Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a616330303a3a2f33382d3338203d3e20323639343633.roa
File: 323830343a363530343a616330303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier: J1A6p4IhGNez3r/793cRe93m6EEa8bhOAX+TmXxxROk=
Subject key identifier: 00:BA:9B:38:26:94:35:17:8B:C0:FD:6D:15:C8:F0:5C:C6:1A:66:D2
Certificate issuer: /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial: 12002F168F333BEAF0DB47F2F96BD201295F606A
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a616330303a3a2f33382d3338203d3e20323639343633.roa
Signing time: Thu 03 Nov 2022 18:43:35 +0000
ROA not before: Thu 03 Nov 2022 18:38:35 +0000
ROA not after: Thu 02 Nov 2023 18:43:35 +0000
asID: 269463
IP address blocks: 2804:6504:ac00::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:00:2f:16:8f:33:3b:ea:f0:db:47:f2:f9:6b:d2:01:29:5f:60:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Validity
Not Before: Nov 3 18:38:35 2022 GMT
Not After : Nov 2 18:43:35 2023 GMT
Subject: CN=00BA9B38269435178BC0FD6D15C8F05CC61A66D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c0:2d:6b:95:f2:b2:99:31:91:42:cb:46:4b:
c0:a0:be:f7:eb:0e:94:aa:87:8b:24:a5:e3:d8:11:
41:93:ad:e5:0a:bd:cd:25:e1:88:95:e4:d4:9b:84:
76:c4:4f:d5:52:42:76:ff:09:a3:12:81:2d:05:da:
bf:3c:3e:06:9c:ea:20:17:99:bd:d4:e1:4e:55:24:
44:5c:38:30:d1:8a:bd:6f:9b:30:66:92:1b:da:c6:
f7:ee:e0:45:07:e9:b4:ae:12:a5:08:17:39:42:1c:
d3:97:3e:c5:b3:b7:a2:85:53:b7:c7:5c:d5:6c:17:
4a:2d:b9:66:d2:4a:22:ec:c2:0e:e2:fb:19:bc:06:
0c:1c:7f:b1:63:71:f7:29:56:d1:e5:b8:f1:70:03:
ce:01:0a:53:b8:d0:49:15:a1:97:da:53:38:9a:57:
e1:d1:5f:52:d8:ab:ff:9d:43:25:eb:ca:f0:77:44:
92:65:d9:09:06:99:61:4b:41:2b:b6:28:aa:44:dc:
16:e7:f4:fd:fd:58:90:a5:7e:b1:59:7f:4f:b5:71:
61:28:88:b9:98:6e:6a:07:e9:d0:3e:98:39:df:dc:
94:00:d0:f9:09:c0:16:4a:53:63:19:9d:16:e3:37:
4e:4f:f9:8a:5c:62:3d:8e:41:ff:e2:4e:14:36:8e:
e8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:BA:9B:38:26:94:35:17:8B:C0:FD:6D:15:C8:F0:5C:C6:1A:66:D2
X509v3 Authority Key Identifier:
keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a616330303a3a2f33382d3338203d3e20323639343633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6504:ac00::/38
Signature Algorithm: sha256WithRSAEncryption
79:42:b8:e8:3f:38:a9:0d:21:19:72:ba:de:78:1f:83:d4:2f:
78:ac:28:78:06:35:b2:02:b1:6a:81:aa:50:84:c3:22:b0:03:
19:bd:09:fc:75:62:c6:13:60:c3:6e:7f:30:ee:64:f1:6c:7c:
cc:f0:3d:a8:cb:92:96:91:73:16:83:a4:39:fa:e4:42:8a:93:
19:30:2f:dc:b6:2b:72:92:47:46:00:6f:65:ff:ae:dd:6d:c5:
64:5f:46:f0:2d:ca:6f:e1:f5:28:8b:32:9a:0a:56:67:04:c1:
6c:9f:22:c4:31:b8:94:48:53:b6:d4:5f:e5:e6:d7:ed:f7:5d:
72:d7:81:3e:87:d1:d3:1d:2d:03:29:ab:ba:f4:da:a6:dd:73:
52:6b:c2:39:22:3b:27:31:3e:42:d3:39:1f:7c:7c:ec:d9:a9:
66:bd:92:d5:60:3d:28:bf:47:8f:18:c2:ab:a7:8d:17:17:ad:
29:f6:05:9c:14:32:56:88:45:86:49:9d:99:23:41:d6:79:3a:
d3:e4:a3:d0:50:27:39:f1:74:c8:fb:3c:06:12:c1:09:d2:27:
e5:7c:03:bb:98:9d:d1:dc:c6:4c:6d:67:e6:ea:53:64:e8:69:
01:ac:2c:c4:52:7d:76:f8:2a:3c:ca:7a:3e:29:d3:ad:81:42:
3e:95:4a:7d
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUEgAvFo8zO+rw20fy+WvSASlfYGowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDg1RUZDQTYxRkYxRkJGQUU5QzBEMUMzQ0IzOUIwNjMw
MDJDM0M1OTAeFw0yMjExMDMxODM4MzVaFw0yMzExMDIxODQzMzVaMDMxMTAvBgNV
BAMTKDAwQkE5QjM4MjY5NDM1MTc4QkMwRkQ2RDE1QzhGMDVDQzYxQTY2RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCowC1rlfKymTGRQstGS8Cgvvfr
DpSqh4skpePYEUGTreUKvc0l4YiV5NSbhHbET9VSQnb/CaMSgS0F2r88Pgac6iAX
mb3U4U5VJERcODDRir1vmzBmkhvaxvfu4EUH6bSuEqUIFzlCHNOXPsWzt6KFU7fH
XNVsF0otuWbSSiLswg7i+xm8Bgwcf7FjcfcpVtHluPFwA84BClO40EkVoZfaUzia
V+HRX1LYq/+dQyXryvB3RJJl2QkGmWFLQSu2KKpE3Bbn9P39WJClfrFZf0+1cWEo
iLmYbmoH6dA+mDnf3JQA0PkJwBZKU2MZnRbjN05P+YpcYj2OQf/iThQ2juiZAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUALqbOCaUNReLwP1tFcjwXMYaZtIwHwYDVR0j
BBgwFoAU2F78ph/x+/rpwNHDyzmwYwAsPFkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2lDd2JBUzFMbmc1TG9UY3F5RHJKY3FCbnY3ZVdmcXVMakRqN1gxTmhN
Mk0vMC9EODVFRkNBNjFGRjFGQkZBRTlDMEQxQzNDQjM5QjA2MzAwMkMzQzU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q4NUVGQ0E2MUZGMUZCRkFF
OUMwRDFDM0NCMzlCMDYzMDAyQzNDNTkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dpQ3diQVMxTG5nNUxvVGNxeURySmNxQm52N2VXZnF1TGpEajdYMU5oTTJNLzAv
MzIzODMwMzQzYTM2MzUzMDM0M2E2MTYzMzAzMDNhM2EyZjMzMzgyZDMzMzgyMDNk
M2UyMDMyMzYzOTM0MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAigEZQSsMA0GCSqGSIb3DQEBCwUA
A4IBAQB5QrjoPzipDSEZcrreeB+D1C94rCh4BjWyArFqgapQhMMisAMZvQn8dWLG
E2DDbn8w7mTxbHzM8D2oy5KWkXMWg6Q5+uRCipMZMC/ctitykkdGAG9l/67dbcVk
X0bwLcpv4fUoizKaClZnBMFsnyLEMbiUSFO21F/l5tft911y14E+h9HTHS0DKau6
9Nqm3XNSa8I5IjsnMT5C0zkffHzs2almvZLVYD0ov0ePGMKrp40XF60p9gWcFDJW
iEWGSZ2ZI0HWeTrT5KPQUCc58XTI+zwGEsEJ0iflfAO7mJ3R3MZMbWfm6lNk6GkB
rCzEUn12+Co8yno+KdOtgUI+lUp9
-----END CERTIFICATE-----
Generated at Thu May 1 15:28:50 2025 by rpki-client