Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/323830343a363563383a3a2f33342d3334203d3e20323639353134.roa
File: 323830343a363563383a3a2f33342d3334203d3e20323639353134.roa (raw, json)
Hash identifier: wRWy+nnNFSFfLfX30qrTbe/Nolfeh4Q2rqNwLA6/+gg=
Subject key identifier: 6B:DC:27:60:A8:8F:16:15:89:4E:EF:D5:66:0C:21:EC:D2:82:3B:43
Certificate issuer: /CN=3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008
Certificate serial: 336F640A02B0D3B13259CAA212FD5EE8340CC87E
Authority key identifier: 3B:C9:D1:D1:AF:32:F1:CF:DB:A0:FC:7A:17:C0:11:66:EB:B7:B0:08
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/323830343a363563383a3a2f33342d3334203d3e20323639353134.roa
Signing time: Sun 07 Apr 2024 03:21:56 +0000
ROA not before: Sun 07 Apr 2024 03:16:56 +0000
ROA not after: Sun 06 Apr 2025 03:21:56 +0000
asID: 269514
IP address blocks: 2804:65c8::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:6f:64:0a:02:b0:d3:b1:32:59:ca:a2:12:fd:5e:e8:34:0c:c8:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008
Validity
Not Before: Apr 7 03:16:56 2024 GMT
Not After : Apr 6 03:21:56 2025 GMT
Subject: CN=6BDC2760A88F1615894EEFD5660C21ECD2823B43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1b:52:2e:8f:ee:d0:e7:2d:41:2a:b6:7b:63:
bf:d7:87:59:6d:3e:c1:b4:63:be:6e:f5:80:78:97:
a3:c5:2e:b1:2a:d3:a3:8b:02:38:05:19:6b:fb:05:
2f:f6:e5:e9:05:7d:7e:4e:84:57:fe:01:f9:a5:82:
e3:ad:95:10:67:c4:58:32:75:84:24:d3:52:23:00:
ee:de:ff:48:50:ba:48:fd:8f:75:85:9a:44:2e:85:
34:83:13:96:b0:fe:e1:50:da:e5:c3:44:7f:88:ab:
3b:52:e6:c7:c0:a8:1c:e4:5a:d7:f4:a5:39:f4:0c:
1b:d2:31:04:a5:bb:26:67:42:98:d2:6f:f1:d5:e5:
68:0a:52:48:60:be:5b:8a:94:70:1b:37:68:c2:ab:
6f:b7:8d:ed:df:ac:47:62:4e:83:ec:47:6c:1c:f4:
23:fb:e0:b0:a8:05:5d:68:c0:ec:f2:a7:be:ae:c2:
1c:05:eb:0b:4b:63:28:a9:97:ff:02:ca:08:d5:7b:
18:0a:20:8f:94:6b:2e:22:f7:20:04:be:fb:36:af:
94:e1:98:a2:f3:57:63:4c:f2:f2:07:13:b9:3b:89:
9d:74:1d:d8:68:be:b7:cc:fe:7b:12:d8:98:aa:13:
27:ee:64:43:58:dc:95:91:cf:7f:1c:b8:af:9f:30:
39:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DC:27:60:A8:8F:16:15:89:4E:EF:D5:66:0C:21:EC:D2:82:3B:43
X509v3 Authority Key Identifier:
keyid:3B:C9:D1:D1:AF:32:F1:CF:DB:A0:FC:7A:17:C0:11:66:EB:B7:B0:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/323830343a363563383a3a2f33342d3334203d3e20323639353134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:65c8::/34
Signature Algorithm: sha256WithRSAEncryption
71:00:5a:ad:d3:97:85:e6:00:fc:9f:04:d5:87:82:26:a3:ce:
1b:96:21:3b:c3:fb:02:9e:2c:77:74:e6:ec:00:26:6b:7d:b6:
