Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a383030303a3a2f33342d3334203d3e20323639303234.roa
File: 323830343a356534633a383030303a3a2f33342d3334203d3e20323639303234.roa (raw, json)
Hash identifier: LBp3Mu2vH91Ea1d9QVEHcsDiEFRurZ4NBSe+VPaOwD0=
Subject key identifier: 2C:DD:5F:94:A2:1A:99:7B:4D:AC:9E:9D:16:6B:4D:D7:30:1B:0B:EE
Certificate issuer: /CN=0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032
Certificate serial: 255D30187B0B816AEFBEEFDD2F52CECCE1DDFD5F
Authority key identifier: 0D:6B:BD:FF:03:C5:B7:F2:CF:FA:AA:56:24:D6:A8:B3:A6:5F:30:32
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a383030303a3a2f33342d3334203d3e20323639303234.roa
Signing time: Wed 30 Apr 2025 18:19:17 +0000
ROA not before: Wed 30 Apr 2025 18:14:17 +0000
ROA not after: Wed 29 Apr 2026 18:19:17 +0000
asID: 269024
IP address blocks: 2804:5e4c:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:5d:30:18:7b:0b:81:6a:ef:be:ef:dd:2f:52:ce:cc:e1:dd:fd:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032
Validity
Not Before: Apr 30 18:14:17 2025 GMT
Not After : Apr 29 18:19:17 2026 GMT
Subject: CN=2CDD5F94A21A997B4DAC9E9D166B4DD7301B0BEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:36:0a:01:08:d4:2a:74:1c:3f:f9:48:07:af:
3b:08:85:64:92:96:27:d7:b2:86:3f:49:7b:81:b9:
81:72:0b:93:55:1f:0a:24:dc:47:97:04:5a:cc:20:
c6:16:dc:35:7b:55:98:45:2b:08:30:69:27:f4:85:
9d:ca:76:6b:a9:e2:31:7e:98:06:dd:81:59:6f:7c:
9c:af:6d:73:dd:bc:58:c5:ad:9f:e7:25:89:50:de:
6f:2d:16:fe:6b:9e:26:c7:0d:77:b7:fd:0f:21:49:
a2:0a:56:dc:d7:45:c2:5b:d7:0f:da:d7:f0:99:27:
63:7e:ee:77:6e:0c:33:19:a3:2c:7e:78:93:a2:67:
8d:18:0a:6d:00:57:64:19:c5:3c:d1:7e:64:60:0c:
65:09:2d:8f:4b:45:96:48:3e:8e:cb:e4:10:a8:fc:
3a:29:bc:4d:14:b3:f2:9c:24:d3:ef:06:7f:34:66:
a5:4d:bd:75:12:0f:2e:69:f3:bc:43:85:92:45:1d:
8d:ed:84:26:1d:38:63:6a:f5:32:b4:f7:93:de:f6:
15:78:86:a9:46:da:64:10:e0:fc:71:f1:ea:50:bf:
8b:7f:65:04:80:d1:2a:8d:8d:cd:35:ef:d0:ad:03:
d3:85:7c:8f:65:8d:a9:0f:ac:e5:d9:95:97:02:bf:
de:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DD:5F:94:A2:1A:99:7B:4D:AC:9E:9D:16:6B:4D:D7:30:1B:0B:EE
X509v3 Authority Key Identifier:
keyid:0D:6B:BD:FF:03:C5:B7:F2:CF:FA:AA:56:24:D6:A8:B3:A6:5F:30:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a383030303a3a2f33342d3334203d3e20323639303234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5e4c:8000::/34
Signature Algorithm: sha256WithRSAEncryption
da:19:5c:43:87:37:79:5c:53:cf:08:8d:d7:d4:60:ca:7b:db:
e1:dd:94:48:3f:d1:5a:db:b0:6d:2a:b1:08:cf:5f:65:dd:d9:
26:f8:1a:6c:af:e7:46:af:16:53:aa:f0:1f:59:6e:a1:aa:70:
18:74:19:0e:54:f3:73:8a:7c:9c:83:bc:6d:91:63:06:d1:c9:
ed:a1:27:86:68:69:95:ed:8f:3f:9b:82:df:f8:54:9f:ef:d3:
e0:71:b7:8c:74:96:3a:c0:d1:d4:ea:12:45:0b:d8:9f:fa:20:
7a:f6:18:1f:72:aa:7c:49:a9:6c:50:a6:f4:a9:c8:fc:73:c5:
da:4f:69:77:dc:ed:7f:99:ee:c6:36:e5:06:51:8c:29:20:ca:
a8:0c:ac:0c:73:17:0b:66:85:a9:24:44:b2:14:66:a5:c4:33:
c3:f7:79:ee:21:be:d1:50:aa:8f:78:1f:9e:fe:68:d9:ab:78:
03:e2:ba:c0:40:62:5d:de:d4:dd:8c:df:d5:ec:16:f6:d2:9b:
a8:a3:9d:13:78:f7:74:f7:0a:48:ed:7e:0b:ff:8e:03:63:94:
2a:a8:a7:44:48:ac:26:4e:ab:48:e5:fe:3e:46:b9:3b:43:ba:
46:b3:dd:de:d1:54:be:b4:62:4b:44:2d:06:76:6f:ff:0c:da:
01:e0:22:9c
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUJV0wGHsLgWrvvu/dL1LOzOHd/V8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ2QkJERkYwM0M1QjdGMkNGRkFBQTU2MjRENkE4QjNB
NjVGMzAzMjAeFw0yNTA0MzAxODE0MTdaFw0yNjA0MjkxODE5MTdaMDMxMTAvBgNV
BAMTKDJDREQ1Rjk0QTIxQTk5N0I0REFDOUU5RDE2NkI0REQ3MzAxQjBCRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrNgoBCNQqdBw/+UgHrzsIhWSS
lifXsoY/SXuBuYFyC5NVHwok3EeXBFrMIMYW3DV7VZhFKwgwaSf0hZ3Kdmup4jF+
mAbdgVlvfJyvbXPdvFjFrZ/nJYlQ3m8tFv5rnibHDXe3/Q8hSaIKVtzXRcJb1w/a
1/CZJ2N+7nduDDMZoyx+eJOiZ40YCm0AV2QZxTzRfmRgDGUJLY9LRZZIPo7L5BCo
/DopvE0Us/KcJNPvBn80ZqVNvXUSDy5p87xDhZJFHY3thCYdOGNq9TK095Pe9hV4
hqlG2mQQ4Pxx8epQv4t/ZQSA0SqNjc0179CtA9OFfI9ljakPrOXZlZcCv961AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQULN1flKIamXtNrJ6dFmtN1zAbC+4wHwYDVR0j
BBgwFoAUDWu9/wPFt/LP+qpWJNaos6ZfMDIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOENjSHNIUlZ3M241MWJIZ051M1lxYzdQNFdGTFM4bVk1NExYYVV2a1lE
ZFovMC8wRDZCQkRGRjAzQzVCN0YyQ0ZGQUFBNTYyNEQ2QThCM0E2NUYzMDMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBENkJCREZGMDNDNUI3RjJD
RkZBQUE1NjI0RDZBOEIzQTY1RjMwMzIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhDY0hzSFJWdzNuNTFiSGdOdTNZcWM3UDRXRkxTOG1ZNTRMWGFVdmtZRGRaLzAv
MzIzODMwMzQzYTM1NjUzNDYzM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzOTMwMzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEXkyAMA0GCSqGSIb3DQEBCwUA
A4IBAQDaGVxDhzd5XFPPCI3X1GDKe9vh3ZRIP9Fa27BtKrEIz19l3dkm+Bpsr+dG
rxZTqvAfWW6hqnAYdBkOVPNzinycg7xtkWMG0cntoSeGaGmV7Y8/m4Lf+FSf79Pg
cbeMdJY6wNHU6hJFC9if+iB69hgfcqp8SalsUKb0qcj8c8XaT2l33O1/me7GNuUG
UYwpIMqoDKwMcxcLZoWpJESyFGalxDPD93nuIb7RUKqPeB+e/mjZq3gD4rrAQGJd
3tTdjN/V7Bb20puoo50TePd09wpI7X4L/44DY5QqqKdESKwmTqtI5f4+Rrk7Q7pG
s93e0VS+tGJLRC0Gdm//DNoB4CKc
-----END CERTIFICATE-----
Generated at Thu Jun 12 12:05:49 2025 by rpki-client