Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/323830343a3266383a3a2f33322d3434203d3e203238313838.roa
File: 323830343a3266383a3a2f33322d3434203d3e203238313838.roa (raw, json)
Hash identifier: 8/an7LKHdrwqn4bFjkOuNO78LeCvsgxpXJ2X+R4uJk8=
Subject key identifier: DD:28:BA:2D:4B:B6:ED:90:48:96:58:65:E2:77:19:4F:C5:7A:79:12
Certificate issuer: /CN=E38AC2CFB299715B3B6D5866C15CF353BE48A770
Certificate serial: 7DA4CDD9BDCDCD22AF57733515F15435AF6D274C
Authority key identifier: E3:8A:C2:CF:B2:99:71:5B:3B:6D:58:66:C1:5C:F3:53:BE:48:A7:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E38AC2CFB299715B3B6D5866C15CF353BE48A770.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/323830343a3266383a3a2f33322d3434203d3e203238313838.roa
Signing time: Wed 05 Feb 2025 22:53:50 +0000
ROA not before: Wed 05 Feb 2025 22:48:50 +0000
ROA not after: Wed 04 Feb 2026 22:53:50 +0000
asID: 28188
IP address blocks: 2804:2f8::/32 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:a4:cd:d9:bd:cd:cd:22:af:57:73:35:15:f1:54:35:af:6d:27:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E38AC2CFB299715B3B6D5866C15CF353BE48A770
Validity
Not Before: Feb 5 22:48:50 2025 GMT
Not After : Feb 4 22:53:50 2026 GMT
Subject: CN=DD28BA2D4BB6ED9048965865E277194FC57A7912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9e:90:43:73:38:c9:49:c3:bb:fe:9b:c8:61:
50:b6:68:8d:ac:96:1f:e2:a0:fe:aa:60:3c:54:f6:
ef:80:34:b8:d3:a1:e7:eb:e5:7e:37:97:e6:9a:2d:
48:fe:a2:95:94:0d:e4:01:f7:4a:83:05:f5:97:d0:
91:53:17:19:77:99:76:df:9a:89:c4:f4:a4:53:eb:
4e:05:32:31:08:5d:18:47:96:ba:07:7a:4f:54:ea:
2f:0c:57:4b:a7:89:7d:62:97:cb:51:24:fa:bf:fe:
5e:50:01:d1:1e:a0:bf:3b:ac:ba:c0:14:61:0f:23:
0f:a4:3c:c0:a8:19:c4:95:5e:25:73:91:71:59:5c:
68:4b:51:3d:d5:0b:20:64:4b:e9:94:6e:c4:6b:74:
41:93:cb:54:77:fa:49:76:85:e6:49:23:40:41:d3:
37:91:67:1b:e8:2f:b8:77:9b:d8:b9:11:29:db:87:
a2:c6:46:3b:e9:25:1b:1c:ee:e7:be:88:68:ba:24:
8a:bc:c0:8c:6d:22:26:23:62:be:6d:81:ac:ff:b5:
1c:e4:bf:c5:06:af:da:07:c8:2b:9b:d2:1d:23:03:
b4:0a:dc:ba:b4:da:c1:82:9b:fc:e3:bb:ed:d3:ae:
e4:ae:76:a1:fc:16:17:9a:67:26:54:46:ad:f1:1c:
06:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:28:BA:2D:4B:B6:ED:90:48:96:58:65:E2:77:19:4F:C5:7A:79:12
X509v3 Authority Key Identifier:
keyid:E3:8A:C2:CF:B2:99:71:5B:3B:6D:58:66:C1:5C:F3:53:BE:48:A7:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/E38AC2CFB299715B3B6D5866C15CF353BE48A770.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E38AC2CFB299715B3B6D5866C15CF353BE48A770.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/323830343a3266383a3a2f33322d3434203d3e203238313838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2f8::/32
Signature Algorithm: sha256WithRSAEncryption
