Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/323830343a333466343a3a2f33322d3332203d3e20323635343931.roa
File: 323830343a333466343a3a2f33322d3332203d3e20323635343931.roa (raw, json)
Hash identifier: ls2cE4GO8ycNrvpSlbK3TTN0M/405inSaZhx91gM3eA=
Subject key identifier: 5C:09:92:9A:36:8D:7A:1D:81:D5:BE:E3:4A:55:84:4B:96:E5:9A:83
Certificate issuer: /CN=963A564A40CD8C84E5D11B9970B53BA3A441CF46
Certificate serial: 027B1BE7018D7CCC51EF81FFCED5277EBAB0CD8E
Authority key identifier: 96:3A:56:4A:40:CD:8C:84:E5:D1:1B:99:70:B5:3B:A3:A4:41:CF:46
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/963A564A40CD8C84E5D11B9970B53BA3A441CF46.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/323830343a333466343a3a2f33322d3332203d3e20323635343931.roa
Signing time: Tue 25 Feb 2025 19:17:26 +0000
ROA not before: Tue 25 Feb 2025 19:12:26 +0000
ROA not after: Tue 24 Feb 2026 19:17:26 +0000
asID: 265491
IP address blocks: 2804:34f4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:7b:1b:e7:01:8d:7c:cc:51:ef:81:ff:ce:d5:27:7e:ba:b0:cd:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=963A564A40CD8C84E5D11B9970B53BA3A441CF46
Validity
Not Before: Feb 25 19:12:26 2025 GMT
Not After : Feb 24 19:17:26 2026 GMT
Subject: CN=5C09929A368D7A1D81D5BEE34A55844B96E59A83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:84:88:23:dd:88:3d:9f:25:70:2a:a4:df:a1:
03:89:dc:63:8b:e5:6e:66:3d:fe:72:e2:1a:e7:a7:
32:4a:f7:58:22:71:67:6b:de:fe:11:95:c0:b2:91:
e9:9b:ce:3a:15:0e:03:ea:02:ff:29:fd:6b:90:94:
d4:c6:53:77:d4:b0:b4:cd:78:7d:5a:33:60:3a:89:
68:4c:82:69:0c:8f:bb:93:b1:f9:6b:71:96:74:33:
e7:32:4c:88:56:59:f9:12:4a:5f:06:90:bc:4e:60:
8f:2a:c1:15:07:b4:5e:8f:a7:40:5e:ae:51:66:39:
92:c3:4f:76:27:93:44:88:ed:7b:0f:b6:a3:c6:06:
23:b5:41:45:0d:64:13:f4:a0:ea:0d:0c:29:c7:2b:
66:57:81:81:a6:fd:27:82:43:d3:b4:eb:3d:3b:70:
6c:39:24:93:1a:b1:c4:53:31:aa:c7:a8:60:7d:70:
1a:3f:38:12:4d:56:11:41:53:13:5d:2c:25:d7:14:
e2:31:9c:fe:5f:32:21:c2:a3:f5:82:d6:c3:d1:79:
8d:af:6b:a2:95:56:99:10:b4:f2:ba:f0:83:d2:24:
16:2b:a4:12:fe:6d:0d:73:7b:cf:13:a4:00:2d:68:
b2:bd:92:03:47:e4:cd:41:02:4e:dc:82:d0:2e:74:
e5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:09:92:9A:36:8D:7A:1D:81:D5:BE:E3:4A:55:84:4B:96:E5:9A:83
X509v3 Authority Key Identifier:
keyid:96:3A:56:4A:40:CD:8C:84:E5:D1:1B:99:70:B5:3B:A3:A4:41:CF:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/963A564A40CD8C84E5D11B9970B53BA3A441CF46.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/963A564A40CD8C84E5D11B9970B53BA3A441CF46.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/323830343a333466343a3a2f33322d3332203d3e20323635343931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:34f4::/32
