Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/323830343a313065633a3a2f33322d3332203d3e203532383634.roa
File: 323830343a313065633a3a2f33322d3332203d3e203532383634.roa (raw, json)
Hash identifier: 3+jwwAaHf+bXemq75XPYEPXFhyifUO1+GOGvW0Wd8DI=
Subject key identifier: 01:F8:86:2B:B5:EC:98:A8:7B:3F:FA:96:EE:5F:E2:2C:AB:35:B1:10
Certificate issuer: /CN=9A13D4C02D9B439C8AD7096965C3720E3F1B9A5C
Certificate serial: 1D03BE85B2DD3FD114C3673741136DA5D460F21C
Authority key identifier: 9A:13:D4:C0:2D:9B:43:9C:8A:D7:09:69:65:C3:72:0E:3F:1B:9A:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A13D4C02D9B439C8AD7096965C3720E3F1B9A5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/323830343a313065633a3a2f33322d3332203d3e203532383634.roa
Signing time: Wed 29 Jan 2025 18:54:32 +0000
ROA not before: Wed 29 Jan 2025 18:49:32 +0000
ROA not after: Wed 28 Jan 2026 18:54:32 +0000
asID: 52864
IP address blocks: 2804:10ec::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:03:be:85:b2:dd:3f:d1:14:c3:67:37:41:13:6d:a5:d4:60:f2:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A13D4C02D9B439C8AD7096965C3720E3F1B9A5C
Validity
Not Before: Jan 29 18:49:32 2025 GMT
Not After : Jan 28 18:54:32 2026 GMT
Subject: CN=01F8862BB5EC98A87B3FFA96EE5FE22CAB35B110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9e:32:bb:7f:ca:31:8b:ee:48:4d:ff:83:07:
17:10:5b:d3:53:2f:be:c1:87:df:09:02:98:59:7b:
8b:a5:f5:51:da:af:ce:c6:b8:c7:df:c1:18:bb:0f:
07:68:eb:25:4d:c8:80:8c:c2:b6:ee:20:7a:9c:45:
00:6f:c0:40:66:c2:7b:df:ac:47:ea:c4:90:43:b1:
d2:a1:0e:31:35:22:f4:c6:37:8b:e9:c1:74:d1:1a:
e2:cd:d4:e0:c0:8e:ef:62:91:4d:3a:ac:52:4c:a8:
8a:5a:cc:23:0d:8f:5e:15:08:22:f2:ee:bd:74:6f:
03:47:ef:30:19:1e:23:31:d5:44:a1:cf:b0:c3:d0:
97:5f:8c:c4:ca:b6:0a:b9:59:d2:ba:16:72:47:a7:
17:9c:9f:57:7d:93:9f:dc:f6:cb:21:61:76:3b:bd:
3b:36:41:33:4d:83:c3:06:4d:7a:f6:e6:43:1c:71:
d3:c6:2b:85:33:c5:9b:3f:72:51:6e:fd:91:2a:db:
bc:31:56:eb:30:97:2b:e7:5e:94:fa:9b:27:93:2b:
c6:68:1b:0b:40:31:27:55:6d:8d:4d:53:49:e4:79:
c4:a1:f5:10:3d:76:55:59:6f:11:f3:f2:3e:25:24:
c0:34:8f:0c:36:32:74:49:7c:33:69:37:b7:f6:db:
be:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F8:86:2B:B5:EC:98:A8:7B:3F:FA:96:EE:5F:E2:2C:AB:35:B1:10
X509v3 Authority Key Identifier:
keyid:9A:13:D4:C0:2D:9B:43:9C:8A:D7:09:69:65:C3:72:0E:3F:1B:9A:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/9A13D4C02D9B439C8AD7096965C3720E3F1B9A5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A13D4C02D9B439C8AD7096965C3720E3F1B9A5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/323830343a313065633a3a2f33322d3332203d3e203532383634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:10ec::/32
