Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/1/323830343a363238383a3a2f33322d313238203d3e20323639333032.roa
File: 323830343a363238383a3a2f33322d313238203d3e20323639333032.roa (raw, json)
Hash identifier: mCi58gE6mto4l20v0MTk29C3Pqml+EIUm2zKqhd4tDY=
Subject key identifier: E8:F1:3B:58:2D:1F:78:6B:96:C5:30:ED:16:B5:31:38:82:34:66:B0
Certificate issuer: /CN=0F8527D7B78AAF3D805B156085B133DC25F008C2
Certificate serial: 791F84F3890D11896E6315B95A517B8C6DC7D34C
Authority key identifier: 0F:85:27:D7:B7:8A:AF:3D:80:5B:15:60:85:B1:33:DC:25:F0:08:C2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/1/323830343a363238383a3a2f33322d313238203d3e20323639333032.roa
Signing time: Thu 06 Mar 2025 13:00:15 +0000
ROA not before: Thu 06 Mar 2025 12:55:15 +0000
ROA not after: Thu 05 Mar 2026 13:00:15 +0000
asID: 269302
IP address blocks: 2804:6288::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:1f:84:f3:89:0d:11:89:6e:63:15:b9:5a:51:7b:8c:6d:c7:d3:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0F8527D7B78AAF3D805B156085B133DC25F008C2
Validity
Not Before: Mar 6 12:55:15 2025 GMT
Not After : Mar 5 13:00:15 2026 GMT
Subject: CN=E8F13B582D1F786B96C530ED16B53138823466B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ae:d1:cc:7d:94:40:e2:fc:d6:0e:f9:99:f9:
2b:be:5c:67:d8:49:2d:d3:99:40:c0:44:53:c1:5d:
9c:e4:67:c3:8c:5f:49:1a:8e:9d:f8:64:e4:03:10:
e9:d7:65:d1:24:d0:bb:a6:3b:da:f6:67:a9:f6:97:
b2:09:13:49:36:ee:48:e4:b3:05:c5:d9:26:7b:33:
09:5f:19:72:ef:30:92:be:6c:41:59:65:2f:a6:50:
06:55:11:61:d4:65:40:5e:3a:fc:7b:1b:48:39:e0:
20:81:ec:c8:10:15:4a:be:eb:31:0e:68:64:6e:83:
97:19:03:65:6d:97:52:ce:2a:e2:eb:c2:f5:02:cf:
d8:77:b3:d4:1a:1b:3f:fc:21:93:d3:dc:58:8d:69:
62:f7:a8:e0:ef:26:ad:e1:81:86:bd:69:94:4f:c6:
2b:53:16:90:26:b5:f3:3d:fa:80:92:9f:d0:40:8a:
f7:c1:d3:d7:6c:9c:7a:a8:e7:fd:da:37:7d:20:84:
b0:9f:0c:22:d1:96:3b:93:3d:18:e6:25:34:55:a0:
59:c9:ba:39:03:35:46:35:03:83:18:d0:90:9f:e0:
67:41:cf:8f:5f:f6:9d:23:5d:f3:49:b7:4c:ef:fc:
9a:6f:6c:03:e5:1d:b5:d4:05:7a:a4:e7:5f:c3:2b:
04:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F1:3B:58:2D:1F:78:6B:96:C5:30:ED:16:B5:31:38:82:34:66:B0
X509v3 Authority Key Identifier:
keyid:0F:85:27:D7:B7:8A:AF:3D:80:5B:15:60:85:B1:33:DC:25:F0:08:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/1/323830343a363238383a3a2f33322d313238203d3e20323639333032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6288::/32
Signature Algorithm: sha256WithRSAEncryption
25:90:56:25:87:e3:76:90:75:91:4f:95:46:bf:49:a3:b8:b3:
3d:9d:87:6b:71:59:d9:d7:1c:d4:77:ab:a3:de:03:19:27:58:
17:27:f4:54:e0:43:6d:f3:d6:4a:4f:1c:a0:7c:dc:b0:e3:f0:
2b:36:e0:9e:c1:8f:08:bd:49:2f:f9:b6:36:b6:65:b5:0d:b6:
5c:83:c1:1d:50:4a:bd:48:d9:4a:5a:b4:cb:ee:5b:bc:0c:f9:
e7:1e:84:20:55:9c:a3:69:b0:6a:49:56:47:54:49:1d:e3:e6:
ec:0a:4d:ac:c0:cd:aa:0f:60:eb:7d:5e:f0:61:a2:4f:5d:59:
84:77:09:22:ed:dc:4a:94:86:74:49:cf:99:e9:4a:97:ec:7c:
9a:57:d4:d5:20:ae:19:5d:98:14:1f:54:0f:d2:0b:07:a6:ac:
b8:3e:7f:47:5f:0d:18:81:0c:93:e8:c9:c1:9c:22:1f:f6:02:
a2:50:67:48:c6:b2:8e:45:02:61:56:6d:b2:77:1d:29:19:86:
b2:3c:6e:33:13:35:e7:b6:50:00:d7:2a:92:76:4a:dd:b8:e3:
5b:fb:18:24:0d:22:33:1f:e6:38:84:0e:68:32:c9:53:5e:81:
9f:fb:22:0b:d5:ff:05:76:9a:c0:0d:b0:c0:97:1c:70:50:7b:
71:88:e5:8d
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUeR+E84kNEYluYxW5WlF7jG3H00wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEY4NTI3RDdCNzhBQUYzRDgwNUIxNTYwODVCMTMzREMy
NUYwMDhDMjAeFw0yNTAzMDYxMjU1MTVaFw0yNjAzMDUxMzAwMTVaMDMxMTAvBgNV
BAMTKEU4RjEzQjU4MkQxRjc4NkI5NkM1MzBFRDE2QjUzMTM4ODIzNDY2QjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5rtHMfZRA4vzWDvmZ+Su+XGfY
SS3TmUDARFPBXZzkZ8OMX0kajp34ZOQDEOnXZdEk0LumO9r2Z6n2l7IJE0k27kjk
swXF2SZ7MwlfGXLvMJK+bEFZZS+mUAZVEWHUZUBeOvx7G0g54CCB7MgQFUq+6zEO
aGRug5cZA2Vtl1LOKuLrwvUCz9h3s9QaGz/8IZPT3FiNaWL3qODvJq3hgYa9aZRP
xitTFpAmtfM9+oCSn9BAivfB09dsnHqo5/3aN30ghLCfDCLRljuTPRjmJTRVoFnJ
ujkDNUY1A4MY0JCf4GdBz49f9p0jXfNJt0zv/JpvbAPlHbXUBXqk51/DKwRpAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU6PE7WC0feGuWxTDtFrUxOII0ZrAwHwYDVR0j
BBgwFoAUD4Un17eKrz2AWxVghbEz3CXwCMIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2dGVzRxVUhpaU1SN3l0MnVGMktnYnZDWExIMjdiYkFVc2N1MmJFQ1hx
dEYvMS8wRjg1MjdEN0I3OEFBRjNEODA1QjE1NjA4NUIxMzNEQzI1RjAwOEMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGODUyN0Q3Qjc4QUFGM0Q4
MDVCMTU2MDg1QjEzM0RDMjVGMDA4QzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NnRlc0cVVIaWlNUjd5dDJ1RjJLZ2J2Q1hMSDI3YmJBVXNjdTJiRUNYcXRGLzEv
MzIzODMwMzQzYTM2MzIzODM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzkzMzMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBGKIMA0GCSqGSIb3DQEBCwUAA4IBAQAlkFYl
h+N2kHWRT5VGv0mjuLM9nYdrcVnZ1xzUd6uj3gMZJ1gXJ/RU4ENt89ZKTxygfNyw
4/ArNuCewY8IvUkv+bY2tmW1DbZcg8EdUEq9SNlKWrTL7lu8DPnnHoQgVZyjabBq
SVZHVEkd4+bsCk2swM2qD2DrfV7wYaJPXVmEdwki7dxKlIZ0Sc+Z6UqX7HyaV9TV
IK4ZXZgUH1QP0gsHpqy4Pn9HXw0YgQyT6MnBnCIf9gKiUGdIxrKORQJhVm2ydx0p
GYayPG4zEzXntlAA1yqSdkrduONb+xgkDSIzH+Y4hA5oMslTXoGf+yIL1f8FdprA
DbDAlxxwUHtxiOWN
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:25:23 2025 by rpki-client