Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/323830343a316232383a3a2f33332d3333203d3e203631373132.roa
File: 323830343a316232383a3a2f33332d3333203d3e203631373132.roa (raw, json)
Hash identifier: ctdJuXu97VtPukpzvRoBfisXHX/bn3O2NqNchtB4aZE=
Subject key identifier: 6A:66:9E:2C:E5:FF:6E:97:6B:6A:10:6B:38:F0:78:4C:FF:15:10:8F
Certificate issuer: /CN=1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4
Certificate serial: 4751A778DB35BC5E23BF5A0C42D52F1018C775E2
Authority key identifier: 1B:4F:7D:2D:BF:96:AE:DC:02:CE:1B:01:93:F9:64:E6:26:C1:8D:C4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/323830343a316232383a3a2f33332d3333203d3e203631373132.roa
Signing time: Sat 01 Mar 2025 12:53:16 +0000
ROA not before: Sat 01 Mar 2025 12:48:16 +0000
ROA not after: Sat 28 Feb 2026 12:53:16 +0000
asID: 61712
IP address blocks: 2804:1b28::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:51:a7:78:db:35:bc:5e:23:bf:5a:0c:42:d5:2f:10:18:c7:75:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4
Validity
Not Before: Mar 1 12:48:16 2025 GMT
Not After : Feb 28 12:53:16 2026 GMT
Subject: CN=6A669E2CE5FF6E976B6A106B38F0784CFF15108F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:60:de:4a:7b:e2:b2:45:b7:36:4c:38:23:85:
3f:2d:6f:6b:6d:e1:96:26:c3:ab:66:14:71:30:f6:
f1:88:89:55:ad:c3:6f:bd:af:46:83:3b:ba:c9:c5:
7c:3e:3a:ef:ad:3f:3e:36:fb:f9:95:7c:49:37:da:
bc:82:f2:c7:66:ef:54:73:a5:95:c0:65:02:5a:53:
47:85:ce:83:db:f0:c7:7f:8c:bb:c8:90:8b:39:0c:
dc:66:6f:e6:39:71:28:eb:cc:32:26:f7:7c:e8:b6:
f9:29:4b:dd:7b:2e:5f:6c:bc:41:08:e4:1d:83:20:
33:ab:9d:f9:43:fb:6e:dd:9d:49:4e:20:c4:27:cc:
32:ca:6f:fd:f9:65:b5:bc:39:01:f6:2a:fe:aa:63:
19:ae:43:e2:3a:ab:f0:d2:ad:07:11:c1:67:1c:72:
f2:a2:0c:fb:3a:01:2a:95:ea:10:e8:e9:1e:53:54:
71:22:dc:fe:73:01:b3:19:97:37:2f:29:1b:14:83:
71:a6:2c:56:d6:eb:72:37:dd:7f:ce:c3:e0:ec:8b:
e5:0a:e2:37:4e:72:5f:cf:74:9d:2c:97:7b:9b:18:
a2:d9:4d:18:1e:89:f5:43:d1:2b:ec:25:4c:8f:17:
37:dd:5b:ba:7d:e0:eb:ee:b6:6e:51:9a:df:b8:69:
84:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:66:9E:2C:E5:FF:6E:97:6B:6A:10:6B:38:F0:78:4C:FF:15:10:8F
X509v3 Authority Key Identifier:
keyid:1B:4F:7D:2D:BF:96:AE:DC:02:CE:1B:01:93:F9:64:E6:26:C1:8D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/323830343a316232383a3a2f33332d3333203d3e203631373132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1b28::/33
Signature Algorithm: sha256WithRSAEncryption
58:db:0c:ac:1e:53:7d:43:ce:6a:58:b7:8d:81:f6:8f:a2:c8:
bf:bd:c4:e8:7c:8c:65:9b:0c:33:07:c1:12:76:d2:b5:cf:8a:
