Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/323830343a333962633a3a2f33322d3332203d3e20323636303437.roa
File: 323830343a333962633a3a2f33322d3332203d3e20323636303437.roa (raw, json)
Hash identifier: TjwOXtasotXAWcS1jspPgXi90ar4v1fF4c5PoewqEV8=
Subject key identifier: 71:45:3A:A0:89:63:CD:2C:CA:1D:3C:5F:D9:B0:9A:92:58:BB:D9:1E
Certificate issuer: /CN=5E99902C72558D92C16FA24CBA33F7866E6D6E9B
Certificate serial: 31A7B9797992AB09BC1C715DAB680EB1AAC1566C
Authority key identifier: 5E:99:90:2C:72:55:8D:92:C1:6F:A2:4C:BA:33:F7:86:6E:6D:6E:9B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E99902C72558D92C16FA24CBA33F7866E6D6E9B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/323830343a333962633a3a2f33322d3332203d3e20323636303437.roa
Signing time: Thu 16 Jan 2025 13:02:01 +0000
ROA not before: Thu 16 Jan 2025 12:57:01 +0000
ROA not after: Thu 15 Jan 2026 13:02:01 +0000
asID: 266047
IP address blocks: 2804:39bc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:a7:b9:79:79:92:ab:09:bc:1c:71:5d:ab:68:0e:b1:aa:c1:56:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E99902C72558D92C16FA24CBA33F7866E6D6E9B
Validity
Not Before: Jan 16 12:57:01 2025 GMT
Not After : Jan 15 13:02:01 2026 GMT
Subject: CN=71453AA08963CD2CCA1D3C5FD9B09A9258BBD91E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c6:41:ce:42:f4:2e:2f:02:e5:8a:35:27:36:
51:e0:56:6f:3d:1e:32:a0:d8:38:9c:9c:bd:35:2c:
be:6f:5d:91:a7:86:81:dc:7e:65:8a:64:32:cd:18:
6f:dd:c1:79:af:38:6b:da:c3:24:45:0b:dc:a6:e3:
20:3a:7f:07:b0:ea:63:d8:ee:b3:d5:56:fb:1b:a4:
1b:c9:63:b1:bc:b3:15:cd:67:95:e5:65:ec:c0:72:
29:f5:cf:f5:8a:8d:03:d9:8f:63:b4:b7:98:ab:b9:
21:11:72:c5:e5:29:04:f2:12:90:aa:69:12:7b:e0:
b4:56:10:34:ef:8f:23:9e:04:bb:90:6b:4f:7f:1e:
7c:f7:b4:91:0c:ba:d7:d4:ce:64:49:c3:7f:38:58:
8b:0e:e4:a2:5e:ff:a6:a3:45:64:bc:84:75:69:37:
87:2f:a3:e0:0c:dc:51:98:20:8e:8f:93:f1:40:3f:
21:c3:19:53:ff:c8:d0:a1:37:ed:10:7c:10:a5:8a:
0e:d2:51:66:65:20:02:3b:99:ff:2b:b0:b2:94:1f:
93:bc:a9:b2:57:33:d3:77:bd:3e:9f:fe:c9:ca:ce:
e4:c1:97:72:a6:91:e7:21:50:69:6c:a9:72:a3:1c:
e7:d5:50:97:ca:7c:9b:5b:3b:98:8e:6e:10:0e:94:
d7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:45:3A:A0:89:63:CD:2C:CA:1D:3C:5F:D9:B0:9A:92:58:BB:D9:1E
X509v3 Authority Key Identifier:
keyid:5E:99:90:2C:72:55:8D:92:C1:6F:A2:4C:BA:33:F7:86:6E:6D:6E:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/5E99902C72558D92C16FA24CBA33F7866E6D6E9B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E99902C72558D92C16FA24CBA33F7866E6D6E9B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/323830343a333962633a3a2f33322d3332203d3e20323636303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:39bc::/32
