Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/323830343a3364343a3a2f33322d313238203d3e20323632343031.roa
File: 323830343a3364343a3a2f33322d313238203d3e20323632343031.roa (raw, json)
Hash identifier: Cgv+X4o/PEEYTHR5pkgnpi3jalx4e6gOYx3FtQJMsBs=
Subject key identifier: 3E:A6:8E:B8:0D:03:63:28:0B:D1:2E:26:0C:85:AE:C9:50:8D:CD:D5
Certificate issuer: /CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Certificate serial: 4145EA32F1B0EC2439F7A609E9E7858710A26EF8
Authority key identifier: 04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/323830343a3364343a3a2f33322d313238203d3e20323632343031.roa
Signing time: Thu 06 Mar 2025 11:29:42 +0000
ROA not before: Thu 06 Mar 2025 11:24:42 +0000
ROA not after: Thu 05 Mar 2026 11:29:42 +0000
asID: 262401
IP address blocks: 2804:3d4::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:45:ea:32:f1:b0:ec:24:39:f7:a6:09:e9:e7:85:87:10:a2:6e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Validity
Not Before: Mar 6 11:24:42 2025 GMT
Not After : Mar 5 11:29:42 2026 GMT
Subject: CN=3EA68EB80D0363280BD12E260C85AEC9508DCDD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4a:c8:66:e5:93:5b:5c:85:c0:85:ab:0a:1c:
a8:db:c2:9b:7e:02:39:88:fe:d7:62:db:c5:10:89:
a4:5e:b3:08:94:59:5a:cc:1a:21:36:59:92:ab:5d:
63:4d:11:d6:bf:2b:32:21:74:6b:ec:e5:ce:bf:aa:
ab:88:2f:c9:21:aa:66:a4:c7:39:10:4f:ae:c9:71:
c3:2f:01:80:4d:fa:23:a5:5c:39:34:77:af:57:8a:
37:83:fd:4a:ac:04:fb:ee:6c:22:8c:4f:b8:1f:04:
62:eb:6a:02:3c:31:0d:d3:15:3f:6b:9e:55:c6:bd:
6c:66:99:89:cb:2a:bc:41:b0:61:f9:6b:18:73:93:
53:e4:99:08:fd:af:bd:db:cb:68:7a:da:1f:d5:cb:
15:7b:ab:84:49:e9:fa:a3:4b:64:e5:f4:09:f9:3e:
95:b1:80:4f:f9:f3:d2:8f:6e:8f:be:a3:81:e6:fe:
b9:3b:6c:69:0d:75:d7:93:a6:b1:5b:ce:25:9e:6d:
db:57:c7:f3:5a:e2:85:63:03:e0:be:32:68:8e:a3:
6b:12:f8:7b:89:a2:4f:1b:08:d6:f8:9f:dc:ae:e6:
cc:2e:af:cc:87:8e:16:e2:50:66:b4:1a:e1:07:62:
64:5d:45:f8:a3:5c:04:f7:9f:e8:92:e7:74:c0:ac:
a5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A6:8E:B8:0D:03:63:28:0B:D1:2E:26:0C:85:AE:C9:50:8D:CD:D5
X509v3 Authority Key Identifier:
keyid:04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/323830343a3364343a3a2f33322d313238203d3e20323632343031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3d4::/32
Signature Algorithm: sha256WithRSAEncryption
8f:e4:44:c7:74:97:e1:b7:be:7a:46:5b:68:6b:a0:fb:4a:0f:
9d:54:4e:47:41:65:98:33:5d:86:02:a0:77:69:c7:46:e6:7b:
95:96:b6:99:d5:de:df:70:ae:6f:f3:39:66:65:99:3c:91:4b:
f6:62:bd:e4:86:cd:f5:ee:6c:40:38:8e:bd:98:a6:db:37:d2:
89:55:2c:eb:85:70:21:9c:74:23:74:34:03:2f:fa:7a:fa:5c:
35:fa:88:65:72:70:2d:3c:5d:43:77:4a:94:9f:df:f3:16:91:
c1:b8:06:26:c0:8c:c0:c0:07:ba:5d:2e:6c:e5:b2:22:98:1d:
2f:0a:c1:fe:97:15:a9:1a:ca:59:ef:a5:5e:99:a3:5f:08:b1:
f9:7a:ce:16:47:16:52:15:d2:ff:d2:46:83:37:19:12:75:ce:
df:a5:b3:ad:1d:d3:d4:b7:16:7e:3e:fd:e7:8b:73:4f:7f:d7:
50:c3:3f:6c:ca:64:58:ae:a1:c2:9a:9f:5c:be:8f:1a:2b:ea:
4f:2e:eb:fe:be:dc:1a:8d:9b:a0:48:51:ee:dd:8b:e2:20:69:
a0:d9:2d:83:9e:b5:b1:39:28:0b:af:bc:dc:d1:2a:91:18:80:
78:4b:eb:13:01:3e:76:ea:39:c2:51:ab:4d:79:08:15:8c:d3:
ea:1d:5b:9c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUQUXqMvGw7CQ596YJ6eeFhxCibvgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDRDNEI0NjUwMzIwNzQ4MUE1RTI5Q0U4RTQ1MEU4M0M5
MTdCMkYyMjAeFw0yNTAzMDYxMTI0NDJaFw0yNjAzMDUxMTI5NDJaMDMxMTAvBgNV
BAMTKDNFQTY4RUI4MEQwMzYzMjgwQkQxMkUyNjBDODVBRUM5NTA4RENERDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbSshm5ZNbXIXAhasKHKjbwpt+
AjmI/tdi28UQiaReswiUWVrMGiE2WZKrXWNNEda/KzIhdGvs5c6/qquIL8khqmak
xzkQT67JccMvAYBN+iOlXDk0d69XijeD/UqsBPvubCKMT7gfBGLragI8MQ3TFT9r
nlXGvWxmmYnLKrxBsGH5axhzk1PkmQj9r73by2h62h/VyxV7q4RJ6fqjS2Tl9An5
PpWxgE/589KPbo++o4Hm/rk7bGkNddeTprFbziWebdtXx/Na4oVjA+C+MmiOo2sS
+HuJok8bCNb4n9yu5swur8yHjhbiUGa0GuEHYmRdRfijXAT3n+iS53TArKXtAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUPqaOuA0DYygL0S4mDIWuyVCNzdUwHwYDVR0j
BBgwFoAUBMS0ZQMgdIGl4pzo5FDoPJF7LyIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0NCa2Y0ckhMWDFyV3FYY2d0NXNIajU3TnRON05Zem9jNkNqWTMyWWFq
WHYvMS8wNEM0QjQ2NTAzMjA3NDgxQTVFMjlDRThFNDUwRTgzQzkxN0IyRjIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0QzRCNDY1MDMyMDc0ODFB
NUUyOUNFOEU0NTBFODNDOTE3QjJGMjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNDQmtmNHJITFgxcldxWGNndDVzSGo1N050TjdOWXpvYzZDalkzMllhalh2LzEv
MzIzODMwMzQzYTMzNjQzNDNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzIzNjMy
MzQzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQD1DANBgkqhkiG9w0BAQsFAAOCAQEAj+REx3SX
4be+ekZbaGug+0oPnVROR0FlmDNdhgKgd2nHRuZ7lZa2mdXe33Cub/M5ZmWZPJFL
9mK95IbN9e5sQDiOvZim2zfSiVUs64VwIZx0I3Q0Ay/6evpcNfqIZXJwLTxdQ3dK
lJ/f8xaRwbgGJsCMwMAHul0ubOWyIpgdLwrB/pcVqRrKWe+lXpmjXwix+XrOFkcW
UhXS/9JGgzcZEnXO36WzrR3T1LcWfj7954tzT3/XUMM/bMpkWK6hwpqfXL6PGivq
Ty7r/r7cGo2boEhR7t2L4iBpoNktg561sTkoC6+83NEqkRiAeEvrEwE+duo5wlGr
TXkIFYzT6h1bnA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:34:32 2025 by rpki-client