:55:c5:b5:fe:06:cd:
94:fd:c1:18:fb:f4:89:fa:c6:f7:b8:d1:53:63:1d:13:51:42:
02:d8:28:71:9b:6b:1d:3e:72:2f:3c:70:bc:7f:1d:5a:21:63:
5c:b6:9f:6d:66:af:5b:c0:b1:e3:60:91:51:9e:4c:9f:f9:67:
bf:0a:53:0b:00:b3:e8:e8:c8:a5:96:31:ae:f0:3f:72:dc:d6:
f9:4e:1f:2c:dd:a2:5d:b2:dc:bf:20:93:8a:3a:6a:a7:cf:42:
63:6d:00:40:de:45:f3:be:6a:e0:66:7a:49:10:8f:31:c2:4c:
44:4b:2d:08
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUKJK0vLP2Dzn4qepJkqC4DPSBzM8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlGNzMxMzNDOTEwOEMyMDZGRTk0MDlFMjI1OTFGRTk3
ODQ3NTE4QTAeFw0yNDA0MDQxODMxNDNaFw0yNTA0MDMxODM2NDNaMDMxMTAvBgNV
BAMTKEU3OTAyOUFENUJENzQ5RDkyODNEODk3Q0I2MEQ5MTg3NzI3NkY2QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3S6vgk+1ecHs7IcTcERH++i+X
qU22Mt23ufteG5QwlyI4KStwuZV4I2ELHtUy5Wnj3zp0aCLXlamKyzujvRqa68dE
m8pYW4UsvskGSuA1zDL48cL3jgA+okEZ1PYvr3iacQZ0DrIsrt+yKLKnlIOPyOI2
oD1HeBJ2NPXYvoifFcPCeZ6BPr0KbniHBETLJLVtRzp77VmLAMuCdOj/D+bXvS/F
5Za7utbW09j4L1RamM+cuW37hbemdCsjc1WYggZsdKjBvkg87691oxW/SQNr1zlp
VmF1DcnD0sUBSzEhVpmvmcaUoOpr0zNZeiPsO/114U/A/AhxR1/KxuBq8fbNAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU55AprVvXSdkoPYl8tg2Rh3J29sAwHwYDVR0j
BBgwFoAUWfcxM8kQjCBv6UCeIlkf6XhHUYowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXhORVdqaGNpdnIzdUM1NGtaNUdva3hpWGNyV0w0Ync4alM5WERQR2o1
Mm4vMS81OUY3MzEzM0M5MTA4QzIwNkZFOTQwOUUyMjU5MUZFOTc4NDc1MThBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU5RjczMTMzQzkxMDhDMjA2
RkU5NDA5RTIyNTkxRkU5Nzg0NzUxOEEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl4TkVXamhjaXZyM3VDNTRrWjVHb2t4aVhjcldMNGJ3OGpTOVhEUEdqNTJuLzEv
MzIzODMwMzQzYTY0MzE2MzNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzUzMjM2
MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEDRwwDQYJKoZIhvcNAQELBQADggEBADdPMLdCHXmH
0IX40S94eQDZlcJGPuUjI1vkWrdbM6uOh9xihRwjJ0q+m479fzU2/1lIOUlJUG8f
U5Fg3U1dNMMKJ23Lic5InZnCOcLsTr7dbO79lWymXy/w+Q1f0TZoGIfsP7FJXkay
P5PNQdN2tCRlikiH28tcxF1VoesZsyYT/kaJUaQw33CkmFXFtf4GzZT9wRj79In6
xve40VNjHRNRQgLYKHGbax0+ci88cLx/HVohY1y2n21mr1vAseNgkVGeTJ/5Z78K
UwsAs+joyKWWMa7wP3Lc1vlOHyzdol2y3L8gk4o6aqfPQmNtAEDeRfO+auBmekkQ
jzHCTERLLQg=
-----END CERTIFICATE-----
Generated at Tue Apr 29 21:51:05 2025 by rpki-client