Signature Algorithm: sha256WithRSAEncryption
48:e5:0c:db:9a:f5:50:43:b5:dc:65:58:59:be:51:ba:6c:14:
5f:13:83:23:a9:b8:52:58:07:b3:a5:b4:8b:22:b7:c3:bd:16:
86:06:f7:d5:fe:42:bb:44:21:23:e4:d2:58:13:19:82:ec:da:
c4:bd:de:bf:6e:3d:a5:50:5d:79:48:03:e8:64:73:eb:65:19:
c2:4c:c4:97:92:89:e8:d9:d0:d4:f7:06:64:87:e7:df:b3:3d:
46:ed:8a:12:b6:b2:0f:50:24:56:36:bd:cc:3e:d6:87:08:04:
e7:d4:4b:3f:1c:98:fa:52:42:5a:11:57:c3:56:5c:8c:87:80:
55:c7:8a:c6:ea:9f:56:60:22:25:06:c5:2d:17:d6:90:10:2e:
16:07:7b:8e:51:b7:ac:4e:3c:02:6a:6a:2f:39:25:5f:4c:5d:
10:ae:17:ea:35:e5:10:2e:c4:ae:41:73:e1:b1:8e:ea:30:25:
f8:a7:95:bf:cd:7b:e8:89:bb:2a:79:fd:1a:5a:ca:3e:5a:f5:
bb:56:84:0c:59:40:70:7d:f1:a8:43:be:29:33:65:9f:eb:24:
aa:fd:d5:f3:92:70:e8:21:70:1a:fd:3c:92:e7:b8:67:9d:33:
62:d1:b4:bb:a8:3c:54:9e:07:7b:38:ac:78:76:32:53:24:c5:
9b:97:a8:8c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUAnsb5wGNfMxR74H/ztUnfrqwzY4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTYzQTU2NEE0MENEOEM4NEU1RDExQjk5NzBCNTNCQTNB
NDQxQ0Y0NjAeFw0yNTAyMjUxOTEyMjZaFw0yNjAyMjQxOTE3MjZaMDMxMTAvBgNV
BAMTKDVDMDk5MjlBMzY4RDdBMUQ4MUQ1QkVFMzRBNTU4NDRCOTZFNTlBODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCchIgj3Yg9nyVwKqTfoQOJ3GOL
5W5mPf5y4hrnpzJK91gicWdr3v4RlcCykembzjoVDgPqAv8p/WuQlNTGU3fUsLTN
eH1aM2A6iWhMgmkMj7uTsflrcZZ0M+cyTIhWWfkSSl8GkLxOYI8qwRUHtF6Pp0Be
rlFmOZLDT3Ynk0SI7XsPtqPGBiO1QUUNZBP0oOoNDCnHK2ZXgYGm/SeCQ9O06z07
cGw5JJMascRTMarHqGB9cBo/OBJNVhFBUxNdLCXXFOIxnP5fMiHCo/WC1sPReY2v
a6KVVpkQtPK68IPSJBYrpBL+bQ1ze88TpAAtaLK9kgNH5M1BAk7cgtAudOVvAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUXAmSmjaNeh2B1b7jSlWES5blmoMwHwYDVR0j
BBgwFoAUljpWSkDNjITl0RuZcLU7o6RBz0YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFF2UHg0UHpyTHRac1ZaYUo3RHBLM0Y4UkZWclNiUWpxY3FROXg3MjJl
dUQvMC85NjNBNTY0QTQwQ0Q4Qzg0RTVEMTFCOTk3MEI1M0JBM0E0NDFDRjQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2M0E1NjRBNDBDRDhDODRF
NUQxMUI5OTcwQjUzQkEzQTQ0MUNGNDYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhRdlB4NFB6ckx0WnNWWmFKN0RwSzNGOFJGVnJTYlFqcWNxUTl4NzIyZXVELzAv
MzIzODMwMzQzYTMzMzQ2NjM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzQzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ09DANBgkqhkiG9w0BAQsFAAOCAQEASOUM25r1
UEO13GVYWb5RumwUXxODI6m4UlgHs6W0iyK3w70Whgb31f5Cu0QhI+TSWBMZguza
xL3ev249pVBdeUgD6GRz62UZwkzEl5KJ6NnQ1PcGZIfn37M9Ru2KErayD1AkVja9
zD7WhwgE59RLPxyY+lJCWhFXw1ZcjIeAVceKxuqfVmAiJQbFLRfWkBAuFgd7jlG3
rE48AmpqLzklX0xdEK4X6jXlEC7ErkFz4bGO6jAl+KeVv8176Im7Knn9GlrKPlr1
u1aEDFlAcH3xqEO+KTNln+skqv3V85Jw6CFwGv08kue4Z50zYtG0u6g8VJ4Hezis
eHYyUyTFm5eojA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 16:40:28 2025 by rpki-client