Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a3a2f33322d3332203d3e20323635303830.roa
File: 323830343a333237383a3a2f33322d3332203d3e20323635303830.roa (raw, json)
Hash identifier: plNUueA3irfkbK3SOOuMY94LQIbeZrvZU3etSiEki8Q=
Subject key identifier: 1C:C8:A5:A9:41:52:A1:19:BA:E6:EC:6B:53:53:A8:E9:E7:94:6A:93
Certificate issuer: /CN=D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38
Certificate serial: 750EBC146F3FEC742A32F7D3406BA5B1C0F6698E
Authority key identifier: D6:06:CC:74:EC:93:6A:A8:ED:7F:38:4A:9E:1B:7C:0A:94:5C:0A:38
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a3a2f33322d3332203d3e20323635303830.roa
Signing time: Mon 10 Feb 2025 17:25:10 +0000
ROA not before: Mon 10 Feb 2025 17:20:10 +0000
ROA not after: Mon 09 Feb 2026 17:25:10 +0000
asID: 265080
IP address blocks: 2804:3278::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:0e:bc:14:6f:3f:ec:74:2a:32:f7:d3:40:6b:a5:b1:c0:f6:69:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38
Validity
Not Before: Feb 10 17:20:10 2025 GMT
Not After : Feb 9 17:25:10 2026 GMT
Subject: CN=1CC8A5A94152A119BAE6EC6B5353A8E9E7946A93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2f:59:a2:d6:b0:f7:40:56:17:ec:08:4f:f5:
ba:a4:50:ea:b1:c3:21:1c:9d:33:2a:ba:94:fd:a4:
30:2a:64:55:af:55:96:9b:7d:3e:67:9d:ce:65:5b:
b5:fd:9d:1d:d1:ec:1c:ef:bd:ad:14:fd:66:97:48:
1b:92:e3:f4:b7:93:cd:83:23:16:74:e2:9b:d4:e9:
4f:fd:af:66:82:36:f9:f7:bb:fe:64:5e:5e:fb:39:
ef:55:49:24:79:38:e2:df:1f:d2:12:e6:87:6a:62:
a4:88:30:12:64:af:36:50:45:27:c1:a1:49:30:cf:
10:37:60:6f:39:74:82:78:44:c3:2b:76:8f:d4:b6:
53:be:ae:78:ca:5a:c5:90:52:f8:49:b0:70:6c:70:
48:a8:61:29:c4:e9:8b:09:4d:b3:f1:a2:c3:e7:41:
26:e4:c1:a4:dc:4a:96:e5:b6:4f:12:9d:3e:8e:48:
0d:e1:dd:0c:41:a1:78:87:73:8e:ee:5c:af:f7:c4:
bc:43:50:25:cf:c4:45:af:16:22:62:a8:c9:37:6a:
b3:70:70:a6:ab:b9:e0:77:53:22:35:9c:38:98:67:
64:de:44:b3:ba:a1:b4:33:0f:63:da:df:23:5a:58:
74:d5:f0:69:5c:a9:27:c9:3b:6f:e5:ae:4d:ac:41:
bd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C8:A5:A9:41:52:A1:19:BA:E6:EC:6B:53:53:A8:E9:E7:94:6A:93
X509v3 Authority Key Identifier:
keyid:D6:06:CC:74:EC:93:6A:A8:ED:7F:38:4A:9E:1B:7C:0A:94:5C:0A:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a3a2f33322d3332203d3e20323635303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3278::/32
Signature Algorithm: sha256WithRSAEncryption
30:f2:74:df:54:dc:26:30:46:be:87:7a:d3:7e:bb:82:f2:36:
3b:91:55:b5:43:8e:e7:7d:88:80:a1:04:31:c2:3e:6c:d1:cc:
