Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7X8XGChRSNLLgkwybJbu8B93EwWFYUoGPBdmKbykEmbd/0/323830343a393163343a633030303a3a2f33342d3334203d3e20323734363633.roa
File: 323830343a393163343a633030303a3a2f33342d3334203d3e20323734363633.roa (raw, json)
Hash identifier: X+Rglzp3u7VniINSzeRo84CIDzXzm2g1KWhBinLsdwo=
Subject key identifier: 5F:95:A4:00:0F:7A:AF:85:E0:1B:26:5C:0B:F9:CD:4A:C0:89:59:D4
Certificate issuer: /CN=BDBA2324901F2A5030A374708C6F757D963E42AA
Certificate serial: 025E8F572B61E90BC27213BFF92500B8B657ADEB
Authority key identifier: BD:BA:23:24:90:1F:2A:50:30:A3:74:70:8C:6F:75:7D:96:3E:42:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDBA2324901F2A5030A374708C6F757D963E42AA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7X8XGChRSNLLgkwybJbu8B93EwWFYUoGPBdmKbykEmbd/0/323830343a393163343a633030303a3a2f33342d3334203d3e20323734363633.roa
Signing time: Tue 28 Jan 2025 19:14:38 +0000
ROA not before: Tue 28 Jan 2025 19:09:38 +0000
ROA not after: Tue 27 Jan 2026 19:14:38 +0000
asID: 274663
IP address blocks: 2804:91c4:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:5e:8f:57:2b:61:e9:0b:c2:72:13:bf:f9:25:00:b8:b6:57:ad:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDBA2324901F2A5030A374708C6F757D963E42AA
Validity
Not Before: Jan 28 19:09:38 2025 GMT
Not After : Jan 27 19:14:38 2026 GMT
Subject: CN=5F95A4000F7AAF85E01B265C0BF9CD4AC08959D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:eb:1d:93:b6:45:bf:ac:2b:b4:4e:79:9c:d6:
58:12:af:59:6f:7d:9f:9b:73:e7:5b:12:85:ac:f6:
de:76:37:e6:2c:d9:b0:97:86:6b:d7:8d:3c:e0:de:
57:50:38:7b:31:f9:0e:79:49:d7:0e:f3:88:9d:c3:
66:c8:b1:15:84:0e:8a:a0:92:18:ea:ad:f2:78:3a:
b1:06:df:5b:d1:25:ac:d7:1b:1b:4a:38:08:db:cb:
3b:31:3a:8b:0a:b3:46:42:37:4d:99:7a:dc:31:e6:
73:27:ff:66:89:88:a6:8c:d4:d7:09:76:39:21:c9:
4e:e9:fc:9b:58:c8:c1:f0:40:2c:05:21:a3:30:79:
64:1c:f9:9f:f0:ca:2e:b9:86:00:db:8b:02:2a:4b:
7c:3e:b2:1f:bf:16:4e:13:28:09:fb:96:07:06:57:
a1:d7:fd:7a:b9:4d:ad:80:76:42:45:1e:d2:a7:72:
33:60:cd:64:1c:2e:7b:9e:d1:48:91:9e:d9:56:75:
05:86:41:3f:fc:78:51:7f:aa:5e:90:db:70:a4:5b:
32:e9:ed:a0:5f:ce:11:c9:70:4e:b3:97:d3:b4:e6:
cd:a8:8b:bf:5f:9d:a1:f5:fe:dd:ed:33:11:ea:72:
07:1e:a4:dd:b4:96:28:b8:db:35:53:69:7e:85:75:
71:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:95:A4:00:0F:7A:AF:85:E0:1B:26:5C:0B:F9:CD:4A:C0:89:59:D4
X509v3 Authority Key Identifier:
keyid:BD:BA:23:24:90:1F:2A:50:30:A3:74:70:8C:6F:75:7D:96:3E:42:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7X8XGChRSNLLgkwybJbu8B93EwWFYUoGPBdmKbykEmbd/0/BDBA2324901F2A5030A374708C6F757D963E42AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDBA2324901F2A5030A374708C6F757D963E42AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7X8XGChRSNLLgkwybJbu8B93EwWFYUoGPBdmKbykEmbd/0/323830343a393163343a633030303a3a2f33342d3334203d3e20323734363633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:91c4:c000::/34
