Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a383a3a2f36342d3634203d3e203238323032.roa
File: 323830343a3837633a383a3a2f36342d3634203d3e203238323032.roa (raw, json)
Hash identifier: GoNfRS+lV9M2m9IxDWPWnEbkFnUKQjWKEz8Yq2+RqbE=
Subject key identifier: 0C:F5:CB:51:04:A0:74:FA:22:5F:D3:92:54:25:37:A1:C2:EB:A2:57
Certificate issuer: /CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Certificate serial: 58DDFB1F76BED08AB35049BF2ADD41271916F42B
Authority key identifier: 65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a383a3a2f36342d3634203d3e203238323032.roa
Signing time: Fri 10 Jan 2025 14:19:34 +0000
ROA not before: Fri 10 Jan 2025 14:14:34 +0000
ROA not after: Fri 09 Jan 2026 14:19:34 +0000
asID: 28202
IP address blocks: 2804:87c:8::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:dd:fb:1f:76:be:d0:8a:b3:50:49:bf:2a:dd:41:27:19:16:f4:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Validity
Not Before: Jan 10 14:14:34 2025 GMT
Not After : Jan 9 14:19:34 2026 GMT
Subject: CN=0CF5CB5104A074FA225FD392542537A1C2EBA257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:db:99:6c:60:a5:20:51:c2:09:d0:27:5f:a2:
52:4e:5f:64:a6:03:2e:f3:83:f4:f3:21:14:03:d2:
41:3c:6c:52:18:5a:36:17:53:00:db:d9:e2:1c:f8:
ae:1f:b7:61:98:bb:18:e7:e1:d6:26:b5:3c:98:93:
be:bb:9b:ff:01:33:ba:58:06:50:65:7c:02:78:ad:
c2:45:80:cd:e1:68:a9:52:a0:95:d3:cc:fa:cd:66:
18:a1:96:2c:52:96:c5:5c:c9:c6:27:6d:60:8b:e1:
fa:2a:47:81:4f:bd:91:4d:10:d6:a9:02:65:91:d1:
f0:d8:0c:54:e0:6a:1b:b1:79:5e:0f:7d:53:e1:d6:
89:28:1f:a5:0f:d6:9c:1b:22:18:c5:52:35:15:e1:
b4:29:61:24:6c:fd:90:e0:dc:4a:d8:60:d7:ab:ab:
39:5d:c6:49:90:a4:3d:6e:dd:1d:49:80:76:d0:50:
06:e4:31:a7:33:eb:9f:0b:a9:b8:c2:a8:9d:e3:50:
7e:19:ba:b0:ba:a2:de:ff:69:94:36:98:0e:6f:53:
63:11:e0:71:62:5a:88:39:cc:df:d4:93:e2:8d:0d:
04:c9:5e:c4:65:d6:59:f9:f8:8e:a4:74:c0:06:97:
cd:44:a3:67:94:b6:ac:ae:65:36:97:1b:59:f1:65:
27:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F5:CB:51:04:A0:74:FA:22:5F:D3:92:54:25:37:A1:C2:EB:A2:57
X509v3 Authority Key Identifier:
keyid:65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a383a3a2f36342d3634203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:87c:8::/64
Signature Algorithm: sha256WithRSAEncryption
18:0f:44:fa:5a:57:a5:c7:7c:58:29:df:fd:ec:2f:3d:61:be:
fc:2c:da:7a:b2:98:c8:a1:0c:8d:9e:03:34:5d:fc:a2:82:de:
96:30:84:27:9f:9b:6d:66:24:a8:0b:07:13:67:5b:48:e8:71:
10:8a:2c:f7:03:f2:de:a4:b7:17:d5:e9:1d:e5:a6:80:de:e2:
ae:56:b1:77:33:80:fc:f9:8c:93:6d:61:c6:da:25:13:8a:cd:
ad:35:c9:75:41:ea:cb:f5:4f:89:51:6e:4b:4a:d4:45:a4:52:
9b:4c:dc:ce:7a:a6:b3:29:4e:b8:d1:0d:23:df:08:e1:3f:77:
ff:44:83:77:ec:be:0f:55:4b:ad:99:90:ca:2a:d2:4f:76:4c:
d7:9d:fc:e8:d5:95:2e:4f:11:05:16:db:ef:d7:5c:b3:ba:5d:
fd:4d:3e:df:18:e4:82:25:65:6b:de:50:c0:43:04:ec:c6:71:
92:44:e5:5e:df:73:3e:3a:86:bc:61:78:d0:75:6f:b4:b6:55:
c0:1e:a5:58:1c:9f:12:9e:37:48:6d:39:ac:a8:83:e9:a5:a2:
6c:e4:ec:b9:0f:18:1e:6a:9c:3f:fc:9a:2a:fa:ff:92:55:50:
a1:8a:6d:a4:6e:f9:13:04:b3:2c:7f:20:af:c3:ba:7a:91:0c:
36:58:4f:37
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIUWN37H3a+0IqzUEm/Kt1BJxkW9CswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU2MUM2QThFNjM1RUQwOTFCRTVBNTUzRjdFQjBCMTJG
NUU0NDQ5NTAeFw0yNTAxMTAxNDE0MzRaFw0yNjAxMDkxNDE5MzRaMDMxMTAvBgNV
BAMTKDBDRjVDQjUxMDRBMDc0RkEyMjVGRDM5MjU0MjUzN0ExQzJFQkEyNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ25lsYKUgUcIJ0CdfolJOX2Sm
Ay7zg/TzIRQD0kE8bFIYWjYXUwDb2eIc+K4ft2GYuxjn4dYmtTyYk767m/8BM7pY
BlBlfAJ4rcJFgM3haKlSoJXTzPrNZhihlixSlsVcycYnbWCL4foqR4FPvZFNENap
AmWR0fDYDFTgahuxeV4PfVPh1okoH6UP1pwbIhjFUjUV4bQpYSRs/ZDg3ErYYNer
qzldxkmQpD1u3R1JgHbQUAbkMacz658LqbjCqJ3jUH4ZurC6ot7/aZQ2mA5vU2MR
4HFiWog5zN/Uk+KNDQTJXsRl1ln5+I6kdMAGl81Eo2eUtqyuZTaXG1nxZSexAgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQUDPXLUQSgdPoiX9OSVCU3ocLrolcwHwYDVR0j
BBgwFoAUZWHGqOY17Qkb5aVT9+sLEvXkRJUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGRQN05GMUJkM3ZBekdEY2o3dm1RVlc5ZmtyQVE3UHltUDl1eE04Qk1V
V00vNS82NTYxQzZBOEU2MzVFRDA5MUJFNUE1NTNGN0VCMEIxMkY1RTQ0NDk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1NjFDNkE4RTYzNUVEMDkx
QkU1QTU1M0Y3RUIwQjEyRjVFNDQ0OTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRkUDdORjFCZDN2QXpHRGNqN3ZtUVZXOWZrckFRN1B5bVA5dXhNOEJNVVdNLzUv
MzIzODMwMzQzYTM4Mzc2MzNhMzgzYTNhMmYzNjM0MmQzNjM0MjAzZDNlMjAzMjM4
MzIzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEH
AQH/BBUwEzARBAIAAjALAwkAKAQIfAAIAAAwDQYJKoZIhvcNAQELBQADggEBABgP
RPpaV6XHfFgp3/3sLz1hvvws2nqymMihDI2eAzRd/KKC3pYwhCefm21mJKgLBxNn
W0jocRCKLPcD8t6ktxfV6R3lpoDe4q5WsXczgPz5jJNtYcbaJROKza01yXVB6sv1
T4lRbktK1EWkUptM3M56prMpTrjRDSPfCOE/d/9Eg3fsvg9VS62ZkMoq0k92TNed
/OjVlS5PEQUW2+/XXLO6Xf1NPt8Y5IIlZWveUMBDBOzGcZJE5V7fcz46hrxheNB1
b7S2VcAepVgcnxKeN0htOayog+mlomzk7LkPGB5qnD/8mir6/5JVUKGKbaRu+RME
syx/IK/DunqRDDZYTzc=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:44 2025 by rpki-client