Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/323830343a333464633a3a2f33322d3430203d3e20323635343835.roa
File: 323830343a333464633a3a2f33322d3430203d3e20323635343835.roa (raw, json)
Hash identifier: fi0nx9VEH+bSF5Va9xmFg9sEL87cu8bON4+0RP08rFY=
Subject key identifier: D0:01:D4:E9:11:47:BA:07:98:7B:EA:D2:8F:D7:9A:CE:C9:01:77:AF
Certificate issuer: /CN=F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE
Certificate serial: 2E223B9697B978A17FCC06137F961C6E1DB43C3F
Authority key identifier: F0:C1:0B:CB:9F:02:D8:24:7A:A0:2A:3E:DE:A9:4D:D4:B3:B9:9E:BE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/323830343a333464633a3a2f33322d3430203d3e20323635343835.roa
Signing time: Fri 07 Mar 2025 14:41:01 +0000
ROA not before: Fri 07 Mar 2025 14:36:01 +0000
ROA not after: Fri 06 Mar 2026 14:41:01 +0000
asID: 265485
IP address blocks: 2804:34dc::/32 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:22:3b:96:97:b9:78:a1:7f:cc:06:13:7f:96:1c:6e:1d:b4:3c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE
Validity
Not Before: Mar 7 14:36:01 2025 GMT
Not After : Mar 6 14:41:01 2026 GMT
Subject: CN=D001D4E91147BA07987BEAD28FD79ACEC90177AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e2:b8:4f:25:6c:89:f0:21:82:51:5f:7a:eb:
ec:30:ff:a8:88:08:14:18:70:18:d3:a0:10:1f:ca:
37:26:81:10:99:dd:a9:14:3d:c7:89:63:22:6a:d2:
58:b5:0d:27:13:15:a0:7e:b5:ee:6e:3d:b3:f9:5b:
29:bb:d1:4f:9f:78:29:d8:61:1d:9c:60:3b:64:c6:
41:bc:f3:5f:d3:85:97:f8:8f:ba:40:db:2d:28:9c:
f9:e6:8b:64:23:7e:d5:94:c9:d1:2e:e5:66:37:17:
8b:68:2a:83:e1:94:28:8a:4f:7d:c5:e7:26:48:07:
d1:59:89:59:4c:86:64:b1:ff:6c:38:97:d0:ca:27:
dd:ad:86:69:9b:3d:4a:6e:d3:9d:4d:92:e2:31:c2:
0b:83:58:ff:33:55:5d:b0:3e:f1:58:1c:30:f6:43:
96:18:56:d2:42:bd:1e:d8:8d:ef:ac:ef:22:7f:87:
0f:79:77:aa:56:c5:2f:ef:06:8c:2a:96:fd:f7:bc:
0f:da:ff:f3:69:db:94:01:49:ce:91:ca:1a:ff:5a:
13:82:bd:88:99:89:6c:cf:5b:6c:85:46:fd:ab:ef:
1b:b8:fb:5c:0f:69:37:ab:06:ca:fc:7b:be:fa:ad:
71:9f:63:7d:a6:0e:5f:a9:a2:3d:da:39:61:02:5b:
37:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:01:D4:E9:11:47:BA:07:98:7B:EA:D2:8F:D7:9A:CE:C9:01:77:AF
X509v3 Authority Key Identifier:
keyid:F0:C1:0B:CB:9F:02:D8:24:7A:A0:2A:3E:DE:A9:4D:D4:B3:B9:9E:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/323830343a333464633a3a2f33322d3430203d3e20323635343835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:34dc::/32
Signature Algorithm: sha256WithRSAEncryption
4f:89:06:35:56:79:d4:8e:93:87:c9:4c:fb:59:58:91:4d:b7:
6f:e4:9b:15:b5:32:e9:b5:02:ef:3c:15:eb:4f:6a:b7:72:52:
