Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/323830343a353864303a3a2f33322d3336203d3e20323638313531.roa
File: 323830343a353864303a3a2f33322d3336203d3e20323638313531.roa (raw, json)
Hash identifier: cXKnYVPO2v5fVhlxc6MwujKZHDtPV8yCFSyyejd0Qtc=
Subject key identifier: DA:5A:73:A8:A0:86:25:02:54:AB:8E:84:CD:6C:B3:BA:E7:6F:B2:57
Certificate issuer: /CN=C34966030329C8DBC6F2555D2F5E5A98C322F8A4
Certificate serial: 30923D9862E95CC23B9739E8AA4E91C93B84A4F0
Authority key identifier: C3:49:66:03:03:29:C8:DB:C6:F2:55:5D:2F:5E:5A:98:C3:22:F8:A4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C34966030329C8DBC6F2555D2F5E5A98C322F8A4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/323830343a353864303a3a2f33322d3336203d3e20323638313531.roa
Signing time: Thu 02 Jan 2025 15:10:48 +0000
ROA not before: Thu 02 Jan 2025 15:05:48 +0000
ROA not after: Thu 01 Jan 2026 15:10:48 +0000
asID: 268151
IP address blocks: 2804:58d0::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:92:3d:98:62:e9:5c:c2:3b:97:39:e8:aa:4e:91:c9:3b:84:a4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C34966030329C8DBC6F2555D2F5E5A98C322F8A4
Validity
Not Before: Jan 2 15:05:48 2025 GMT
Not After : Jan 1 15:10:48 2026 GMT
Subject: CN=DA5A73A8A086250254AB8E84CD6CB3BAE76FB257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:07:a1:a7:a0:0f:7b:73:f2:06:73:c0:24:ca:
45:7c:39:79:49:0a:f8:93:13:fe:be:ef:a7:87:d7:
45:3b:4f:89:01:ac:a4:cd:8c:38:17:30:7f:ae:85:
48:e1:1b:a9:b1:d5:1b:a2:ff:71:63:0d:6e:16:e9:
50:f8:3e:68:34:d0:ef:8b:e2:33:ca:6a:b6:4e:f9:
36:dc:5f:5d:a8:cc:1a:c2:73:be:b0:24:42:42:72:
86:48:9f:b5:5b:8f:a3:d7:80:d8:82:07:07:c2:88:
35:67:05:fb:d7:c6:dc:88:3e:28:e4:0e:0a:b1:2a:
29:b7:5f:a3:5d:12:5b:26:56:77:36:ab:01:58:37:
cd:5a:8c:e4:ff:6a:a3:d5:a0:8f:08:7a:ef:74:47:
96:61:2c:70:7f:38:b9:ea:67:a2:22:82:46:38:b4:
fd:d2:0b:93:a8:4f:a6:9f:30:a6:6f:17:76:b9:ca:
54:f0:10:9f:cd:2b:fd:01:a8:02:af:99:bc:9b:71:
05:8d:34:9c:7b:73:96:00:43:e5:45:9f:55:a0:cc:
3e:6f:ea:13:a5:82:cf:25:d9:f0:87:4b:9c:21:1f:
1e:c9:51:6c:1b:35:42:f9:66:4b:9e:73:bd:96:a3:
b8:c8:af:e3:f2:bf:62:62:02:b8:0a:73:b8:d3:d7:
b5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5A:73:A8:A0:86:25:02:54:AB:8E:84:CD:6C:B3:BA:E7:6F:B2:57
X509v3 Authority Key Identifier:
keyid:C3:49:66:03:03:29:C8:DB:C6:F2:55:5D:2F:5E:5A:98:C3:22:F8:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/C34966030329C8DBC6F2555D2F5E5A98C322F8A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C34966030329C8DBC6F2555D2F5E5A98C322F8A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/323830343a353864303a3a2f33322d3336203d3e20323638313531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:58d0::/32
