Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/323830343a316162633a3a2f33322d3332203d3e203631383832.roa
File: 323830343a316162633a3a2f33322d3332203d3e203631383832.roa (raw, json)
Hash identifier: R2GFaC7KtV1sT4zTrYdPevMHjXPofDO+z28ei2sSeNg=
Subject key identifier: 23:BA:A5:A1:A8:1F:41:36:6B:B5:9C:4B:32:E8:CC:DB:AC:C5:7B:18
Certificate issuer: /CN=FE8B1CC20565AAF3449DBB55AF3C8D506AAB18F6
Certificate serial: 2497E60CEB3B61CC2E88E8AA9EB55B4094B1EFA8
Authority key identifier: FE:8B:1C:C2:05:65:AA:F3:44:9D:BB:55:AF:3C:8D:50:6A:AB:18:F6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE8B1CC20565AAF3449DBB55AF3C8D506AAB18F6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/323830343a316162633a3a2f33322d3332203d3e203631383832.roa
Signing time: Tue 25 Feb 2025 00:55:47 +0000
ROA not before: Tue 25 Feb 2025 00:50:47 +0000
ROA not after: Tue 24 Feb 2026 00:55:47 +0000
asID: 61882
IP address blocks: 2804:1abc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:97:e6:0c:eb:3b:61:cc:2e:88:e8:aa:9e:b5:5b:40:94:b1:ef:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FE8B1CC20565AAF3449DBB55AF3C8D506AAB18F6
Validity
Not Before: Feb 25 00:50:47 2025 GMT
Not After : Feb 24 00:55:47 2026 GMT
Subject: CN=23BAA5A1A81F41366BB59C4B32E8CCDBACC57B18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:86:76:d3:07:76:f8:15:f4:ed:0c:74:a3:59:
60:2c:04:af:ed:44:f9:75:46:66:1f:dc:e1:c9:81:
21:52:dc:cc:f6:84:b4:3e:2c:89:a4:74:30:93:15:
4a:e2:23:47:bd:ca:39:e4:4f:f3:63:33:15:97:fc:
56:22:6f:f6:bd:36:91:98:64:fa:65:3a:82:51:05:
9d:3a:1f:1c:b5:da:16:70:4d:28:e9:77:02:9c:33:
94:f2:da:af:07:90:32:b1:1c:bb:d9:65:9e:bc:cf:
8a:93:ff:c2:09:7b:00:d6:b2:9e:5f:84:62:d7:6a:
c3:37:95:bf:2d:80:60:6c:0b:9c:8a:fc:4e:54:a6:
80:e8:0b:5e:a9:c5:5c:3d:44:f1:c8:d4:f7:c5:83:
c4:1c:08:88:3a:9e:75:b0:1b:59:66:dc:23:e5:f4:
37:ad:ad:1d:2f:b8:90:eb:59:60:a8:ed:8e:2b:d8:
e2:a4:e3:69:e4:41:33:54:43:3f:85:b7:f8:a9:60:
29:9c:aa:07:7d:1a:a1:97:9c:c0:45:0e:a5:c9:12:
98:da:c8:ce:01:31:94:8f:b1:ba:c0:3c:01:e7:e3:
7a:08:c4:4b:b6:3a:c8:82:3c:1e:ee:cc:5d:26:a7:
14:4f:ba:9d:7a:37:10:69:85:a2:b6:93:04:83:ec:
98:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BA:A5:A1:A8:1F:41:36:6B:B5:9C:4B:32:E8:CC:DB:AC:C5:7B:18
X509v3 Authority Key Identifier:
keyid:FE:8B:1C:C2:05:65:AA:F3:44:9D:BB:55:AF:3C:8D:50:6A:AB:18:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/FE8B1CC20565AAF3449DBB55AF3C8D506AAB18F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE8B1CC20565AAF3449DBB55AF3C8D506AAB18F6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/323830343a316162633a3a2f33322d3332203d3e203631383832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1abc::/32
