Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/323830343a323164383a3a2f33322d313238203d3e20323634353737.roa
File: 323830343a323164383a3a2f33322d313238203d3e20323634353737.roa (raw, json)
Hash identifier: whTI+HbCNHFAC9MFHsJU7D/49+3RigaJRoL8qttwWQo=
Subject key identifier: EF:3F:8C:A3:43:D8:20:E3:E6:65:E9:77:B1:F4:AA:DD:A7:80:36:2D
Certificate issuer: /CN=6DED749AD5161FBE936E3278FDD4EFC06A5D5EF8
Certificate serial: 48AB4004ECB49B98055B773966024690698DC7C4
Authority key identifier: 6D:ED:74:9A:D5:16:1F:BE:93:6E:32:78:FD:D4:EF:C0:6A:5D:5E:F8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DED749AD5161FBE936E3278FDD4EFC06A5D5EF8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/323830343a323164383a3a2f33322d313238203d3e20323634353737.roa
Signing time: Thu 09 Jan 2025 20:58:33 +0000
ROA not before: Thu 09 Jan 2025 20:53:33 +0000
ROA not after: Thu 08 Jan 2026 20:58:33 +0000
asID: 264577
IP address blocks: 2804:21d8::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:ab:40:04:ec:b4:9b:98:05:5b:77:39:66:02:46:90:69:8d:c7:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6DED749AD5161FBE936E3278FDD4EFC06A5D5EF8
Validity
Not Before: Jan 9 20:53:33 2025 GMT
Not After : Jan 8 20:58:33 2026 GMT
Subject: CN=EF3F8CA343D820E3E665E977B1F4AADDA780362D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6a:1a:8a:72:3a:3b:1a:5f:6b:18:51:60:41:
e0:50:a6:7b:89:a5:5f:8f:80:6b:c8:4a:25:9b:52:
e4:f4:d0:0a:8a:eb:d2:bd:40:12:48:cc:3b:f8:d0:
34:67:e4:e6:ec:38:57:0d:a7:06:5b:1f:96:ee:0d:
65:0d:0a:94:9c:a0:ba:f5:9a:7d:10:1b:d3:09:d1:
8d:ad:fc:67:29:9c:4c:6c:27:f1:cb:72:0a:85:23:
35:50:5f:2f:3b:04:dd:c1:71:7a:07:72:3f:40:b9:
85:43:b4:bc:a8:c7:a2:46:e4:fe:05:51:4b:e6:7a:
a0:e6:77:6d:e5:4d:53:ef:59:ad:47:61:c7:2c:7a:
03:0f:99:d4:b4:71:aa:ca:1c:9a:d4:2e:09:13:07:
ab:bd:1c:4c:6d:8a:2f:95:93:05:e7:a6:12:44:f7:
c3:5c:39:6c:24:0a:53:96:2a:bf:49:97:2c:7f:5a:
51:69:59:00:42:3a:d4:86:a9:a2:bf:7a:5b:ed:3f:
fa:43:b2:4c:7f:bc:eb:6d:7a:4a:46:75:e3:10:e9:
0f:83:9e:f0:a0:99:4e:b2:41:31:f0:aa:2f:d8:5b:
e2:c4:92:7f:5f:21:a9:c9:99:bc:7e:bd:42:26:9c:
49:37:41:ff:21:5b:80:a6:95:27:95:4a:a7:c6:86:
20:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3F:8C:A3:43:D8:20:E3:E6:65:E9:77:B1:F4:AA:DD:A7:80:36:2D
X509v3 Authority Key Identifier:
keyid:6D:ED:74:9A:D5:16:1F:BE:93:6E:32:78:FD:D4:EF:C0:6A:5D:5E:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/6DED749AD5161FBE936E3278FDD4EFC06A5D5EF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DED749AD5161FBE936E3278FDD4EFC06A5D5EF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/323830343a323164383a3a2f33322d313238203d3e20323634353737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:21d8::/32
