Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/323830343a3936633a3a2f33322d3332203d3e20323633303835.roa
File: 323830343a3936633a3a2f33322d3332203d3e20323633303835.roa (raw, json)
Hash identifier: fIcSU5Nj5GaUIL8yma9QszHx5QrEL/vnDBk6PqSgXVY=
Subject key identifier: 06:48:07:69:C2:6A:2B:26:08:45:20:89:F1:7A:19:C9:AC:A0:BB:22
Certificate issuer: /CN=1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822
Certificate serial: 740641D254F76EEDF7D82F7F78AE3940B2C1770E
Authority key identifier: 1A:9F:A3:7F:39:AE:1F:F5:54:22:CD:1E:A4:DD:C2:2C:7B:D3:A8:22
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer
Subject info access: rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/323830343a3936633a3a2f33322d3332203d3e20323633303835.roa
Signing time: Sun 11 Aug 2024 18:10:43 +0000
ROA not before: Sun 11 Aug 2024 18:05:43 +0000
ROA not after: Sun 10 Aug 2025 18:10:43 +0000
asID: 263085
IP address blocks: 2804:96c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:06:41:d2:54:f7:6e:ed:f7:d8:2f:7f:78:ae:39:40:b2:c1:77:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822
Validity
Not Before: Aug 11 18:05:43 2024 GMT
Not After : Aug 10 18:10:43 2025 GMT
Subject: CN=06480769C26A2B2608452089F17A19C9ACA0BB22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8c:f9:e1:3f:8d:e7:16:e8:91:3f:cc:77:ee:
fa:3f:6e:74:21:5a:1e:1f:d8:fe:15:61:0c:d2:22:
a8:c7:05:9a:6d:eb:a4:27:24:2d:36:1a:38:c3:94:
68:2a:86:b7:87:93:20:35:4b:10:8a:90:b9:9f:53:
07:95:b4:ed:60:9a:07:ae:65:0b:6e:81:9b:b5:ac:
6b:de:d1:82:b9:79:71:a4:5e:85:cb:ac:c8:65:56:
77:e7:e0:e1:b1:67:49:95:60:b3:31:54:37:d0:0e:
f1:64:b0:88:56:de:f7:54:e2:77:14:56:0e:6c:84:
fe:9c:cd:c3:7e:74:82:dd:eb:65:4d:7d:eb:56:7b:
b0:d9:7a:8d:98:59:9a:99:87:38:4e:9b:76:ed:a6:
0e:36:dd:d5:ea:9e:3d:a7:bd:25:8d:12:a4:44:6f:
42:d1:65:7f:16:2b:62:7e:40:92:b4:34:ff:f1:93:
11:1f:f6:54:8f:e1:bd:6c:7a:bb:3b:25:24:d9:99:
d5:1c:42:3b:27:c0:10:5d:11:aa:b3:e4:a5:78:f7:
9e:d4:8b:a3:b2:d5:f7:38:77:67:81:f3:20:1c:d0:
b0:6b:83:c2:3f:5d:be:aa:f3:a5:72:0d:a0:95:3d:
fb:7a:2f:03:1b:cf:50:77:eb:bc:60:fa:17:b2:de:
64:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:48:07:69:C2:6A:2B:26:08:45:20:89:F1:7A:19:C9:AC:A0:BB:22
X509v3 Authority Key Identifier:
keyid:1A:9F:A3:7F:39:AE:1F:F5:54:22:CD:1E:A4:DD:C2:2C:7B:D3:A8:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/323830343a3936633a3a2f33322d3332203d3e20323633303835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:96c::/32
Signature Algorithm: sha256WithRSAEncryption
29:89:48:e2:2c:2a:df:cc:66:ee:53:11:e9:16:dd:d1:d4:15:
70:eb:11:c3:90:d0:c6:32:84:32:de:ca:c0:8b:49:51:88:b4:
fb:9d:f6:60:80:1c:f9:6c:d4:6a:19:a5:71:09:6a:1b:6b:3e:
26:ba:7d:6c:90:fa:59:5a:bf:bc:58:08:8e:20:38:52:52:17:
a3:09:f2:65:47:94:f2:65:2e:9e:18:8f:ec:a8:d7:54:87:95:
55:21:2e:c9:93:64:63:28:fc:17:56:a2:a0:62:bd:94:3f:b8:
48:05:1f:e5:37:04:c2:8c:b0:44:4d:79:f8:cc:e8:e2:2d:b4:
f0:99:08:03:c0:5f:45:9c:50:01:10:5c:a8:cb:18:3e:f5:d6:
cf:7d:97:86:e9:a7:82:c7:5e:81:ed:14:84:1c:e7:cb:3b:9a:
75:4b:89:34:70:4b:2d:52:8b:62:ec:c5:9a:46:4b:aa:94:92:
8a:e6:9f:bb:26:44:a3:ea:c0:a7:d9:25:c1:0d:b9:a0:84:53:
b4:3b:5b:48:c6:8f:2a:bf:2b:11:40:05:cb:d1:96:7f:3b:40:
21:38:b3:26:09:98:ed:32:37:1b:2e:5c:2a:8e:1f:a2:9b:4c:
aa:cb:5d:ca:17:90:60:41:28:19:d5:41:56:1d:d8:26:b1:cc:
3a:a8:a4:09
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUdAZB0lT3bu332C9/eK45QLLBdw4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUE5RkEzN0YzOUFFMUZGNTU0MjJDRDFFQTREREMyMkM3
QkQzQTgyMjAeFw0yNDA4MTExODA1NDNaFw0yNTA4MTAxODEwNDNaMDMxMTAvBgNV
BAMTKDA2NDgwNzY5QzI2QTJCMjYwODQ1MjA4OUYxN0ExOUM5QUNBMEJCMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKjPnhP43nFuiRP8x37vo/bnQh
Wh4f2P4VYQzSIqjHBZpt66QnJC02GjjDlGgqhreHkyA1SxCKkLmfUweVtO1gmgeu
ZQtugZu1rGve0YK5eXGkXoXLrMhlVnfn4OGxZ0mVYLMxVDfQDvFksIhW3vdU4ncU
Vg5shP6czcN+dILd62VNfetWe7DZeo2YWZqZhzhOm3btpg423dXqnj2nvSWNEqRE
b0LRZX8WK2J+QJK0NP/xkxEf9lSP4b1sers7JSTZmdUcQjsnwBBdEaqz5KV4957U
i6Oy1fc4d2eB8yAc0LBrg8I/Xb6q86VyDaCVPft6LwMbz1B367xg+hey3mQzAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUBkgHacJqKyYIRSCJ8XoZyayguyIwHwYDVR0j
BBgwFoAUGp+jfzmuH/VUIs0epN3CLHvTqCIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9mU3VkTTRFTXdLSEV3OXc1aXVwcHlhbmlFNFVFZVRlM3pBaVByR3N4TENZ
LzAvMUE5RkEzN0YzOUFFMUZGNTU0MjJDRDFFQTREREMyMkM3QkQzQTgyMi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8xQTlGQTM3RjM5QUUxRkY1NTQy
MkNEMUVBNEREQzIyQzdCRDNBODIyLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYG
CCsGAQUFBzALhoGJcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9m
U3VkTTRFTXdLSEV3OXc1aXVwcHlhbmlFNFVFZVRlM3pBaVByR3N4TENZLzAvMzIz
ODMwMzQzYTM5MzY2MzNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMzMwMzgz
NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgECWwwDQYJKoZIhvcNAQELBQADggEBACmJSOIsKt/MZu5T
EekW3dHUFXDrEcOQ0MYyhDLeysCLSVGItPud9mCAHPls1GoZpXEJahtrPia6fWyQ
+llav7xYCI4gOFJSF6MJ8mVHlPJlLp4Yj+yo11SHlVUhLsmTZGMo/BdWoqBivZQ/
uEgFH+U3BMKMsERNefjM6OIttPCZCAPAX0WcUAEQXKjLGD711s99l4bpp4LHXoHt
FIQc58s7mnVLiTRwSy1Si2LsxZpGS6qUkormn7smRKPqwKfZJcENuaCEU7Q7W0jG
jyq/KxFABcvRln87QCE4syYJmO0yNxsuXCqOH6KbTKrLXcoXkGBBKBnVQVYd2Cax
zDqopAk=
-----END CERTIFICATE-----
Generated at Wed May 7 13:29:24 2025 by rpki-client