Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a3a2f33342d3334203d3e203631353932.roa
File: 323830343a346333343a3a2f33342d3334203d3e203631353932.roa (raw, json)
Hash identifier: MeUZU49Ec+GjDv/o2ekKdKz0xjj7YhDQOkeHR0v4SMA=
Subject key identifier: 76:FE:21:E3:ED:B4:E9:9A:E0:EE:99:2B:56:6D:4E:97:16:49:24:E2
Certificate issuer: /CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
Certificate serial: 7C161049447F0DA729FA11A2DE22204A76759956
Authority key identifier: 45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a3a2f33342d3334203d3e203631353932.roa
Signing time: Wed 12 Feb 2025 14:31:00 +0000
ROA not before: Wed 12 Feb 2025 14:26:00 +0000
ROA not after: Wed 11 Feb 2026 14:31:00 +0000
asID: 61592
IP address blocks: 2804:4c34::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:16:10:49:44:7f:0d:a7:29:fa:11:a2:de:22:20:4a:76:75:99:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
Validity
Not Before: Feb 12 14:26:00 2025 GMT
Not After : Feb 11 14:31:00 2026 GMT
Subject: CN=76FE21E3EDB4E99AE0EE992B566D4E97164924E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:20:a2:68:ba:2d:d1:03:5c:e2:9a:a2:61:91:
d9:98:d5:aa:9f:c5:e6:6b:5d:79:06:1d:85:b4:33:
2b:93:8f:97:07:cd:c1:47:fc:20:ec:d4:69:c0:48:
e1:53:ed:62:5e:75:95:91:0d:42:87:51:e6:dc:24:
3d:39:f0:6f:e2:12:73:86:b4:b2:9a:e5:7d:07:25:
03:d5:10:ef:10:9e:bc:e5:4b:96:36:46:7a:ec:76:
28:7f:c4:b2:1b:70:68:ea:38:ff:3a:6f:02:95:63:
ab:2e:5c:d3:7c:50:2d:26:a2:51:1e:ad:45:40:14:
26:67:f9:bf:ba:84:5d:20:c4:6a:b4:26:5f:3b:b4:
f5:5f:7b:00:55:41:02:6b:43:50:bd:46:f7:db:9a:
f9:a3:02:de:a7:6a:20:31:56:fe:a6:5f:c1:92:32:
7a:a2:05:55:e1:f7:e7:90:6f:a2:d5:5d:fa:7c:c1:
b5:3e:fa:a4:1d:77:24:76:a3:a6:32:a8:9e:a0:b6:
f3:84:61:b8:9e:bf:2a:34:00:30:d4:76:f3:47:e9:
8e:b2:1a:b4:99:e7:bd:4f:e0:65:a1:ab:d6:d6:d2:
20:4b:34:5d:79:e3:0a:0a:99:02:5d:1c:60:02:86:
33:2e:16:7c:2b:8d:6e:b7:87:58:ae:a8:b8:53:b5:
78:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FE:21:E3:ED:B4:E9:9A:E0:EE:99:2B:56:6D:4E:97:16:49:24:E2
X509v3 Authority Key Identifier:
keyid:45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a3a2f33342d3334203d3e203631353932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4c34::/34
Signature Algorithm: sha256WithRSAEncryption
93:13:b4:9e:fa:b2:52:d2:e2:52:96:56:22:ce:ab:83:74:26:
96:f1:1d:13:6c:52:55:2a:8c:d6:09:0f:a1:b8:54:0e:f6:ee:
42:65:f1:67:cc:c2:11:4a:20:44:36:5f:ba:81:1c:80:b5:62:
2a:cd:a1:b0:03:eb:c3:14:90:cf:89:69:43:cc:8d:68:3d:86:
14:3b:11:49:87:82:cc:62:fa:ad:43:0e:42:75:61:61:46:35:
49:8e:17:65:cb:e1:8d:88:72:dd:d9:50:dd:63:c2:cb:27:45:
7b:8e:8e:8d:0d:20:39:13:19:82:f0:b4:be:eb:73:4d:aa:bb:
bb:03:4d:ec:d6:da:26:e5:d8:c7:e0:79:7d:2e:a5:c6:4e:82:
59:dc:74:7e:fc:2c:69:ac:e0:a9:dd:5c:4c:a7:06:4d:36:14:
36:09:3c:b1:c0:94:6f:46:25:13:c3:d7:df:ff:b4:f2:85:32:
e8:20:41:d3:4f:df:8b:a3:10:6b:0a:1c:d0:d0:2c:03:ae:33:
2e:f3:db:67:ca:6c:f5:1d:7c:7e:61:41:32:ad:11:2d:2f:92:
be:4b:36:96:ae:7f:ae:78:ac:c2:66:80:04:1e:63:d1:7f:c8:
20:c3:d8:9f:c9:46:ad:60:d4:6d:3f:14:b5:42:ca:20:2f:8c:
7f:b1:3d:78
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfBYQSUR/Dacp+hGi3iIgSnZ1mVYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDVEOEVBQkJCODM0NEU1N0M2OUUzNDE2QkY1MjNENzhB
NjVDMDEwMzAeFw0yNTAyMTIxNDI2MDBaFw0yNjAyMTExNDMxMDBaMDMxMTAvBgNV
BAMTKDc2RkUyMUUzRURCNEU5OUFFMEVFOTkyQjU2NkQ0RTk3MTY0OTI0RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7IKJoui3RA1zimqJhkdmY1aqf
xeZrXXkGHYW0MyuTj5cHzcFH/CDs1GnASOFT7WJedZWRDUKHUebcJD058G/iEnOG
tLKa5X0HJQPVEO8QnrzlS5Y2Rnrsdih/xLIbcGjqOP86bwKVY6suXNN8UC0molEe
rUVAFCZn+b+6hF0gxGq0Jl87tPVfewBVQQJrQ1C9RvfbmvmjAt6naiAxVv6mX8GS
MnqiBVXh9+eQb6LVXfp8wbU++qQddyR2o6YyqJ6gtvOEYbievyo0ADDUdvNH6Y6y
GrSZ571P4GWhq9bW0iBLNF154woKmQJdHGAChjMuFnwrjW63h1iuqLhTtXiTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUdv4h4+206Zrg7pkrVm1OlxZJJOIwHwYDVR0j
BBgwFoAURdjqu7g0TlfGnjQWv1I9eKZcAQMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkVMOW1ydlBYZ2NwTGJDUTFNbnFhSlVnUkx2YXhhWUp4QThzMzdHUG84
bXAvMC80NUQ4RUFCQkI4MzQ0RTU3QzY5RTM0MTZCRjUyM0Q3OEE2NUMwMTAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ1RDhFQUJCQjgzNDRFNTdD
NjlFMzQxNkJGNTIzRDc4QTY1QzAxMDMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJFTDltcnZQWGdjcExiQ1ExTW5xYUpVZ1JMdmF4YVlKeEE4czM3R1BvOG1wLzAv
MzIzODMwMzQzYTM0NjMzMzM0M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzYzMTM1
MzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGBigETDQAMA0GCSqGSIb3DQEBCwUAA4IBAQCTE7Se+rJS
0uJSllYizquDdCaW8R0TbFJVKozWCQ+huFQO9u5CZfFnzMIRSiBENl+6gRyAtWIq
zaGwA+vDFJDPiWlDzI1oPYYUOxFJh4LMYvqtQw5CdWFhRjVJjhdly+GNiHLd2VDd
Y8LLJ0V7jo6NDSA5ExmC8LS+63NNqru7A03s1tom5djH4Hl9LqXGToJZ3HR+/Cxp
rOCp3VxMpwZNNhQ2CTyxwJRvRiUTw9ff/7TyhTLoIEHTT9+LoxBrChzQ0CwDrjMu
89tnymz1HXx+YUEyrREtL5K+SzaWrn+ueKzCZoAEHmPRf8ggw9ifyUatYNRtPxS1
QsogL4x/sT14
-----END CERTIFICATE-----
Generated at Wed Apr 9 19:25:38 2025 by rpki-client