87:e7:f1:60:46:8e:3d:bf:1b:03:46:ba:fd:7b:39:cf:79:49:
35:d5:c8:dc:cf:b4:77:ae:27:7e:79:0f:1b:f3:44:d8:ed:de:
e2:bc:c4:d1:d0:8b:80:43:5b:5e:ee:86:b4:dd:d5:06:11:aa:
cd:e6:af:ab:aa:28:6b:97:8c:5d:5b:0b:5b:99:26:f1:b8:62:
55:a9:44:68:bf:75:19:25:36:1f:9b:2d:a5:25:17:da:cf:86:
ac:67:6a:35:e1:ca:c9:2d:eb:7d:b6:b2:8b:ac:a9:4c:18:7b:
21:d8:ab:9e:cd:c3:36:d6:c6:01:66:54:e1:a5:56:ce:40:30:
c2:b3:76:7d:39:cb:74:56:5e:6b:ec:e9:b7:bb:92:fd:17:25:
54:6f:fe:15:37:5a:46:6d:b1:8f:74:2e:97:8d:0c:22:c0:50:
39:71:73:11:4e:32:e8:30:a2:fe:89:ed:ae:1b:b2:3e:eb:82:
27:46:cc:9d:e8:75:b8:9c:41:48:65:a6:f2:f6:c3:30:41:cb:
5f:f3:f3:8f:f2:9a:0f:cc:4a:25:34:1a:4a:8c:22:22:5b:00:
cf:39:21:2c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUdQ68FG8/7HQqMvfTQGulscD2aY4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYwNkNDNzRFQzkzNkFBOEVEN0YzODRBOUUxQjdDMEE5
NDVDMEEzODAeFw0yNTAyMTAxNzIwMTBaFw0yNjAyMDkxNzI1MTBaMDMxMTAvBgNV
BAMTKDFDQzhBNUE5NDE1MkExMTlCQUU2RUM2QjUzNTNBOEU5RTc5NDZBOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/L1mi1rD3QFYX7AhP9bqkUOqx
wyEcnTMqupT9pDAqZFWvVZabfT5nnc5lW7X9nR3R7Bzvva0U/WaXSBuS4/S3k82D
IxZ04pvU6U/9r2aCNvn3u/5kXl77Oe9VSSR5OOLfH9IS5odqYqSIMBJkrzZQRSfB
oUkwzxA3YG85dIJ4RMMrdo/UtlO+rnjKWsWQUvhJsHBscEioYSnE6YsJTbPxosPn
QSbkwaTcSpbltk8SnT6OSA3h3QxBoXiHc47uXK/3xLxDUCXPxEWvFiJiqMk3arNw
cKarueB3UyI1nDiYZ2TeRLO6obQzD2Pa3yNaWHTV8GlcqSfJO2/lrk2sQb2RAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUHMilqUFSoRm65uxrU1Oo6eeUapMwHwYDVR0j
BBgwFoAU1gbMdOyTaqjtfzhKnht8CpRcCjgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkZYa0xrYUtYSGVyWExwZlVBc283MzZyUUVlbnFNcGl2NlFlaEZ3bVUx
dlcvMC9ENjA2Q0M3NEVDOTM2QUE4RUQ3RjM4NEE5RTFCN0MwQTk0NUMwQTM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2MDZDQzc0RUM5MzZBQThF
RDdGMzg0QTlFMUI3QzBBOTQ1QzBBMzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZGWGtMa2FLWEhlclhMcGZVQXNvNzM2clFFZW5xTXBpdjZRZWhGd21VMXZXLzAv
MzIzODMwMzQzYTMzMzIzNzM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzAzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQyeDANBgkqhkiG9w0BAQsFAAOCAQEAMPJ031Tc
JjBGvod60367gvI2O5FVtUOO532IgKEEMcI+bNHMh+fxYEaOPb8bA0a6/Xs5z3lJ
NdXI3M+0d64nfnkPG/NE2O3e4rzE0dCLgENbXu6GtN3VBhGqzeavq6ooa5eMXVsL
W5km8bhiValEaL91GSU2H5stpSUX2s+GrGdqNeHKyS3rfbayi6ypTBh7Idirns3D
NtbGAWZU4aVWzkAwwrN2fTnLdFZea+zpt7uS/RclVG/+FTdaRm2xj3Qul40MIsBQ
OXFzEU4y6DCi/ontrhuyPuuCJ0bMneh1uJxBSGWm8vbDMEHLX/Pzj/KaD8xKJTQa
SowiIlsAzzkhLA==
-----END CERTIFICATE-----
Generated at Fri Mar 14 03:49:35 2025 by rpki-client