Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/323830343a316338303a3a2f33322d3332203d3e203631363537.roa
File: 323830343a316338303a3a2f33322d3332203d3e203631363537.roa (raw, json)
Hash identifier: uEIOAKdxruWlFKmXVvzv+UTQGfrKJrsc6nnpSyf+3H8=
Subject key identifier: A2:53:68:7B:2B:9F:5B:4B:1F:4B:79:9C:CB:E5:6A:CC:20:BF:FF:A0
Certificate issuer: /CN=F950AA9EB69B6E76356621815A68620E1CFC80E6
Certificate serial: 5552594062B71ECBE9C03992FC04C43AA30530BD
Authority key identifier: F9:50:AA:9E:B6:9B:6E:76:35:66:21:81:5A:68:62:0E:1C:FC:80:E6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F950AA9EB69B6E76356621815A68620E1CFC80E6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/323830343a316338303a3a2f33322d3332203d3e203631363537.roa
Signing time: Thu 27 Mar 2025 19:38:23 +0000
ROA not before: Thu 27 Mar 2025 19:33:23 +0000
ROA not after: Thu 26 Mar 2026 19:38:23 +0000
asID: 61657
IP address blocks: 2804:1c80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:52:59:40:62:b7:1e:cb:e9:c0:39:92:fc:04:c4:3a:a3:05:30:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F950AA9EB69B6E76356621815A68620E1CFC80E6
Validity
Not Before: Mar 27 19:33:23 2025 GMT
Not After : Mar 26 19:38:23 2026 GMT
Subject: CN=A253687B2B9F5B4B1F4B799CCBE56ACC20BFFFA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:81:56:53:83:8d:d5:83:a1:28:42:e3:df:27:
96:ca:3b:12:7e:09:ef:21:ef:27:a8:0e:28:b6:ff:
53:8c:c2:a1:fc:41:2b:03:fd:ec:da:dd:41:de:aa:
77:62:ef:5f:8e:30:c4:0e:07:fa:36:1d:d0:be:c5:
70:ca:41:2f:c5:f5:85:0b:f3:f2:bc:6c:37:d0:f2:
47:5f:ab:8f:f8:b2:0b:69:e1:ab:e8:38:1d:df:c2:
7d:85:55:da:e6:32:2c:f3:47:1a:c5:5e:c0:f7:85:
61:87:49:66:70:45:b3:9b:da:45:93:e4:ab:d1:d7:
63:0f:d7:e6:68:2c:5d:a8:62:c5:95:e7:68:92:05:
03:7a:53:33:5d:31:d6:50:20:be:56:c3:ca:d0:72:
6a:13:01:47:47:25:e5:28:a4:92:ae:f9:ce:d2:87:
d6:88:1f:b9:36:c2:bc:af:b3:c7:1b:c3:14:f9:56:
61:45:09:81:5a:a4:0b:02:89:b3:75:01:f5:c5:39:
d1:f5:4e:2a:de:15:cf:92:ae:d3:1f:48:83:2a:ae:
38:aa:99:42:65:78:46:e1:43:f8:7f:a6:07:45:d4:
a4:c0:36:a4:71:0b:b7:4d:0c:cf:89:4c:d3:19:82:
9b:e2:df:96:9e:45:09:60:51:6b:bd:67:9d:55:f5:
1a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:53:68:7B:2B:9F:5B:4B:1F:4B:79:9C:CB:E5:6A:CC:20:BF:FF:A0
X509v3 Authority Key Identifier:
keyid:F9:50:AA:9E:B6:9B:6E:76:35:66:21:81:5A:68:62:0E:1C:FC:80:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/F950AA9EB69B6E76356621815A68620E1CFC80E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F950AA9EB69B6E76356621815A68620E1CFC80E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/323830343a316338303a3a2f33322d3332203d3e203631363537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1c80::/32
