Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CweHrY7tr7bth5qfdbnDHF7y9yZpGxRY749q7SU16izX/1/323830343a386465383a3a2f33322d3332203d3e20323733333839.roa
File: 323830343a386465383a3a2f33322d3332203d3e20323733333839.roa (raw, json)
Hash identifier: UiXjDidkD0nAk2B9x3CihHP/bHAmAf6Pe10O64bz2Pk=
Subject key identifier: 91:B9:5A:7A:BB:D3:B8:7A:30:FE:DD:F5:06:5A:4E:F8:27:3F:E3:6F
Certificate issuer: /CN=BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741
Certificate serial: 6202CBF583EEB166514291956B45995B60355F2C
Authority key identifier: BF:D9:9D:DF:13:2C:A7:F4:F3:8E:7D:EE:A4:F6:EB:DD:D2:E8:F7:41
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CweHrY7tr7bth5qfdbnDHF7y9yZpGxRY749q7SU16izX/1/323830343a386465383a3a2f33322d3332203d3e20323733333839.roa
Signing time: Wed 05 Mar 2025 19:00:23 +0000
ROA not before: Wed 05 Mar 2025 18:55:23 +0000
ROA not after: Wed 04 Mar 2026 19:00:23 +0000
asID: 273389
IP address blocks: 2804:8de8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:02:cb:f5:83:ee:b1:66:51:42:91:95:6b:45:99:5b:60:35:5f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741
Validity
Not Before: Mar 5 18:55:23 2025 GMT
Not After : Mar 4 19:00:23 2026 GMT
Subject: CN=91B95A7ABBD3B87A30FEDDF5065A4EF8273FE36F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:84:0e:3f:6e:3d:b5:a1:36:40:67:87:9a:57:
82:e3:0e:56:e7:3f:90:4e:66:d1:69:ee:e1:27:8e:
d4:df:fb:78:c9:a9:e4:c0:5b:e7:31:e5:09:cd:22:
52:51:f7:76:e2:38:00:50:21:78:67:40:38:19:e0:
43:b6:d5:45:3c:c0:d3:5e:79:1d:a4:da:12:4e:da:
75:10:3a:7d:f6:e3:fe:21:cd:45:af:76:1f:9f:6b:
ce:49:c0:2a:66:b4:33:ff:0c:b5:50:5b:8b:48:a5:
86:3a:28:49:9d:5b:4c:9e:9e:fe:53:bd:d7:71:af:
3b:35:59:7d:d3:5c:29:6f:ee:fb:34:87:09:5d:68:
6b:40:2e:93:d5:97:3b:ee:f1:b8:db:ec:4e:9a:2f:
13:e3:31:7e:bb:de:66:68:70:92:0d:75:8e:72:5b:
5e:6d:f1:9c:aa:e2:73:67:74:1e:16:4e:08:dd:53:
ec:a5:8d:d7:ab:19:67:17:fd:e8:81:10:15:b9:f5:
b7:fc:a0:69:be:d7:2d:36:31:81:80:bd:7a:cf:ec:
95:dc:cb:f4:b9:22:ec:aa:54:e1:57:ff:06:c9:ba:
20:ac:dc:84:f1:a0:cf:8a:32:72:bb:3a:81:e9:d0:
e0:4e:e7:b0:75:37:f7:2b:61:5a:6c:3e:94:4b:78:
bb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B9:5A:7A:BB:D3:B8:7A:30:FE:DD:F5:06:5A:4E:F8:27:3F:E3:6F
X509v3 Authority Key Identifier:
keyid:BF:D9:9D:DF:13:2C:A7:F4:F3:8E:7D:EE:A4:F6:EB:DD:D2:E8:F7:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CweHrY7tr7bth5qfdbnDHF7y9yZpGxRY749q7SU16izX/1/BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CweHrY7tr7bth5qfdbnDHF7y9yZpGxRY749q7SU16izX/1/323830343a386465383a3a2f33322d3332203d3e20323733333839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8de8::/32
