Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/323830343a316362633a3a2f33342d3334203d3e203631363732.roa
File: 323830343a316362633a3a2f33342d3334203d3e203631363732.roa (raw, json)
Hash identifier: s1g79dL1845KkFvMy37+/sOS0W7HuGOP2o5Bcu5jiPE=
Subject key identifier: 11:CE:A4:6D:F7:21:AC:41:17:63:6F:75:91:CC:D5:C9:C3:AE:6B:2E
Certificate issuer: /CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
Certificate serial: 13B9082FE9511BE7D0C6B4DCA18C18BD0A6958C5
Authority key identifier: 19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/323830343a316362633a3a2f33342d3334203d3e203631363732.roa
Signing time: Thu 06 Mar 2025 18:53:31 +0000
ROA not before: Thu 06 Mar 2025 18:48:31 +0000
ROA not after: Thu 05 Mar 2026 18:53:31 +0000
asID: 61672
IP address blocks: 2804:1cbc::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:b9:08:2f:e9:51:1b:e7:d0:c6:b4:dc:a1:8c:18:bd:0a:69:58:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
Validity
Not Before: Mar 6 18:48:31 2025 GMT
Not After : Mar 5 18:53:31 2026 GMT
Subject: CN=11CEA46DF721AC4117636F7591CCD5C9C3AE6B2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:df:ad:1c:b5:40:85:34:f1:dc:e0:e4:07:74:
18:c1:fc:68:29:21:28:8b:a0:58:0e:3e:96:dc:dc:
fa:14:ae:23:b5:9b:30:22:6a:e8:6e:91:12:77:f4:
48:ff:5e:4c:50:ca:fd:c7:c6:26:aa:6c:3b:72:9b:
f8:66:48:83:e3:1e:88:7a:86:c8:52:4a:22:42:44:
fa:7a:b0:83:fb:a4:b0:c9:86:82:00:66:cd:ca:58:
22:15:90:68:1a:14:57:5a:ec:78:a9:63:2b:22:25:
c0:97:22:81:4c:e3:63:35:d8:7b:a6:83:40:d8:ab:
b7:5b:40:4c:4a:c7:c0:3f:55:ff:e1:31:58:d9:a2:
10:33:a9:32:27:34:84:e2:dd:f2:de:80:3c:8c:93:
ac:48:0a:e3:eb:9b:8b:85:b1:fc:9c:40:56:be:45:
09:db:62:5e:3a:c8:b2:e2:87:80:ce:94:53:3f:d4:
b2:4c:86:aa:1a:9e:19:44:5f:68:b3:7e:3b:7d:27:
51:d8:11:39:f4:c4:22:32:f3:e8:45:c7:27:4c:5f:
ab:be:3e:e4:bb:c4:a0:e5:fc:62:66:93:d2:d0:87:
bf:ec:c4:b2:b5:3d:32:4f:14:5c:36:06:ff:4c:a7:
94:84:9e:5f:e2:7e:78:ec:40:8d:4c:8e:bd:3a:75:
a9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CE:A4:6D:F7:21:AC:41:17:63:6F:75:91:CC:D5:C9:C3:AE:6B:2E
X509v3 Authority Key Identifier:
keyid:19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/323830343a316362633a3a2f33342d3334203d3e203631363732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1cbc::/34
Signature Algorithm: sha256WithRSAEncryption
7c:61:a0:3b:91:0f:06:c9:ca:cf:20:ba:20:3b:81:cc:15:2d:
1c:c8:73:91:68:84:89:1b:30:81:e7:d7:5c:fd:e8:09:5a:4e:
a2:a7:5b:4c:e6:c5:50:3d:f9:82:5a:8b:92:5c:1d:7e:f7:3d:
85:df:01:07:1d:38:8b:da:d4:46:81:49:af:df:9c:36:5b:48:
86:4e:34:3e:d8:48:b4:63:e1:fa:f0:98:81:5b:7c:11:d6:a9:
79:d3:46:53:79:0f:c0:c8:90:2a:1d:4f:a7:f9:66:a0:ca:4d:
2b:c9:3b:6d:a6:19:ff:36:0d:8f:51:5f:b1:8f:81:61:d8:94:
10:12:e2:71:6a:46:a0:bf:3a:70:b5:0c:33:4c:4f:8f:0e:32:
72:69:0d:e5:8e:c7:82:77:65:ba:a5:bc:c2:c6:03:b7:0a:88:
ea:d0:5e:30:8b:b4:60:f0:d2:09:0e:c6:79:6c:61:46:0e:e0:
77:9a:e3:41:95:f5:1b:65:3b:bc:c8:5c:e3:22:c5:3d:13:b0:
c6:f5:e6:d9:70:98:26:a0:ec:b9:c9:c4:cf:47:67:27:47:ed:
1d:26:a6:06:4c:9f:10:99:e3:c0:4d:79:d5:52:26:6c:f0:19:
cd:0d:e2:31:a9:fb:a7:3f:a9:5b:a5:9f:5d:fc:55:5b:d3:f7:
23:f9:76:77
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUE7kIL+lRG+fQxrTcoYwYvQppWMUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlGQTcxOEE3Njg5RjcxOEFCQjRDNDZEMEQ5QjBBMEMw
MzY2NjI4MTAeFw0yNTAzMDYxODQ4MzFaFw0yNjAzMDUxODUzMzFaMDMxMTAvBgNV
BAMTKDExQ0VBNDZERjcyMUFDNDExNzYzNkY3NTkxQ0NENUM5QzNBRTZCMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3360ctUCFNPHc4OQHdBjB/Ggp
ISiLoFgOPpbc3PoUriO1mzAiauhukRJ39Ej/XkxQyv3HxiaqbDtym/hmSIPjHoh6
hshSSiJCRPp6sIP7pLDJhoIAZs3KWCIVkGgaFFda7HipYysiJcCXIoFM42M12Hum
g0DYq7dbQExKx8A/Vf/hMVjZohAzqTInNITi3fLegDyMk6xICuPrm4uFsfycQFa+
RQnbYl46yLLih4DOlFM/1LJMhqoanhlEX2izfjt9J1HYETn0xCIy8+hFxydMX6u+
PuS7xKDl/GJmk9LQh7/sxLK1PTJPFFw2Bv9Mp5SEnl/ifnjsQI1Mjr06damzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUEc6kbfchrEEXY291kczVycOuay4wHwYDVR0j
BBgwFoAUGfpxinaJ9xirtMRtDZsKDANmYoEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1VIYUxMV1Q1aVNkOE41aEFxUW1IVW5LWEpMUDJ1RlNSZ2tNN3NZcHY3
RlgvMS8xOUZBNzE4QTc2ODlGNzE4QUJCNEM0NkQwRDlCMEEwQzAzNjY2MjgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5RkE3MThBNzY4OUY3MThB
QkI0QzQ2RDBEOUIwQTBDMDM2NjYyODEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNVSGFMTFdUNWlTZDhONWhBcVFtSFVuS1hKTFAydUZTUmdrTTdzWXB2N0ZYLzEv
MzIzODMwMzQzYTMxNjM2MjYzM2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzYzMTM2
MzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGBigEHLwAMA0GCSqGSIb3DQEBCwUAA4IBAQB8YaA7kQ8G
ycrPILogO4HMFS0cyHORaISJGzCB59dc/egJWk6ip1tM5sVQPfmCWouSXB1+9z2F
3wEHHTiL2tRGgUmv35w2W0iGTjQ+2Ei0Y+H68JiBW3wR1ql500ZTeQ/AyJAqHU+n
+Wagyk0ryTttphn/Ng2PUV+xj4Fh2JQQEuJxakagvzpwtQwzTE+PDjJyaQ3ljseC
d2W6pbzCxgO3Cojq0F4wi7Rg8NIJDsZ5bGFGDuB3muNBlfUbZTu8yFzjIsU9E7DG
9ebZcJgmoOy5ycTPR2cnR+0dJqYGTJ8QmePATXnVUiZs8BnNDeIxqfunP6lbpZ9d
/FVb0/cj+XZ3
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:18:54 2025 by rpki-client