Signature Algorithm: sha256WithRSAEncryption
54:f4:7e:c7:1b:91:7a:08:d7:34:25:1f:c4:b7:fb:78:4b:67:
8a:2d:b6:cc:11:d5:c8:a5:77:c0:b3:e1:fb:fe:ce:0b:75:9d:
85:2c:24:b4:74:1a:19:50:4a:1f:86:84:4f:db:d9:d1:93:e2:
c7:52:57:4f:b6:53:97:b5:89:19:1c:70:58:1a:7d:6a:f5:82:
b0:70:33:34:ab:e3:79:65:95:08:fb:5e:bf:77:9d:00:c2:da:
09:0f:4b:c3:c7:a3:71:0f:9a:79:7e:1b:21:d3:78:fb:44:64:
f3:f9:24:f2:b3:6c:30:6c:eb:55:2a:a0:43:de:09:85:b0:cf:
1d:85:d5:4d:00:d1:67:8e:ce:ab:eb:06:b1:38:ca:e5:d2:a1:
c1:25:d3:15:be:4d:d7:99:e5:65:1d:5f:10:22:07:9f:6d:3a:
1f:d3:6b:dd:9d:e5:3a:6b:6e:01:dd:aa:02:21:ca:f8:49:53:
9c:52:17:9e:c2:cf:4b:5d:79:bf:85:96:1f:2a:39:9f:ee:f2:
1c:ca:26:ae:c0:be:d5:9a:b1:a3:d4:29:c2:69:1a:3e:e6:4d:
00:c8:93:59:67:dc:19:a4:96:f8:d7:6d:20:d7:24:dc:27:fe:
79:f7:e8:d2:00:4e:a7:e7:49:4d:9e:14:3c:f5:0f:62:4a:df:
9e:f6:f5:62
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUHQO+hbLdP9EUw2c3QRNtpdRg8hwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUExM0Q0QzAyRDlCNDM5QzhBRDcwOTY5NjVDMzcyMEUz
RjFCOUE1QzAeFw0yNTAxMjkxODQ5MzJaFw0yNjAxMjgxODU0MzJaMDMxMTAvBgNV
BAMTKDAxRjg4NjJCQjVFQzk4QTg3QjNGRkE5NkVFNUZFMjJDQUIzNUIxMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChnjK7f8oxi+5ITf+DBxcQW9NT
L77Bh98JAphZe4ul9VHar87GuMffwRi7Dwdo6yVNyICMwrbuIHqcRQBvwEBmwnvf
rEfqxJBDsdKhDjE1IvTGN4vpwXTRGuLN1ODAju9ikU06rFJMqIpazCMNj14VCCLy
7r10bwNH7zAZHiMx1UShz7DD0JdfjMTKtgq5WdK6FnJHpxecn1d9k5/c9sshYXY7
vTs2QTNNg8MGTXr25kMccdPGK4UzxZs/clFu/ZEq27wxVuswlyvnXpT6myeTK8Zo
GwtAMSdVbY1NU0nkecSh9RA9dlVZbxHz8j4lJMA0jww2MnRJfDNpN7f2276jAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUAfiGK7XsmKh7P/qW7l/iLKs1sRAwHwYDVR0j
BBgwFoAUmhPUwC2bQ5yK1wlpZcNyDj8bmlwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjVRTEtub21OV25kYWJhd25YWmJIU2RBMkNCbTVjM3VSOXltdkNzaThQ
bVgvMC85QTEzRDRDMDJEOUI0MzlDOEFENzA5Njk2NUMzNzIwRTNGMUI5QTVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBMTNENEMwMkQ5QjQzOUM4
QUQ3MDk2OTY1QzM3MjBFM0YxQjlBNUMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y1UUxLbm9tTlduZGFiYXduWFpiSFNkQTJDQm01YzN1Ujl5bXZDc2k4UG1YLzAv
MzIzODMwMzQzYTMxMzA2NTYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzUzMjM4
MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEEOwwDQYJKoZIhvcNAQELBQADggEBAFT0fscbkXoI
1zQlH8S3+3hLZ4ottswR1cild8Cz4fv+zgt1nYUsJLR0GhlQSh+GhE/b2dGT4sdS
V0+2U5e1iRkccFgafWr1grBwMzSr43lllQj7Xr93nQDC2gkPS8PHo3EPmnl+GyHT
ePtEZPP5JPKzbDBs61UqoEPeCYWwzx2F1U0A0WeOzqvrBrE4yuXSocEl0xW+TdeZ
5WUdXxAiB59tOh/Ta92d5TprbgHdqgIhyvhJU5xSF57Cz0tdeb+Flh8qOZ/u8hzK
Jq7AvtWasaPUKcJpGj7mTQDIk1ln3BmklvjXbSDXJNwn/nn36NIATqfnSU2eFDz1
D2JK35729WI=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:09:34 2025 by rpki-client