Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/323830343a336231383a3a2f33332d3333203d3e20323636313239.roa
File: 323830343a336231383a3a2f33332d3333203d3e20323636313239.roa (raw, json)
Hash identifier: oVpdtxd1EhtB5PBDKnix/jQUotfF4ErvbKF+Igm+a5Q=
Subject key identifier: 04:8D:45:F3:54:B8:E6:93:85:43:CB:EE:D9:AE:FC:64:FC:F6:7A:7A
Certificate issuer: /CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
Certificate serial: 163FB39D90A14FF7D3E8275C22ED3392727129B9
Authority key identifier: 8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/323830343a336231383a3a2f33332d3333203d3e20323636313239.roa
Signing time: Wed 05 Mar 2025 19:00:15 +0000
ROA not before: Wed 05 Mar 2025 18:55:15 +0000
ROA not after: Wed 04 Mar 2026 19:00:15 +0000
asID: 266129
IP address blocks: 2804:3b18::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:3f:b3:9d:90:a1:4f:f7:d3:e8:27:5c:22:ed:33:92:72:71:29:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
Validity
Not Before: Mar 5 18:55:15 2025 GMT
Not After : Mar 4 19:00:15 2026 GMT
Subject: CN=048D45F354B8E6938543CBEED9AEFC64FCF67A7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1a:6e:f4:2d:17:dd:d8:85:64:7a:22:70:20:
93:6f:a1:7e:ab:48:ae:d5:93:c2:0c:c1:df:9a:01:
ae:fd:d5:b9:82:95:88:fe:60:72:d1:41:c4:3e:83:
ad:41:2f:6d:59:6d:34:e7:df:29:c3:67:99:b6:5c:
6c:2b:5a:fb:42:6c:46:1b:6c:21:d0:5d:1e:eb:ef:
9b:cf:fc:17:30:ed:ce:dc:3f:72:a5:49:b7:45:9d:
fc:c0:0d:73:d4:40:83:33:19:3a:d4:1b:8f:7c:79:
bd:c6:bb:e9:85:a4:17:2d:58:ec:8b:d6:0d:59:78:
9b:9d:4d:30:17:f5:aa:74:e1:c0:2b:80:36:6b:b4:
ce:26:ff:49:1d:45:a0:c2:10:45:56:36:e1:65:c0:
12:4e:ff:ff:a9:c1:2c:ae:16:48:80:1e:e8:ec:01:
59:04:da:3c:6b:55:d4:ea:cd:b2:ee:e1:32:fe:d4:
f9:04:27:51:96:c6:2a:07:d2:e3:a2:ac:ff:57:f8:
53:23:d5:d3:ca:e9:0a:96:98:a5:69:57:07:c6:f7:
c9:f8:16:fc:48:de:1b:db:0f:ce:6b:e8:d8:aa:60:
5f:ec:1b:0b:17:af:e3:4f:29:af:95:c0:fb:dd:17:
67:69:c3:bf:cf:af:d8:35:7a:12:3d:99:47:91:4f:
e9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8D:45:F3:54:B8:E6:93:85:43:CB:EE:D9:AE:FC:64:FC:F6:7A:7A
X509v3 Authority Key Identifier:
keyid:8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/323830343a336231383a3a2f33332d3333203d3e20323636313239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3b18::/33
Signature Algorithm: sha256WithRSAEncryption
61:0b:03:d5:76:e2:da:d0:b7:55:e1:44:3a:00:fb:be:58:4e:
a5:4b:77:4e:6e:9f:97:9f:24:46:95:10:e6:ce:37:0f:bf:ca:
8f:51:74:8b:45:79:f6:4e:38:b7:eb:1b:db:84:a6:55:5d:1b:
6f:31:4c:94:d3:bf:fd:76:62:76:8b:cf:e0:3d:7e:fe:85:95:
fe:5c:17:9d:6f:73:c0:f4:cd:2e:29:41:7a:3a:29:2f:69:e3:
63:28:f6:27:25:f9:50:85:a2:38:82:87:f4:15:f9:1c:3c:5b:
08:69:e6:dd:43:a8:66:7d:37:6b:39:da:e1:ee:73:08:3c:f1:
26:c3:5e:45:78:95:ab:69:b5:66:80:f3:54:a8:96:fb:b7:31:
d9:8b:46:25:07:d0:47:4b:43:bc:67:88:dd:5a:0a:a8:78:dc:
5f:7f:02:66:fc:c5:64:b0:aa:2c:b1:75:2c:d2:fa:f7:24:0f:
07:df:cc:b4:f8:14:12:e9:a8:3e:b8:fd:fc:4f:71:df:64:c1:
0e:d2:b6:fd:bb:2a:d3:26:25:68:b0:a1:22:6f:8f:a8:db:66:
7e:e0:e6:99:ed:c4:af:1a:48:55:ef:55:37:b8:b0:16:e2:ad:
77:84:74:69:c6:b7:7d:2f:91:bf:36:ee:65:ee:f5:f4:15:3c:
be:f0:de:8e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFj+znZChT/fT6CdcIu0zknJxKbkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU4NEZGOTEyMUQ5MjU3Mzc2RDc3N0EwOTI1MzNEOENF
REI5RUU5RTAeFw0yNTAzMDUxODU1MTVaFw0yNjAzMDQxOTAwMTVaMDMxMTAvBgNV
BAMTKDA0OEQ0NUYzNTRCOEU2OTM4NTQzQ0JFRUQ5QUVGQzY0RkNGNjdBN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiGm70LRfd2IVkeiJwIJNvoX6r
SK7Vk8IMwd+aAa791bmClYj+YHLRQcQ+g61BL21ZbTTn3ynDZ5m2XGwrWvtCbEYb
bCHQXR7r75vP/Bcw7c7cP3KlSbdFnfzADXPUQIMzGTrUG498eb3Gu+mFpBctWOyL
1g1ZeJudTTAX9ap04cArgDZrtM4m/0kdRaDCEEVWNuFlwBJO//+pwSyuFkiAHujs
AVkE2jxrVdTqzbLu4TL+1PkEJ1GWxioH0uOirP9X+FMj1dPK6QqWmKVpVwfG98n4
FvxI3hvbD85r6NiqYF/sGwsXr+NPKa+VwPvdF2dpw7/Pr9g1ehI9mUeRT+lvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUBI1F81S45pOFQ8vu2a78ZPz2enowHwYDVR0j
BBgwFoAUjoT/kSHZJXN213egklM9jO257p4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1lEelE1bmIxN3lwWko5dnJLYjcyMnlCWWV3a21LRGUyRXdZcVNqSmp3
dVcvMS84RTg0RkY5MTIxRDkyNTczNzZENzc3QTA5MjUzM0Q4Q0VEQjlFRTlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFODRGRjkxMjFEOTI1NzM3
NkQ3NzdBMDkyNTMzRDhDRURCOUVFOUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNZRHpRNW5iMTd5cFpKOXZyS2I3MjJ5Qllld2ttS0RlMkV3WXFTakpqd3VXLzEv
MzIzODMwMzQzYTMzNjIzMTM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM2
MzEzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQ7GAAwDQYJKoZIhvcNAQELBQADggEBAGELA9V2
4trQt1XhRDoA+75YTqVLd05un5efJEaVEObONw+/yo9RdItFefZOOLfrG9uEplVd
G28xTJTTv/12YnaLz+A9fv6Flf5cF51vc8D0zS4pQXo6KS9p42Mo9icl+VCFojiC
h/QV+Rw8Wwhp5t1DqGZ9N2s52uHucwg88SbDXkV4latptWaA81Solvu3MdmLRiUH
0EdLQ7xniN1aCqh43F9/Amb8xWSwqiyxdSzS+vckDwffzLT4FBLpqD64/fxPcd9k
wQ7Stv27KtMmJWiwoSJvj6jbZn7g5pntxK8aSFXvVTe4sBbirXeEdGnGt30vkb82
7mXu9fQVPL7w3o4=
-----END CERTIFICATE-----
Generated at Mon Apr 7 11:01:28 2025 by rpki-client