Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a3a2f33322d3332203d3e203238323032.roa
File: 323830343a3837633a3a2f33322d3332203d3e203238323032.roa (raw, json)
Hash identifier: NhJi7om59IS3R0qggLzFN3SiTuzeF3dcFr980pRGRLI=
Subject key identifier: 64:C1:EA:27:5D:F1:78:77:E2:B6:D9:20:9C:00:41:1D:63:86:35:7E
Certificate issuer: /CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Certificate serial: 643F0AB1371C517E1A0C29F1019FC340FF571DD2
Authority key identifier: 65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a3a2f33322d3332203d3e203238323032.roa
Signing time: Fri 10 Jan 2025 14:19:58 +0000
ROA not before: Fri 10 Jan 2025 14:14:58 +0000
ROA not after: Fri 09 Jan 2026 14:19:58 +0000
asID: 28202
IP address blocks: 2804:87c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:3f:0a:b1:37:1c:51:7e:1a:0c:29:f1:01:9f:c3:40:ff:57:1d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Validity
Not Before: Jan 10 14:14:58 2025 GMT
Not After : Jan 9 14:19:58 2026 GMT
Subject: CN=64C1EA275DF17877E2B6D9209C00411D6386357E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bd:16:55:79:b5:b1:e1:51:ab:6f:3d:26:7e:
63:e7:8d:f9:2b:32:fd:55:6a:00:f3:30:e5:8a:b0:
1f:b0:e3:cb:d3:bb:dd:0e:34:d7:d7:42:1e:30:83:
e1:ce:8d:ef:f1:ca:8c:5e:59:38:f7:86:26:5d:d4:
3f:a4:e3:06:dd:55:04:f1:28:0a:65:d8:a1:db:5b:
7d:e1:c9:26:40:d8:6f:cf:b6:a3:9b:6f:80:c1:ef:
18:ef:f8:3d:16:f7:d5:44:c7:dd:7f:68:46:e6:de:
74:6e:df:a6:02:8b:95:1f:04:66:48:7f:14:c5:28:
8e:e0:e3:26:49:2a:74:1f:db:96:a4:13:dd:9b:e5:
8d:df:50:5e:8a:13:74:da:e6:f4:66:75:cb:57:ae:
23:d8:e5:48:c7:89:13:a9:6c:41:dd:18:b4:05:86:
a7:0e:9f:b9:9a:a0:11:28:6e:1a:e6:6e:aa:d4:83:
59:0a:77:b2:fe:60:02:3d:a4:0c:3d:f3:ca:8a:19:
73:1b:f3:56:c3:aa:d3:b5:cd:f5:86:79:5f:d1:e4:
06:32:f2:ee:74:14:c9:75:3e:c3:3f:bd:12:9c:5c:
0f:b5:c3:61:2e:c3:92:08:2f:42:38:86:69:6e:70:
31:9e:45:a7:62:38:f3:e1:e4:8a:f4:ed:2b:12:e9:
92:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C1:EA:27:5D:F1:78:77:E2:B6:D9:20:9C:00:41:1D:63:86:35:7E
X509v3 Authority Key Identifier:
keyid:65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a3a2f33322d3332203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:87c::/32
Signature Algorithm: sha256WithRSAEncryption
69:55:f4:d0:25:fa:07:ad:ff:9e:93:8b:8f:9e:f8:c9:91:73:
a2:c6:01:2e:4d:85:b6:0f:04:4c:d3:f5:3b:ce:a9:ad:4a:59:
9c:52:30:39:4b:5f:23:d6:e3:f1:8c:eb:63:af:b4:c8:7c:ae:
33:73:82:e7:a1:5f:08:45:d2:5b:bc:fd:c8:55:7a:58:8d:f5:
e2:2c:81:5e:60:71:58:40:1b:55:4b:66:ed:d4:c4:47:77:69:
14:52:9a:2b:49:55:dd:4e:cb:be:cd:c9:ab:40:22:7e:6f:12:
be:80:7d:cc:f6:52:97:a8:11:24:1c:94:6c:f5:48:13:a5:4d:
f4:ff:5a:77:65:97:d3:4c:ad:a0:80:0e:7b:cc:db:ff:cc:fd:
fb:a3:f9:7c:4f:9c:17:5f:03:78:08:24:46:09:bb:c9:81:29:
bb:38:bb:0f:9c:87:fd:48:5c:82:97:b4:02:70:43:61:91:84:
81:03:98:5e:d1:e8:73:aa:7a:c1:61:6f:05:8c:b0:a8:27:43:
0f:f3:ed:c0:ff:51:be:bc:cf:82:47:4a:8e:1b:1f:59:a2:1d:
27:b8:ef:eb:44:66:20:b8:b7:21:53:93:af:64:83:aa:e2:ba:
a9:c0:6b:2a:1b:89:d1:25:e2:2c:62:6c:17:4d:44:5d:46:0d:
46:38:52:94
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUZD8KsTccUX4aDCnxAZ/DQP9XHdIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU2MUM2QThFNjM1RUQwOTFCRTVBNTUzRjdFQjBCMTJG
NUU0NDQ5NTAeFw0yNTAxMTAxNDE0NThaFw0yNjAxMDkxNDE5NThaMDMxMTAvBgNV
BAMTKDY0QzFFQTI3NURGMTc4NzdFMkI2RDkyMDlDMDA0MTFENjM4NjM1N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIvRZVebWx4VGrbz0mfmPnjfkr
Mv1VagDzMOWKsB+w48vTu90ONNfXQh4wg+HOje/xyoxeWTj3hiZd1D+k4wbdVQTx
KApl2KHbW33hySZA2G/PtqObb4DB7xjv+D0W99VEx91/aEbm3nRu36YCi5UfBGZI
fxTFKI7g4yZJKnQf25akE92b5Y3fUF6KE3Ta5vRmdctXriPY5UjHiROpbEHdGLQF
hqcOn7maoBEobhrmbqrUg1kKd7L+YAI9pAw988qKGXMb81bDqtO1zfWGeV/R5AYy
8u50FMl1PsM/vRKcXA+1w2Euw5IIL0I4hmlucDGeRadiOPPh5Ir07SsS6ZKdAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUZMHqJ13xeHfittkgnABBHWOGNX4wHwYDVR0j
BBgwFoAUZWHGqOY17Qkb5aVT9+sLEvXkRJUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGRQN05GMUJkM3ZBekdEY2o3dm1RVlc5ZmtyQVE3UHltUDl1eE04Qk1V
V00vNS82NTYxQzZBOEU2MzVFRDA5MUJFNUE1NTNGN0VCMEIxMkY1RTQ0NDk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1NjFDNkE4RTYzNUVEMDkx
QkU1QTU1M0Y3RUIwQjEyRjVFNDQ0OTUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRkUDdORjFCZDN2QXpHRGNqN3ZtUVZXOWZrckFRN1B5bVA5dXhNOEJNVVdNLzUv
MzIzODMwMzQzYTM4Mzc2MzNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzgzMjMw
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAh8MA0GCSqGSIb3DQEBCwUAA4IBAQBpVfTQJfoHrf+e
k4uPnvjJkXOixgEuTYW2DwRM0/U7zqmtSlmcUjA5S18j1uPxjOtjr7TIfK4zc4Ln
oV8IRdJbvP3IVXpYjfXiLIFeYHFYQBtVS2bt1MRHd2kUUporSVXdTsu+zcmrQCJ+
bxK+gH3M9lKXqBEkHJRs9UgTpU30/1p3ZZfTTK2ggA57zNv/zP37o/l8T5wXXwN4
CCRGCbvJgSm7OLsPnIf9SFyCl7QCcENhkYSBA5he0ehzqnrBYW8FjLCoJ0MP8+3A
/1G+vM+CR0qOGx9Zoh0nuO/rRGYguLchU5OvZIOq4rqpwGsqG4nRJeIsYmwXTURd
Rg1GOFKU
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:52 2025 by rpki-client