Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/323830343a333834343a3a2f33362d3336203d3e20323636343636.roa
File: 323830343a333834343a3a2f33362d3336203d3e20323636343636.roa (raw, json)
Hash identifier: LIejXtAMA4meqYT4RsEo9MbfVHvov+p164/h4Wl8gC0=
Subject key identifier: 58:13:F7:6F:01:37:DE:AA:DD:4C:3A:AE:42:D8:C1:BA:D8:5C:45:72
Certificate issuer: /CN=64024652CD71CE0D3988DAA5555337E88EA6AE45
Certificate serial: 707AE765EF339C17CC0480192026B58A1C0ECB90
Authority key identifier: 64:02:46:52:CD:71:CE:0D:39:88:DA:A5:55:53:37:E8:8E:A6:AE:45
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64024652CD71CE0D3988DAA5555337E88EA6AE45.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/323830343a333834343a3a2f33362d3336203d3e20323636343636.roa
Signing time: Fri 17 Jan 2025 11:45:04 +0000
ROA not before: Fri 17 Jan 2025 11:40:04 +0000
ROA not after: Fri 16 Jan 2026 11:45:04 +0000
asID: 266466
IP address blocks: 2804:3844::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:7a:e7:65:ef:33:9c:17:cc:04:80:19:20:26:b5:8a:1c:0e:cb:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64024652CD71CE0D3988DAA5555337E88EA6AE45
Validity
Not Before: Jan 17 11:40:04 2025 GMT
Not After : Jan 16 11:45:04 2026 GMT
Subject: CN=5813F76F0137DEAADD4C3AAE42D8C1BAD85C4572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cc:e8:11:62:41:31:fd:b2:45:94:c9:43:54:
4f:e8:49:1b:35:b0:da:77:3d:b1:09:ec:86:da:bb:
30:ed:46:57:6d:94:6d:1c:f3:f9:3a:3d:63:a8:c9:
6e:eb:d4:c0:58:91:c4:ff:0a:a2:fc:fc:89:44:71:
df:e0:57:27:3d:17:fc:bd:10:8b:db:b1:b3:75:57:
d6:2e:62:b2:e8:43:8e:5a:e9:72:23:71:56:d7:25:
9f:42:cd:ca:3e:34:60:4e:25:59:5b:88:c4:e3:4d:
5a:c1:33:e5:3b:e5:1d:d3:f9:4d:e9:48:26:6b:8f:
67:9b:62:ed:0a:5f:c1:37:ee:6f:87:65:1b:e9:e7:
19:36:65:e8:9e:bf:93:1d:6a:70:42:13:cb:ff:51:
19:18:e5:70:d0:62:2b:ab:03:53:5c:2b:8e:d8:ae:
13:dd:28:10:4d:60:84:43:2f:e9:a1:5f:c2:7d:cf:
59:15:1b:b5:90:ed:a2:61:f4:a9:ec:e0:c6:59:e8:
c3:64:24:ab:ba:48:39:54:6e:92:e6:22:61:bd:fa:
62:4a:7e:e8:e4:81:e4:34:31:f0:54:36:ac:31:39:
9a:1e:d9:02:7a:b1:36:b1:5b:59:f8:ee:26:c0:67:
81:14:5d:b4:7c:fa:92:61:d4:48:47:05:3d:7d:75:
0f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:13:F7:6F:01:37:DE:AA:DD:4C:3A:AE:42:D8:C1:BA:D8:5C:45:72
X509v3 Authority Key Identifier:
keyid:64:02:46:52:CD:71:CE:0D:39:88:DA:A5:55:53:37:E8:8E:A6:AE:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/64024652CD71CE0D3988DAA5555337E88EA6AE45.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64024652CD71CE0D3988DAA5555337E88EA6AE45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/323830343a333834343a3a2f33362d3336203d3e20323636343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3844::/36
