Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/323830343a356332383a3a2f33322d3438203d3e20323638383932.roa
File: 323830343a356332383a3a2f33322d3438203d3e20323638383932.roa (raw, json)
Hash identifier: aCLdX8npKd5AwSexuBHKVbO7bhyy9EjWbiR5FGT8IUU=
Subject key identifier: 7E:16:6C:FD:EF:9F:59:C6:8E:15:16:BA:B1:3B:C1:54:9F:0C:65:DC
Certificate issuer: /CN=D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1
Certificate serial: 12652A306A4259B13370BEC369E02FB808C13683
Authority key identifier: D1:FA:38:76:CB:0F:34:3A:C9:BB:97:57:EE:B0:4B:25:5D:4E:54:B1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/323830343a356332383a3a2f33322d3438203d3e20323638383932.roa
Signing time: Thu 04 Apr 2024 21:47:01 +0000
ROA not before: Thu 04 Apr 2024 21:42:01 +0000
ROA not after: Thu 03 Apr 2025 21:47:01 +0000
asID: 268892
IP address blocks: 2804:5c28::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:65:2a:30:6a:42:59:b1:33:70:be:c3:69:e0:2f:b8:08:c1:36:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1
Validity
Not Before: Apr 4 21:42:01 2024 GMT
Not After : Apr 3 21:47:01 2025 GMT
Subject: CN=7E166CFDEF9F59C68E1516BAB13BC1549F0C65DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:18:a2:4e:4c:f5:fc:08:a1:d8:91:34:d9:1a:
eb:62:d6:ef:0e:d1:ad:b6:2d:c5:5c:0f:59:a1:c2:
05:78:bf:39:2c:b6:0c:63:48:dc:d9:5f:78:d3:f3:
3a:33:ab:bf:d4:7c:ab:fe:29:78:8a:e1:38:f7:cc:
6f:dc:d9:c6:4b:f8:d6:8d:8e:9a:c1:24:4c:04:8e:
12:e3:9c:77:c1:7f:a1:c9:b8:8b:1a:b9:83:aa:6d:
f3:39:3e:f2:ee:be:e6:a7:04:98:c6:69:ac:76:5d:
57:b8:77:e6:53:4b:76:ed:94:9a:99:7b:72:1c:ad:
87:ff:91:85:c4:0e:d0:a2:4e:5f:ac:56:53:3c:b8:
57:24:3f:1a:88:bd:33:3b:19:4b:e2:1e:48:e2:c3:
8d:0d:ce:25:68:9b:bd:93:23:42:c4:06:dd:39:ed:
ae:cf:7c:8d:65:41:aa:a7:8f:1d:19:c4:14:47:b3:
52:73:60:e6:52:09:83:c5:17:04:3e:18:64:cc:9e:
d6:f2:08:21:17:6b:47:e5:d2:de:ba:c2:d9:8d:53:
fa:b2:7f:e5:a8:2b:a5:ba:cd:04:ee:81:ae:be:13:
7e:82:90:9b:5f:05:94:73:df:4d:b0:3c:fa:22:de:
2c:2e:5b:52:75:5d:da:b7:39:a1:8f:c2:0c:af:88:
e4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:16:6C:FD:EF:9F:59:C6:8E:15:16:BA:B1:3B:C1:54:9F:0C:65:DC
X509v3 Authority Key Identifier:
keyid:D1:FA:38:76:CB:0F:34:3A:C9:BB:97:57:EE:B0:4B:25:5D:4E:54:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/323830343a356332383a3a2f33322d3438203d3e20323638383932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5c28::/32
Signature Algorithm: sha256WithRSAEncryption
5b:a8:3b:f4:96:69:48:6b:00:76:4f:1a:91:15:26:8f:2f:28:
df:c5:86:83:bb:7a:32:89:58:95:8d:cc:6e:47:86:80:cf:23:
