Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/1/323830343a316139343a3a2f33322d3438203d3e203631383639.roa
File: 323830343a316139343a3a2f33322d3438203d3e203631383639.roa (raw, json)
Hash identifier: mpL6GhGK6J+O2fxRiEFeXck7mCBVnlY9RqzfrvGdhoc=
Subject key identifier: 2E:BE:56:EF:74:11:DA:E4:33:70:1C:DD:42:AD:FC:20:B2:B0:2A:F8
Certificate issuer: /CN=E7D63E8C642CED33A55042FA42DB4DBC8D574437
Certificate serial: 58C69478D8F8A4CD8E49C334BFF7437395419D01
Authority key identifier: E7:D6:3E:8C:64:2C:ED:33:A5:50:42:FA:42:DB:4D:BC:8D:57:44:37
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D63E8C642CED33A55042FA42DB4DBC8D574437.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/1/323830343a316139343a3a2f33322d3438203d3e203631383639.roa
Signing time: Thu 06 Mar 2025 18:52:22 +0000
ROA not before: Thu 06 Mar 2025 18:47:22 +0000
ROA not after: Thu 05 Mar 2026 18:52:22 +0000
asID: 61869
IP address blocks: 2804:1a94::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:c6:94:78:d8:f8:a4:cd:8e:49:c3:34:bf:f7:43:73:95:41:9d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E7D63E8C642CED33A55042FA42DB4DBC8D574437
Validity
Not Before: Mar 6 18:47:22 2025 GMT
Not After : Mar 5 18:52:22 2026 GMT
Subject: CN=2EBE56EF7411DAE433701CDD42ADFC20B2B02AF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1e:30:ed:5e:f8:c7:ec:97:c8:ba:5f:f4:53:
a1:37:6f:7a:7d:8b:a8:86:60:ca:ea:0a:40:df:20:
aa:0a:c9:db:e6:d5:ec:d5:fb:6a:04:02:02:d7:09:
09:44:c6:7d:f3:35:15:88:0e:83:58:5a:b0:8a:21:
8a:1c:30:9d:2a:e2:38:03:c0:12:56:5d:fe:00:ad:
d0:1b:25:6a:24:31:ac:89:3e:40:f0:c8:23:1f:16:
d2:db:fa:7b:b3:7c:0e:11:88:c8:df:2c:f5:e8:18:
76:c0:b5:dc:d3:74:bd:2d:92:57:4c:cb:55:e5:a7:
ff:61:65:f7:a6:49:d0:5e:4c:32:6b:b6:e8:bf:b4:
22:65:01:92:7e:79:4f:bc:46:57:ad:52:11:ca:bb:
be:6a:f2:35:ad:38:1a:f5:1b:ba:97:87:c3:72:b0:
75:5f:ba:7c:13:69:70:8e:2c:5d:44:e7:1c:77:61:
40:3c:55:31:2e:eb:6d:bd:02:c0:ba:cc:c1:40:a5:
e3:00:51:ba:b5:35:fe:da:95:32:f3:47:30:06:48:
4b:e8:37:b6:02:11:d5:5e:0c:55:86:47:3b:86:19:
6d:4a:74:23:26:36:8f:bc:37:32:0e:ad:f7:a9:12:
94:1d:90:87:76:8e:57:41:7b:49:f1:38:35:03:ac:
52:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BE:56:EF:74:11:DA:E4:33:70:1C:DD:42:AD:FC:20:B2:B0:2A:F8
X509v3 Authority Key Identifier:
keyid:E7:D6:3E:8C:64:2C:ED:33:A5:50:42:FA:42:DB:4D:BC:8D:57:44:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/1/E7D63E8C642CED33A55042FA42DB4DBC8D574437.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D63E8C642CED33A55042FA42DB4DBC8D574437.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/1/323830343a316139343a3a2f33322d3438203d3e203631383639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1a94::/32
