Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/323830343a363331343a3a2f33322d3438203d3e20323639333337.roa
File: 323830343a363331343a3a2f33322d3438203d3e20323639333337.roa (raw, json)
Hash identifier: 8rIADCc1IMBXHDjsfVNZY3xX+m3yox+H7e16XbvP0l4=
Subject key identifier: D8:60:A3:38:0D:C8:12:CA:80:3F:90:81:D9:85:47:01:E0:03:9F:C0
Certificate issuer: /CN=E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4
Certificate serial: 0F826CF2EA4B0E159F2A6D4AFED0153BD9256BE0
Authority key identifier: E7:08:AB:F0:39:B1:FF:20:F9:DE:5F:F6:CE:1D:E3:DC:BB:AF:D6:B4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/323830343a363331343a3a2f33322d3438203d3e20323639333337.roa
Signing time: Thu 06 Mar 2025 10:33:15 +0000
ROA not before: Thu 06 Mar 2025 10:28:15 +0000
ROA not after: Thu 05 Mar 2026 10:33:15 +0000
asID: 269337
IP address blocks: 2804:6314::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:82:6c:f2:ea:4b:0e:15:9f:2a:6d:4a:fe:d0:15:3b:d9:25:6b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4
Validity
Not Before: Mar 6 10:28:15 2025 GMT
Not After : Mar 5 10:33:15 2026 GMT
Subject: CN=D860A3380DC812CA803F9081D9854701E0039FC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:10:92:8a:5a:bd:86:de:43:86:fc:70:e5:60:
b8:b9:55:4c:46:ba:e2:49:11:9f:3a:3d:aa:7e:ba:
2c:58:ee:67:52:13:8f:79:44:fd:db:3e:c9:5b:9b:
32:90:4a:7b:48:e5:35:13:60:4c:de:64:9c:a6:18:
34:d5:15:f5:38:0f:f2:25:50:9a:71:f5:90:0c:b8:
be:f1:13:7c:b1:74:c7:9d:70:02:47:f7:87:0e:27:
5f:35:f5:4a:7d:6c:23:68:28:ab:f5:93:de:3f:a4:
5b:fb:eb:c0:5b:d7:a9:96:b4:a5:df:07:01:52:11:
53:4b:a1:aa:4a:fc:c8:5b:20:df:82:ed:2f:dc:47:
f1:2d:e6:a2:1c:1e:d1:1a:ca:93:f7:63:b7:9d:24:
2e:fc:44:97:51:df:ce:a2:1e:d7:3a:f9:a4:3a:82:
3c:15:34:15:69:16:19:1c:e0:59:76:5f:5a:03:8d:
5e:90:52:1c:f4:c1:f0:a5:be:dd:c1:f2:da:c8:c9:
ba:94:e9:fb:84:13:41:ba:47:65:53:2c:f1:70:df:
cf:3c:aa:55:fe:ea:a3:6f:0b:04:f3:95:a3:a7:85:
1d:37:25:1a:43:8f:ef:38:1f:98:e6:51:73:9d:75:
62:be:ee:a7:4b:9e:d0:ce:5e:5c:ec:f1:b2:4a:08:
b3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:60:A3:38:0D:C8:12:CA:80:3F:90:81:D9:85:47:01:E0:03:9F:C0
X509v3 Authority Key Identifier:
keyid:E7:08:AB:F0:39:B1:FF:20:F9:DE:5F:F6:CE:1D:E3:DC:BB:AF:D6:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/323830343a363331343a3a2f33322d3438203d3e20323639333337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6314::/32
Signature Algorithm: sha256WithRSAEncryption
c3:44:2c:e0:4b:f8:4c:f1:e8:ae:47:9c:c7:d8:3b:6c:98:51:
c1:d8:20:50:1b:12:6b:6c:fd:f9:56:74:cd:af:79:34:0b:59:
a7:06:e3:a1:09:4b:ef:e7:eb:8d:12:00:9f:ac:1f:ef:64:13:
e0:29:6d:e7:69:a3:0e:20:a8:61:69:bd:7e:ba:73:7c:f1:0f:
6b:ae:ea:3c:b1:12:10:8f:38:6f:21:44:0d:c8:ba:c6:9a:cf:
c1:e6:66:e8:46:70:79:54:5a:71:d4:db:87:5d:eb:b9:3a:4f:
60:46:12:75:c8:0e:eb:02:da:41:ee:a9:08:28:31:f5:2d:9a:
56:ff:17:f3:dd:7b:48:fd:6e:15:eb:f8:11:ba:23:ff:1f:2d:
2a:09:11:00:26:b7:98:76:6b:5a:f2:31:55:e3:11:af:79:be:
27:99:dc:e9:f0:42:c3:fb:90:57:8d:3c:56:87:81:c4:31:ea:
5f:ca:23:98:c5:ec:0f:93:b2:f4:ab:11:2c:2b:91:2a:6c:f4:
b7:cc:1a:35:70:a8:d1:9f:64:19:1d:50:fd:77:2f:35:25:e1:
be:eb:5b:cb:09:08:ad:6c:85:69:5c:c2:a6:3e:6d:f1:7d:e4:
38:15:5f:6e:0d:81:3c:b8:fb:58:e9:c7:bf:f1:44:71:2a:33:
8c:e9:1e:9b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUD4Js8upLDhWfKm1K/tAVO9kla+AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTcwOEFCRjAzOUIxRkYyMEY5REU1RkY2Q0UxREUzRENC
QkFGRDZCNDAeFw0yNTAzMDYxMDI4MTVaFw0yNjAzMDUxMDMzMTVaMDMxMTAvBgNV
BAMTKEQ4NjBBMzM4MERDODEyQ0E4MDNGOTA4MUQ5ODU0NzAxRTAwMzlGQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHEJKKWr2G3kOG/HDlYLi5VUxG
uuJJEZ86Pap+uixY7mdSE495RP3bPslbmzKQSntI5TUTYEzeZJymGDTVFfU4D/Il
UJpx9ZAMuL7xE3yxdMedcAJH94cOJ1819Up9bCNoKKv1k94/pFv768Bb16mWtKXf
BwFSEVNLoapK/MhbIN+C7S/cR/Et5qIcHtEaypP3Y7edJC78RJdR386iHtc6+aQ6
gjwVNBVpFhkc4Fl2X1oDjV6QUhz0wfClvt3B8trIybqU6fuEE0G6R2VTLPFw3888
qlX+6qNvCwTzlaOnhR03JRpDj+84H5jmUXOddWK+7qdLntDOXlzs8bJKCLM5AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU2GCjOA3IEsqAP5CB2YVHAeADn8AwHwYDVR0j
BBgwFoAU5wir8Dmx/yD53l/2zh3j3Luv1rQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0g0NmE5dFJGdFZSNWJaRkthalZlZTlZNzV2cDQ0QzZhMzRMMVlzblVq
SEUvMS9FNzA4QUJGMDM5QjFGRjIwRjlERTVGRjZDRTFERTNEQ0JCQUZENkI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3MDhBQkYwMzlCMUZGMjBG
OURFNUZGNkNFMURFM0RDQkJBRkQ2QjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NINDZhOXRSRnRWUjViWkZLYWpWZWU5WTc1dnA0NEM2YTM0TDFZc25VakhFLzEv
MzIzODMwMzQzYTM2MzMzMTM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM5
MzMzMzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARjFDANBgkqhkiG9w0BAQsFAAOCAQEAw0Qs4Ev4
TPHorkecx9g7bJhRwdggUBsSa2z9+VZ0za95NAtZpwbjoQlL7+frjRIAn6wf72QT
4Clt52mjDiCoYWm9frpzfPEPa67qPLESEI84byFEDci6xprPweZm6EZweVRacdTb
h13ruTpPYEYSdcgO6wLaQe6pCCgx9S2aVv8X8917SP1uFev4Eboj/x8tKgkRACa3
mHZrWvIxVeMRr3m+J5nc6fBCw/uQV408VoeBxDHqX8ojmMXsD5Oy9KsRLCuRKmz0
t8waNXCo0Z9kGR1Q/XcvNSXhvutbywkIrWyFaVzCpj5t8X3kOBVfbg2BPLj7WOnH
v/FEcSozjOkemw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:38:36 2025 by rpki-client