Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/323830343a3564633a3330303a3a2f34312d3431203d3e203533303139.roa
File: 323830343a3564633a3330303a3a2f34312d3431203d3e203533303139.roa (raw, json)
Hash identifier: SjUTlQuJtVYBjplMaHIW2WcDwIY5BXqwJp+F3GBJQC8=
Subject key identifier: F8:AC:0A:AD:D0:D0:3A:AA:13:9B:AA:1A:EA:9F:12:9C:D9:E3:48:D2
Certificate issuer: /CN=E64C7BA3061B5F4E05BCEE186C2E72826CACBD74
Certificate serial: 5C3528777F98E6E1C330852A7FDA1C7A72517B00
Authority key identifier: E6:4C:7B:A3:06:1B:5F:4E:05:BC:EE:18:6C:2E:72:82:6C:AC:BD:74
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E64C7BA3061B5F4E05BCEE186C2E72826CACBD74.cer
Subject info access: rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/323830343a3564633a3330303a3a2f34312d3431203d3e203533303139.roa
Signing time: Wed 15 Jan 2025 10:30:39 +0000
ROA not before: Wed 15 Jan 2025 10:25:39 +0000
ROA not after: Wed 14 Jan 2026 10:30:39 +0000
asID: 53019
IP address blocks: 2804:5dc:300::/41 maxlen: 41
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:35:28:77:7f:98:e6:e1:c3:30:85:2a:7f:da:1c:7a:72:51:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E64C7BA3061B5F4E05BCEE186C2E72826CACBD74
Validity
Not Before: Jan 15 10:25:39 2025 GMT
Not After : Jan 14 10:30:39 2026 GMT
Subject: CN=F8AC0AADD0D03AAA139BAA1AEA9F129CD9E348D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6e:5a:41:c4:93:fa:95:bf:ad:5c:49:53:7d:
0b:34:1a:e2:e8:4e:2d:af:28:af:0e:38:5e:a1:3d:
b3:e4:f3:c5:67:cc:5a:96:c9:70:4a:d2:a7:73:17:
e8:f6:80:a0:e3:10:36:56:1f:c8:ea:6c:fc:37:5c:
9e:7e:a6:a6:65:11:88:de:b2:01:6b:88:61:3e:88:
78:86:36:71:bd:67:d4:e3:e9:dd:7a:05:7a:b1:d2:
8f:1b:be:82:f1:61:a6:d6:04:17:f3:ad:e7:b0:0f:
7f:a1:78:14:9c:30:fb:f3:f2:a0:72:25:52:e0:53:
4f:55:76:42:37:5a:2e:4a:ac:d0:47:f4:96:77:bb:
7c:8c:0b:24:c7:3a:f8:4e:d5:e1:00:95:e2:33:ca:
9a:47:c5:87:ab:f2:05:dc:03:97:e1:af:63:77:c0:
15:3f:bf:b8:f4:3e:da:7a:5f:25:ee:ce:30:e9:49:
6c:26:a1:e2:7c:44:a2:2d:bd:60:f4:58:6d:f7:ab:
40:13:fd:2c:18:46:6d:9c:9d:ec:16:27:8f:4c:4f:
59:c3:c6:3a:05:70:1b:5f:c3:71:35:9c:fc:87:1d:
1a:aa:7d:2a:3e:62:34:20:ba:88:8b:73:32:88:df:
b7:ba:33:c2:33:5e:dc:ad:ef:26:12:25:60:79:c3:
6d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AC:0A:AD:D0:D0:3A:AA:13:9B:AA:1A:EA:9F:12:9C:D9:E3:48:D2
X509v3 Authority Key Identifier:
keyid:E6:4C:7B:A3:06:1B:5F:4E:05:BC:EE:18:6C:2E:72:82:6C:AC:BD:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/E64C7BA3061B5F4E05BCEE186C2E72826CACBD74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E64C7BA3061B5F4E05BCEE186C2E72826CACBD74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/323830343a3564633a3330303a3a2f34312d3431203d3e203533303139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5dc:300::/41