Signature Algorithm: sha256WithRSAEncryption
0d:23:2d:c9:49:b4:7f:84:6b:f4:e3:aa:08:08:29:71:fb:2a:
1f:c9:e3:90:61:c5:ca:49:06:23:46:c1:3e:07:86:66:4a:7f:
ea:06:2a:d0:f5:1e:3b:00:b8:98:45:98:fc:dc:8e:cf:ca:dc:
ee:44:80:9a:d7:17:db:c9:2d:c7:fb:20:e3:6d:67:41:5c:70:
c4:ed:24:23:32:1b:7b:c7:05:34:50:6e:a5:2d:18:50:a5:f8:
ef:d2:70:1d:5d:33:40:15:1a:f7:37:c5:ae:81:08:dc:b8:43:
44:5a:7d:fe:21:4d:56:f3:b2:f7:a8:21:79:79:e8:4f:08:e8:
6d:73:88:2b:12:06:29:9b:8e:28:dd:f9:81:10:d7:a9:f6:7b:
d6:21:8d:56:b2:2d:5b:77:1a:74:e1:24:b7:18:a8:09:b8:cb:
f0:f8:33:1b:e7:a7:5b:02:01:f1:84:86:7f:9f:7e:1c:e1:51:
6a:47:94:00:de:81:86:92:f4:ee:d7:7e:60:04:e7:ff:11:6d:
0f:56:77:03:f9:9b:f4:75:17:5a:98:ec:93:b0:53:db:33:24:
33:41:a9:a5:cf:62:f0:e1:4f:fe:0f:d6:42:27:02:03:ca:98:
96:6e:08:b3:52:65:18:89:02:1a:ef:70:15:a9:92:5a:db:6f:
ef:8b:87:98
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUJJfmDOs7YcwuiOiqnrVbQJSx76gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkU4QjFDQzIwNTY1QUFGMzQ0OURCQjU1QUYzQzhENTA2
QUFCMThGNjAeFw0yNTAyMjUwMDUwNDdaFw0yNjAyMjQwMDU1NDdaMDMxMTAvBgNV
BAMTKDIzQkFBNUExQTgxRjQxMzY2QkI1OUM0QjMyRThDQ0RCQUNDNTdCMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQhnbTB3b4FfTtDHSjWWAsBK/t
RPl1RmYf3OHJgSFS3Mz2hLQ+LImkdDCTFUriI0e9yjnkT/NjMxWX/FYib/a9NpGY
ZPplOoJRBZ06Hxy12hZwTSjpdwKcM5Ty2q8HkDKxHLvZZZ68z4qT/8IJewDWsp5f
hGLXasM3lb8tgGBsC5yK/E5UpoDoC16pxVw9RPHI1PfFg8QcCIg6nnWwG1lm3CPl
9DetrR0vuJDrWWCo7Y4r2OKk42nkQTNUQz+Ft/ipYCmcqgd9GqGXnMBFDqXJEpja
yM4BMZSPsbrAPAHn43oIxEu2OsiCPB7uzF0mpxRPup16NxBphaK2kwSD7JjNAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUI7qloagfQTZrtZxLMujM26zFexgwHwYDVR0j
BBgwFoAU/oscwgVlqvNEnbtVrzyNUGqrGPYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnpUSHBFWWE0eVJpMWZSTnFMekNUTG9GQ1RvNDRlUXdYU3JZTVBLQXY0
dUQvMC9GRThCMUNDMjA1NjVBQUYzNDQ5REJCNTVBRjNDOEQ1MDZBQUIxOEY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZFOEIxQ0MyMDU2NUFBRjM0
NDlEQkI1NUFGM0M4RDUwNkFBQjE4RjYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J6VEhwRVlhNHlSaTFmUk5xTHpDVExvRkNUbzQ0ZVF3WFNyWU1QS0F2NHVELzAv
MzIzODMwMzQzYTMxNjE2MjYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzYzMTM4
MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEGrwwDQYJKoZIhvcNAQELBQADggEBAA0jLclJtH+E
a/TjqggIKXH7Kh/J45BhxcpJBiNGwT4HhmZKf+oGKtD1HjsAuJhFmPzcjs/K3O5E
gJrXF9vJLcf7IONtZ0FccMTtJCMyG3vHBTRQbqUtGFCl+O/ScB1dM0AVGvc3xa6B
CNy4Q0Raff4hTVbzsveoIXl56E8I6G1ziCsSBimbjijd+YEQ16n2e9YhjVayLVt3
GnThJLcYqAm4y/D4Mxvnp1sCAfGEhn+ffhzhUWpHlADegYaS9O7XfmAE5/8RbQ9W
dwP5m/R1F1qY7JOwU9szJDNBqaXPYvDhT/4P1kInAgPKmJZuCLNSZRiJAhrvcBWp
klrbb++Lh5g=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:11:51 2025 by rpki-client