aa:44:4b:4b:3e:dd:1b:da:4c:77:be:c3:61:e0:20:5e:01:43:
30:8f:d2:0a:dc:1b:03:6b:8a:6c:35:9b:de:ed:97:67:b0:95:
3a:9f:1d:19:98:f2:b5:e8:70:16:44:1d:52:5e:a6:5f:81:f1:
77:5b:6a:b2:f4:96:48:21:54:93:50:f5:00:80:ac:2b:94:2f:
d9:e9:5a:18:f2:a1:9f:3d:93:72:ff:66:b1:19:54:ba:d0:d7:
c3:ea:ec:c9:c4:47:c1:7e:8f:dd:55:b9:4d:0e:8e:a4:92:98:
80:d3:f8:fb:40:a7:cf:66:79:67:45:08:74:11:1c:6b:69:94:
9e:24:bd:6f:ee:4b:0c:c3:74:99:25:ae:d0:38:7a:3f:e6:30:
8f:52:a4:57:ab:8c:1d:7a:64:e9:54:4d:d6:5e:92:80:a8:0d:
c8:78:21:8f:27:d7:18:17:fc:2c:b9:bb:7c:ee:33:8b:0d:24:
f5:7e:6b:cb:cc:95:e6:7f:9b:6e:7c:56:89:67:fc:21:9d:d8:
df:0b:ab:c6:2c:d0:01:3d:16:4c:b1:7b:e5:61:e0:7f:ef:ca:
a3:77:83:ae
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUM29kCgKw07EyWcqiEv1e6DQMyH4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0JDOUQxRDFBRjMyRjFDRkRCQTBGQzdBMTdDMDExNjZF
QkI3QjAwODAeFw0yNDA0MDcwMzE2NTZaFw0yNTA0MDYwMzIxNTZaMDMxMTAvBgNV
BAMTKDZCREMyNzYwQTg4RjE2MTU4OTRFRUZENTY2MEMyMUVDRDI4MjNCNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGG1Iuj+7Q5y1BKrZ7Y7/Xh1lt
PsG0Y75u9YB4l6PFLrEq06OLAjgFGWv7BS/25ekFfX5OhFf+AfmlguOtlRBnxFgy
dYQk01IjAO7e/0hQukj9j3WFmkQuhTSDE5aw/uFQ2uXDRH+IqztS5sfAqBzkWtf0
pTn0DBvSMQSluyZnQpjSb/HV5WgKUkhgvluKlHAbN2jCq2+3je3frEdiToPsR2wc
9CP74LCoBV1owOzyp76uwhwF6wtLYyipl/8CygjVexgKII+Uay4i9yAEvvs2r5Th
mKLzV2NM8vIHE7k7iZ10HdhovrfM/nsS2JiqEyfuZENY3JWRz38cuK+fMDlVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUa9wnYKiPFhWJTu/VZgwh7NKCO0MwHwYDVR0j
BBgwFoAUO8nR0a8y8c/boPx6F8ARZuu3sAgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHJGZkV0TlBoanNyZ29KQUFwNzRBejU5QkZ2TWJHYWE4enl1RTRjbjRp
M1ovMS8zQkM5RDFEMUFGMzJGMUNGREJBMEZDN0ExN0MwMTE2NkVCQjdCMDA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNCQzlEMUQxQUYzMkYxQ0ZE
QkEwRkM3QTE3QzAxMTY2RUJCN0IwMDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhyRmZFdE5QaGpzcmdvSkFBcDc0QXo1OUJGdk1iR2FhOHp5dUU0Y240aTNaLzEv
MzIzODMwMzQzYTM2MzU2MzM4M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjM5
MzUzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKARlyAAwDQYJKoZIhvcNAQELBQADggEBAHEAWq3T
l4XmAPyfBNWHgiajzhuWITvD+wKeLHd05uwAJmt9tqpES0s+3RvaTHe+w2HgIF4B
QzCP0grcGwNrimw1m97tl2ewlTqfHRmY8rXocBZEHVJepl+B8XdbarL0lkghVJNQ
9QCArCuUL9npWhjyoZ89k3L/ZrEZVLrQ18Pq7MnER8F+j91VuU0OjqSSmIDT+PtA
p89meWdFCHQRHGtplJ4kvW/uSwzDdJklrtA4ej/mMI9SpFerjB16ZOlUTdZekoCo
Dch4IY8n1xgX/Cy5u3zuM4sNJPV+a8vMleZ/m258Voln/CGd2N8Lq8Ys0AE9Fkyx
e+Vh4H/vyqN3g64=
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:08:28 2025 by rpki-client