Signature Algorithm: sha256WithRSAEncryption
7d:a0:d8:b6:e6:ba:90:62:9d:f3:b0:ee:94:9f:b5:8b:ca:94:
15:f8:c4:7f:2b:aa:7c:87:7a:e3:c5:ba:bf:0b:d1:9b:76:07:
6f:aa:f7:f2:49:a7:2a:c4:ef:2a:68:e8:ed:2c:51:c6:4c:36:
77:ae:7b:35:4c:2d:87:88:0e:8f:96:9f:cf:ff:fb:c1:97:92:
26:ce:dc:8b:4c:37:33:f3:2e:ac:7e:41:14:95:ea:41:f3:b3:
73:f1:70:bd:b2:ea:37:6b:ee:cb:a4:3c:fe:8a:da:bc:7f:05:
7f:a6:66:91:f7:4c:b1:a1:b8:9e:48:7a:8b:29:76:d9:c9:26:
a8:0e:5e:5c:a5:95:30:cf:a8:04:46:3d:df:05:b2:e6:1e:da:
c2:a7:a5:80:78:1b:b3:ad:e9:3b:10:9a:0f:f8:0d:70:09:9c:
24:1e:87:2a:40:12:aa:b2:b8:50:72:39:99:eb:91:a9:5a:27:
cb:c1:8a:3e:38:ac:a9:68:d8:66:56:22:1f:99:a6:f3:bd:16:
26:78:0f:a9:59:5b:87:c4:3b:13:78:50:cd:0a:c9:ee:81:4c:
f5:8c:3b:4c:a6:95:dc:49:e1:6f:96:07:ff:ba:07:52:cb:51:
5f:f8:16:0d:fc:f5:c1:d4:aa:1e:10:cc:41:42:ee:98:88:d0:
ca:68:4a:22
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUYgLL9YPusWZRQpGVa0WZW2A1XywwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkZEOTlEREYxMzJDQTdGNEYzOEU3REVFQTRGNkVCRERE
MkU4Rjc0MTAeFw0yNTAzMDUxODU1MjNaFw0yNjAzMDQxOTAwMjNaMDMxMTAvBgNV
BAMTKDkxQjk1QTdBQkJEM0I4N0EzMEZFRERGNTA2NUE0RUY4MjczRkUzNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwhA4/bj21oTZAZ4eaV4LjDlbn
P5BOZtFp7uEnjtTf+3jJqeTAW+cx5QnNIlJR93biOABQIXhnQDgZ4EO21UU8wNNe
eR2k2hJO2nUQOn324/4hzUWvdh+fa85JwCpmtDP/DLVQW4tIpYY6KEmdW0yenv5T
vddxrzs1WX3TXClv7vs0hwldaGtALpPVlzvu8bjb7E6aLxPjMX673mZocJINdY5y
W15t8Zyq4nNndB4WTgjdU+yljderGWcX/eiBEBW59bf8oGm+1y02MYGAvXrP7JXc
y/S5IuyqVOFX/wbJuiCs3ITxoM+KMnK7OoHp0OBO57B1N/crYVpsPpRLeLsZAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUkblaervTuHow/t31BlpO+Cc/428wHwYDVR0j
BBgwFoAUv9md3xMsp/Tzjn3upPbr3dLo90EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3dlSHJZN3RyN2J0aDVxZmRibkRIRjd5OXlacEd4Ulk3NDlxN1NVMTZp
elgvMS9CRkQ5OURERjEzMkNBN0Y0RjM4RTdERUVBNEY2RUJEREQyRThGNzQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGRDk5RERGMTMyQ0E3RjRG
MzhFN0RFRUE0RjZFQkRERDJFOEY3NDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N3ZUhyWTd0cjdidGg1cWZkYm5ESEY3eTl5WnBHeFJZNzQ5cTdTVTE2aXpYLzEv
MzIzODMwMzQzYTM4NjQ2NTM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMz
MzMzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASN6DANBgkqhkiG9w0BAQsFAAOCAQEAfaDYtua6
kGKd87DulJ+1i8qUFfjEfyuqfId648W6vwvRm3YHb6r38kmnKsTvKmjo7SxRxkw2
d657NUwth4gOj5afz//7wZeSJs7ci0w3M/MurH5BFJXqQfOzc/FwvbLqN2vuy6Q8
/oravH8Ff6ZmkfdMsaG4nkh6iyl22ckmqA5eXKWVMM+oBEY93wWy5h7awqelgHgb
s63pOxCaD/gNcAmcJB6HKkASqrK4UHI5meuRqVony8GKPjisqWjYZlYiH5mm870W
JngPqVlbh8Q7E3hQzQrJ7oFM9Yw7TKaV3Enhb5YH/7oHUstRX/gWDfz1wdSqHhDM
QULumIjQymhKIg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 03:03:26 2025 by rpki-client