Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/323830343a336262633a3a2f33322d313238203d3e20323636313638.roa
File: 323830343a336262633a3a2f33322d313238203d3e20323636313638.roa (raw, json)
Hash identifier: OyHPZjFM6nE6jESktIZHb4U9fXKswqrOu5Gkjq9t1u4=
Subject key identifier: 27:F9:8C:F5:6F:46:80:CB:AB:BD:DB:C4:33:A7:B5:09:2D:CD:F0:45
Certificate issuer: /CN=085A4379FC02066399A7BABE986F2B930711F0E0
Certificate serial: 71752250EA3F628CD3BDE46EFC84E9B14D148A00
Authority key identifier: 08:5A:43:79:FC:02:06:63:99:A7:BA:BE:98:6F:2B:93:07:11:F0:E0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085A4379FC02066399A7BABE986F2B930711F0E0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/323830343a336262633a3a2f33322d313238203d3e20323636313638.roa
Signing time: Fri 21 Feb 2025 14:55:25 +0000
ROA not before: Fri 21 Feb 2025 14:50:25 +0000
ROA not after: Fri 20 Feb 2026 14:55:25 +0000
asID: 266168
IP address blocks: 2804:3bbc::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:75:22:50:ea:3f:62:8c:d3:bd:e4:6e:fc:84:e9:b1:4d:14:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085A4379FC02066399A7BABE986F2B930711F0E0
Validity
Not Before: Feb 21 14:50:25 2025 GMT
Not After : Feb 20 14:55:25 2026 GMT
Subject: CN=27F98CF56F4680CBABBDDBC433A7B5092DCDF045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:83:4a:e8:94:90:7e:0c:86:fb:dd:48:84:ee:
1a:be:88:15:67:10:53:c7:7f:8f:71:84:e8:5b:0d:
d9:12:74:ff:6a:91:cf:85:6b:f1:8f:d4:65:75:9b:
8d:a7:a2:e3:a9:87:df:17:41:68:45:a4:77:f7:6f:
27:87:fd:62:d9:42:25:09:fe:e0:85:fb:9c:14:33:
6f:d5:e9:e7:28:c3:2a:57:7c:75:2c:f6:6c:96:67:
cc:59:28:ac:5c:9d:da:4e:42:f4:67:89:2a:ee:3b:
34:78:35:cd:41:e2:df:8c:03:fc:4d:26:67:ab:c6:
bc:e1:70:0f:76:de:29:6d:63:a8:1b:a6:34:4f:90:
f8:92:8f:df:b4:66:27:f1:df:cb:d9:cb:c4:e8:c0:
bd:29:ff:e8:2b:53:06:44:d7:1c:98:63:a8:d2:79:
22:dd:b5:20:85:14:c9:41:8a:84:76:c2:41:9f:08:
d9:04:7d:db:2c:33:3a:13:bd:a3:5b:97:8d:54:c7:
64:5d:c5:41:85:30:9d:4d:50:98:4e:b9:4a:b8:19:
94:7e:98:dc:a8:62:88:da:28:69:93:2f:80:42:22:
74:ee:a1:eb:ad:3b:d1:c9:cb:4d:c1:36:05:88:a1:
41:1d:89:7d:3e:f1:fb:78:df:10:46:5b:8a:a2:fb:
35:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F9:8C:F5:6F:46:80:CB:AB:BD:DB:C4:33:A7:B5:09:2D:CD:F0:45
X509v3 Authority Key Identifier:
keyid:08:5A:43:79:FC:02:06:63:99:A7:BA:BE:98:6F:2B:93:07:11:F0:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085A4379FC02066399A7BABE986F2B930711F0E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/323830343a336262633a3a2f33322d313238203d3e20323636313638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3bbc::/32
Signature Algorithm: sha256WithRSAEncryption