f4:b7:12:b9:99:92:b6:b4:b3:b1:24:a6:f9:bf:54:38:4d:5a:
de:ff:e6:1d:c9:5c:21:10:b4:e6:01:02:b8:e2:a0:6c:6f:35:
c6:0a:8b:8a:96:74:ec:7f:2d:fe:8f:2d:a7:62:12:61:56:9d:
ac:8c:f8:2e:fd:f5:41:d2:11:43:61:9e:2f:36:83:25:33:6b:
96:ab:ce:df:eb:85:1d:2e:e2:3e:1c:dd:56:7d:10:7e:17:90:
84:eb:ed:f6:fa:99:a8:fe:36:72:10:4b:25:ed:6e:24:9a:04:
5f:a2:eb:69:ad:1d:6b:44:15:4d:38:53:9c:27:b2:97:52:d4:
34:85:5e:fc:cd:1e:58:90:cf:d2:69:5a:6f:0f:74:86:19:a1:
d6:c0:7e:17:72:ff:30:e2:a1:e9:c9:4d:ff:a3:23:9a:db:ae:
d9:f3:21:35:f7:ed:35:96:f9:e6:eb:a9:9a:8c:79:f1:50:20:
10:7f:b2:fa:6b:16:6f:28:e7:99:0e:21:39:7f:c8:8f:c6:12:
e9:38:0b:e9:fa:ab:cf:13:bc:ef:67:c4:58:2e:9d:6d:e7:fa:
97:3f:84:34
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIULiI7lpe5eKF/zAYTf5Ycbh20PD8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjBDMTBCQ0I5RjAyRDgyNDdBQTAyQTNFREVBOTRERDRC
M0I5OUVCRTAeFw0yNTAzMDcxNDM2MDFaFw0yNjAzMDYxNDQxMDFaMDMxMTAvBgNV
BAMTKEQwMDFENEU5MTE0N0JBMDc5ODdCRUFEMjhGRDc5QUNFQzkwMTc3QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS4rhPJWyJ8CGCUV966+ww/6iI
CBQYcBjToBAfyjcmgRCZ3akUPceJYyJq0li1DScTFaB+te5uPbP5Wym70U+feCnY
YR2cYDtkxkG881/ThZf4j7pA2y0onPnmi2QjftWUydEu5WY3F4toKoPhlCiKT33F
5yZIB9FZiVlMhmSx/2w4l9DKJ92thmmbPUpu051NkuIxwguDWP8zVV2wPvFYHDD2
Q5YYVtJCvR7Yje+s7yJ/hw95d6pWxS/vBowqlv33vA/a//Np25QBSc6Ryhr/WhOC
vYiZiWzPW2yFRv2r7xu4+1wPaTerBsr8e776rXGfY32mDl+poj3aOWECWzc/AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU0AHU6RFHugeYe+rSj9eazskBd68wHwYDVR0j
BBgwFoAU8MELy58C2CR6oCo+3qlN1LO5nr4wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby81ZGt0d3B0M1FFWG4zb0NXenB0ZkoxTHpQS1JIbUtuS25rb3JLMTd5WWpq
LzEvRjBDMTBCQ0I5RjAyRDgyNDdBQTAyQTNFREVBOTRERDRCM0I5OUVCRS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9GMEMxMEJDQjlGMDJEODI0N0FB
MDJBM0VERUE5NERENEIzQjk5RUJFLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81
ZGt0d3B0M1FFWG4zb0NXenB0ZkoxTHpQS1JIbUtuS25rb3JLMTd5WWpqLzEvMzIz
ODMwMzQzYTMzMzQ2NDYzM2EzYTJmMzMzMjJkMzQzMDIwM2QzZTIwMzIzNjM1MzQz
ODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKAQ03DANBgkqhkiG9w0BAQsFAAOCAQEAT4kGNVZ51I6T
h8lM+1lYkU23b+SbFbUy6bUC7zwV609qt3JS9LcSuZmStrSzsSSm+b9UOE1a3v/m
HclcIRC05gECuOKgbG81xgqLipZ07H8t/o8tp2ISYVadrIz4Lv31QdIRQ2GeLzaD
JTNrlqvO3+uFHS7iPhzdVn0QfheQhOvt9vqZqP42chBLJe1uJJoEX6Lraa0da0QV
TThTnCeyl1LUNIVe/M0eWJDP0mlabw90hhmh1sB+F3L/MOKh6clN/6Mjmtuu2fMh
NfftNZb55uupmox58VAgEH+y+msWbyjnmQ4hOX/Ij8YS6TgL6fqrzxO872fEWC6d
bef6lz+ENA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:24 2025 by rpki-client