Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/323830343a386362343a633030303a3a2f33342d3334203d3e20323733383136.roa
File: 323830343a386362343a633030303a3a2f33342d3334203d3e20323733383136.roa (raw, json)
Hash identifier: z7SsnORDfkalwxkWVdiQq2GD+25/wioRLWhZdK5VlZg=
Subject key identifier: 31:8D:2B:34:A5:48:D2:83:B6:FC:26:EF:17:DD:FA:84:41:6D:C8:F9
Certificate issuer: /CN=BAF68C193144B8DD53B0312AA8ACCD5BB59350E0
Certificate serial: 1688938F1A78D4B7132DFC2A7FED98A4028BCC6A
Authority key identifier: BA:F6:8C:19:31:44:B8:DD:53:B0:31:2A:A8:AC:CD:5B:B5:93:50:E0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAF68C193144B8DD53B0312AA8ACCD5BB59350E0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/323830343a386362343a633030303a3a2f33342d3334203d3e20323733383136.roa
Signing time: Mon 09 Dec 2024 14:34:20 +0000
ROA not before: Mon 09 Dec 2024 14:29:20 +0000
ROA not after: Mon 08 Dec 2025 14:34:20 +0000
asID: 273816
IP address blocks: 2804:8cb4:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:88:93:8f:1a:78:d4:b7:13:2d:fc:2a:7f:ed:98:a4:02:8b:cc:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BAF68C193144B8DD53B0312AA8ACCD5BB59350E0
Validity
Not Before: Dec 9 14:29:20 2024 GMT
Not After : Dec 8 14:34:20 2025 GMT
Subject: CN=318D2B34A548D283B6FC26EF17DDFA84416DC8F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:30:a3:99:a9:33:22:4c:5b:66:4d:93:08:b7:
5d:3d:da:2a:60:79:60:53:80:b4:e3:9b:b2:55:cd:
e5:a8:47:fa:53:64:28:ef:91:24:b9:ef:f0:be:cb:
0a:21:0d:4e:99:5d:fd:84:2f:5f:7b:c9:af:ba:0b:
fb:c0:7a:a8:76:1c:fd:e2:7b:3b:a1:dc:69:35:73:
a0:06:84:f8:8b:ee:f2:07:f3:cc:15:43:01:e7:42:
4c:52:8c:28:91:38:b8:8b:93:03:9b:7c:45:c5:f8:
b5:c0:a6:ae:1b:d1:52:27:03:a3:2b:37:03:22:c5:
43:77:71:09:e7:a5:9e:cf:e6:a2:80:b9:b1:6c:94:
a8:cf:10:e8:80:91:a1:c3:05:e3:66:e0:3f:e9:57:
d5:3d:12:78:23:0a:2b:13:9b:81:ed:bd:6d:85:9f:
2c:6b:71:b1:71:9b:b1:3b:a4:9e:a2:5c:4a:56:19:
69:10:7b:af:20:ff:d6:e4:2e:4b:5e:e1:c1:7a:a1:
e9:a6:11:22:96:03:84:e7:5a:84:15:41:c1:d1:fa:
ff:15:00:44:c9:3e:a9:1c:29:65:86:80:95:01:80:
be:ae:05:84:89:80:c9:cc:f1:12:bb:d7:0d:fa:b6:
49:f9:5d:bb:22:56:de:ad:30:9e:cb:21:9d:39:95:
e1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8D:2B:34:A5:48:D2:83:B6:FC:26:EF:17:DD:FA:84:41:6D:C8:F9
X509v3 Authority Key Identifier:
keyid:BA:F6:8C:19:31:44:B8:DD:53:B0:31:2A:A8:AC:CD:5B:B5:93:50:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/BAF68C193144B8DD53B0312AA8ACCD5BB59350E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAF68C193144B8DD53B0312AA8ACCD5BB59350E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/323830343a386362343a633030303a3a2f33342d3334203d3e20323733383136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8cb4:c000::/34