Signature Algorithm: sha256WithRSAEncryption
51:76:53:cb:fc:04:0d:1f:ca:e0:7e:65:e8:ab:22:0f:cf:35:
33:7a:7b:e7:ce:b0:36:4e:d3:6c:85:11:07:12:23:86:fc:38:
9c:9a:d9:0e:13:cc:3c:91:52:f3:92:4a:6d:25:e7:d3:37:d0:
2c:24:eb:4b:7f:bc:3c:22:23:87:1f:e3:34:4b:de:cb:b9:71:
da:08:17:43:4c:11:b0:ed:31:e0:af:40:d3:78:75:f7:c6:91:
16:50:a5:aa:60:45:02:68:ba:48:d2:33:10:27:e0:66:50:46:
91:76:7d:0b:c0:b4:f1:43:ac:5e:59:48:99:29:15:08:3f:a0:
36:90:b4:6c:ba:40:c0:bd:66:54:be:da:2b:4c:22:d5:43:a0:
e3:10:64:d2:c4:b4:31:15:be:0a:23:92:7a:39:ab:52:f2:e8:
b8:fb:15:8d:ef:85:78:3f:db:b6:ab:25:2b:06:39:76:fc:16:
76:ab:80:6f:df:61:9d:3a:61:6a:00:1f:f5:60:f1:d1:ef:73:
6e:ed:f1:12:ca:50:66:b2:a4:ee:91:05:69:25:5b:42:5c:d7:
db:c2:2e:89:c9:17:79:75:d8:ba:4f:19:0f:47:dc:69:0a:f3:
6c:78:98:37:44:08:67:cd:20:64:40:62:9e:f0:39:94:ae:22:
3e:1f:ad:d3
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUWMaUeNj4pM2OScM0v/dDc5VBnQEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTdENjNFOEM2NDJDRUQzM0E1NTA0MkZBNDJEQjREQkM4
RDU3NDQzNzAeFw0yNTAzMDYxODQ3MjJaFw0yNjAzMDUxODUyMjJaMDMxMTAvBgNV
BAMTKDJFQkU1NkVGNzQxMURBRTQzMzcwMUNERDQyQURGQzIwQjJCMDJBRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiHjDtXvjH7JfIul/0U6E3b3p9
i6iGYMrqCkDfIKoKydvm1ezV+2oEAgLXCQlExn3zNRWIDoNYWrCKIYocMJ0q4jgD
wBJWXf4ArdAbJWokMayJPkDwyCMfFtLb+nuzfA4RiMjfLPXoGHbAtdzTdL0tkldM
y1Xlp/9hZfemSdBeTDJrtui/tCJlAZJ+eU+8RletUhHKu75q8jWtOBr1G7qXh8Ny
sHVfunwTaXCOLF1E5xx3YUA8VTEu6229AsC6zMFApeMAUbq1Nf7alTLzRzAGSEvo
N7YCEdVeDFWGRzuGGW1KdCMmNo+8NzIOrfepEpQdkId2jldBe0nxODUDrFJHAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQULr5W73QR2uQzcBzdQq38ILKwKvgwHwYDVR0j
BBgwFoAU59Y+jGQs7TOlUEL6QttNvI1XRDcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHNvWnl0eVh1U1FwTFNKWGVxRWpQQTVpRlVRVzRhUVZLVmhGSjlnMm9W
Wm4vMS9FN0Q2M0U4QzY0MkNFRDMzQTU1MDQyRkE0MkRCNERCQzhENTc0NDM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3RDYzRThDNjQyQ0VEMzNB
NTUwNDJGQTQyREI0REJDOEQ1NzQ0MzcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRzb1p5dHlYdVNRcExTSlhlcUVqUEE1aUZVUVc0YVFWS1ZoRko5ZzJvVlpuLzEv
MzIzODMwMzQzYTMxNjEzOTM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMTM4
MzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEGpQwDQYJKoZIhvcNAQELBQADggEBAFF2U8v8BA0f
yuB+ZeirIg/PNTN6e+fOsDZO02yFEQcSI4b8OJya2Q4TzDyRUvOSSm0l59M30Cwk
60t/vDwiI4cf4zRL3su5cdoIF0NMEbDtMeCvQNN4dffGkRZQpapgRQJoukjSMxAn
4GZQRpF2fQvAtPFDrF5ZSJkpFQg/oDaQtGy6QMC9ZlS+2itMItVDoOMQZNLEtDEV
vgojkno5q1Ly6Lj7FY3vhXg/27arJSsGOXb8FnargG/fYZ06YWoAH/Vg8dHvc27t
8RLKUGaypO6RBWklW0Jc19vCLonJF3l12LpPGQ9H3GkK82x4mDdECGfNIGRAYp7w
OZSuIj4frdM=
-----END CERTIFICATE-----
Generated at Mon Apr 7 03:03:01 2025 by rpki-client