Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/323830343a323364343a3a2f33322d3430203d3e20323634313836.roa
File: 323830343a323364343a3a2f33322d3430203d3e20323634313836.roa (raw, json)
Hash identifier: vU3P0nJk4Y+bvMRGTKthjWV5GIr4ko1hwisrNXhTKBw=
Subject key identifier: AF:FD:1A:C1:4B:63:41:6A:99:9D:A0:28:6C:85:2E:F0:44:DF:64:13
Certificate issuer: /CN=D543789826C11DFADC822D25F10DB64BE2AA4B3E
Certificate serial: 43A0C35AB0FF892E92BF40367A405088209BE087
Authority key identifier: D5:43:78:98:26:C1:1D:FA:DC:82:2D:25:F1:0D:B6:4B:E2:AA:4B:3E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D543789826C11DFADC822D25F10DB64BE2AA4B3E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/323830343a323364343a3a2f33322d3430203d3e20323634313836.roa
Signing time: Mon 10 Jul 2023 14:07:16 +0000
ROA not before: Mon 10 Jul 2023 14:02:16 +0000
ROA not after: Mon 08 Jul 2024 14:07:16 +0000
asID: 264186
IP address blocks: 2804:23d4::/32 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:a0:c3:5a:b0:ff:89:2e:92:bf:40:36:7a:40:50:88:20:9b:e0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D543789826C11DFADC822D25F10DB64BE2AA4B3E
Validity
Not Before: Jul 10 14:02:16 2023 GMT
Not After : Jul 8 14:07:16 2024 GMT
Subject: CN=AFFD1AC14B63416A999DA0286C852EF044DF6413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b6:3c:be:eb:9f:71:c6:46:71:ac:ff:f5:a7:
8f:1e:fb:5b:5c:0c:28:f8:a6:bd:ef:19:f5:83:3d:
61:85:69:94:bb:60:58:8f:11:08:b5:e3:a8:2b:e7:
9e:f4:6f:58:f2:12:14:e3:a2:1c:e0:6e:37:b5:ce:
33:21:36:9f:41:9d:f2:79:d9:35:ce:38:aa:8c:d7:
c3:ef:80:bd:6f:09:ff:ee:f2:7f:30:69:00:fb:98:
77:90:00:be:29:ed:db:e7:e2:4b:89:01:77:e7:13:
72:09:99:b7:f6:48:ae:37:51:7c:f5:0b:52:fb:f1:
f1:9d:68:de:3f:ae:b9:e3:78:29:fd:f6:0e:7e:fb:
38:3c:cf:87:ce:d7:de:2f:2e:ca:0e:7d:ea:13:7f:
3e:7b:21:7d:41:ab:eb:d9:81:5b:bd:11:94:0c:80:
e6:87:fc:92:0f:b5:10:55:57:7e:39:69:8b:c5:13:
27:8a:f0:f3:b1:18:56:0b:4e:30:94:58:2f:72:e2:
89:e7:23:9c:35:39:33:62:ce:96:72:34:18:90:cc:
db:ca:d2:4f:16:7d:ca:8f:8f:eb:e4:c4:65:b3:32:
cf:a6:31:99:65:1e:81:dd:5a:41:c2:a8:a9:94:c0:
a6:93:df:75:e7:06:c5:d4:41:0e:86:79:5e:67:5b:
19:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FD:1A:C1:4B:63:41:6A:99:9D:A0:28:6C:85:2E:F0:44:DF:64:13
X509v3 Authority Key Identifier:
keyid:D5:43:78:98:26:C1:1D:FA:DC:82:2D:25:F1:0D:B6:4B:E2:AA:4B:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/D543789826C11DFADC822D25F10DB64BE2AA4B3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D543789826C11DFADC822D25F10DB64BE2AA4B3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/323830343a323364343a3a2f33322d3430203d3e20323634313836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:23d4::/32