37:80:93:8b:7e:c2:13:31:26:0a:c3:85:b5:58:eb:50:18:1c:
65:e7:02:4b:17:d9:41:9c:2f:36:37:25:aa:2d:32:f4:d1:89:
ad:29:39:51:9e:7c:68:22:69:23:1f:60:03:a0:a2:40:24:1e:
5c:36:50:5d:27:c0:53:48:a8:3b:dd:fa:f2:8f:49:36:40:9c:
d3:96:b5:b1:19:3f:31:3f:cd:b3:40:f5:36:f3:51:6f:49:a5:
18:e6:85:8d:cf:1e:2b:c9:80:f7:50:0e:81:a4:8c:8f:0e:48:
d9:54:79:10:1d:cc:a9:47:a3:ad:39:64:2e:99:42:8a:3e:6c:
bb:07:a9:d8:80:2d:04:f6:eb:96:af:69:aa:25:51:31:01:98:
fa:be:3f:8d:3d:cf:2b:0a:5b:7a:5d:49:9a:3b:63:af:17:aa:
8c:09:ca:ab:af:1e:f2:08:61:cb:fc:ed:0b:b5:f8:61:f9:6d:
a1:b6:c8:cf:e4:6a:33:60:a8:4c:1c:21:5e:1a:ba:b4:de:9f:
0e:39:52:76:df:7e:80:8f:3f:e2:2b:7f:90:d2:fb:f6:f6:49:
5b:8f:4d:ab:4f:d8:dc:74:97:5f:e3:e6:1e:c4:a7:3a:c4:15:
a6:4c:c1:93:0d:6b:19:05:70:a1:b8:20:4a:05:00:a6:02:33:
df:37:47:75
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUfaTN2b3NzSKvV3M1FfFUNa9tJ0wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM4QUMyQ0ZCMjk5NzE1QjNCNkQ1ODY2QzE1Q0YzNTNC
RTQ4QTc3MDAeFw0yNTAyMDUyMjQ4NTBaFw0yNjAyMDQyMjUzNTBaMDMxMTAvBgNV
BAMTKEREMjhCQTJENEJCNkVEOTA0ODk2NTg2NUUyNzcxOTRGQzU3QTc5MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3npBDczjJScO7/pvIYVC2aI2s
lh/ioP6qYDxU9u+ANLjToefr5X43l+aaLUj+opWUDeQB90qDBfWX0JFTFxl3mXbf
monE9KRT604FMjEIXRhHlroHek9U6i8MV0uniX1il8tRJPq//l5QAdEeoL87rLrA
FGEPIw+kPMCoGcSVXiVzkXFZXGhLUT3VCyBkS+mUbsRrdEGTy1R3+kl2heZJI0BB
0zeRZxvoL7h3m9i5ESnbh6LGRjvpJRsc7ue+iGi6JIq8wIxtIiYjYr5tgaz/tRzk
v8UGr9oHyCub0h0jA7QK3Lq02sGCm/zju+3TruSudqH8FheaZyZURq3xHAYhAgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQU3Si6LUu27ZBIllhl4ncZT8V6eRIwHwYDVR0j
BBgwFoAU44rCz7KZcVs7bVhmwVzzU75Ip3AwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9ES050R0E3c3BkNGY1UjNRQUNhNTZyY3pZRFF5QWM4MXdxbzVjakJEVTNk
LzAvRTM4QUMyQ0ZCMjk5NzE1QjNCNkQ1ODY2QzE1Q0YzNTNCRTQ4QTc3MC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FMzhBQzJDRkIyOTk3MTVCM0I2
RDU4NjZDMTVDRjM1M0JFNDhBNzcwLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQG
CCsGAQUFBzALhoGHcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9E
S050R0E3c3BkNGY1UjNRQUNhNTZyY3pZRFF5QWM4MXdxbzVjakJEVTNkLzAvMzIz
ODMwMzQzYTMyNjYzODNhM2EyZjMzMzIyZDM0MzQyMDNkM2UyMDMyMzgzMTM4Mzgu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAP
MA0EAgACMAcDBQAoBAL4MA0GCSqGSIb3DQEBCwUAA4IBAQA3gJOLfsITMSYKw4W1
WOtQGBxl5wJLF9lBnC82NyWqLTL00YmtKTlRnnxoImkjH2ADoKJAJB5cNlBdJ8BT
SKg73fryj0k2QJzTlrWxGT8xP82zQPU281FvSaUY5oWNzx4ryYD3UA6BpIyPDkjZ
VHkQHcypR6OtOWQumUKKPmy7B6nYgC0E9uuWr2mqJVExAZj6vj+NPc8rClt6XUma
O2OvF6qMCcqrrx7yCGHL/O0Ltfhh+W2htsjP5GozYKhMHCFeGrq03p8OOVJ2336A
jz/iK3+Q0vv29klbj02rT9jcdJdf4+YexKc6xBWmTMGTDWsZBXChuCBKBQCmAjPf
N0d1
-----END CERTIFICATE-----
Generated at Mon Apr 7 10:08:16 2025 by rpki-client