Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/323830343a386362343a383030303a3a2f33332d3333203d3e20323733383136.roa
File: 323830343a386362343a383030303a3a2f33332d3333203d3e20323733383136.roa (raw, json)
Hash identifier: wx9aSocJXudWjshj7vGly3yr+HpOmoPD15i7csJm4CQ=
Subject key identifier: F3:54:49:CA:58:FE:E6:F3:83:9D:95:26:D1:BA:10:4A:A4:D6:1A:02
Certificate issuer: /CN=BAF68C193144B8DD53B0312AA8ACCD5BB59350E0
Certificate serial: 5535BA48C530E6785D900B8B86436A05C7BBAE30
Authority key identifier: BA:F6:8C:19:31:44:B8:DD:53:B0:31:2A:A8:AC:CD:5B:B5:93:50:E0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAF68C193144B8DD53B0312AA8ACCD5BB59350E0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/323830343a386362343a383030303a3a2f33332d3333203d3e20323733383136.roa
Signing time: Mon 09 Dec 2024 14:34:21 +0000
ROA not before: Mon 09 Dec 2024 14:29:21 +0000
ROA not after: Mon 08 Dec 2025 14:34:21 +0000
asID: 273816
IP address blocks: 2804:8cb4:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:35:ba:48:c5:30:e6:78:5d:90:0b:8b:86:43:6a:05:c7:bb:ae:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BAF68C193144B8DD53B0312AA8ACCD5BB59350E0
Validity
Not Before: Dec 9 14:29:21 2024 GMT
Not After : Dec 8 14:34:21 2025 GMT
Subject: CN=F35449CA58FEE6F3839D9526D1BA104AA4D61A02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a9:31:79:5f:d9:32:fc:12:bf:4c:88:9c:d7:
eb:76:e4:07:e6:a4:86:12:d8:96:30:7a:e4:c1:55:
1a:a6:3c:8a:aa:a5:11:d5:7c:bd:52:7d:f8:a2:f7:
56:1a:ec:6d:07:1f:5c:da:27:d9:c3:93:06:d8:97:
e7:f8:c5:8f:27:a2:42:d1:9d:1e:d9:7e:a5:7c:b9:
f0:a3:38:8a:e1:50:3b:89:44:aa:59:72:5e:9f:82:
8e:d3:09:70:25:06:9d:ab:32:2e:1b:8d:08:fc:34:
78:54:c7:e9:d0:4c:57:b2:28:f8:58:b4:de:58:a4:
91:70:91:ad:25:60:f7:2b:d0:ce:1e:1d:44:84:d6:
e9:cb:e1:27:9f:3d:74:b7:c8:77:1d:18:d5:ae:95:
5a:bb:16:72:15:59:1c:45:fc:43:88:fb:75:c4:20:
dd:45:52:bb:82:a4:89:6b:04:95:0e:ce:0f:79:0a:
2e:ce:04:a3:00:7b:2c:ed:50:02:11:3f:eb:8e:70:
0b:34:bc:6c:e2:85:8f:7e:20:78:04:2c:78:22:56:
c7:56:b4:32:77:e0:d8:6c:cb:5a:53:25:5c:e1:0a:
99:30:89:b9:e0:34:2f:41:b6:79:66:3f:db:ce:fc:
73:ff:b8:e9:07:45:eb:c4:c7:c4:6c:a7:b7:a2:49:
1a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:54:49:CA:58:FE:E6:F3:83:9D:95:26:D1:BA:10:4A:A4:D6:1A:02
X509v3 Authority Key Identifier:
keyid:BA:F6:8C:19:31:44:B8:DD:53:B0:31:2A:A8:AC:CD:5B:B5:93:50:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/BAF68C193144B8DD53B0312AA8ACCD5BB59350E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAF68C193144B8DD53B0312AA8ACCD5BB59350E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/323830343a386362343a383030303a3a2f33332d3333203d3e20323733383136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8cb4:8000::/33
