Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/323830343a376162343a383030303a3a2f33332d3333203d3e20323731333837.roa
File: 323830343a376162343a383030303a3a2f33332d3333203d3e20323731333837.roa (raw, json)
Hash identifier: xhtrZgqjDtL8Ta7FNxDn93SjZTMnFS2NxcUlf24kfHk=
Subject key identifier: D3:43:6A:00:62:B5:A7:34:10:9C:F6:C8:0F:29:CB:09:DE:59:F7:1E
Certificate issuer: /CN=E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C
Certificate serial: 211015D93A585E3FCCD0BB63EC234C181337C024
Authority key identifier: E1:BA:EE:8C:47:55:5E:78:CA:DE:1F:AE:AA:82:C1:18:6C:DF:C1:8C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/323830343a376162343a383030303a3a2f33332d3333203d3e20323731333837.roa
Signing time: Thu 30 Jan 2025 13:59:00 +0000
ROA not before: Thu 30 Jan 2025 13:54:00 +0000
ROA not after: Thu 29 Jan 2026 13:59:00 +0000
asID: 271387
IP address blocks: 2804:7ab4:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:10:15:d9:3a:58:5e:3f:cc:d0:bb:63:ec:23:4c:18:13:37:c0:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C
Validity
Not Before: Jan 30 13:54:00 2025 GMT
Not After : Jan 29 13:59:00 2026 GMT
Subject: CN=D3436A0062B5A734109CF6C80F29CB09DE59F71E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4f:4d:5e:73:c0:a8:bd:44:04:a0:3a:8d:2f:
de:dc:0a:ca:20:40:68:3e:84:9a:35:81:3c:92:8b:
ab:86:1d:d3:1b:ef:fb:60:5e:23:af:49:85:24:5b:
1d:5d:d8:6b:de:ed:07:68:3f:76:59:e4:c0:90:9e:
da:81:62:f9:7f:a0:9e:f0:3f:fe:f7:38:b8:99:34:
29:6b:bf:b4:8c:26:f6:87:cf:94:c2:1f:d6:d4:2f:
79:0d:64:d5:b3:cb:ca:96:09:ff:1a:fb:31:ab:f1:
58:ad:e3:c1:e4:60:da:30:99:a3:56:f6:73:31:64:
60:a9:35:16:73:5d:9c:a6:66:9b:66:b7:82:d7:46:
11:4d:0f:ea:c9:f7:e4:eb:88:98:3a:92:35:0f:0a:
9a:10:d0:ba:20:01:2f:ee:a2:79:23:08:1b:2d:07:
1d:58:69:48:b0:f3:22:93:18:9d:1d:22:c1:54:26:
5c:40:fd:48:ff:0a:83:e9:b2:a4:18:12:df:e1:d1:
8d:77:fa:ff:00:32:13:84:fd:07:55:4f:72:50:95:
39:27:e6:01:b6:29:f4:f2:08:55:b3:a2:89:26:d7:
0e:c5:0d:db:f6:48:2d:cf:6f:15:1e:c7:2d:cd:99:
68:d1:93:7b:72:39:2e:81:4c:08:24:72:30:df:05:
b5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:43:6A:00:62:B5:A7:34:10:9C:F6:C8:0F:29:CB:09:DE:59:F7:1E
X509v3 Authority Key Identifier:
keyid:E1:BA:EE:8C:47:55:5E:78:CA:DE:1F:AE:AA:82:C1:18:6C:DF:C1:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/323830343a376162343a383030303a3a2f33332d3333203d3e20323731333837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7ab4:8000::/33
Signature Algorithm: sha256WithRSAEncryption
41:d1:26:d2:54:2a:b8:1f:ad:20:6e:17:a5:f6:51:f4:6d:ed:
d1:12:bc:ad:aa:27:ef:05:4c:fd:fb:2b:d8:07:78:95:83:c7:
ef:ee:c6:d5:b8:a7:99:78:6e:b3:a9:3e:94:b6:42:7e:f0:3a:
b0:6a:d3:31:c0:1a:fd:e0:c6:7a:aa:9d:93:98:eb:45:ed:1d:
b3:40:2d:07:13:c2:e2:7d:99:da:e2:25:61:de:fd:29:48:7f:
df:fe:e4:db:e1:eb:ad:a2:16:0c:63:ea:5f:af:cf:a5:40:34:
00:75:8f:45:53:02:d4:fe:ec:e2:bb:7a:5f:dc:e9:ed:8c:10:
19:c6:f2:39:da:af:15:e2:a5:da:fd:dd:b7:cb:1d:0c:a2:42:
c6:13:89:35:d9:2b:6d:3f:8a:ae:5e:ee:dc:03:4f:98:aa:2e:
fa:44:5a:40:42:fa:d4:e6:1c:cb:fc:d2:8d:86:d5:d8:38:8f:
5d:75:8d:a4:5f:de:03:35:8a:bb:cc:61:4b:4a:9a:54:8f:1a:
b7:63:69:3a:9f:10:c5:4e:a7:9c:2f:16:20:33:6e:e0:d5:3f:
8d:c7:8e:4f:b7:24:ff:34:ff:86:b8:d1:4c:b3:6b:b1:84:32:
a4:d1:bd:f6:61:22:9c:e5:43:44:54:a4:50:08:f4:30:fa:a6:
ee:5e:16:58
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUIRAV2TpYXj/M0Ltj7CNMGBM3wCQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTFCQUVFOEM0NzU1NUU3OENBREUxRkFFQUE4MkMxMTg2
Q0RGQzE4QzAeFw0yNTAxMzAxMzU0MDBaFw0yNjAxMjkxMzU5MDBaMDMxMTAvBgNV
BAMTKEQzNDM2QTAwNjJCNUE3MzQxMDlDRjZDODBGMjlDQjA5REU1OUY3MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJT01ec8CovUQEoDqNL97cCsog
QGg+hJo1gTySi6uGHdMb7/tgXiOvSYUkWx1d2Gve7QdoP3ZZ5MCQntqBYvl/oJ7w
P/73OLiZNClrv7SMJvaHz5TCH9bUL3kNZNWzy8qWCf8a+zGr8Vit48HkYNowmaNW
9nMxZGCpNRZzXZymZptmt4LXRhFND+rJ9+TriJg6kjUPCpoQ0LogAS/uonkjCBst
Bx1YaUiw8yKTGJ0dIsFUJlxA/Uj/CoPpsqQYEt/h0Y13+v8AMhOE/QdVT3JQlTkn
5gG2KfTyCFWzookm1w7FDdv2SC3PbxUexy3NmWjRk3tyOS6BTAgkcjDfBbXjAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU00NqAGK1pzQQnPbIDynLCd5Z9x4wHwYDVR0j
BBgwFoAU4brujEdVXnjK3h+uqoLBGGzfwYwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1prV01CcW9zbVpid1FRck1SSDduc1k4SDdUaDNDWkJyanQ3NHJIYkhv
dEovMC9FMUJBRUU4QzQ3NTU1RTc4Q0FERTFGQUVBQTgyQzExODZDREZDMThDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UxQkFFRThDNDc1NTVFNzhD
QURFMUZBRUFBODJDMTE4NkNERkMxOEMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaa1dNQnFvc21aYndRUXJNUkg3bnNZOEg3VGgzQ1pCcmp0NzRySGJIb3RKLzAv
MzIzODMwMzQzYTM3NjE2MjM0M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzczMTMzMzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEerSAMA0GCSqGSIb3DQEBCwUA
A4IBAQBB0SbSVCq4H60gbhel9lH0be3RErytqifvBUz9+yvYB3iVg8fv7sbVuKeZ
eG6zqT6UtkJ+8DqwatMxwBr94MZ6qp2TmOtF7R2zQC0HE8LifZna4iVh3v0pSH/f
/uTb4eutohYMY+pfr8+lQDQAdY9FUwLU/uziu3pf3OntjBAZxvI52q8V4qXa/d23
yx0MokLGE4k12SttP4quXu7cA0+Yqi76RFpAQvrU5hzL/NKNhtXYOI9ddY2kX94D
NYq7zGFLSppUjxq3Y2k6nxDFTqecLxYgM27g1T+Nx45PtyT/NP+GuNFMs2uxhDKk
0b32YSKc5UNEVKRQCPQw+qbuXhZY
-----END CERTIFICATE-----
Generated at Sat Apr 12 08:05:30 2025 by rpki-client