Signature Algorithm: sha256WithRSAEncryption
99:cc:af:98:04:b5:19:77:12:61:4a:ce:4f:ff:a7:7f:e9:03:
52:36:66:ff:cd:fe:5e:ea:c2:eb:bf:7d:da:a6:4a:e1:3c:bc:
39:aa:c9:da:49:35:51:8d:50:09:7f:e8:d4:4d:57:ea:d9:75:
57:dc:76:8d:49:5d:28:8a:12:fe:56:a9:e8:7e:22:80:00:61:
db:ec:aa:7e:5b:30:cd:cd:1a:a1:ee:22:a3:dd:62:a8:44:80:
d8:e5:b9:88:dc:0f:59:f1:4f:92:31:74:60:b8:1a:de:6e:fe:
4f:cc:70:66:8c:76:17:da:00:cb:b3:d7:95:17:13:82:87:f9:
83:3c:ee:33:2e:e7:0f:c8:ac:5f:c9:ca:b9:bf:c8:e3:55:b8:
83:28:da:7a:42:7a:80:ee:41:21:6c:82:65:8b:b0:66:4b:29:
5e:c5:94:8b:73:76:a2:86:ba:13:d7:da:27:e5:da:ca:ec:19:
59:e1:8e:43:66:23:fb:b3:0d:d1:52:91:73:20:9c:77:0e:a3:
49:48:28:60:8e:c3:33:45:45:e2:9a:37:0e:b6:78:40:6f:81:
8c:e6:36:81:73:94:86:d6:86:13:33:9e:ce:a7:fd:42:07:89:
e6:d2:ee:4b:97:26:32:24:13:2f:6b:03:86:c6:f1:99:5f:ff:
42:36:b4:4e
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUMae5eXmSqwm8HHFdq2gOsarBVmwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUU5OTkwMkM3MjU1OEQ5MkMxNkZBMjRDQkEzM0Y3ODY2
RTZENkU5QjAeFw0yNTAxMTYxMjU3MDFaFw0yNjAxMTUxMzAyMDFaMDMxMTAvBgNV
BAMTKDcxNDUzQUEwODk2M0NEMkNDQTFEM0M1RkQ5QjA5QTkyNThCQkQ5MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgxkHOQvQuLwLlijUnNlHgVm89
HjKg2DicnL01LL5vXZGnhoHcfmWKZDLNGG/dwXmvOGvawyRFC9ym4yA6fwew6mPY
7rPVVvsbpBvJY7G8sxXNZ5XlZezAcin1z/WKjQPZj2O0t5iruSERcsXlKQTyEpCq
aRJ74LRWEDTvjyOeBLuQa09/Hnz3tJEMutfUzmRJw384WIsO5KJe/6ajRWS8hHVp
N4cvo+AM3FGYII6Pk/FAPyHDGVP/yNChN+0QfBClig7SUWZlIAI7mf8rsLKUH5O8
qbJXM9N3vT6f/snKzuTBl3KmkechUGlsqXKjHOfVUJfKfJtbO5iObhAOlNcHAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUcUU6oIljzSzKHTxf2bCakli72R4wHwYDVR0j
BBgwFoAUXpmQLHJVjZLBb6JMujP3hm5tbpswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGZVeUQ3dEZ4TVpWeVJTQ3VTaGlXV0FtbVltQnhiZ2d2M1NGaVZqcnU1
Y0gvMC81RTk5OTAyQzcyNTU4RDkyQzE2RkEyNENCQTMzRjc4NjZFNkQ2RTlCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVFOTk5MDJDNzI1NThEOTJD
MTZGQTI0Q0JBMzNGNzg2NkU2RDZFOUIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhmVXlEN3RGeE1aVnlSU0N1U2hpV1dBbW1ZbUJ4YmdndjNTRmlWanJ1NWNILzAv
MzIzODMwMzQzYTMzMzk2MjYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM2
MzAzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ5vDANBgkqhkiG9w0BAQsFAAOCAQEAmcyvmAS1
GXcSYUrOT/+nf+kDUjZm/83+XurC67992qZK4Ty8OarJ2kk1UY1QCX/o1E1X6tl1
V9x2jUldKIoS/lap6H4igABh2+yqflswzc0aoe4io91iqESA2OW5iNwPWfFPkjF0
YLga3m7+T8xwZox2F9oAy7PXlRcTgof5gzzuMy7nD8isX8nKub/I41W4gyjaekJ6
gO5BIWyCZYuwZkspXsWUi3N2ooa6E9faJ+XayuwZWeGOQ2Yj+7MN0VKRcyCcdw6j
SUgoYI7DM0VF4po3DrZ4QG+BjOY2gXOUhtaGEzOezqf9QgeJ5tLuS5cmMiQTL2sD
hsbxmV//Qja0Tg==
-----END CERTIFICATE-----
Generated at Thu Apr 10 16:42:21 2025 by rpki-client