Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a393a3a2f36342d3634203d3e203238323032.roa
File: 323830343a3837633a393a3a2f36342d3634203d3e203238323032.roa (raw, json)
Hash identifier: fCQ25OC6AGmQ1nvxougIirSbPUYU1lcdSpKU6m/6z0c=
Subject key identifier: B9:B1:38:FF:45:83:33:1D:7D:46:D7:11:C3:5F:FE:7E:0F:6F:25:0F
Certificate issuer: /CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Certificate serial: 0AA04A5673A2951BBC96FEF6A5BE4C180143C106
Authority key identifier: 65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a393a3a2f36342d3634203d3e203238323032.roa
Signing time: Fri 10 Jan 2025 14:20:02 +0000
ROA not before: Fri 10 Jan 2025 14:15:02 +0000
ROA not after: Fri 09 Jan 2026 14:20:02 +0000
asID: 28202
IP address blocks: 2804:87c:9::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:a0:4a:56:73:a2:95:1b:bc:96:fe:f6:a5:be:4c:18:01:43:c1:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Validity
Not Before: Jan 10 14:15:02 2025 GMT
Not After : Jan 9 14:20:02 2026 GMT
Subject: CN=B9B138FF4583331D7D46D711C35FFE7E0F6F250F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cf:f9:9c:75:02:ef:5c:17:2c:39:ba:b7:ab:
75:76:38:07:77:9e:95:1b:dd:ac:37:12:75:fc:4c:
be:a3:0e:87:e0:fa:65:c7:87:09:37:6a:13:a8:63:
18:e5:1f:c5:f9:8b:b9:29:4b:17:e2:1a:e6:b3:aa:
f9:29:c9:ed:cd:ba:66:80:1a:4f:f4:e8:2d:96:a1:
e8:e1:f6:e4:67:a5:64:3c:7e:28:e4:ee:0b:13:a1:
a7:a1:e6:e2:8c:75:b4:fa:61:54:c8:18:2f:bd:c9:
3e:a2:8a:ac:c8:05:91:ad:1e:5a:85:18:0d:09:1b:
27:c4:61:0f:a7:8d:d5:af:8d:c1:4e:25:7e:f8:e6:
39:82:fd:53:55:8e:41:c2:d7:68:b5:01:51:ff:dc:
cb:c5:27:93:26:44:04:95:85:8e:f4:17:5a:83:f0:
43:44:7f:78:aa:94:4e:97:07:f4:70:67:cc:46:4d:
d1:bd:d2:fd:a8:a8:2b:0b:e1:67:af:42:a1:60:35:
f3:9f:e6:b0:a2:eb:17:d4:16:04:94:d9:d9:07:9c:
6f:1a:0a:b1:ba:10:ce:19:27:9a:d1:de:a0:8c:63:
de:be:0d:4d:be:dd:69:4d:e5:8a:dd:16:32:2a:94:
79:dc:8e:94:e1:bf:1d:77:c7:62:35:86:9f:d4:70:
24:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B1:38:FF:45:83:33:1D:7D:46:D7:11:C3:5F:FE:7E:0F:6F:25:0F
X509v3 Authority Key Identifier:
keyid:65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a393a3a2f36342d3634203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:87c:9::/64
Signature Algorithm: sha256WithRSAEncryption
73:28:01:53:b1:35:22:cd:26:fc:37:70:2a:fb:db:51:ba:1e:
d1:c8:27:5c:52:10:e5:fa:18:b8:f2:9a:6e:6d:b8:96:9b:f8:
3d:fb:aa:43:7f:92:7c:63:29:52:e7:46:4b:12:59:8b:47:97:
92:ed:33:98:36:16:e2:77:76:2f:cf:b2:a0:63:e7:65:92:88:
05:0d:ea:1d:1a:bf:eb:c7:48:db:93:44:85:a4:a4:dd:3d:5a:
6c:0c:06:f3:02:c9:3d:05:a2:c7:a6:f4:3b:8b:83:d7:a6:b8:
ba:46:95:81:f9:3a:ba:2e:f5:a7:af:55:3d:88:95:1f:af:55:
21:c9:b5:aa:94:b8:09:e6:d5:cc:71:85:08:8c:79:a9:a7:ea:
11:e4:ed:e5:77:05:bd:b8:59:a5:df:1b:70:6b:d5:ec:56:25:
4f:dc:e9:52:41:e5:0d:40:37:35:e6:8e:4d:80:b4:01:46:b7:
a2:22:81:12:65:8f:a8:66:23:3e:13:e8:dc:df:a6:2d:4b:09:
56:d2:21:dc:b3:0d:bc:6e:33:1d:ab:f0:90:08:76:db:43:76:
02:fb:73:6c:a7:e3:a9:82:5f:8a:a8:e0:20:60:75:e5:96:82:
30:49:05:e4:27:d7:ae:4e:54:e2:28:14:51:bc:af:70:a6:24:
49:91:48:34
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIUCqBKVnOilRu8lv72pb5MGAFDwQYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU2MUM2QThFNjM1RUQwOTFCRTVBNTUzRjdFQjBCMTJG
NUU0NDQ5NTAeFw0yNTAxMTAxNDE1MDJaFw0yNjAxMDkxNDIwMDJaMDMxMTAvBgNV
BAMTKEI5QjEzOEZGNDU4MzMzMUQ3RDQ2RDcxMUMzNUZGRTdFMEY2RjI1MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNz/mcdQLvXBcsObq3q3V2OAd3
npUb3aw3EnX8TL6jDofg+mXHhwk3ahOoYxjlH8X5i7kpSxfiGuazqvkpye3NumaA
Gk/06C2Woejh9uRnpWQ8fijk7gsToaeh5uKMdbT6YVTIGC+9yT6iiqzIBZGtHlqF
GA0JGyfEYQ+njdWvjcFOJX745jmC/VNVjkHC12i1AVH/3MvFJ5MmRASVhY70F1qD
8ENEf3iqlE6XB/RwZ8xGTdG90v2oqCsL4WevQqFgNfOf5rCi6xfUFgSU2dkHnG8a
CrG6EM4ZJ5rR3qCMY96+DU2+3WlN5YrdFjIqlHncjpThvx13x2I1hp/UcCQNAgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQUubE4/0WDMx19RtcRw1/+fg9vJQ8wHwYDVR0j
BBgwFoAUZWHGqOY17Qkb5aVT9+sLEvXkRJUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGRQN05GMUJkM3ZBekdEY2o3dm1RVlc5ZmtyQVE3UHltUDl1eE04Qk1V
V00vNS82NTYxQzZBOEU2MzVFRDA5MUJFNUE1NTNGN0VCMEIxMkY1RTQ0NDk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1NjFDNkE4RTYzNUVEMDkx
QkU1QTU1M0Y3RUIwQjEyRjVFNDQ0OTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRkUDdORjFCZDN2QXpHRGNqN3ZtUVZXOWZrckFRN1B5bVA5dXhNOEJNVVdNLzUv
MzIzODMwMzQzYTM4Mzc2MzNhMzkzYTNhMmYzNjM0MmQzNjM0MjAzZDNlMjAzMjM4
MzIzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEH
AQH/BBUwEzARBAIAAjALAwkAKAQIfAAJAAAwDQYJKoZIhvcNAQELBQADggEBAHMo
AVOxNSLNJvw3cCr721G6HtHIJ1xSEOX6GLjymm5tuJab+D37qkN/knxjKVLnRksS
WYtHl5LtM5g2FuJ3di/PsqBj52WSiAUN6h0av+vHSNuTRIWkpN09WmwMBvMCyT0F
osem9DuLg9emuLpGlYH5Orou9aevVT2IlR+vVSHJtaqUuAnm1cxxhQiMeamn6hHk
7eV3Bb24WaXfG3Br1exWJU/c6VJB5Q1ANzXmjk2AtAFGt6IigRJlj6hmIz4T6Nzf
pi1LCVbSIdyzDbxuMx2r8JAIdttDdgL7c2yn46mCX4qo4CBgdeWWgjBJBeQn165O
VOIoFFG8r3CmJEmRSDQ=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:36 2025 by rpki-client