Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a383a31303a3a2f36342d3634203d3e203238323032.roa
File: 323830343a3837633a383a31303a3a2f36342d3634203d3e203238323032.roa (raw, json)
Hash identifier: pH0Vas8qwwuklz/PFezgw7sB3D4+hlf4Nnc/MvRcXq8=
Subject key identifier: 0E:83:A9:B6:4F:EA:D1:17:81:8E:7B:DE:47:49:17:EF:47:9E:F5:73
Certificate issuer: /CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Certificate serial: 0B247B90AF033ED9E7AB6DEA7DFEB2C797671A09
Authority key identifier: 65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a383a31303a3a2f36342d3634203d3e203238323032.roa
Signing time: Fri 10 Jan 2025 14:19:27 +0000
ROA not before: Fri 10 Jan 2025 14:14:27 +0000
ROA not after: Fri 09 Jan 2026 14:19:27 +0000
asID: 28202
IP address blocks: 2804:87c:8:10::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:24:7b:90:af:03:3e:d9:e7:ab:6d:ea:7d:fe:b2:c7:97:67:1a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Validity
Not Before: Jan 10 14:14:27 2025 GMT
Not After : Jan 9 14:19:27 2026 GMT
Subject: CN=0E83A9B64FEAD117818E7BDE474917EF479EF573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3f:fb:8a:ec:e0:c6:f2:99:49:4c:78:5a:8c:
a3:59:1c:9d:9c:be:f7:77:ac:ec:44:37:82:9a:98:
45:da:ea:fe:df:43:b9:cc:2e:fe:a1:59:fa:ab:dd:
13:a2:24:48:72:a4:60:59:ee:e5:70:38:c4:80:c0:
13:84:d9:17:a9:f7:ab:50:d1:94:32:82:28:74:22:
c7:16:9f:71:ed:ab:4c:bb:58:13:39:9d:48:61:8d:
b0:da:09:65:b5:95:0d:86:ce:37:9c:6f:fd:45:83:
b5:55:ac:50:17:ef:7a:ae:16:be:90:29:d5:ae:2a:
07:83:dd:c1:54:e3:03:c1:9f:e0:a0:7c:fc:b5:cd:
48:34:48:d3:e6:28:7e:a8:dc:d0:3e:f0:64:f7:e6:
90:ce:62:70:5d:ac:0e:96:bb:77:d8:bf:af:fd:3a:
b8:80:55:7a:8e:22:49:9d:48:2b:75:25:f0:91:42:
20:fa:5d:2d:a1:6d:30:6e:60:1e:ce:1a:4c:79:0f:
6d:51:29:08:93:f5:d6:5b:a9:9d:53:88:b7:11:a4:
d3:dd:83:88:64:02:b6:2a:a1:e3:ac:64:ef:5e:2d:
c5:f7:d0:01:08:c1:75:46:b3:45:c0:c6:94:01:b2:
05:0e:a0:fa:a0:2d:87:8b:0f:5d:49:cd:f5:41:cf:
e8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:83:A9:B6:4F:EA:D1:17:81:8E:7B:DE:47:49:17:EF:47:9E:F5:73
X509v3 Authority Key Identifier:
keyid:65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a383a31303a3a2f36342d3634203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:87c:8:10::/64
Signature Algorithm: sha256WithRSAEncryption
85:63:6f:8d:57:8f:8b:b8:6b:b5:c5:56:9f:73:65:2c:a5:9f:
2f:dd:33:71:aa:83:eb:39:62:9b:ec:70:b9:9f:0c:68:c6:88:
71:f2:0c:be:ae:63:2f:b8:d2:9b:f2:45:07:82:1d:56:35:0f:
e7:05:9c:9c:95:b5:25:30:6c:20:ac:96:ab:38:03:1f:0e:5c:
78:ea:33:d6:ae:f5:67:83:80:3f:6c:0d:14:8d:9c:e1:88:c5:
96:c8:b4:d2:a1:61:b6:ab:b6:a4:4b:00:8d:39:73:d5:d4:e8:
2d:ab:5c:f7:18:2c:15:f8:e8:cf:e1:17:cc:99:69:a9:2b:f9:
79:79:bf:ae:37:8d:30:1b:31:47:56:60:79:69:84:5d:52:26:
91:db:3c:f0:d6:19:33:1a:5b:0a:6e:24:dc:50:4e:fb:5a:f7:
6d:18:6a:57:43:d2:8a:3a:fd:81:b0:02:07:a1:cc:99:f2:d5:
29:f6:2d:0c:b2:74:65:32:c4:e0:ac:ec:df:7c:c5:d7:e3:e4:
be:e8:90:78:c6:90:57:13:31:bf:4e:18:ee:e4:95:82:0d:d0:
c5:2d:14:a1:0b:c7:50:a3:a8:d3:b9:e2:d7:d6:c8:24:a4:9a:
34:63:8d:14:76:0a:c3:be:2b:4a:7d:83:0c:df:5e:02:f2:14:
b7:c9:25:9a
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUCyR7kK8DPtnnq23qff6yx5dnGgkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU2MUM2QThFNjM1RUQwOTFCRTVBNTUzRjdFQjBCMTJG
NUU0NDQ5NTAeFw0yNTAxMTAxNDE0MjdaFw0yNjAxMDkxNDE5MjdaMDMxMTAvBgNV
BAMTKDBFODNBOUI2NEZFQUQxMTc4MThFN0JERTQ3NDkxN0VGNDc5RUY1NzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVP/uK7ODG8plJTHhajKNZHJ2c
vvd3rOxEN4KamEXa6v7fQ7nMLv6hWfqr3ROiJEhypGBZ7uVwOMSAwBOE2Rep96tQ
0ZQygih0IscWn3Htq0y7WBM5nUhhjbDaCWW1lQ2Gzjecb/1Fg7VVrFAX73quFr6Q
KdWuKgeD3cFU4wPBn+CgfPy1zUg0SNPmKH6o3NA+8GT35pDOYnBdrA6Wu3fYv6/9
OriAVXqOIkmdSCt1JfCRQiD6XS2hbTBuYB7OGkx5D21RKQiT9dZbqZ1TiLcRpNPd
g4hkArYqoeOsZO9eLcX30AEIwXVGs0XAxpQBsgUOoPqgLYeLD11JzfVBz+gXAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUDoOptk/q0ReBjnveR0kX70ee9XMwHwYDVR0j
BBgwFoAUZWHGqOY17Qkb5aVT9+sLEvXkRJUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGRQN05GMUJkM3ZBekdEY2o3dm1RVlc5ZmtyQVE3UHltUDl1eE04Qk1V
V00vNS82NTYxQzZBOEU2MzVFRDA5MUJFNUE1NTNGN0VCMEIxMkY1RTQ0NDk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1NjFDNkE4RTYzNUVEMDkx
QkU1QTU1M0Y3RUIwQjEyRjVFNDQ0OTUuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRkUDdORjFCZDN2QXpHRGNqN3ZtUVZXOWZrckFRN1B5bVA5dXhNOEJNVVdNLzUv
MzIzODMwMzQzYTM4Mzc2MzNhMzgzYTMxMzAzYTNhMmYzNjM0MmQzNjM0MjAzZDNl
MjAzMjM4MzIzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCQGCCsG
AQUFBwEHAQH/BBUwEzARBAIAAjALAwkAKAQIfAAIABAwDQYJKoZIhvcNAQELBQAD
ggEBAIVjb41Xj4u4a7XFVp9zZSylny/dM3Gqg+s5YpvscLmfDGjGiHHyDL6uYy+4
0pvyRQeCHVY1D+cFnJyVtSUwbCCslqs4Ax8OXHjqM9au9WeDgD9sDRSNnOGIxZbI
tNKhYbartqRLAI05c9XU6C2rXPcYLBX46M/hF8yZaakr+Xl5v643jTAbMUdWYHlp
hF1SJpHbPPDWGTMaWwpuJNxQTvta920YaldD0oo6/YGwAgehzJny1Sn2LQyydGUy
xOCs7N98xdfj5L7okHjGkFcTMb9OGO7klYIN0MUtFKELx1CjqNO54tfWyCSkmjRj
jRR2CsO+K0p9gwzfXgLyFLfJJZo=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:35 2025 by rpki-client