3e:1b:ee:5a:94:76:95:a8:4d:d0:1e:fd:85:9f:c5:f2:30:a7:
89:9b:d7:90:ee:83:f5:33:8d:bc:d1:ba:49:a9:94:8e:01:84:
07:6a:4e:15:9a:2a:1e:23:26:5e:a9:27:9d:7a:0d:48:c8:8c:
fa:2f:b3:08:aa:ce:d4:f3:77:88:27:44:da:94:07:9c:93:14:
36:0e:d7:68:2f:e7:4b:7e:8e:93:0d:71:ca:7f:db:95:8e:41:
95:a3:d4:6e:d9:d1:6b:74:02:76:1f:93:f7:0a:5c:86:63:d7:
e2:c6:08:a5:b8:a5:e6:a5:fc:de:56:33:1c:0e:3e:bd:86:fc:
14:94:65:1e:07:9e:b0:6b:85:0f:f6:07:15:b1:85:b6:c5:f1:
2c:46:d4:6e:83:26:b9:e6:6d:c9:2c:78:c2:1f:3b:b8:47:24:
ac:b5:81:6f:ae:6f:0e:f9:d3:56:6b:d5:12:24:ec:64:1c:7b:
a3:cb:cf:2a:15:0c:78:66:55:6a:94:46:ae:cb:c4:48:7e:82:
dd:46:2b:a8:92:4d:6a:f6:47:7a:fa:ac:b5:31:b8:c1:a6:1a:
40:28:50:93:5d:9e:d1:2d:9f:31:4a:dd:07:5e:5e:03:bb:e8:
35:cb:d8:d5:7b:0a:99:d6:69:9b:5f:a0:05:2b:6a:4c:49:ae:
8c:fe:e9:41
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUcXUiUOo/YozTveRu/ITpsU0UigAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg1QTQzNzlGQzAyMDY2Mzk5QTdCQUJFOTg2RjJCOTMw
NzExRjBFMDAeFw0yNTAyMjExNDUwMjVaFw0yNjAyMjAxNDU1MjVaMDMxMTAvBgNV
BAMTKDI3Rjk4Q0Y1NkY0NjgwQ0JBQkJEREJDNDMzQTdCNTA5MkRDREYwNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtg0rolJB+DIb73UiE7hq+iBVn
EFPHf49xhOhbDdkSdP9qkc+Fa/GP1GV1m42nouOph98XQWhFpHf3byeH/WLZQiUJ
/uCF+5wUM2/V6ecowypXfHUs9myWZ8xZKKxcndpOQvRniSruOzR4Nc1B4t+MA/xN
JmerxrzhcA923iltY6gbpjRPkPiSj9+0Zifx38vZy8TowL0p/+grUwZE1xyYY6jS
eSLdtSCFFMlBioR2wkGfCNkEfdssMzoTvaNbl41Ux2RdxUGFMJ1NUJhOuUq4GZR+
mNyoYojaKGmTL4BCInTuoeutO9HJy03BNgWIoUEdiX0+8ft43xBGW4qi+zV1AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUJ/mM9W9GgMurvdvEM6e1CS3N8EUwHwYDVR0j
BBgwFoAUCFpDefwCBmOZp7q+mG8rkwcR8OAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2habmRWczFTVnNBZXBkeVB3MnVpRURYUVdTNU02ejR5ZVlSeDZGWmc0
V1MvMC8wODVBNDM3OUZDMDIwNjYzOTlBN0JBQkU5ODZGMkI5MzA3MTFGMEUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA4NUE0Mzc5RkMwMjA2NjM5
OUE3QkFCRTk4NkYyQjkzMDcxMUYwRTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNoWm5kVnMxU1ZzQWVwZHlQdzJ1aUVEWFFXUzVNNno0eWVZUng2RlpnNFdTLzAv
MzIzODMwMzQzYTMzNjI2MjYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzYzMTM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBDu8MA0GCSqGSIb3DQEBCwUAA4IBAQA+G+5a
lHaVqE3QHv2Fn8XyMKeJm9eQ7oP1M4280bpJqZSOAYQHak4VmioeIyZeqSedeg1I
yIz6L7MIqs7U83eIJ0TalAeckxQ2DtdoL+dLfo6TDXHKf9uVjkGVo9Ru2dFrdAJ2
H5P3ClyGY9fixgiluKXmpfzeVjMcDj69hvwUlGUeB56wa4UP9gcVsYW2xfEsRtRu
gya55m3JLHjCHzu4RySstYFvrm8O+dNWa9USJOxkHHujy88qFQx4ZlVqlEauy8RI
foLdRiuokk1q9kd6+qy1MbjBphpAKFCTXZ7RLZ8xSt0HXl4Du+g1y9jVewqZ1mmb
X6AFK2pMSa6M/ulB
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:05:23 2025 by rpki-client