Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/323830343a356233303a3a2f33322d3438203d3e20323638383234.roa
File: 323830343a356233303a3a2f33322d3438203d3e20323638383234.roa (raw, json)
Hash identifier: 6f8pVuH01b1SF3mi0On+jZU5yb6oYEzn5QGJJ2ruw7o=
Subject key identifier: 4C:DF:0A:07:0A:EF:21:44:7C:03:A7:49:AC:99:DE:71:DD:79:29:F7
Certificate issuer: /CN=01CB7108BBCA29F554D421ACE032B977AA1BF67C
Certificate serial: 4329AB03D483BB36977C8D8D44787B0FC278B1F2
Authority key identifier: 01:CB:71:08:BB:CA:29:F5:54:D4:21:AC:E0:32:B9:77:AA:1B:F6:7C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/323830343a356233303a3a2f33322d3438203d3e20323638383234.roa
Signing time: Wed 05 Mar 2025 20:08:33 +0000
ROA not before: Wed 05 Mar 2025 20:03:33 +0000
ROA not after: Wed 04 Mar 2026 20:08:33 +0000
asID: 268824
IP address blocks: 2804:5b30::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:29:ab:03:d4:83:bb:36:97:7c:8d:8d:44:78:7b:0f:c2:78:b1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01CB7108BBCA29F554D421ACE032B977AA1BF67C
Validity
Not Before: Mar 5 20:03:33 2025 GMT
Not After : Mar 4 20:08:33 2026 GMT
Subject: CN=4CDF0A070AEF21447C03A749AC99DE71DD7929F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ec:42:35:31:ad:fa:02:a0:dc:0b:60:57:37:
ef:e4:8e:87:fc:ef:bf:16:e7:18:cd:5d:9b:2d:ee:
be:0a:f0:9c:bc:90:51:55:54:3b:ee:89:54:1d:2f:
22:ed:f1:f8:65:9a:17:28:64:21:9c:35:a2:be:8e:
92:fa:b0:ef:88:1a:34:f6:5d:ce:bc:70:31:b2:98:
c6:bc:d4:fb:f4:69:43:18:1d:50:6d:d3:85:94:6a:
10:39:8a:aa:40:6d:10:f6:4c:2f:ed:8b:e1:b9:fa:
30:29:92:61:eb:e2:97:82:cc:7b:da:75:9a:d3:d3:
38:78:99:bc:4f:50:73:32:08:8a:1c:29:40:e6:c7:
09:83:68:65:31:00:12:ea:fd:3c:f5:76:62:b9:44:
0f:b1:d4:c0:90:36:3c:c4:07:d8:a3:39:7d:54:08:
75:03:2f:9e:44:61:8c:ef:2d:98:9c:cc:87:bb:3f:
0f:70:db:e3:97:2c:5a:c8:9f:d4:1e:9c:aa:09:e6:
5d:6a:83:50:0e:66:20:33:cf:5a:60:d2:ec:56:43:
37:a5:73:ce:6f:78:22:ea:a4:0c:29:d5:10:2c:cb:
f8:cb:8c:67:84:0c:10:00:b6:0f:e3:c7:a1:70:bb:
e6:c0:37:2c:f1:dc:7d:24:71:74:ed:35:51:05:32:
14:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DF:0A:07:0A:EF:21:44:7C:03:A7:49:AC:99:DE:71:DD:79:29:F7
X509v3 Authority Key Identifier:
keyid:01:CB:71:08:BB:CA:29:F5:54:D4:21:AC:E0:32:B9:77:AA:1B:F6:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/323830343a356233303a3a2f33322d3438203d3e20323638383234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5b30::/32
Signature Algorithm: sha256WithRSAEncryption
a5:ab:cb:14:0f:f5:71:a3:4b:44:e1:b4:2d:ed:64:37:50:b7:
8b:6a:94:3a:48:0e:73:ae:a3:35:b8:77:2f:92:4e:36:90:ee:
