Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/323830343a313639383a383030303a3a2f33332d3333203d3e20323633323935.roa
File: 323830343a313639383a383030303a3a2f33332d3333203d3e20323633323935.roa (raw, json)
Hash identifier: fPj7rg7fZc0ufuW37UUqQ7tQMzP+c37sSLxXLXuCFbE=
Subject key identifier: D2:E0:4D:2F:C6:AD:11:E1:28:B7:76:D5:9D:99:D9:F5:4D:FF:89:04
Certificate issuer: /CN=BFDBD735371A4093C08BE20ED8C03701114BA75E
Certificate serial: 5D758F447964B96A11FFC268DC1E0BBAED9FB78E
Authority key identifier: BF:DB:D7:35:37:1A:40:93:C0:8B:E2:0E:D8:C0:37:01:11:4B:A7:5E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFDBD735371A4093C08BE20ED8C03701114BA75E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/323830343a313639383a383030303a3a2f33332d3333203d3e20323633323935.roa
Signing time: Fri 31 Jan 2025 18:41:58 +0000
ROA not before: Fri 31 Jan 2025 18:36:58 +0000
ROA not after: Fri 30 Jan 2026 18:41:58 +0000
asID: 263295
IP address blocks: 2804:1698:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:75:8f:44:79:64:b9:6a:11:ff:c2:68:dc:1e:0b:ba:ed:9f:b7:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFDBD735371A4093C08BE20ED8C03701114BA75E
Validity
Not Before: Jan 31 18:36:58 2025 GMT
Not After : Jan 30 18:41:58 2026 GMT
Subject: CN=D2E04D2FC6AD11E128B776D59D99D9F54DFF8904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:be:2c:4a:be:0a:5b:1f:c1:7c:ac:bd:b0:d3:
7c:b3:1c:35:08:cf:6f:99:ce:2d:59:d2:f7:40:6b:
7d:28:de:7f:cc:55:a3:d9:5d:df:86:b4:d6:bd:c6:
c8:18:07:31:ea:ec:11:3c:c0:b9:bb:23:3b:2c:b5:
06:05:d4:07:78:e0:6b:71:f3:4d:0a:57:be:2e:4f:
e4:e8:0e:1e:73:b4:38:c3:9d:f9:46:a2:36:7d:34:
db:09:1e:07:b5:bb:d3:9f:88:c6:4b:14:d5:44:e9:
ad:c5:d9:76:3d:3d:21:ae:d4:06:06:a0:a4:6d:2e:
12:2d:ce:38:67:6a:aa:ab:d1:20:83:e7:89:59:73:
32:57:b4:91:96:15:42:91:2f:36:a2:1c:67:9b:a6:
6b:01:0f:41:a4:c8:21:54:f2:3f:ef:4a:bb:7b:7a:
c2:49:7d:6c:54:76:37:4d:f1:32:a8:a2:ff:06:47:
2f:3b:be:a2:20:ee:c3:58:36:88:20:81:5d:9c:e9:
9a:e3:d2:95:ed:5c:94:dd:b1:f3:d9:5e:37:8a:63:
51:67:d7:ac:84:16:c3:fd:09:d5:47:ca:61:bd:37:
06:6a:ec:19:8f:6a:42:86:f0:f3:57:b5:39:f2:87:
0d:7b:4e:32:ce:25:92:70:fe:92:c2:16:a3:39:a3:
ae:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E0:4D:2F:C6:AD:11:E1:28:B7:76:D5:9D:99:D9:F5:4D:FF:89:04
X509v3 Authority Key Identifier:
keyid:BF:DB:D7:35:37:1A:40:93:C0:8B:E2:0E:D8:C0:37:01:11:4B:A7:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/BFDBD735371A4093C08BE20ED8C03701114BA75E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFDBD735371A4093C08BE20ED8C03701114BA75E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/323830343a313639383a383030303a3a2f33332d3333203d3e20323633323935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1698:8000::/33