Signature Algorithm: sha256WithRSAEncryption
c0:62:69:76:62:25:6a:a4:f6:c3:5e:1a:cf:5d:ea:e8:b7:59:
0a:0a:65:a9:0f:07:bc:50:98:d6:f0:cd:ae:af:d4:fd:23:f5:
53:25:bc:a2:88:60:d8:82:70:a8:28:ae:42:92:2a:32:41:3a:
07:c0:66:49:24:6e:29:ee:b1:71:6c:cc:7e:a4:63:41:20:5f:
2b:61:70:8e:f5:c1:62:74:23:4b:a6:42:c4:fa:e5:0f:4c:c9:
25:78:8e:33:ae:22:51:ac:17:c0:9e:ce:23:0d:3b:2b:78:f6:
89:64:2c:e3:5b:99:97:a6:56:14:d3:85:1e:2f:2b:f3:1a:1c:
9b:a1:66:95:37:86:bd:7d:0e:de:bd:4a:96:e2:81:61:ff:6c:
0e:0e:a2:e7:31:06:8e:23:ac:04:64:42:2a:8b:33:cf:59:5e:
5b:08:51:10:e1:89:bf:39:8a:0a:9a:fe:8a:bf:05:e5:54:a6:
93:9b:36:77:69:7d:ea:be:0e:8e:11:55:6a:ab:63:2e:18:44:
c9:9c:88:6d:a6:25:f9:d3:59:d8:70:5c:d5:e2:19:89:1c:0a:
ce:7f:ae:2a:8a:bb:da:74:68:f9:5c:c0:df:99:6f:fc:00:32:
88:73:a1:60:a3:a9:f6:0a:b3:99:b0:c4:17:4f:11:6d:9f:e0:
63:15:08:a2
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUcHrnZe8znBfMBIAZICa1ihwOy5AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQwMjQ2NTJDRDcxQ0UwRDM5ODhEQUE1NTU1MzM3RTg4
RUE2QUU0NTAeFw0yNTAxMTcxMTQwMDRaFw0yNjAxMTYxMTQ1MDRaMDMxMTAvBgNV
BAMTKDU4MTNGNzZGMDEzN0RFQUFERDRDM0FBRTQyRDhDMUJBRDg1QzQ1NzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYzOgRYkEx/bJFlMlDVE/oSRs1
sNp3PbEJ7IbauzDtRldtlG0c8/k6PWOoyW7r1MBYkcT/CqL8/IlEcd/gVyc9F/y9
EIvbsbN1V9YuYrLoQ45a6XIjcVbXJZ9Czco+NGBOJVlbiMTjTVrBM+U75R3T+U3p
SCZrj2ebYu0KX8E37m+HZRvp5xk2Zeiev5MdanBCE8v/URkY5XDQYiurA1NcK47Y
rhPdKBBNYIRDL+mhX8J9z1kVG7WQ7aJh9Kns4MZZ6MNkJKu6SDlUbpLmImG9+mJK
fujkgeQ0MfBUNqwxOZoe2QJ6sTaxW1n47ibAZ4EUXbR8+pJh1EhHBT19dQ8lAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUWBP3bwE33qrdTDquQtjButhcRXIwHwYDVR0j
BBgwFoAUZAJGUs1xzg05iNqlVVM36I6mrkUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby83VUtaUWdZNEh6ZDlCWjl6S1RXa3FWcVNMeDQ4UWJwVjhVYmI4RVc1SEg2
LzAvNjQwMjQ2NTJDRDcxQ0UwRDM5ODhEQUE1NTU1MzM3RTg4RUE2QUU0NS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS82NDAyNDY1MkNENzFDRTBEMzk4
OERBQTU1NTUzMzdFODhFQTZBRTQ1LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83
VUtaUWdZNEh6ZDlCWjl6S1RXa3FWcVNMeDQ4UWJwVjhVYmI4RVc1SEg2LzAvMzIz
ODMwMzQzYTMzMzgzNDM0M2EzYTJmMzMzNjJkMzMzNjIwM2QzZTIwMzIzNjM2MzQz
NjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/
BBIwEDAOBAIAAjAIAwYEKAQ4RAAwDQYJKoZIhvcNAQELBQADggEBAMBiaXZiJWqk
9sNeGs9d6ui3WQoKZakPB7xQmNbwza6v1P0j9VMlvKKIYNiCcKgorkKSKjJBOgfA
ZkkkbinusXFszH6kY0EgXythcI71wWJ0I0umQsT65Q9MySV4jjOuIlGsF8CeziMN
Oyt49olkLONbmZemVhTThR4vK/MaHJuhZpU3hr19Dt69SpbigWH/bA4OoucxBo4j
rARkQiqLM89ZXlsIURDhib85igqa/oq/BeVUppObNndpfeq+Do4RVWqrYy4YRMmc
iG2mJfnTWdhwXNXiGYkcCs5/riqKu9p0aPlcwN+Zb/wAMohzoWCjqfYKs5mwxBdP
EW2f4GMVCKI=
-----END CERTIFICATE-----
Generated at Wed Apr 9 06:00:11 2025 by rpki-client