c8:d6:e2:bd:3e:24:94:35:ea:61:ae:eb:38:7d:4b:07:81:51:
86:c4:20:b2:d4:a0:78:d3:85:0f:60:2f:61:b8:9c:d5:98:ab:
3d:35:8f:84:98:c6:ed:01:da:9a:f9:32:17:1e:2a:ad:68:a1:
ff:75:c1:f0:0c:ea:8d:00:e3:13:74:b8:55:d1:41:92:71:e5:
0b:0b:a8:03:44:b7:a9:ba:e6:b6:75:67:81:0a:49:3b:8d:39:
05:f8:fb:05:da:44:84:51:6b:95:a5:bc:cd:ec:f8:35:9f:c0:
c0:56:41:2e:a5:3f:05:27:56:e5:b6:3a:97:f2:b6:20:d8:c0:
7f:12:cd:93:6c:a7:de:8e:76:42:cb:92:f7:84:b4:87:e4:7d:
0a:89:e7:a3:f4:7a:62:6f:51:9f:84:7c:40:59:0f:b3:df:b3:
09:c2:13:a9:dc:0f:73:a5:7a:b1:51:24:fc:02:00:83:15:0d:
16:28:31:94:ba:3e:0f:5d:d3:2f:b1:57:52:1a:4a:fe:ad:de:
bc:38:14:ac:89:c7:ba:d0:8c:be:c8:12:db:60:8c:eb:d7:5f:
9f:be:90:c9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUR1GneNs1vF4jv1oMQtUvEBjHdeIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUI0RjdEMkRCRjk2QUVEQzAyQ0UxQjAxOTNGOTY0RTYy
NkMxOERDNDAeFw0yNTAzMDExMjQ4MTZaFw0yNjAyMjgxMjUzMTZaMDMxMTAvBgNV
BAMTKDZBNjY5RTJDRTVGRjZFOTc2QjZBMTA2QjM4RjA3ODRDRkYxNTEwOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzYN5Ke+KyRbc2TDgjhT8tb2tt
4ZYmw6tmFHEw9vGIiVWtw2+9r0aDO7rJxXw+Ou+tPz42+/mVfEk32ryC8sdm71Rz
pZXAZQJaU0eFzoPb8Md/jLvIkIs5DNxmb+Y5cSjrzDIm93zotvkpS917Ll9svEEI
5B2DIDOrnflD+27dnUlOIMQnzDLKb/35ZbW8OQH2Kv6qYxmuQ+I6q/DSrQcRwWcc
cvKiDPs6ASqV6hDo6R5TVHEi3P5zAbMZlzcvKRsUg3GmLFbW63I33X/Ow+Dsi+UK
4jdOcl/PdJ0sl3ubGKLZTRgeifVD0SvsJUyPFzfdW7p94Ovutm5Rmt+4aYS/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUamaeLOX/bpdrahBrOPB4TP8VEI8wHwYDVR0j
BBgwFoAUG099Lb+WrtwCzhsBk/lk5ibBjcQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjV4djVmOHZzdWhvV1l0c3NxcW9lS1M3ODV2WW9Fa2Y0eWZEam5HN2ZM
eGIvMC8xQjRGN0QyREJGOTZBRURDMDJDRTFCMDE5M0Y5NjRFNjI2QzE4REM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCNEY3RDJEQkY5NkFFREMw
MkNFMUIwMTkzRjk2NEU2MjZDMThEQzQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI1eHY1Zjh2c3Vob1dZdHNzcXFvZUtTNzg1dllvRWtmNHlmRGpuRzdmTHhiLzAv
MzIzODMwMzQzYTMxNjIzMjM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzYzMTM3
MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGBygEGygAMA0GCSqGSIb3DQEBCwUAA4IBAQBY2wysHlN9
Q85qWLeNgfaPosi/vcTofIxlmwwzB8ESdtK1z4rI1uK9PiSUNephrus4fUsHgVGG
xCCy1KB404UPYC9huJzVmKs9NY+EmMbtAdqa+TIXHiqtaKH/dcHwDOqNAOMTdLhV
0UGSceULC6gDRLepuua2dWeBCkk7jTkF+PsF2kSEUWuVpbzN7Pg1n8DAVkEupT8F
J1bltjqX8rYg2MB/Es2TbKfejnZCy5L3hLSH5H0Kieej9Hpib1GfhHxAWQ+z37MJ
whOp3A9zpXqxUST8AgCDFQ0WKDGUuj4PXdMvsVdSGkr+rd68OBSsice60Iy+yBLb
YIzr11+fvpDJ
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:47:58 2025 by rpki-client