Signature Algorithm: sha256WithRSAEncryption
9d:c3:fd:ae:0e:ae:b5:0b:42:5b:bc:6b:8f:ee:69:d5:ca:12:
4f:22:31:a8:4b:c7:94:a1:9f:a2:2d:35:83:e6:27:fd:20:31:
ea:87:67:54:d7:fc:d7:7b:5d:73:e1:58:15:40:33:1e:1e:13:
ae:64:59:1c:db:23:84:d1:f4:7f:b6:68:67:33:c9:64:0e:f0:
18:73:d7:a6:5d:99:7f:2a:2d:52:0f:2c:9a:c4:4f:7f:1b:f5:
fd:0f:73:b7:aa:6b:38:73:7b:5d:f9:45:53:96:05:a7:f3:c6:
11:74:f6:72:15:8d:58:78:03:1e:94:99:9e:59:dd:89:4f:59:
1e:eb:20:db:f2:23:40:93:23:bd:bb:dd:a7:4f:8f:8d:5a:09:
4e:5e:9f:66:c5:ed:e4:3e:6e:1a:ce:05:5d:b0:93:90:9f:4d:
8a:f9:e2:84:5c:ec:64:74:c0:d6:48:27:35:bf:2b:5d:92:24:
29:7f:87:a2:8f:5e:fa:5e:cd:ab:e2:5f:a6:c1:8e:9f:16:bd:
64:d0:56:af:92:15:10:e8:d7:66:17:2d:7f:29:b6:98:96:c3:
a5:00:fc:f5:4f:b0:3e:8b:d9:e0:ee:c4:3a:9c:01:a4:42:79:
63:c6:bc:c6:b3:94:78:73:cf:b5:1b:1d:75:a9:6e:57:09:33:
dd:30:3b:4b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUQ6DDWrD/iS6Sv0A2ekBQiCCb4IcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU0Mzc4OTgyNkMxMURGQURDODIyRDI1RjEwREI2NEJF
MkFBNEIzRTAeFw0yMzA3MTAxNDAyMTZaFw0yNDA3MDgxNDA3MTZaMDMxMTAvBgNV
BAMTKEFGRkQxQUMxNEI2MzQxNkE5OTlEQTAyODZDODUyRUYwNDRERjY0MTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZtjy+659xxkZxrP/1p48e+1tc
DCj4pr3vGfWDPWGFaZS7YFiPEQi146gr5570b1jyEhTjohzgbje1zjMhNp9BnfJ5
2TXOOKqM18PvgL1vCf/u8n8waQD7mHeQAL4p7dvn4kuJAXfnE3IJmbf2SK43UXz1
C1L78fGdaN4/rrnjeCn99g5++zg8z4fO194vLsoOfeoTfz57IX1Bq+vZgVu9EZQM
gOaH/JIPtRBVV345aYvFEyeK8POxGFYLTjCUWC9y4onnI5w1OTNizpZyNBiQzNvK
0k8WfcqPj+vkxGWzMs+mMZllHoHdWkHCqKmUwKaT33XnBsXUQQ6GeV5nWxmZAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUr/0awUtjQWqZnaAobIUu8ETfZBMwHwYDVR0j
BBgwFoAU1UN4mCbBHfrcgi0l8Q22S+KqSz4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGZ5c1kzaXZqUnk1Z3JXQkxKeWdKU3BMb3dURzRiVHZHcjRKUVVvdmpO
dXUvMC9ENTQzNzg5ODI2QzExREZBREM4MjJEMjVGMTBEQjY0QkUyQUE0QjNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q1NDM3ODk4MjZDMTFERkFE
QzgyMkQyNUYxMERCNjRCRTJBQTRCM0UuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhmeXNZM2l2alJ5NWdyV0JMSnlnSlNwTG93VEc0YlR2R3I0SlFVb3ZqTnV1LzAv
MzIzODMwMzQzYTMyMzM2NDM0M2EzYTJmMzMzMjJkMzQzMDIwM2QzZTIwMzIzNjM0
MzEzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQj1DANBgkqhkiG9w0BAQsFAAOCAQEAncP9rg6u
tQtCW7xrj+5p1coSTyIxqEvHlKGfoi01g+Yn/SAx6odnVNf813tdc+FYFUAzHh4T
rmRZHNsjhNH0f7ZoZzPJZA7wGHPXpl2ZfyotUg8smsRPfxv1/Q9zt6prOHN7XflF
U5YFp/PGEXT2chWNWHgDHpSZnlndiU9ZHusg2/IjQJMjvbvdp0+PjVoJTl6fZsXt
5D5uGs4FXbCTkJ9NivnihFzsZHTA1kgnNb8rXZIkKX+Hoo9e+l7Nq+JfpsGOnxa9
ZNBWr5IVEOjXZhctfym2mJbDpQD89U+wPovZ4O7EOpwBpEJ5Y8a8xrOUeHPPtRsd
daluVwkz3TA7Sw==
-----END CERTIFICATE-----
Generated at Sat May 3 22:53:53 2025 by rpki-client