Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a35303a3a2f34342d3434203d3e20323634393336.roa
File: 323830343a333033343a35303a3a2f34342d3434203d3e20323634393336.roa (raw, json)
Hash identifier: 1cGHWxaawvDe6HW1U9BbrQbgQNoAxNOOeJl8cBd/hn8=
Subject key identifier: 33:77:9A:33:F5:4C:4D:60:C0:D0:BA:94:4E:C9:93:5D:F6:C1:6F:29
Certificate issuer: /CN=D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC
Certificate serial: 2E1ABE2CBDD9C2039E00DC6437CA7E2105B0FE04
Authority key identifier: D9:AE:EE:7B:CB:3D:81:EA:AD:61:F0:7F:69:A9:B0:59:78:F5:80:EC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a35303a3a2f34342d3434203d3e20323634393336.roa
Signing time: Wed 01 Oct 2025 22:07:09 +0000
ROA not before: Wed 01 Oct 2025 22:02:09 +0000
ROA not after: Wed 30 Sep 2026 22:07:09 +0000
asID: 264936
IP address blocks: 2804:3034:50::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:1a:be:2c:bd:d9:c2:03:9e:00:dc:64:37:ca:7e:21:05:b0:fe:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC
Validity
Not Before: Oct 1 22:02:09 2025 GMT
Not After : Sep 30 22:07:09 2026 GMT
Subject: CN=33779A33F54C4D60C0D0BA944EC9935DF6C16F29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:00:c8:a6:ce:12:75:40:4d:d5:e2:ac:f8:22:
2b:86:5b:2d:26:2c:5b:6c:2a:85:1e:6e:6f:8e:ad:
b8:d5:08:1d:90:db:50:0d:50:9b:e8:d6:94:49:b2:
96:6a:0e:cc:de:41:0e:15:70:b5:a2:b8:ff:5f:a4:
23:7b:26:9a:09:d1:52:3d:94:a7:56:08:b0:41:72:
c7:b9:bc:62:eb:6d:25:0e:b3:3f:a9:ee:e2:5d:cc:
0e:04:fc:ff:90:1c:08:32:1e:4d:58:41:78:4e:19:
62:f6:01:e6:6f:e4:01:cd:fb:b5:4d:2c:79:94:4f:
a9:88:7d:db:6a:df:e3:e9:9a:f3:1c:cb:e8:60:9d:
3d:06:f4:f6:21:3f:d6:8f:40:44:ce:ce:31:4e:1b:
e7:82:c9:d4:89:bf:8c:d8:d7:17:39:d6:77:61:8a:
80:58:37:54:0c:81:ce:a4:af:51:2d:c9:e0:50:db:
a2:b1:ed:9d:37:a4:38:db:1f:b7:68:a4:0a:e1:1e:
dd:aa:c3:b9:ec:c7:a8:86:2c:cf:5d:ff:5d:02:cf:
be:71:a9:15:33:28:55:23:c8:96:a0:1e:b5:f8:5b:
27:4c:b7:c9:81:fe:8e:c7:19:ac:69:da:b0:a2:bb:
81:b0:a6:f8:b9:5c:87:a7:c6:d1:f3:a4:d0:bb:a8:
2d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:77:9A:33:F5:4C:4D:60:C0:D0:BA:94:4E:C9:93:5D:F6:C1:6F:29
X509v3 Authority Key Identifier:
keyid:D9:AE:EE:7B:CB:3D:81:EA:AD:61:F0:7F:69:A9:B0:59:78:F5:80:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a35303a3a2f34342d3434203d3e20323634393336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3034:50::/44
Signature Algorithm: sha256WithRSAEncryption
94:b9:e0:09:a0:e1:8c:a1:7a:56:fd:a0:6f:5e:83:30:c9:03:
d8:40:a4:65:d9:b4:9b:6e:8f:47:ab:17:89:6d:85:a5:4f:82:
eb:3a:19:9d:cf:0a:b9:64:98:9e:75:06:31:1b:c0:42:36:c9:
25:ef:45:11:dc:e8:b0:d4:43:f8:43:b7:55:9c:fd:a5:c1:4d:
0b:96:f9:0a:ad:d0:11:d3:26:f3:b1:ff:67:16:e4:08:27:da:
35:c8:ff:2a:96:79:ed:cd:da:78:d1:f2:e7:48:a4:be:62:a2:
17:ed:10:54:5b:b3:d4:22:ff:2b:6d:8d:46:43:64:2a:f5:c7:
23:b6:73:04:38:b5:d7:9f:56:e6:ae:c4:e1:a6:28:d2:7d:71:
56:2e:f2:d0:c8:82:49:8f:87:b7:a2:9b:3d:63:3d:8f:6f:83:
f7:78:51:9f:ba:5c:00:94:e3:e1:a7:13:fe:ec:c6:d2:8f:60:
7c:5e:af:70:2f:dd:31:cd:1e:6c:57:33:63:c2:4b:66:42:27:
5b:ae:b5:be:81:19:02:eb:87:47:a8:0d:b8:d6:21:b2:eb:4a:
e4:39:71:ae:c5:80:92:e8:e7:7b:38:97:20:d7:41:b1:1b:ee:
81:c5:00:a0:26:1c:08:dd:79:37:e6:2c:2d:31:f9:3b:c0:cc:
4e:e4:48:d4
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIULhq+LL3ZwgOeANxkN8p+IQWw/gQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDlBRUVFN0JDQjNEODFFQUFENjFGMDdGNjlBOUIwNTk3
OEY1ODBFQzAeFw0yNTEwMDEyMjAyMDlaFw0yNjA5MzAyMjA3MDlaMDMxMTAvBgNV
BAMTKDMzNzc5QTMzRjU0QzRENjBDMEQwQkE5NDRFQzk5MzVERjZDMTZGMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLAMimzhJ1QE3V4qz4IiuGWy0m
LFtsKoUebm+OrbjVCB2Q21ANUJvo1pRJspZqDszeQQ4VcLWiuP9fpCN7JpoJ0VI9
lKdWCLBBcse5vGLrbSUOsz+p7uJdzA4E/P+QHAgyHk1YQXhOGWL2AeZv5AHN+7VN
LHmUT6mIfdtq3+PpmvMcy+hgnT0G9PYhP9aPQETOzjFOG+eCydSJv4zY1xc51ndh
ioBYN1QMgc6kr1EtyeBQ26Kx7Z03pDjbH7dopArhHt2qw7nsx6iGLM9d/10Cz75x
qRUzKFUjyJagHrX4WydMt8mB/o7HGaxp2rCiu4Gwpvi5XIenxtHzpNC7qC3lAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUM3eaM/VMTWDA0LqUTsmTXfbBbykwHwYDVR0j
BBgwFoAU2a7ue8s9geqtYfB/aamwWXj1gOwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDNyNUh0TnVhQnRmcUNEM0xiVmdHb2F3dmlyaXdWNk5YWXlwYmEzcmFX
UG4vMC9EOUFFRUU3QkNCM0Q4MUVBQUQ2MUYwN0Y2OUE5QjA1OTc4RjU4MEVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5QUVFRTdCQ0IzRDgxRUFB
RDYxRjA3RjY5QTlCMDU5NzhGNTgwRUMuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQzcjVIdE51YUJ0ZnFDRDNMYlZnR29hd3Zpcml3VjZOWFl5cGJhM3JhV1BuLzAv
MzIzODMwMzQzYTMzMzAzMzM0M2EzNTMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIw
MzIzNjM0MzkzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKAQwNABQMA0GCSqGSIb3DQEBCwUAA4IB
AQCUueAJoOGMoXpW/aBvXoMwyQPYQKRl2bSbbo9HqxeJbYWlT4LrOhmdzwq5ZJie
dQYxG8BCNskl70UR3Oiw1EP4Q7dVnP2lwU0LlvkKrdAR0ybzsf9nFuQIJ9o1yP8q
lnntzdp40fLnSKS+YqIX7RBUW7PUIv8rbY1GQ2Qq9ccjtnMEOLXXn1bmrsThpijS
fXFWLvLQyIJJj4e3ops9Yz2Pb4P3eFGfulwAlOPhpxP+7MbSj2B8Xq9wL90xzR5s
VzNjwktmQidbrrW+gRkC64dHqA241iGy60rkOXGuxYCS6Od7OJcg10GxG+6BxQCg
JhwI3Xk35iwtMfk7wMxO5EjU
-----END CERTIFICATE-----
Generated at Tue Nov 4 01:38:02 2025 by rpki-client