Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/323830343a373762303a3a2f33322d3634203d3e20323032.roa
File: 323830343a373762303a3a2f33322d3634203d3e20323032.roa (raw, json)
Hash identifier: lpztG8IYHLW5Xw7gLF9CUEMiaC4h2NhnhN8a6iSJEmU=
Subject key identifier: A4:0C:BB:54:D3:20:6C:68:95:4B:CB:B7:B3:53:05:90:93:BC:FB:F0
Certificate issuer: /CN=BF45F5442049793490E484E18AD1516C8FDC8087
Certificate serial: 7626F4C876924444A32B244D9FD025749EB7E479
Authority key identifier: BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/323830343a373762303a3a2f33322d3634203d3e20323032.roa
Signing time: Wed 05 Mar 2025 23:58:49 +0000
ROA not before: Wed 05 Mar 2025 23:53:49 +0000
ROA not after: Wed 04 Mar 2026 23:58:49 +0000
asID: 202
IP address blocks: 2804:77b0::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:26:f4:c8:76:92:44:44:a3:2b:24:4d:9f:d0:25:74:9e:b7:e4:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF45F5442049793490E484E18AD1516C8FDC8087
Validity
Not Before: Mar 5 23:53:49 2025 GMT
Not After : Mar 4 23:58:49 2026 GMT
Subject: CN=A40CBB54D3206C68954BCBB7B353059093BCFBF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f7:8e:82:16:6d:c2:5a:ed:5e:40:55:11:03:
fd:5a:01:9f:6c:00:32:be:d1:a2:d3:25:72:08:fb:
5d:1d:b7:7e:6d:41:48:ef:61:e6:53:ac:17:ae:3c:
c8:ba:8d:ea:17:cd:b7:da:76:53:0e:cb:2a:80:59:
c1:c8:ef:26:78:f9:87:75:a9:31:39:9b:ea:2b:f4:
ad:ff:a8:7e:dd:7f:49:27:e6:d4:d0:73:62:1f:5b:
dc:67:ec:59:15:43:23:fb:b0:5d:c3:04:16:1a:ef:
95:e5:7d:ee:36:cf:bf:bf:19:1d:dc:39:f4:46:36:
c4:fd:5f:46:5d:e8:af:2f:77:f9:e9:8c:4a:e9:17:
4a:1d:38:32:30:e8:c1:f9:97:62:1d:8a:80:67:2b:
b9:e0:07:4f:b9:4e:39:b5:14:08:ca:c9:78:d0:31:
6e:30:56:f6:0b:07:7f:07:db:eb:52:8f:6c:6a:f8:
68:da:bd:eb:6a:1d:f7:93:8a:de:2e:5a:d0:43:ee:
4a:9d:24:fd:a3:f9:90:42:5a:03:82:3e:46:21:52:
c8:47:3f:e6:6c:c9:ca:36:f4:f9:28:a4:04:54:23:
f5:d1:88:33:12:82:55:e2:07:09:68:c8:9e:6c:aa:
92:9e:df:14:28:52:18:3c:63:9a:b0:d0:0f:3f:95:
f7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0C:BB:54:D3:20:6C:68:95:4B:CB:B7:B3:53:05:90:93:BC:FB:F0
X509v3 Authority Key Identifier:
keyid:BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/323830343a373762303a3a2f33322d3634203d3e20323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:77b0::/32
Signature Algorithm: sha256WithRSAEncryption
8a:1f:70:b7:3d:6f:5d:57:72:25:2a:ec:f4:85:d1:72:05:06:
31:de:97:6b:e7:64:bd:bb:fb:7f:8e:60:eb:02:bc:67:de:80:
37:fd:73:6b:94:d4:de:3b:96:a8:20:47:42:16:a2:8f:e9:15:
a8:63:59:fe:84:21:09:8c:04:25:38:45:64:c4:e6:aa:89:1d:
2f:0d:2d:4c:bf:31:09:51:36:ec:55:74:f4:53:59:c8:04:8d:
ec:f0:1f:08:32:3c:81:37:65:e9:86:c3:ee:e5:82:c9:26:e7:
65:b3:fe:1b:eb:ca:ff:bf:2d:49:a2:9b:67:de:06:16:d3:c5:
dc:a3:e6:4c:92:c1:33:19:5f:44:75:60:33:bb:0c:a8:4c:01:
85:a2:e0:70:0d:d1:18:9a:e9:25:cb:d1:bc:e3:40:a5:15:8a:
9c:c4:73:02:82:04:aa:1d:05:f8:e2:38:7f:c9:c0:d1:89:5f:
ef:77:3e:54:de:68:0d:7c:05:90:9e:5d:ca:f3:26:7e:e3:aa:
be:4e:f2:38:ba:c9:34:a9:91:4c:d0:74:0e:bd:38:0f:d3:48:
63:12:b1:e7:c6:6e:01:b3:a0:db:f0:23:eb:71:ca:3c:8c:24:
89:17:67:58:da:13:83:68:ff:31:1c:72:a4:5d:c8:4c:6d:11:
21:0f:71:53
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUdib0yHaSRESjKyRNn9AldJ635HkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkY0NUY1NDQyMDQ5NzkzNDkwRTQ4NEUxOEFEMTUxNkM4
RkRDODA4NzAeFw0yNTAzMDUyMzUzNDlaFw0yNjAzMDQyMzU4NDlaMDMxMTAvBgNV
BAMTKEE0MENCQjU0RDMyMDZDNjg5NTRCQ0JCN0IzNTMwNTkwOTNCQ0ZCRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/946CFm3CWu1eQFURA/1aAZ9s
ADK+0aLTJXII+10dt35tQUjvYeZTrBeuPMi6jeoXzbfadlMOyyqAWcHI7yZ4+Yd1
qTE5m+or9K3/qH7df0kn5tTQc2IfW9xn7FkVQyP7sF3DBBYa75Xlfe42z7+/GR3c
OfRGNsT9X0Zd6K8vd/npjErpF0odODIw6MH5l2IdioBnK7ngB0+5Tjm1FAjKyXjQ
MW4wVvYLB38H2+tSj2xq+GjavetqHfeTit4uWtBD7kqdJP2j+ZBCWgOCPkYhUshH
P+Zsyco29PkopARUI/XRiDMSglXiBwloyJ5sqpKe3xQoUhg8Y5qw0A8/lffLAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUpAy7VNMgbGiVS8u3s1MFkJO8+/AwHwYDVR0j
BBgwFoAUv0X1RCBJeTSQ5IThitFRbI/cgIcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0M0S1F0QlFXeFRqMW5ZYTdUTmhVdng5eG1hN1pyeUYxVWt6TnZhclNY
RWkvMS9CRjQ1RjU0NDIwNDk3OTM0OTBFNDg0RTE4QUQxNTE2QzhGREM4MDg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGNDVGNTQ0MjA0OTc5MzQ5
MEU0ODRFMThBRDE1MTZDOEZEQzgwODcuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCB
kwYIKwYBBQUHMAuGgYZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NDNEtRdEJRV3hUajFuWWE3VE5oVXZ4OXhtYTdacnlGMVVrek52YXJTWEVpLzEv
MzIzODMwMzQzYTM3Mzc2MjMwM2EzYTJmMzMzMjJkMzYzNDIwM2QzZTIwMzIzMDMy
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAKAR3sDANBgkqhkiG9w0BAQsFAAOCAQEAih9wtz1vXVdyJSrs
9IXRcgUGMd6Xa+dkvbv7f45g6wK8Z96AN/1za5TU3juWqCBHQhaij+kVqGNZ/oQh
CYwEJThFZMTmqokdLw0tTL8xCVE27FV09FNZyASN7PAfCDI8gTdl6YbD7uWCySbn
ZbP+G+vK/78tSaKbZ94GFtPF3KPmTJLBMxlfRHVgM7sMqEwBhaLgcA3RGJrpJcvR
vONApRWKnMRzAoIEqh0F+OI4f8nA0Ylf73c+VN5oDXwFkJ5dyvMmfuOqvk7yOLrJ
NKmRTNB0Dr04D9NIYxKx58ZuAbOg2/Aj63HKPIwkiRdnWNoTg2j/MRxypF3ITG0R
IQ9xUw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:05:43 2025 by rpki-client