10:e1:41:88:94:29:22:8b:a9:3f:06:20:3f:0a:96:aa:12:20:
1f:44:5a:69:4b:d6:ce:1c:bd:f3:74:3f:17:e0:ee:97:6c:e2:
86:53:ed:c5:ac:20:7c:ac:cb:9b:f9:e1:b1:0f:8c:86:b1:d3:
39:ce:c1:12:bf:3f:e9:5f:01:63:27:d1:88:d8:56:89:aa:d3:
58:d7:72:6c:d0:30:b9:e0:2d:f6:06:07:e0:e0:51:d3:a2:22:
15:d5:a3:77:cb:42:9e:3d:16:78:f4:79:b9:fc:7c:25:06:24:
bf:c9:0a:b0:15:1c:14:4c:7f:cf:62:90:41:a8:62:f4:3b:49:
d2:e9:6d:13:e0:86:90:8a:9c:5e:46:fc:10:02:b2:22:9a:38:
4d:f2:e5:8b:fc:70:35:c2:bc:e5:ef:0d:88:06:14:cc:42:2e:
93:48:10:ca:fc:57:c1:7c:60:d2:d0:35:e0:0e:b8:25:71:0c:
14:5c:f6:42:4d:62:6c:e8:73:aa:da:7f:4c:d4:77:92:07:aa:
c6:79:ce:ea:8b:f0:be:72:d3:a9:98:42:35:e0:21:4e:40:ad:
d9:64:e4:18
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUQymrA9SDuzaXfI2NRHh7D8J4sfIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFDQjcxMDhCQkNBMjlGNTU0RDQyMUFDRTAzMkI5NzdB
QTFCRjY3QzAeFw0yNTAzMDUyMDAzMzNaFw0yNjAzMDQyMDA4MzNaMDMxMTAvBgNV
BAMTKDRDREYwQTA3MEFFRjIxNDQ3QzAzQTc0OUFDOTlERTcxREQ3OTI5RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh7EI1Ma36AqDcC2BXN+/kjof8
778W5xjNXZst7r4K8Jy8kFFVVDvuiVQdLyLt8fhlmhcoZCGcNaK+jpL6sO+IGjT2
Xc68cDGymMa81Pv0aUMYHVBt04WUahA5iqpAbRD2TC/ti+G5+jApkmHr4peCzHva
dZrT0zh4mbxPUHMyCIocKUDmxwmDaGUxABLq/Tz1dmK5RA+x1MCQNjzEB9ijOX1U
CHUDL55EYYzvLZiczIe7Pw9w2+OXLFrIn9QenKoJ5l1qg1AOZiAzz1pg0uxWQzel
c85veCLqpAwp1RAsy/jLjGeEDBAAtg/jx6Fwu+bANyzx3H0kcXTtNVEFMhSXAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUTN8KBwrvIUR8A6dJrJnecd15KfcwHwYDVR0j
BBgwFoAUActxCLvKKfVU1CGs4DK5d6ob9nwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUU0Y0d3elR1V21rTWhtakI0enBjV2d6V2JZVlRKRXlkNU02R2JGU2ZV
aUIvMS8wMUNCNzEwOEJCQ0EyOUY1NTRENDIxQUNFMDMyQjk3N0FBMUJGNjdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxQ0I3MTA4QkJDQTI5RjU1
NEQ0MjFBQ0UwMzJCOTc3QUExQkY2N0MuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlFNGNHd3pUdVdta01obWpCNHpwY1dneldiWVZUSkV5ZDVNNkdiRlNmVWlCLzEv
MzIzODMwMzQzYTM1NjIzMzMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4
MzgzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARbMDANBgkqhkiG9w0BAQsFAAOCAQEApavLFA/1
caNLROG0Le1kN1C3i2qUOkgOc66jNbh3L5JONpDuEOFBiJQpIoupPwYgPwqWqhIg
H0RaaUvWzhy983Q/F+Dul2zihlPtxawgfKzLm/nhsQ+MhrHTOc7BEr8/6V8BYyfR
iNhWiarTWNdybNAwueAt9gYH4OBR06IiFdWjd8tCnj0WePR5ufx8JQYkv8kKsBUc
FEx/z2KQQahi9DtJ0ultE+CGkIqcXkb8EAKyIpo4TfLli/xwNcK85e8NiAYUzEIu
k0gQyvxXwXxg0tA14A64JXEMFFz2Qk1ibOhzqtp/TNR3kgeqxnnO6ovwvnLTqZhC
NeAhTkCt2WTkGA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 04:42:51 2025 by rpki-client