Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/323830343a366566383a343a3a2f34382d3438203d3e20323730363330.roa
File: 323830343a366566383a343a3a2f34382d3438203d3e20323730363330.roa (raw, json)
Hash identifier: MEPkPk/6gt8DcWzmLEUPLG28WwnB27G4CFbuoZ9gKyw=
Subject key identifier: F3:05:AF:D9:07:7A:43:71:91:16:3D:24:2D:C6:45:7C:62:2E:55:8A
Certificate issuer: /CN=F7FDF8A9EE071B0475D890E4E63DFDC5219615DB
Certificate serial: 3860CF66E66B6D6AC5D2A73E8024DD2FD66A1EE2
Authority key identifier: F7:FD:F8:A9:EE:07:1B:04:75:D8:90:E4:E6:3D:FD:C5:21:96:15:DB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/323830343a366566383a343a3a2f34382d3438203d3e20323730363330.roa
Signing time: Tue 25 Mar 2025 20:18:20 +0000
ROA not before: Tue 25 Mar 2025 20:13:20 +0000
ROA not after: Tue 24 Mar 2026 20:18:20 +0000
asID: 270630
IP address blocks: 2804:6ef8:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:60:cf:66:e6:6b:6d:6a:c5:d2:a7:3e:80:24:dd:2f:d6:6a:1e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F7FDF8A9EE071B0475D890E4E63DFDC5219615DB
Validity
Not Before: Mar 25 20:13:20 2025 GMT
Not After : Mar 24 20:18:20 2026 GMT
Subject: CN=F305AFD9077A437191163D242DC6457C622E558A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:33:c1:72:46:36:2a:00:9a:4c:96:54:0f:9c:
f4:d5:7a:5e:2c:84:86:dd:31:7c:83:01:3e:28:a6:
c9:bc:86:cd:6e:85:c7:4c:e3:c5:fb:0d:a6:c8:f9:
e0:f8:64:8d:af:e2:b2:6e:86:1a:57:f6:dd:5f:20:
22:a6:ed:13:1e:0f:d6:9a:5c:4f:c1:d2:53:18:6e:
b3:0f:dc:05:8a:4c:f1:ae:35:00:57:b9:ed:69:ba:
a6:f6:e2:d6:4c:62:71:18:5b:fa:d1:f4:d8:f7:e3:
dc:bf:36:be:3c:20:14:41:9c:65:bc:cc:b2:30:91:
a3:b1:e1:45:8a:e5:5b:af:76:e4:a7:a5:f8:91:d5:
79:52:3d:37:24:24:55:06:75:5d:e5:05:d2:c2:e1:
51:f5:ba:f8:b2:37:99:2a:d9:81:7a:c7:ee:fc:b3:
d1:52:4f:37:d2:e1:37:b9:bf:c3:1c:54:31:c1:86:
32:a6:3c:8f:83:90:84:a9:ee:6b:81:68:60:0b:25:
67:c3:67:eb:a6:3b:d5:46:ab:64:b7:7e:18:b9:ba:
20:ac:7e:19:d3:56:de:3e:66:66:f5:72:b6:24:54:
24:cc:2d:8f:0c:da:8a:5f:06:0a:f1:79:81:6a:19:
82:ca:8d:0a:49:33:c3:2e:3f:09:41:5a:fd:3f:11:
d4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:05:AF:D9:07:7A:43:71:91:16:3D:24:2D:C6:45:7C:62:2E:55:8A
X509v3 Authority Key Identifier:
keyid:F7:FD:F8:A9:EE:07:1B:04:75:D8:90:E4:E6:3D:FD:C5:21:96:15:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/323830343a366566383a343a3a2f34382d3438203d3e20323730363330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6ef8:4::/48
Signature Algorithm: sha256WithRSAEncryption
ba:80:3a:54:c8:1e:cb:5f:d4:03:d0:b6:9b:f7:87:11:ef:00:
d2:b5:42:e9:02:21:ec:5b:64:31:4a:33:55:88:cd:15:27:e9:
3a:5f:44:e6:55:e2:1d:ec:c3:78:f1:09:5c:d7:1e:e5:77:d5:
35:13:ca:7a:a6:94:b4:0a:37:81:01:2c:be:9f:02:37:c3:8a:
54:d6:38:3f:7b:e0:e5:1a:b5:aa:c3:05:2f:cc:54:dd:54:14:
a2:00:3e:15:0f:8e:79:59:17:19:8d:bc:ed:49:ba:d0:7c:55:
46:71:69:db:15:00:09:07:db:90:bf:61:d2:41:ae:f2:d2:43:
c3:aa:8c:ed:bb:6f:b3:a0:70:41:a9:12:d4:ff:6d:57:2a:e1:
b4:b5:aa:35:56:31:ba:fc:19:34:a6:b1:95:dc:d8:07:37:58:
2a:ca:06:34:66:29:ce:37:1b:81:cc:b8:c4:fc:fd:40:71:c2:
8b:5f:6a:d7:1c:b5:dc:5a:06:5a:c4:bf:4c:ac:29:e3:e4:eb:
5f:74:b2:06:96:06:2b:e6:0e:7e:5e:66:0f:32:66:5f:ed:d1:
ce:ac:bf:55:9f:92:09:08:1d:55:a4:b3:a0:75:ce:f8:d9:90:
88:1a:ab:cf:20:0a:2d:ae:be:a6:b7:fa:42:d0:93:94:09:d3:
ea:3a:77:27
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUOGDPZuZrbWrF0qc+gCTdL9ZqHuIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjdGREY4QTlFRTA3MUIwNDc1RDg5MEU0RTYzREZEQzUy
MTk2MTVEQjAeFw0yNTAzMjUyMDEzMjBaFw0yNjAzMjQyMDE4MjBaMDMxMTAvBgNV
BAMTKEYzMDVBRkQ5MDc3QTQzNzE5MTE2M0QyNDJEQzY0NTdDNjIyRTU1OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcM8FyRjYqAJpMllQPnPTVel4s
hIbdMXyDAT4opsm8hs1uhcdM48X7DabI+eD4ZI2v4rJuhhpX9t1fICKm7RMeD9aa
XE/B0lMYbrMP3AWKTPGuNQBXue1puqb24tZMYnEYW/rR9Nj349y/Nr48IBRBnGW8
zLIwkaOx4UWK5VuvduSnpfiR1XlSPTckJFUGdV3lBdLC4VH1uviyN5kq2YF6x+78
s9FSTzfS4Te5v8McVDHBhjKmPI+DkISp7muBaGALJWfDZ+umO9VGq2S3fhi5uiCs
fhnTVt4+Zmb1crYkVCTMLY8M2opfBgrxeYFqGYLKjQpJM8MuPwlBWv0/EdT9AgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU8wWv2Qd6Q3GRFj0kLcZFfGIuVYowHwYDVR0j
BBgwFoAU9/34qe4HGwR12JDk5j39xSGWFdswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3VYQ2N5TVlITmZ4SHFCOEtTTFV5bllyemFqdjJVVHdqcEM1aFU4UDZN
dG4vMC9GN0ZERjhBOUVFMDcxQjA0NzVEODkwRTRFNjNERkRDNTIxOTYxNURCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y3RkRGOEE5RUUwNzFCMDQ3
NUQ4OTBFNEU2M0RGREM1MjE5NjE1REIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N1WENjeU1ZSE5meEhxQjhLU0xVeW5ZcnphanYyVVR3anBDNWhVOFA2TXRuLzAv
MzIzODMwMzQzYTM2NjU2NjM4M2EzNDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMy
MzczMDM2MzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEbvgABDANBgkqhkiG9w0BAQsFAAOCAQEA
uoA6VMgey1/UA9C2m/eHEe8A0rVC6QIh7FtkMUozVYjNFSfpOl9E5lXiHezDePEJ
XNce5XfVNRPKeqaUtAo3gQEsvp8CN8OKVNY4P3vg5Rq1qsMFL8xU3VQUogA+FQ+O
eVkXGY287Um60HxVRnFp2xUACQfbkL9h0kGu8tJDw6qM7btvs6BwQakS1P9tVyrh
tLWqNVYxuvwZNKaxldzYBzdYKsoGNGYpzjcbgcy4xPz9QHHCi19q1xy13FoGWsS/
TKwp4+TrX3SyBpYGK+YOfl5mDzJmX+3Rzqy/VZ+SCQgdVaSzoHXO+NmQiBqrzyAK
La6+prf6QtCTlAnT6jp3Jw==
-----END CERTIFICATE-----
Generated at Tue Apr 8 21:25:02 2025 by rpki-client