Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/1/323830343a3837383a3a2f33322d3438203d3e20323632333734.roa
File: 323830343a3837383a3a2f33322d3438203d3e20323632333734.roa (raw, json)
Hash identifier: Y3egpxn9zRsePkuOz6YzMykOrAKbPBDohNlu7Jrp3Jk=
Subject key identifier: 9A:9B:D7:34:3F:0C:EC:F9:03:05:FA:3E:1D:57:3A:06:40:D8:00:EB
Certificate issuer: /CN=DB4CB9D69698BEBD07A155C70C762C9A217B4706
Certificate serial: 5E98FDD37860EC1149BFBC014BB685768C4FE63A
Authority key identifier: DB:4C:B9:D6:96:98:BE:BD:07:A1:55:C7:0C:76:2C:9A:21:7B:47:06
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB4CB9D69698BEBD07A155C70C762C9A217B4706.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/1/323830343a3837383a3a2f33322d3438203d3e20323632333734.roa
Signing time: Thu 06 Mar 2025 09:10:22 +0000
ROA not before: Thu 06 Mar 2025 09:05:22 +0000
ROA not after: Thu 05 Mar 2026 09:10:22 +0000
asID: 262374
IP address blocks: 2804:878::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:98:fd:d3:78:60:ec:11:49:bf:bc:01:4b:b6:85:76:8c:4f:e6:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB4CB9D69698BEBD07A155C70C762C9A217B4706
Validity
Not Before: Mar 6 09:05:22 2025 GMT
Not After : Mar 5 09:10:22 2026 GMT
Subject: CN=9A9BD7343F0CECF90305FA3E1D573A0640D800EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c0:80:bd:c1:67:8a:15:4a:e9:54:22:ab:73:
d4:ea:5d:b1:02:f3:53:74:c4:ab:95:21:cb:09:35:
51:1b:27:df:68:a0:17:db:bd:a8:a8:46:82:72:33:
9d:55:71:64:b7:76:9f:2a:de:60:7d:e1:e6:ba:12:
e9:27:bf:d0:b0:87:e9:43:d4:b6:e5:c9:59:ea:6e:
30:bb:80:71:93:c1:48:c2:1b:93:52:f6:07:ac:26:
9b:09:48:ca:33:65:0c:75:cd:53:27:20:e9:5b:0a:
c7:77:41:cc:d3:91:87:b5:4c:d9:39:35:eb:f6:36:
49:86:2f:ae:e8:b4:23:72:c0:f2:b7:38:7a:2d:0e:
0b:0d:22:5d:04:a3:67:98:0d:07:1b:ab:c9:23:fc:
f0:af:51:33:36:33:76:c8:30:37:bd:78:e6:1b:ea:
e4:51:81:72:81:4b:e9:38:6f:70:61:5a:6e:12:b8:
8d:67:8a:2e:64:4a:e3:bf:49:18:7c:ba:f7:64:69:
4e:94:16:a9:13:42:ff:31:c1:2d:fe:20:9f:13:70:
1a:b3:cb:24:48:57:63:90:8e:51:c4:62:38:53:8f:
9c:be:d4:2c:a7:bd:60:14:4b:cd:71:72:20:a7:f7:
3e:4d:ee:eb:e6:d0:be:1d:44:88:88:e7:e3:49:3c:
06:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9B:D7:34:3F:0C:EC:F9:03:05:FA:3E:1D:57:3A:06:40:D8:00:EB
X509v3 Authority Key Identifier:
keyid:DB:4C:B9:D6:96:98:BE:BD:07:A1:55:C7:0C:76:2C:9A:21:7B:47:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/1/DB4CB9D69698BEBD07A155C70C762C9A217B4706.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB4CB9D69698BEBD07A155C70C762C9A217B4706.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/1/323830343a3837383a3a2f33322d3438203d3e20323632333734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:878::/32