Signature Algorithm: sha256WithRSAEncryption
17:d2:bb:19:2a:05:ca:bd:66:45:07:b5:77:c5:0c:2a:85:93:
dd:18:49:c7:72:c4:86:61:b3:3d:2e:ea:82:7e:b6:fe:7a:d5:
fe:fa:46:b3:d8:a3:8b:54:94:a1:0f:da:35:f2:58:7c:bb:bb:
15:bf:a7:3d:3f:03:d6:b7:56:b4:0d:11:83:59:bf:f9:ae:7e:
a9:20:df:3e:ca:fc:e2:5d:09:2b:05:c1:8e:b7:15:4b:51:35:
12:2a:c0:18:d8:79:11:44:7d:eb:1b:90:18:aa:4f:ae:9e:da:
6b:d3:c1:d4:fc:ed:6f:df:0c:bd:5a:e2:15:e6:19:71:be:c7:
95:1d:f5:35:e4:57:1d:83:52:ca:f4:93:9f:92:73:d1:21:46:
42:48:2c:f4:5d:2b:11:03:2f:0b:5a:78:e4:65:10:71:61:61:
a5:fc:63:97:5a:0d:c1:29:85:34:86:57:22:f4:62:59:a4:2d:
cd:33:b4:f5:c7:74:de:17:bc:29:30:dd:42:d1:28:36:9b:ef:
c4:e9:08:75:f1:cf:c8:42:72:c0:5d:75:75:bc:54:92:70:7a:
b4:1a:65:c3:f4:a9:d2:d9:16:ab:37:63:6d:94:a0:d6:56:3b:
b7:0b:4b:ee:88:5e:76:61:ac:e1:94:35:4b:03:0e:42:cb:95:
ad:cd:e2:f3
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUMJI9mGLpXMI7lznoqk6RyTuEpPAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM0OTY2MDMwMzI5QzhEQkM2RjI1NTVEMkY1RTVBOThD
MzIyRjhBNDAeFw0yNTAxMDIxNTA1NDhaFw0yNjAxMDExNTEwNDhaMDMxMTAvBgNV
BAMTKERBNUE3M0E4QTA4NjI1MDI1NEFCOEU4NENENkNCM0JBRTc2RkIyNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsB6GnoA97c/IGc8AkykV8OXlJ
CviTE/6+76eH10U7T4kBrKTNjDgXMH+uhUjhG6mx1Rui/3FjDW4W6VD4Pmg00O+L
4jPKarZO+TbcX12ozBrCc76wJEJCcoZIn7Vbj6PXgNiCBwfCiDVnBfvXxtyIPijk
DgqxKim3X6NdElsmVnc2qwFYN81ajOT/aqPVoI8Ieu90R5ZhLHB/OLnqZ6IigkY4
tP3SC5OoT6afMKZvF3a5ylTwEJ/NK/0BqAKvmbybcQWNNJx7c5YAQ+VFn1WgzD5v
6hOlgs8l2fCHS5whHx7JUWwbNUL5Zkuec72Wo7jIr+Pyv2JiArgKc7jT17VlAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU2lpzqKCGJQJUq46EzWyzuudvslcwHwYDVR0j
BBgwFoAUw0lmAwMpyNvG8lVdL15amMMi+KQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGFGSDhISHJvaWZDQjVlTGZmSmpTSHM4TDREa3pvVG1DS3dtRG9YYWZx
WW0vMC9DMzQ5NjYwMzAzMjlDOERCQzZGMjU1NUQyRjVFNUE5OEMzMjJGOEE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzNDk2NjAzMDMyOUM4REJD
NkYyNTU1RDJGNUU1QTk4QzMyMkY4QTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhhRkg4SEhyb2lmQ0I1ZUxmZkpqU0hzOEw0RGt6b1RtQ0t3bURvWGFmcVltLzAv
MzIzODMwMzQzYTM1Mzg2NDMwM2EzYTJmMzMzMjJkMzMzNjIwM2QzZTIwMzIzNjM4
MzEzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARY0DANBgkqhkiG9w0BAQsFAAOCAQEAF9K7GSoF
yr1mRQe1d8UMKoWT3RhJx3LEhmGzPS7qgn62/nrV/vpGs9iji1SUoQ/aNfJYfLu7
Fb+nPT8D1rdWtA0Rg1m/+a5+qSDfPsr84l0JKwXBjrcVS1E1EirAGNh5EUR96xuQ
GKpPrp7aa9PB1Pztb98MvVriFeYZcb7HlR31NeRXHYNSyvSTn5Jz0SFGQkgs9F0r
EQMvC1p45GUQcWFhpfxjl1oNwSmFNIZXIvRiWaQtzTO09cd03he8KTDdQtEoNpvv
xOkIdfHPyEJywF11dbxUknB6tBplw/Sp0tkWqzdjbZSg1lY7twtL7ohedmGs4ZQ1
SwMOQsuVrc3i8w==
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:59:32 2025 by rpki-client