Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a383030303a3a2f33342d3334203d3e20323635303830.roa
File: 323830343a333237383a383030303a3a2f33342d3334203d3e20323635303830.roa (raw, json)
Hash identifier: BdUMw9MMB+mvZpyBtHtVt7SDGDLFdJSRSg+L/mDgNlU=
Subject key identifier: 03:2E:3F:BB:78:50:4F:CC:89:B7:09:8E:0F:68:9C:19:D3:42:3A:33
Certificate issuer: /CN=D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38
Certificate serial: 4FCC1B950A47D5132D972ABDA484B0DA250ED277
Authority key identifier: D6:06:CC:74:EC:93:6A:A8:ED:7F:38:4A:9E:1B:7C:0A:94:5C:0A:38
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a383030303a3a2f33342d3334203d3e20323635303830.roa
Signing time: Mon 10 Feb 2025 17:25:10 +0000
ROA not before: Mon 10 Feb 2025 17:20:10 +0000
ROA not after: Mon 09 Feb 2026 17:25:10 +0000
asID: 265080
IP address blocks: 2804:3278:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:cc:1b:95:0a:47:d5:13:2d:97:2a:bd:a4:84:b0:da:25:0e:d2:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38
Validity
Not Before: Feb 10 17:20:10 2025 GMT
Not After : Feb 9 17:25:10 2026 GMT
Subject: CN=032E3FBB78504FCC89B7098E0F689C19D3423A33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5e:09:d2:8d:b9:b7:f2:bb:e0:e0:96:f0:bf:
79:31:63:29:3e:c6:57:1a:6e:10:1b:ba:d3:03:c9:
97:64:c6:4d:70:14:72:68:4a:62:26:80:2d:64:34:
35:12:15:70:10:7d:41:ab:f8:02:ba:75:da:0e:b5:
21:25:c5:c7:71:29:2f:32:a8:48:ec:ea:c3:74:54:
e0:c6:04:f5:4e:bb:7f:b1:ba:64:e0:e7:31:31:e7:
8f:a1:45:d1:59:91:1a:0c:13:5b:fb:9d:d8:a5:c0:
f1:85:37:52:80:96:00:39:cc:8e:6c:a6:00:4a:40:
e4:dc:00:db:23:e9:b2:ac:18:d6:19:40:27:88:ef:
37:07:d1:0b:92:13:10:70:40:2c:3f:7d:57:e7:40:
80:e5:3f:42:8e:d8:00:58:05:e7:13:15:f5:bd:c8:
3a:7c:5f:fb:3b:23:02:17:8f:67:2d:c3:40:7a:b6:
7e:47:91:70:a8:0f:34:15:b3:37:0e:c3:8f:c0:0a:
02:69:93:70:e1:3a:3a:c4:74:ac:9e:32:c2:ba:39:
01:d2:a3:9c:f5:85:c8:7b:5d:05:de:60:c7:f9:15:
78:10:00:7c:13:8d:ef:78:ea:30:7d:26:4e:e9:5d:
c0:fd:b6:32:6a:c9:4c:0d:c7:e7:e3:1d:78:b2:66:
d2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:2E:3F:BB:78:50:4F:CC:89:B7:09:8E:0F:68:9C:19:D3:42:3A:33
X509v3 Authority Key Identifier:
keyid:D6:06:CC:74:EC:93:6A:A8:ED:7F:38:4A:9E:1B:7C:0A:94:5C:0A:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a383030303a3a2f33342d3334203d3e20323635303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3278:8000::/34
Signature Algorithm: sha256WithRSAEncryption
2e:33:c7:41:31:91:bf:6a:35:b2:38:50:db:3c:cc:a4:d8:3f:
7f:6c:bf:70:ed:28:86:6c:9a:70:87:15:fa:81:1d:8b:90:c2:
19:80:5b:31:38:7f:3c:4c:bd:75:5b:14:14:1d:22:67:0d:6a:
fa:a4:79:26:8d:76:cc:47:94:8f:09:34:ad:45:73:ea:5e:48:
93:cb:35:93:3c:6f:92:54:27:03:0d:09:21:bb:72:b4:47:e3:
34:0a:41:1b:b4:ee:8f:5a:25:56:33:ae:25:c8:80:b2:49:8a:
3d:a0:d0:7f:1f:f4:c8:68:0c:39:96:82:c7:60:cd:40:e0:bd:
3e:db:cb:39:b8:08:d0:bf:e5:56:ea:97:17:33:7a:c1:93:ba:
41:fa:85:57:14:85:52:d3:c8:f3:bb:4c:38:fc:fb:59:b3:dd:
d3:05:96:52:9c:c3:f6:e1:86:f7:1a:2f:72:f6:1b:76:2b:91:
3a:95:13:12:d8:de:59:73:d9:b9:3b:ab:09:ed:ec:51:28:32:
b4:f2:b0:1a:af:b2:f0:85:aa:85:1f:b6:7a:d4:a2:b6:41:c7:
34:e5:1b:17:16:42:fb:aa:5c:60:e9:b3:7b:4e:2f:d7:82:22:
30:67:3e:c4:58:bf:fe:33:44:f8:06:87:11:c5:cf:ec:1b:24:
da:90:4a:92
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUT8wblQpH1RMtlyq9pISw2iUO0ncwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYwNkNDNzRFQzkzNkFBOEVEN0YzODRBOUUxQjdDMEE5
NDVDMEEzODAeFw0yNTAyMTAxNzIwMTBaFw0yNjAyMDkxNzI1MTBaMDMxMTAvBgNV
BAMTKDAzMkUzRkJCNzg1MDRGQ0M4OUI3MDk4RTBGNjg5QzE5RDM0MjNBMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcXgnSjbm38rvg4Jbwv3kxYyk+
xlcabhAbutMDyZdkxk1wFHJoSmImgC1kNDUSFXAQfUGr+AK6ddoOtSElxcdxKS8y
qEjs6sN0VODGBPVOu3+xumTg5zEx54+hRdFZkRoME1v7ndilwPGFN1KAlgA5zI5s
pgBKQOTcANsj6bKsGNYZQCeI7zcH0QuSExBwQCw/fVfnQIDlP0KO2ABYBecTFfW9
yDp8X/s7IwIXj2ctw0B6tn5HkXCoDzQVszcOw4/ACgJpk3DhOjrEdKyeMsK6OQHS
o5z1hch7XQXeYMf5FXgQAHwTje946jB9Jk7pXcD9tjJqyUwNx+fjHXiyZtKtAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUAy4/u3hQT8yJtwmOD2icGdNCOjMwHwYDVR0j
BBgwFoAU1gbMdOyTaqjtfzhKnht8CpRcCjgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkZYa0xrYUtYSGVyWExwZlVBc283MzZyUUVlbnFNcGl2NlFlaEZ3bVUx
dlcvMC9ENjA2Q0M3NEVDOTM2QUE4RUQ3RjM4NEE5RTFCN0MwQTk0NUMwQTM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2MDZDQzc0RUM5MzZBQThF
RDdGMzg0QTlFMUI3QzBBOTQ1QzBBMzguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZGWGtMa2FLWEhlclhMcGZVQXNvNzM2clFFZW5xTXBpdjZRZWhGd21VMXZXLzAv
MzIzODMwMzQzYTMzMzIzNzM4M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNTMwMzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEMniAMA0GCSqGSIb3DQEBCwUA
A4IBAQAuM8dBMZG/ajWyOFDbPMyk2D9/bL9w7SiGbJpwhxX6gR2LkMIZgFsxOH88
TL11WxQUHSJnDWr6pHkmjXbMR5SPCTStRXPqXkiTyzWTPG+SVCcDDQkhu3K0R+M0
CkEbtO6PWiVWM64lyICySYo9oNB/H/TIaAw5loLHYM1A4L0+28s5uAjQv+VW6pcX
M3rBk7pB+oVXFIVS08jzu0w4/PtZs93TBZZSnMP24Yb3Gi9y9ht2K5E6lRMS2N5Z
c9m5O6sJ7exRKDK08rAar7LwhaqFH7Z61KK2Qcc05RsXFkL7qlxg6bN7Ti/XgiIw
Zz7EWL/+M0T4BocRxc/sGyTakEqS
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:44:09 2025 by rpki-client