ec:7d:97:58:31:3d:c8:4b:b5:83:6f:c0:b1:8b:aa:fe:bb:b6:
f1:3d:e5:ef:51:14:6b:17:8f:a3:1f:a3:bd:80:b6:dc:f2:78:
5c:4c:31:77:f3:63:19:a4:40:bd:9f:de:f8:e0:c8:c9:59:b9:
a0:58:ea:41:ef:9e:d0:77:ee:1a:19:5c:33:18:3e:05:4f:f5:
e9:8a:53:eb:72:2a:41:63:c3:70:2e:70:07:59:16:95:02:96:
b8:1b:79:3b:ed:ef:8b:79:3e:b9:3f:2d:7d:cc:63:37:ac:9c:
5f:46:54:bb:ae:51:53:95:70:9b:e7:ce:46:4f:29:d3:ed:d2:
63:cd:9a:f5:91:4f:9a:d0:34:b6:61:80:be:c1:50:f9:6d:70:
fd:19:77:f1:36:c9:f7:5d:14:3a:b8:72:55:0a:76:e2:bb:22:
b7:75:ac:62:76:44:ce:d9:d0:c9:1f:3f:49:1f:e4:e5:48:df:
f7:68:46:52:2d:09:a5:61:f3:69:c9:05:21:03:09:8c:ab:a2:
a4:64:7e:53:4d:83:4d:cb:a6:2f:d2:93:c8:dd:32:a1:8c:2e:
0e:bf:ac:1c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUEmUqMGpCWbEzcL7DaeAvuAjBNoMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFGQTM4NzZDQjBGMzQzQUM5QkI5NzU3RUVCMDRCMjU1
RDRFNTRCMTAeFw0yNDA0MDQyMTQyMDFaFw0yNTA0MDMyMTQ3MDFaMDMxMTAvBgNV
BAMTKDdFMTY2Q0ZERUY5RjU5QzY4RTE1MTZCQUIxM0JDMTU0OUYwQzY1REMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaGKJOTPX8CKHYkTTZGuti1u8O
0a22LcVcD1mhwgV4vzkstgxjSNzZX3jT8zozq7/UfKv+KXiK4Tj3zG/c2cZL+NaN
jprBJEwEjhLjnHfBf6HJuIsauYOqbfM5PvLuvuanBJjGaax2XVe4d+ZTS3btlJqZ
e3IcrYf/kYXEDtCiTl+sVlM8uFckPxqIvTM7GUviHkjiw40NziVom72TI0LEBt05
7a7PfI1lQaqnjx0ZxBRHs1JzYOZSCYPFFwQ+GGTMntbyCCEXa0fl0t66wtmNU/qy
f+WoK6W6zQTuga6+E36CkJtfBZRz302wPPoi3iwuW1J1Xdq3OaGPwgyviOTjAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUfhZs/e+fWcaOFRa6sTvBVJ8MZdwwHwYDVR0j
BBgwFoAU0fo4dssPNDrJu5dX7rBLJV1OVLEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHdjVXJTaGk4ekFLcVN2NG5SUG1CNWRnWVdoenZpTGlIbW02WEx2ZzQ2
d0YvMS9EMUZBMzg3NkNCMEYzNDNBQzlCQjk3NTdFRUIwNEIyNTVENEU1NEIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxRkEzODc2Q0IwRjM0M0FD
OUJCOTc1N0VFQjA0QjI1NUQ0RTU0QjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R3Y1VyU2hpOHpBS3FTdjRuUlBtQjVkZ1lXaHp2aUxpSG1tNlhMdmc0NndGLzEv
MzIzODMwMzQzYTM1NjMzMjM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4
MzgzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARcKDANBgkqhkiG9w0BAQsFAAOCAQEAW6g79JZp
SGsAdk8akRUmjy8o38WGg7t6MolYlY3MbkeGgM8j7H2XWDE9yEu1g2/AsYuq/ru2
8T3l71EUaxePox+jvYC23PJ4XEwxd/NjGaRAvZ/e+ODIyVm5oFjqQe+e0HfuGhlc
Mxg+BU/16YpT63IqQWPDcC5wB1kWlQKWuBt5O+3vi3k+uT8tfcxjN6ycX0ZUu65R
U5Vwm+fORk8p0+3SY82a9ZFPmtA0tmGAvsFQ+W1w/Rl38TbJ910UOrhyVQp24rsi
t3WsYnZEztnQyR8/SR/k5Ujf92hGUi0JpWHzackFIQMJjKuipGR+U02DTcumL9KT
yN0yoYwuDr+sHA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:53:23 2025 by rpki-client