Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D8cbJyQKPVdsajinWbr9HQTShvgBrnq6okkzWxWrxuoX/0/323830343a363365383a3a2f33332d3333203d3e20323639333931.roa
File: 323830343a363365383a3a2f33332d3333203d3e20323639333931.roa (raw, json)
Hash identifier: 7Eq0UWX3Sf3VXhpmAtB/+EJAuQGdaG86iv100GtRL2E=
Subject key identifier: 56:E9:32:AA:9B:79:78:AB:E8:65:EE:41:BB:0D:9A:71:38:1C:AF:6E
Certificate issuer: /CN=9FF7AE1DE3A484ED489D36F4B5315338134CB42F
Certificate serial: 232DB9506E28EA59B7F1771157F1422D13B9586A
Authority key identifier: 9F:F7:AE:1D:E3:A4:84:ED:48:9D:36:F4:B5:31:53:38:13:4C:B4:2F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FF7AE1DE3A484ED489D36F4B5315338134CB42F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D8cbJyQKPVdsajinWbr9HQTShvgBrnq6okkzWxWrxuoX/0/323830343a363365383a3a2f33332d3333203d3e20323639333931.roa
Signing time: Tue 18 Jan 2022 18:17:01 +0000
ROA not before: Tue 18 Jan 2022 18:12:01 +0000
ROA not after: Tue 17 Jan 2023 18:17:01 +0000
asID: 269391
IP address blocks: 2804:63e8::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:2d:b9:50:6e:28:ea:59:b7:f1:77:11:57:f1:42:2d:13:b9:58:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FF7AE1DE3A484ED489D36F4B5315338134CB42F
Validity
Not Before: Jan 18 18:12:01 2022 GMT
Not After : Jan 17 18:17:01 2023 GMT
Subject: CN=56E932AA9B7978ABE865EE41BB0D9A71381CAF6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e8:ea:66:41:6f:33:3c:ec:dc:b1:5a:61:01:
fc:1b:51:a9:41:da:74:57:e5:82:d1:e2:cc:49:d3:
a4:9c:0e:58:c2:7b:0f:ae:d9:47:47:ce:66:b8:27:
06:3d:c9:e3:32:55:7e:69:60:fd:68:30:fa:60:81:
2b:2d:75:5a:ba:00:9e:c3:52:0c:fb:f1:05:ca:f0:
3a:44:9e:20:b1:7a:f7:aa:5b:28:ad:5b:ce:af:8c:
ff:53:6e:9a:91:2a:48:ab:3a:c1:07:e2:94:fb:91:
50:b3:b7:1d:23:e9:b9:e1:1a:c7:31:72:8d:1d:37:
ef:b7:61:bd:c2:37:82:3c:bd:d5:22:a8:f0:16:fe:
6c:e4:32:63:ac:6e:ff:6a:b6:c4:dc:a9:e1:6f:eb:
d5:e5:a1:b3:78:3b:1d:bf:af:8a:35:e7:2f:a6:43:
69:e2:2d:36:5a:cb:9d:9f:4f:76:6e:46:1b:ad:08:
89:fa:0c:fc:78:39:3e:43:e6:b1:93:c3:29:cf:58:
5c:a2:9f:fc:b9:df:fc:d8:17:41:31:72:0b:9d:6e:
dd:59:5f:b2:de:38:e3:90:b4:71:67:25:71:dd:cb:
d2:4a:fe:4c:0c:b3:41:7d:0a:80:fc:9b:9d:80:07:
b2:1b:d1:7c:00:6c:db:4d:c5:68:f6:7b:b4:07:a6:
43:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E9:32:AA:9B:79:78:AB:E8:65:EE:41:BB:0D:9A:71:38:1C:AF:6E
X509v3 Authority Key Identifier:
keyid:9F:F7:AE:1D:E3:A4:84:ED:48:9D:36:F4:B5:31:53:38:13:4C:B4:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D8cbJyQKPVdsajinWbr9HQTShvgBrnq6okkzWxWrxuoX/0/9FF7AE1DE3A484ED489D36F4B5315338134CB42F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FF7AE1DE3A484ED489D36F4B5315338134CB42F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8cbJyQKPVdsajinWbr9HQTShvgBrnq6okkzWxWrxuoX/0/323830343a363365383a3a2f33332d3333203d3e20323639333931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:63e8::/33
Signature Algorithm: sha256WithRSAEncryption
3a:7c:5a:60:3e:80:88:04:04:6b:69:a8:2f:fb:93:8c:02:e2:
20:0b:cd:fd:8d:23:5c:3e:5f:a3:00:b3:66:18:75:d7:7c:84:
9f:2f:7d:c7:90:a0:e2:3a:19:ea:93:58:3d:ab:83:d5:64:80:
ca:f2:8d:d3:90:dd:3f:44:5e:a0:55:02:30:79:4b:49:55:13:
ff:a7:d8:c3:fd:e0:36:a6:f8:6f:e2:2f:6c:88:4c:fc:57:b3:
a2:81:ed:35:12:2c:3c:02:b3:7a:93:4c:0d:d7:7b:02:e9:68:
48:01:51:ba:5a:95:32:fb:15:e9:68:f0:9c:97:5a:61:f0:7f:
ed:b9:c6:8c:29:88:c7:86:5e:33:9b:7e:cc:11:57:58:af:4f:
e0:50:de:dc:2f:fe:e1:57:0b:ec:ef:8b:c9:d8:0e:31:92:fe:
36:df:a9:c9:a5:b7:37:7b:4c:c2:5c:e9:cf:b0:da:f9:1c:df:
c3:93:38:33:90:08:fe:e7:fd:aa:94:2f:8c:cd:a6:26:b3:ca:
83:42:94:6c:01:29:e7:95:22:1e:85:b1:b9:70:46:08:b6:cd:
26:60:6d:be:d0:d2:bf:53:eb:18:68:eb:44:49:05:a1:1b:58:
4b:4b:2b:7c:38:4a:52:23:eb:f8:b2:0f:6f:92:ff:6b:87:09:
ee:a5:3d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 21:20:46 2025 by rpki-client