Signature Algorithm: sha256WithRSAEncryption
e3:83:82:89:0c:a0:94:7e:0e:8e:fd:4d:3f:9f:19:87:70:19:
a3:a5:d6:af:88:71:d3:bc:03:44:84:a0:53:49:9e:d0:0c:7c:
54:a9:59:1f:bf:05:95:ad:6c:80:64:38:ac:8a:12:6e:87:2a:
4b:6b:03:28:52:69:bd:84:12:50:aa:54:a2:f4:94:29:63:bd:
14:66:48:aa:83:f7:48:1a:1b:53:93:7f:c8:2e:b3:e6:f7:15:
a3:7e:00:17:63:7c:c0:c9:17:c4:3f:4b:7f:c3:26:2f:16:53:
0e:51:d4:24:8c:2a:99:26:cb:ed:b4:f0:a2:c7:17:f4:fc:b1:
67:69:be:6c:6d:c6:8f:c9:53:68:13:0e:52:a5:85:d0:ca:3f:
8c:5c:3d:c5:ea:1a:4e:fe:46:3b:32:a7:fc:5e:a3:b5:93:e1:
4c:aa:4a:ec:17:27:41:4a:b2:77:4f:41:60:4d:a5:5f:8d:92:
b0:16:f0:d2:81:8d:2c:f6:bc:a0:68:74:51:81:b5:fc:80:c1:
bd:ec:d4:19:6a:e4:12:d7:f4:9a:71:ed:7d:28:4b:7b:7b:52:
e2:0c:e5:60:48:8c:50:18:e8:6f:db:bb:dd:17:91:a6:23:4c:
a5:f7:17:b0:ba:40:d8:d2:22:23:c8:23:da:91:d2:5b:4e:a3:
20:49:d7:f3
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUVTW6SMUw5nhdkAuLhkNqBce7rjAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFGNjhDMTkzMTQ0QjhERDUzQjAzMTJBQThBQ0NENUJC
NTkzNTBFMDAeFw0yNDEyMDkxNDI5MjFaFw0yNTEyMDgxNDM0MjFaMDMxMTAvBgNV
BAMTKEYzNTQ0OUNBNThGRUU2RjM4MzlEOTUyNkQxQkExMDRBQTRENjFBMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4qTF5X9ky/BK/TIic1+t25Afm
pIYS2JYweuTBVRqmPIqqpRHVfL1Sffii91Ya7G0HH1zaJ9nDkwbYl+f4xY8nokLR
nR7ZfqV8ufCjOIrhUDuJRKpZcl6fgo7TCXAlBp2rMi4bjQj8NHhUx+nQTFeyKPhY
tN5YpJFwka0lYPcr0M4eHUSE1unL4SefPXS3yHcdGNWulVq7FnIVWRxF/EOI+3XE
IN1FUruCpIlrBJUOzg95Ci7OBKMAeyztUAIRP+uOcAs0vGzihY9+IHgELHgiVsdW
tDJ34Nhsy1pTJVzhCpkwibngNC9BtnlmP9vO/HP/uOkHRevEx8Rsp7eiSRr1AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU81RJylj+5vODnZUm0boQSqTWGgIwHwYDVR0j
BBgwFoAUuvaMGTFEuN1TsDEqqKzNW7WTUOAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFdlWVEyZ0hFczNwRkg4YmVtc010cXU3djc2TGdXWUZYd05RR3o3U0FN
V3UvMC9CQUY2OEMxOTMxNDRCOERENTNCMDMxMkFBOEFDQ0Q1QkI1OTM1MEUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBRjY4QzE5MzE0NEI4REQ1
M0IwMzEyQUE4QUNDRDVCQjU5MzUwRTAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hXZVlRMmdIRXMzcEZIOGJlbXNNdHF1N3Y3NkxnV1lGWHdOUUd6N1NBTVd1LzAv
MzIzODMwMzQzYTM4NjM2MjM0M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzczMzM4MzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEjLSAMA0GCSqGSIb3DQEBCwUA
A4IBAQDjg4KJDKCUfg6O/U0/nxmHcBmjpdaviHHTvANEhKBTSZ7QDHxUqVkfvwWV
rWyAZDisihJuhypLawMoUmm9hBJQqlSi9JQpY70UZkiqg/dIGhtTk3/ILrPm9xWj
fgAXY3zAyRfEP0t/wyYvFlMOUdQkjCqZJsvttPCixxf0/LFnab5sbcaPyVNoEw5S
pYXQyj+MXD3F6hpO/kY7Mqf8XqO1k+FMqkrsFydBSrJ3T0FgTaVfjZKwFvDSgY0s
9rygaHRRgbX8gMG97NQZauQS1/Sace19KEt7e1LiDOVgSIxQGOhv27vdF5GmI0yl
9xewukDY0iIjyCPakdJbTqMgSdfz
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:47:41 2025 by rpki-client on console.sobornost.net