Signature Algorithm: sha256WithRSAEncryption
07:52:ac:f0:c0:9b:5d:93:40:d8:de:68:48:71:02:2d:fa:ec:
46:ac:df:9a:7f:9c:c3:eb:9f:d5:64:b0:8e:c2:10:c6:0b:b2:
bd:e6:84:47:de:c6:d3:6d:39:09:5f:65:0a:c5:87:1e:0c:eb:
b7:88:5a:a7:6c:9c:7c:d3:f0:5a:86:00:5c:f1:e2:fd:ad:b7:
64:c0:bd:08:25:e9:05:5d:f8:b0:12:3c:d5:5d:a6:dc:5c:de:
98:30:ba:b2:fc:03:ac:cc:0f:38:17:88:77:3d:62:b5:0d:72:
92:7c:fe:ac:22:48:07:58:3c:2f:1d:93:c7:d6:b1:75:1e:d3:
e2:38:88:b8:7c:b3:d0:6a:af:53:eb:18:6e:d3:68:a8:09:8c:
6e:53:2c:8b:4a:cc:ff:a7:43:16:73:02:d1:f6:43:b2:e7:96:
83:dc:41:d1:71:70:dd:08:79:b5:e3:50:b3:23:c7:c2:44:6c:
4e:8a:93:0f:29:07:b1:e5:45:55:7d:77:b1:10:8e:20:e8:72:
31:c2:c1:2f:16:67:ae:de:d9:f0:77:aa:69:ee:49:31:ad:20:
9b:75:37:72:71:b5:01:66:08:fc:a6:3d:62:d8:f1:43:58:ee:
61:8a:0c:5a:6d:ec:42:ae:f2:4a:b1:cf:d0:7c:fa:25:34:39:
29:d7:7c:87
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUXpj903hg7BFJv7wBS7aFdoxP5jowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREI0Q0I5RDY5Njk4QkVCRDA3QTE1NUM3MEM3NjJDOUEy
MTdCNDcwNjAeFw0yNTAzMDYwOTA1MjJaFw0yNjAzMDUwOTEwMjJaMDMxMTAvBgNV
BAMTKDlBOUJENzM0M0YwQ0VDRjkwMzA1RkEzRTFENTczQTA2NDBEODAwRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWwIC9wWeKFUrpVCKrc9TqXbEC
81N0xKuVIcsJNVEbJ99ooBfbvaioRoJyM51VcWS3dp8q3mB94ea6Euknv9Cwh+lD
1LblyVnqbjC7gHGTwUjCG5NS9gesJpsJSMozZQx1zVMnIOlbCsd3QczTkYe1TNk5
Nev2NkmGL67otCNywPK3OHotDgsNIl0Eo2eYDQcbq8kj/PCvUTM2M3bIMDe9eOYb
6uRRgXKBS+k4b3BhWm4SuI1nii5kSuO/SRh8uvdkaU6UFqkTQv8xwS3+IJ8TcBqz
yyRIV2OQjlHEYjhTj5y+1CynvWAUS81xciCn9z5N7uvm0L4dRIiI5+NJPAZfAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUmpvXND8M7PkDBfo+HVc6BkDYAOswHwYDVR0j
BBgwFoAU20y51paYvr0HoVXHDHYsmiF7RwYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGVraDVOd0pySmk4OWNLWTlvS3g0YVVLMXNoTFVCazk5ZE53RUh6N1c1
Sm4vMS9EQjRDQjlENjk2OThCRUJEMDdBMTU1QzcwQzc2MkM5QTIxN0I0NzA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCNENCOUQ2OTY5OEJFQkQw
N0ExNTVDNzBDNzYyQzlBMjE3QjQ3MDYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzhla2g1TndKckppODljS1k5b0t4NGFVSzFzaExVQms5OWROd0VIejdXNUpuLzEv
MzIzODMwMzQzYTM4MzczODNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMjMz
MzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgECHgwDQYJKoZIhvcNAQELBQADggEBAAdSrPDAm12T
QNjeaEhxAi367Eas35p/nMPrn9VksI7CEMYLsr3mhEfextNtOQlfZQrFhx4M67eI
WqdsnHzT8FqGAFzx4v2tt2TAvQgl6QVd+LASPNVdptxc3pgwurL8A6zMDzgXiHc9
YrUNcpJ8/qwiSAdYPC8dk8fWsXUe0+I4iLh8s9Bqr1PrGG7TaKgJjG5TLItKzP+n
QxZzAtH2Q7LnloPcQdFxcN0IebXjULMjx8JEbE6Kkw8pB7HlRVV9d7EQjiDocjHC
wS8WZ67e2fB3qmnuSTGtIJt1N3JxtQFmCPymPWLY8UNY7mGKDFpt7EKu8kqxz9B8
+iU0OSnXfIc=
-----END CERTIFICATE-----
Generated at Thu Apr 10 04:39:33 2025 by rpki-client