Signature Algorithm: sha256WithRSAEncryption
89:75:08:2f:3d:a3:47:82:c2:9b:f3:aa:d9:4e:8c:d2:1c:75:
f3:cf:85:4e:0b:52:5d:de:53:b9:df:f8:02:e6:de:c6:71:1c:
6d:16:24:5d:84:fc:7d:ba:33:02:8f:cf:d4:12:f2:02:16:57:
94:68:f4:8d:de:85:72:24:fc:3a:cf:87:60:8f:e2:1f:d5:50:
3a:b7:69:87:b4:53:97:38:a3:a1:88:40:11:e4:90:18:19:3b:
36:3e:50:bb:d3:20:83:44:ed:a5:26:75:54:a3:02:a5:c7:4a:
a4:fc:6f:25:63:31:8b:3f:35:61:0b:e6:e6:50:29:37:49:69:
fe:da:23:53:bd:b5:18:99:b3:dd:71:61:ec:f7:e3:dd:18:30:
9a:10:b3:4e:3f:f0:37:41:02:4f:a8:91:25:72:0c:09:3d:bb:
c1:26:82:f9:62:d0:70:9a:67:59:9e:8b:d1:2d:a4:e7:52:db:
8f:1c:39:39:5c:60:4d:45:11:6f:48:e6:f5:2e:a4:62:d7:f0:
58:3e:f8:e2:51:ae:af:bd:7f:06:17:39:25:29:c0:6d:ce:34:
97:61:aa:de:7e:e8:eb:d0:0c:75:66:ad:3b:e2:d2:fc:63:7e:
e7:6d:44:9e:3d:0c:8f:03:95:45:1a:37:45:1d:6c:7b:dd:7b:
8a:4a:e2:fe
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUSKtABOy0m5gFW3c5ZgJGkGmNx8QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkRFRDc0OUFENTE2MUZCRTkzNkUzMjc4RkRENEVGQzA2
QTVENUVGODAeFw0yNTAxMDkyMDUzMzNaFw0yNjAxMDgyMDU4MzNaMDMxMTAvBgNV
BAMTKEVGM0Y4Q0EzNDNEODIwRTNFNjY1RTk3N0IxRjRBQUREQTc4MDM2MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdahqKcjo7Gl9rGFFgQeBQpnuJ
pV+PgGvISiWbUuT00AqK69K9QBJIzDv40DRn5ObsOFcNpwZbH5buDWUNCpScoLr1
mn0QG9MJ0Y2t/GcpnExsJ/HLcgqFIzVQXy87BN3BcXoHcj9AuYVDtLyox6JG5P4F
UUvmeqDmd23lTVPvWa1HYccsegMPmdS0carKHJrULgkTB6u9HExtii+VkwXnphJE
98NcOWwkClOWKr9Jlyx/WlFpWQBCOtSGqaK/elvtP/pDskx/vOttekpGdeMQ6Q+D
nvCgmU6yQTHwqi/YW+LEkn9fIanJmbx+vUImnEk3Qf8hW4CmlSeVSqfGhiBFAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU7z+Mo0PYIOPmZel3sfSq3aeANi0wHwYDVR0j
BBgwFoAUbe10mtUWH76TbjJ4/dTvwGpdXvgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1cyY1NrUVF5cXNBZnVSNjY5NFZaRjJFQmQ3V1Boa0RNY3ZlRDN0ZHl6
ZmIvMC82REVENzQ5QUQ1MTYxRkJFOTM2RTMyNzhGREQ0RUZDMDZBNUQ1RUY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZERUQ3NDlBRDUxNjFGQkU5
MzZFMzI3OEZERDRFRkMwNkE1RDVFRjguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNXMmNTa1FReXFzQWZ1UjY2OTRWWkYyRUJkN1dQaGtETWN2ZUQzdGR5emZiLzAv
MzIzODMwMzQzYTMyMzE2NDM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzQzNTM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBCHYMA0GCSqGSIb3DQEBCwUAA4IBAQCJdQgv
PaNHgsKb86rZTozSHHXzz4VOC1Jd3lO53/gC5t7GcRxtFiRdhPx9ujMCj8/UEvIC
FleUaPSN3oVyJPw6z4dgj+If1VA6t2mHtFOXOKOhiEAR5JAYGTs2PlC70yCDRO2l
JnVUowKlx0qk/G8lYzGLPzVhC+bmUCk3SWn+2iNTvbUYmbPdcWHs9+PdGDCaELNO
P/A3QQJPqJElcgwJPbvBJoL5YtBwmmdZnovRLaTnUtuPHDk5XGBNRRFvSOb1LqRi
1/BYPvjiUa6vvX8GFzklKcBtzjSXYarefujr0Ax1Zq074tL8Y37nbUSePQyPA5VF
GjdFHWx73XuKSuL+
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:16:31 2025 by rpki-client