Signature Algorithm: sha256WithRSAEncryption
3d:25:9f:7c:27:ca:2a:1d:d1:73:f7:b9:f5:d9:08:fd:07:c6:
ac:2c:71:ef:ad:c1:bd:61:4b:57:9c:ac:ed:94:a0:6d:48:71:
c7:ab:1a:3d:da:70:9a:7a:b7:79:2c:21:f4:c6:0b:9d:56:c8:
e3:40:f7:99:bb:24:84:40:32:2a:65:df:a6:11:29:74:3b:75:
59:4c:c8:fb:64:a3:04:b3:ac:9d:85:59:ae:61:e7:68:6a:83:
24:65:84:a6:1f:63:a8:bb:28:69:df:a9:6d:a8:38:77:1e:1a:
b6:99:af:e5:fd:d6:6a:9a:e1:3c:f7:f5:bb:38:0c:58:cc:f1:
fc:41:48:07:ae:49:0a:e2:ac:24:16:43:ef:0b:95:00:cf:36:
29:5f:84:13:f6:d1:c0:e8:a8:ff:7b:78:aa:97:e7:4e:e0:b7:
de:18:b3:4f:c6:2b:b3:25:f2:e0:62:f6:61:e1:47:c0:e1:4c:
b1:5e:32:dd:3c:e1:d0:2d:61:2d:03:c1:a9:45:09:9d:4b:b1:
10:1d:6a:53:53:fc:37:13:5b:9b:f3:e8:36:f0:9c:cd:9e:36:
4d:f4:8f:40:1f:2c:7c:37:7f:45:d3:af:eb:6c:f1:38:06:ba:
01:14:26:67:29:58:83:6e:7e:53:24:ae:29:38:b9:35:dc:7c:
11:cf:e4:48
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUVVJZQGK3HsvpwDmS/ATEOqMFML0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjk1MEFBOUVCNjlCNkU3NjM1NjYyMTgxNUE2ODYyMEUx
Q0ZDODBFNjAeFw0yNTAzMjcxOTMzMjNaFw0yNjAzMjYxOTM4MjNaMDMxMTAvBgNV
BAMTKEEyNTM2ODdCMkI5RjVCNEIxRjRCNzk5Q0NCRTU2QUNDMjBCRkZGQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/gVZTg43Vg6EoQuPfJ5bKOxJ+
Ce8h7yeoDii2/1OMwqH8QSsD/eza3UHeqndi71+OMMQOB/o2HdC+xXDKQS/F9YUL
8/K8bDfQ8kdfq4/4sgtp4avoOB3fwn2FVdrmMizzRxrFXsD3hWGHSWZwRbOb2kWT
5KvR12MP1+ZoLF2oYsWV52iSBQN6UzNdMdZQIL5Ww8rQcmoTAUdHJeUopJKu+c7S
h9aIH7k2wryvs8cbwxT5VmFFCYFapAsCibN1AfXFOdH1TireFc+SrtMfSIMqrjiq
mUJleEbhQ/h/pgdF1KTANqRxC7dNDM+JTNMZgpvi35aeRQlgUWu9Z51V9RqJAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUolNoeyufW0sfS3mcy+VqzCC//6AwHwYDVR0j
BBgwFoAU+VCqnrabbnY1ZiGBWmhiDhz8gOYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnAxMWppRGVFVUdwTmZlUGd4djZmbVdIdm5VSjhpb1hrQnpLN1A3TkpW
QzIvMC9GOTUwQUE5RUI2OUI2RTc2MzU2NjIxODE1QTY4NjIwRTFDRkM4MEU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y5NTBBQTlFQjY5QjZFNzYz
NTY2MjE4MTVBNjg2MjBFMUNGQzgwRTYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZwMTFqaURlRVVHcE5mZVBneHY2Zm1XSHZuVUo4aW9Ya0J6SzdQN05KVkMyLzAv
MzIzODMwMzQzYTMxNjMzODMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzYzMTM2
MzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEHIAwDQYJKoZIhvcNAQELBQADggEBAD0ln3wnyiod
0XP3ufXZCP0Hxqwsce+twb1hS1ecrO2UoG1IccerGj3acJp6t3ksIfTGC51WyONA
95m7JIRAMipl36YRKXQ7dVlMyPtkowSzrJ2FWa5h52hqgyRlhKYfY6i7KGnfqW2o
OHceGraZr+X91mqa4Tz39bs4DFjM8fxBSAeuSQrirCQWQ+8LlQDPNilfhBP20cDo
qP97eKqX507gt94Ys0/GK7Ml8uBi9mHhR8DhTLFeMt084dAtYS0DwalFCZ1LsRAd
alNT/DcTW5vz6DbwnM2eNk30j0AfLHw3f0XTr+ts8TgGugEUJmcpWINuflMkrik4
uTXcfBHP5Eg=
-----END CERTIFICATE-----
Generated at Mon Apr 7 07:27:47 2025 by rpki-client