Signature Algorithm: sha256WithRSAEncryption
e5:1b:fb:e5:69:6c:b0:9e:6d:f6:20:43:43:39:cb:f4:b1:be:
61:56:5a:88:63:69:4d:b0:06:5e:55:3a:c9:66:e2:a3:cc:39:
db:d0:ee:ea:30:f6:7d:e1:84:83:54:33:54:1b:19:a0:f5:0b:
d0:48:f7:b6:48:d6:82:41:ae:c5:aa:8b:e4:50:6b:7d:87:bd:
db:e2:71:56:1e:18:df:e7:e3:97:5d:d5:ec:4e:d3:a4:a8:f2:
f1:cb:b5:3b:bd:a1:a6:14:1f:e8:51:b4:f5:ab:b2:39:45:c3:
bc:96:69:e5:c2:ed:32:d6:3d:4d:1e:42:3d:f9:9e:69:e3:b6:
40:27:00:6b:24:21:ae:ab:31:27:d0:7d:9f:b5:3b:92:2d:ca:
d2:10:56:4b:3c:61:4e:61:07:3b:9c:ff:63:6c:7a:c4:85:5a:
76:31:25:86:af:5b:14:58:67:b4:31:89:81:4e:19:37:34:74:
28:8c:76:a9:2a:0a:5a:a2:49:78:d7:c9:e2:ea:ee:3c:9f:a4:
a8:fc:9d:b1:20:b6:6d:4d:bc:50:b9:44:24:e3:74:19:61:7e:
83:f3:1c:79:31:80:ad:fe:db:04:26:71:40:43:b4:b4:50:14:
79:11:e9:50:fe:49:00:e7:a7:5c:25:50:1a:f3:d8:cb:f2:c0:
3a:c9:ca:af
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUFoiTjxp41LcTLfwqf+2YpAKLzGowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFGNjhDMTkzMTQ0QjhERDUzQjAzMTJBQThBQ0NENUJC
NTkzNTBFMDAeFw0yNDEyMDkxNDI5MjBaFw0yNTEyMDgxNDM0MjBaMDMxMTAvBgNV
BAMTKDMxOEQyQjM0QTU0OEQyODNCNkZDMjZFRjE3RERGQTg0NDE2REM4RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZMKOZqTMiTFtmTZMIt1092ipg
eWBTgLTjm7JVzeWoR/pTZCjvkSS57/C+ywohDU6ZXf2EL197ya+6C/vAeqh2HP3i
ezuh3Gk1c6AGhPiL7vIH88wVQwHnQkxSjCiROLiLkwObfEXF+LXApq4b0VInA6Mr
NwMixUN3cQnnpZ7P5qKAubFslKjPEOiAkaHDBeNm4D/pV9U9EngjCisTm4HtvW2F
nyxrcbFxm7E7pJ6iXEpWGWkQe68g/9bkLkte4cF6oemmESKWA4TnWoQVQcHR+v8V
AETJPqkcKWWGgJUBgL6uBYSJgMnM8RK71w36tkn5XbsiVt6tMJ7LIZ05leFpAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUMY0rNKVI0oO2/CbvF936hEFtyPkwHwYDVR0j
BBgwFoAUuvaMGTFEuN1TsDEqqKzNW7WTUOAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFdlWVEyZ0hFczNwRkg4YmVtc010cXU3djc2TGdXWUZYd05RR3o3U0FN
V3UvMC9CQUY2OEMxOTMxNDRCOERENTNCMDMxMkFBOEFDQ0Q1QkI1OTM1MEUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBRjY4QzE5MzE0NEI4REQ1
M0IwMzEyQUE4QUNDRDVCQjU5MzUwRTAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hXZVlRMmdIRXMzcEZIOGJlbXNNdHF1N3Y3NkxnV1lGWHdOUUd6N1NBTVd1LzAv
MzIzODMwMzQzYTM4NjM2MjM0M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMzM4MzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEjLTAMA0GCSqGSIb3DQEBCwUA
A4IBAQDlG/vlaWywnm32IENDOcv0sb5hVlqIY2lNsAZeVTrJZuKjzDnb0O7qMPZ9
4YSDVDNUGxmg9QvQSPe2SNaCQa7FqovkUGt9h73b4nFWHhjf5+OXXdXsTtOkqPLx
y7U7vaGmFB/oUbT1q7I5RcO8lmnlwu0y1j1NHkI9+Z5p47ZAJwBrJCGuqzEn0H2f
tTuSLcrSEFZLPGFOYQc7nP9jbHrEhVp2MSWGr1sUWGe0MYmBThk3NHQojHapKgpa
okl418ni6u48n6So/J2xILZtTbxQuUQk43QZYX6D8xx5MYCt/tsEJnFAQ7S0UBR5
EelQ/kkA56dcJVAa89jL8sA6ycqv
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:47:41 2025 by rpki-client on console.sobornost.net