Signature Algorithm: sha256WithRSAEncryption
4e:c6:49:47:fc:0f:4b:b1:c6:27:22:e1:d9:1b:20:43:ba:61:
47:71:0d:47:2d:20:74:28:d7:96:02:d2:d1:5c:cb:ea:2c:ea:
a0:e6:f3:82:e0:60:71:7d:45:0c:73:c8:3e:d3:d0:ac:60:1d:
e7:06:5e:12:34:76:71:dd:78:22:9c:8a:d9:37:37:ea:c9:e8:
94:42:c1:8c:ff:1e:4f:78:d5:93:4a:25:39:44:43:8e:05:c2:
53:4b:9c:92:fa:87:32:f5:c6:6a:99:03:9c:b4:45:14:f4:02:
b2:a1:75:e4:b3:c3:a6:fa:bb:14:c3:ef:e8:a2:a7:5d:13:8f:
41:87:c2:19:fd:f4:be:94:ed:cb:d9:36:4f:df:8b:01:49:9a:
b3:e0:41:73:d0:af:57:03:6e:f9:33:ab:35:c8:8c:1e:43:08:
1c:59:86:91:62:0c:dd:a6:5b:9f:e8:a9:26:26:56:d1:f3:7a:
16:d1:9e:a1:cf:ac:84:08:0d:24:a8:26:61:64:2b:be:2b:b3:
96:b2:6f:a6:c4:1c:6d:fb:6a:20:b3:c4:07:10:d0:a7:42:c3:
f2:c9:eb:c5:8c:5f:4b:38:e6:3e:53:0f:14:8f:39:f3:a1:3b:
6f:fe:a5:74:ce:f5:1a:b0:e7:18:4c:ce:a1:52:ca:c2:18:56:
c5:5c:de:f4
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUAl6PVyth6QvCchO/+SUAuLZXreswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkRCQTIzMjQ5MDFGMkE1MDMwQTM3NDcwOEM2Rjc1N0Q5
NjNFNDJBQTAeFw0yNTAxMjgxOTA5MzhaFw0yNjAxMjcxOTE0MzhaMDMxMTAvBgNV
BAMTKDVGOTVBNDAwMEY3QUFGODVFMDFCMjY1QzBCRjlDRDRBQzA4OTU5RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB6x2TtkW/rCu0Tnmc1lgSr1lv
fZ+bc+dbEoWs9t52N+Ys2bCXhmvXjTzg3ldQOHsx+Q55SdcO84idw2bIsRWEDoqg
khjqrfJ4OrEG31vRJazXGxtKOAjbyzsxOosKs0ZCN02Zetwx5nMn/2aJiKaM1NcJ
djkhyU7p/JtYyMHwQCwFIaMweWQc+Z/wyi65hgDbiwIqS3w+sh+/Fk4TKAn7lgcG
V6HX/Xq5Ta2AdkJFHtKncjNgzWQcLnue0UiRntlWdQWGQT/8eFF/ql6Q23CkWzLp
7aBfzhHJcE6zl9O05s2oi79fnaH1/t3tMxHqcgcepN20lii42zVTaX6FdXEXAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUX5WkAA96r4XgGyZcC/nNSsCJWdQwHwYDVR0j
BBgwFoAUvbojJJAfKlAwo3RwjG91fZY+QqowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1g4WEdDaFJTTkxMZ2t3eWJKYnU4QjkzRXdXRllVb0dQQmRtS2J5a0Vt
YmQvMC9CREJBMjMyNDkwMUYyQTUwMzBBMzc0NzA4QzZGNzU3RDk2M0U0MkFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JEQkEyMzI0OTAxRjJBNTAz
MEEzNzQ3MDhDNkY3NTdEOTYzRTQyQUEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdYOFhHQ2hSU05MTGdrd3liSmJ1OEI5M0V3V0ZZVW9HUEJkbUtieWtFbWJkLzAv
MzIzODMwMzQzYTM5MzE2MzM0M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczNDM2MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEkcTAMA0GCSqGSIb3DQEBCwUA
A4IBAQBOxklH/A9LscYnIuHZGyBDumFHcQ1HLSB0KNeWAtLRXMvqLOqg5vOC4GBx
fUUMc8g+09CsYB3nBl4SNHZx3XginIrZNzfqyeiUQsGM/x5PeNWTSiU5REOOBcJT
S5yS+ocy9cZqmQOctEUU9AKyoXXks8Om+rsUw+/ooqddE49Bh8IZ/fS+lO3L2TZP
34sBSZqz4EFz0K9XA275M6s1yIweQwgcWYaRYgzdpluf6KkmJlbR83oW0Z6hz6yE
CA0kqCZhZCu+K7OWsm+mxBxt+2ogs8QHENCnQsPyyevFjF9LOOY+Uw8UjznzoTtv
/qV0zvUasOcYTM6hUsrCGFbFXN70
-----END CERTIFICATE-----
Generated at Mon Apr 7 12:39:27 2025 by rpki-client