Signature Algorithm: sha256WithRSAEncryption
c2:1e:1f:4e:80:4f:46:74:26:8b:4c:a6:73:74:d5:75:99:b5:
65:e1:8c:4c:e8:14:b0:55:03:0b:16:84:55:e8:7e:32:d0:a3:
9b:b3:f8:52:f0:22:24:d3:be:34:fe:4c:52:1f:70:7d:29:ea:
b4:b5:09:5f:ad:80:45:0f:a4:1e:17:fa:c4:b3:39:7f:d9:0f:
79:3c:31:3b:a4:29:35:b2:2f:8b:17:11:c7:8c:7a:d3:45:51:
a3:78:e0:80:62:df:5a:70:0c:b4:e9:16:35:c2:39:a8:78:e8:
e5:bc:f6:30:54:5f:e2:49:87:9c:d2:3e:ec:ea:35:6e:1b:85:
43:ef:8e:3e:40:26:1d:ab:40:44:b3:65:15:7b:6e:68:33:9e:
de:85:9b:72:5b:78:51:40:d0:fd:ae:26:56:7d:3c:49:b2:ba:
7a:a8:65:f3:6c:9e:d8:1f:2e:31:1a:19:28:4d:39:86:fd:a4:
dd:f5:62:5c:1f:a8:14:b4:6e:28:1d:75:14:f4:ee:66:8c:97:
bb:91:65:21:8e:18:ac:f5:95:ca:9c:b9:f7:64:9e:fa:35:08:
6f:f7:10:d9:6f:a9:c8:70:ed:56:13:70:05:a2:57:32:03:eb:
cc:4e:95:88:22:7f:60:ab:a5:30:7e:d6:79:c1:77:3f:54:83:
31:c4:65:90
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUXDUod3+Y5uHDMIUqf9ocenJRewAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTY0QzdCQTMwNjFCNUY0RTA1QkNFRTE4NkMyRTcyODI2
Q0FDQkQ3NDAeFw0yNTAxMTUxMDI1MzlaFw0yNjAxMTQxMDMwMzlaMDMxMTAvBgNV
BAMTKEY4QUMwQUFERDBEMDNBQUExMzlCQUExQUVBOUYxMjlDRDlFMzQ4RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMblpBxJP6lb+tXElTfQs0GuLo
Ti2vKK8OOF6hPbPk88VnzFqWyXBK0qdzF+j2gKDjEDZWH8jqbPw3XJ5+pqZlEYje
sgFriGE+iHiGNnG9Z9Tj6d16BXqx0o8bvoLxYabWBBfzreewD3+heBScMPvz8qBy
JVLgU09VdkI3Wi5KrNBH9JZ3u3yMCyTHOvhO1eEAleIzyppHxYer8gXcA5fhr2N3
wBU/v7j0Ptp6XyXuzjDpSWwmoeJ8RKItvWD0WG33q0AT/SwYRm2cnewWJ49MT1nD
xjoFcBtfw3E1nPyHHRqqfSo+YjQguoiLczKI37e6M8IzXtyt7yYSJWB5w235AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU+KwKrdDQOqoTm6oa6p8SnNnjSNIwHwYDVR0j
BBgwFoAU5kx7owYbX04FvO4YbC5ygmysvXQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby8xdFQxTTk5NmpnSEZyUWpCd3FwUkJhc3NkNkVoVUZyQ2Vwa1hpY1M3cFFX
LzAvRTY0QzdCQTMwNjFCNUY0RTA1QkNFRTE4NkMyRTcyODI2Q0FDQkQ3NC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FNjRDN0JBMzA2MUI1RjRFMDVC
Q0VFMTg2QzJFNzI4MjZDQUNCRDc0LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8x
dFQxTTk5NmpnSEZyUWpCd3FwUkJhc3NkNkVoVUZyQ2Vwa1hpY1M3cFFXLzAvMzIz
ODMwMzQzYTM1NjQ2MzNhMzMzMDMwM2EzYTJmMzQzMTJkMzQzMTIwM2QzZTIwMzUz
MzMwMzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB
BwEB/wQTMBEwDwQCAAIwCQMHBygEBdwDADANBgkqhkiG9w0BAQsFAAOCAQEAwh4f
ToBPRnQmi0ymc3TVdZm1ZeGMTOgUsFUDCxaEVeh+MtCjm7P4UvAiJNO+NP5MUh9w
fSnqtLUJX62ARQ+kHhf6xLM5f9kPeTwxO6QpNbIvixcRx4x600VRo3jggGLfWnAM
tOkWNcI5qHjo5bz2MFRf4kmHnNI+7Oo1bhuFQ++OPkAmHatARLNlFXtuaDOe3oWb
clt4UUDQ/a4mVn08SbK6eqhl82ye2B8uMRoZKE05hv2k3fViXB+oFLRuKB11FPTu
ZoyXu5FlIY4YrPWVypy592Se+jUIb/cQ2W+pyHDtVhNwBaJXMgPrzE6ViCJ/YKul
MH7WecF3P1SDMcRlkA==
-----END CERTIFICATE-----
Generated at Wed Apr 9 08:31:04 2025 by rpki-client