Signature Algorithm: sha256WithRSAEncryption
42:1a:4d:df:51:27:3e:86:bf:89:72:a9:ca:4a:7c:d2:c9:35:
25:80:26:af:b4:7f:2f:fd:c9:e6:aa:c7:e0:a9:d3:8c:cc:90:
fa:5e:54:29:85:39:06:a7:4e:45:cd:8b:e6:66:19:90:01:aa:
74:94:59:f7:54:ba:9f:8c:14:f3:46:1e:f0:21:4a:d4:ef:71:
51:91:37:4a:94:c6:23:a2:5b:cb:54:e6:76:97:19:b5:67:bc:
d5:78:42:dd:72:11:5b:e4:0a:3f:25:74:b4:b7:19:6c:53:59:
43:2f:f9:c6:d3:ad:41:33:e4:26:c8:61:2f:52:47:ce:68:e0:
39:32:ec:33:15:db:23:9f:db:74:94:be:ff:b9:bf:6e:da:80:
6a:f0:ab:69:c9:16:27:a8:5d:5e:c1:2a:20:4f:c2:17:d4:35:
38:39:ce:77:05:30:9a:e4:fd:18:87:1e:61:3c:cc:9d:06:19:
d0:8e:0a:b7:eb:e3:1a:e6:07:37:71:14:1b:14:79:f8:e8:6d:
9e:74:6c:f7:14:d2:77:07:2c:6b:1c:e2:7c:32:54:6d:0f:34:
65:e8:d5:79:fb:26:13:48:b6:4b:95:21:00:3c:b0:a7:1d:34:
5a:be:f1:f6:86:f7:e3:07:ba:dc:f2:1f:12:b0:a3:48:d2:6e:
34:a9:bb:33
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUXXWPRHlkuWoR/8Jo3B4Luu2ft44wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkZEQkQ3MzUzNzFBNDA5M0MwOEJFMjBFRDhDMDM3MDEx
MTRCQTc1RTAeFw0yNTAxMzExODM2NThaFw0yNjAxMzAxODQxNThaMDMxMTAvBgNV
BAMTKEQyRTA0RDJGQzZBRDExRTEyOEI3NzZENTlEOTlEOUY1NERGRjg5MDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdvixKvgpbH8F8rL2w03yzHDUI
z2+Zzi1Z0vdAa30o3n/MVaPZXd+GtNa9xsgYBzHq7BE8wLm7IzsstQYF1Ad44Gtx
800KV74uT+ToDh5ztDjDnflGojZ9NNsJHge1u9OfiMZLFNVE6a3F2XY9PSGu1AYG
oKRtLhItzjhnaqqr0SCD54lZczJXtJGWFUKRLzaiHGebpmsBD0GkyCFU8j/vSrt7
esJJfWxUdjdN8TKoov8GRy87vqIg7sNYNogggV2c6Zrj0pXtXJTdsfPZXjeKY1Fn
16yEFsP9CdVHymG9NwZq7BmPakKG8PNXtTnyhw17TjLOJZJw/pLCFqM5o67/AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU0uBNL8atEeEot3bVnZnZ9U3/iQQwHwYDVR0j
BBgwFoAUv9vXNTcaQJPAi+IO2MA3ARFLp14wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEIzNEZiekRjRkpXemVaOUVDWDlRSHhmNzdtTDlITU1tZDliQXBodlV0
ZE4vMC9CRkRCRDczNTM3MUE0MDkzQzA4QkUyMEVEOEMwMzcwMTExNEJBNzVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGREJENzM1MzcxQTQwOTND
MDhCRTIwRUQ4QzAzNzAxMTE0QkE3NUUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhCMzRGYnpEY0ZKV3plWjlFQ1g5UUh4Zjc3bUw5SE1NbWQ5YkFwaHZVdGROLzAv
MzIzODMwMzQzYTMxMzYzOTM4M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzMzMyMzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEFpiAMA0GCSqGSIb3DQEBCwUA
A4IBAQBCGk3fUSc+hr+JcqnKSnzSyTUlgCavtH8v/cnmqsfgqdOMzJD6XlQphTkG
p05FzYvmZhmQAap0lFn3VLqfjBTzRh7wIUrU73FRkTdKlMYjolvLVOZ2lxm1Z7zV
eELdchFb5Ao/JXS0txlsU1lDL/nG061BM+QmyGEvUkfOaOA5MuwzFdsjn9t0lL7/
ub9u2oBq8KtpyRYnqF1ewSogT8IX1DU4Oc53BTCa5P0Yhx5hPMydBhnQjgq36+Ma
5gc3cRQbFHn46G2edGz3FNJ3ByxrHOJ8MlRtDzRl6NV5+yYTSLZLlSEAPLCnHTRa
vvH2hvfjB7rc8h8SsKNI0m40qbsz
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:55:08 2025 by rpki-client