Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a323a3a2f34382d3438203d3e203238323032.roa
File: 323830343a3837633a323a3a2f34382d3438203d3e203238323032.roa (raw, json)
Hash identifier: qqjU5goMon9Rl+3c1TyxXWe2aICeH3D6lnJCec1w14w=
Subject key identifier: 27:FD:0D:A1:1A:0D:87:32:E3:66:DA:FC:35:2B:D7:9F:26:F5:D5:DD
Certificate issuer: /CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Certificate serial: 3B4F0347087740C64A26BC953D7E27DD594EE2C0
Authority key identifier: 65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a323a3a2f34382d3438203d3e203238323032.roa
Signing time: Fri 10 Jan 2025 14:19:33 +0000
ROA not before: Fri 10 Jan 2025 14:14:33 +0000
ROA not after: Fri 09 Jan 2026 14:19:33 +0000
asID: 28202
IP address blocks: 2804:87c:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:4f:03:47:08:77:40:c6:4a:26:bc:95:3d:7e:27:dd:59:4e:e2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Validity
Not Before: Jan 10 14:14:33 2025 GMT
Not After : Jan 9 14:19:33 2026 GMT
Subject: CN=27FD0DA11A0D8732E366DAFC352BD79F26F5D5DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:21:97:b1:96:50:6b:57:d3:84:33:2d:b7:d2:
e2:30:dc:35:48:2d:0d:60:db:bf:c3:ff:eb:b3:fe:
e1:47:1b:dc:8a:12:85:6e:d2:86:cd:76:b7:43:50:
96:f8:d5:80:6d:32:08:2f:10:88:1c:f8:0d:33:5b:
e2:f9:47:07:6a:17:57:60:36:a2:9a:b7:79:a1:a6:
2f:de:b5:7f:ea:0f:28:eb:d1:d7:8e:11:bd:81:98:
22:a7:da:a1:2c:7c:77:83:19:38:d3:e1:d0:d7:00:
4b:db:26:06:3e:dc:83:98:af:0b:37:91:3f:3e:fb:
8e:4f:00:c6:3d:64:96:09:3f:5d:9b:83:ae:7f:d9:
40:06:49:fe:85:b5:7c:dc:a7:f1:e3:a7:39:a5:f2:
c3:c8:1c:2b:12:68:1d:65:6f:a7:c6:ce:9c:7d:71:
80:a1:96:94:0b:a8:68:13:6d:62:43:31:c0:fe:44:
61:ec:1f:00:02:52:74:46:01:ce:c7:52:af:2e:62:
42:84:f9:ad:13:3d:6d:2e:9d:9e:47:20:dd:9d:17:
e8:cf:8b:28:7a:55:43:76:98:90:3b:b6:f8:f6:c4:
44:60:df:8b:2a:d5:92:e9:77:a9:e5:15:6e:71:98:
03:a9:c5:d4:a3:18:21:12:0d:ff:c5:e9:76:45:21:
91:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FD:0D:A1:1A:0D:87:32:E3:66:DA:FC:35:2B:D7:9F:26:F5:D5:DD
X509v3 Authority Key Identifier:
keyid:65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a323a3a2f34382d3438203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:87c:2::/48
Signature Algorithm: sha256WithRSAEncryption
22:f5:c9:e9:e9:28:e7:67:20:ec:3c:3b:1e:fa:e8:76:5b:4d:
fd:6b:3d:48:63:cc:28:88:b7:d5:21:b4:18:a4:7b:23:15:32:
8c:f0:37:14:e5:6b:4b:ca:39:c7:3d:ff:2f:5a:c9:87:bb:20:
05:2a:bd:42:40:bd:05:f7:00:ac:fb:e8:bd:35:d8:04:98:1e:
68:4c:c1:81:df:32:de:90:6f:d6:30:08:16:f5:2c:80:80:3d:
2d:38:ec:a9:1d:08:dd:89:a0:35:4e:b9:0a:2d:d2:09:61:c6:
46:25:53:6b:fa:2d:4f:e8:e5:07:f7:41:80:1c:a6:07:f9:f4:
22:81:46:15:94:18:54:c4:f6:23:03:15:6d:d8:cf:70:91:5a:
d4:f7:8b:04:49:cc:47:dc:f1:f9:c8:86:37:ce:c9:fd:46:94:
32:e5:9d:9e:71:d0:97:40:49:cc:be:38:8c:a5:e1:6f:1e:34:
9e:66:25:85:4f:ac:70:67:a9:a6:b5:0d:92:63:9e:a3:64:9f:
be:4e:cd:4a:64:b9:03:f1:c7:51:89:a8:1c:3b:35:b7:65:17:
1b:92:d8:ae:a9:ac:d3:02:71:8f:a2:e3:d6:cd:2e:75:9a:60:
42:ad:5e:b1:76:aa:b8:95:a8:d7:92:63:c6:7f:72:e6:77:46:
62:ff:6d:a8
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUO08DRwh3QMZKJryVPX4n3VlO4sAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU2MUM2QThFNjM1RUQwOTFCRTVBNTUzRjdFQjBCMTJG
NUU0NDQ5NTAeFw0yNTAxMTAxNDE0MzNaFw0yNjAxMDkxNDE5MzNaMDMxMTAvBgNV
BAMTKDI3RkQwREExMUEwRDg3MzJFMzY2REFGQzM1MkJENzlGMjZGNUQ1REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbIZexllBrV9OEMy230uIw3DVI
LQ1g27/D/+uz/uFHG9yKEoVu0obNdrdDUJb41YBtMggvEIgc+A0zW+L5RwdqF1dg
NqKat3mhpi/etX/qDyjr0deOEb2BmCKn2qEsfHeDGTjT4dDXAEvbJgY+3IOYrws3
kT8++45PAMY9ZJYJP12bg65/2UAGSf6FtXzcp/Hjpzml8sPIHCsSaB1lb6fGzpx9
cYChlpQLqGgTbWJDMcD+RGHsHwACUnRGAc7HUq8uYkKE+a0TPW0unZ5HIN2dF+jP
iyh6VUN2mJA7tvj2xERg34sq1ZLpd6nlFW5xmAOpxdSjGCESDf/F6XZFIZFhAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUJ/0NoRoNhzLjZtr8NSvXnyb11d0wHwYDVR0j
BBgwFoAUZWHGqOY17Qkb5aVT9+sLEvXkRJUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGRQN05GMUJkM3ZBekdEY2o3dm1RVlc5ZmtyQVE3UHltUDl1eE04Qk1V
V00vNS82NTYxQzZBOEU2MzVFRDA5MUJFNUE1NTNGN0VCMEIxMkY1RTQ0NDk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1NjFDNkE4RTYzNUVEMDkx
QkU1QTU1M0Y3RUIwQjEyRjVFNDQ0OTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRkUDdORjFCZDN2QXpHRGNqN3ZtUVZXOWZrckFRN1B5bVA5dXhNOEJNVVdNLzUv
MzIzODMwMzQzYTM4Mzc2MzNhMzIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM4
MzIzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcAKAQIfAACMA0GCSqGSIb3DQEBCwUAA4IBAQAi9cnp
6SjnZyDsPDse+uh2W039az1IY8woiLfVIbQYpHsjFTKM8DcU5WtLyjnHPf8vWsmH
uyAFKr1CQL0F9wCs++i9NdgEmB5oTMGB3zLekG/WMAgW9SyAgD0tOOypHQjdiaA1
TrkKLdIJYcZGJVNr+i1P6OUH90GAHKYH+fQigUYVlBhUxPYjAxVt2M9wkVrU94sE
ScxH3PH5yIY3zsn9RpQy5Z2ecdCXQEnMvjiMpeFvHjSeZiWFT6xwZ6mmtQ2SY56j
ZJ++Ts1KZLkD8cdRiagcOzW3ZRcbktiuqazTAnGPouPWzS51mmBCrV6xdqq4lajX
kmPGf3Lmd0Zi/22o
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:35 2025 by rpki-client