Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/323830343a323964303a3a2f33322d3332203d3e20323634303336.roa
File: 323830343a323964303a3a2f33322d3332203d3e20323634303336.roa (raw, json)
Hash identifier: Wq5CcJpAjWZpiErl0pF+65uU8k262eC3zLO8D0cjZsU=
Subject key identifier: B2:65:7D:50:2A:0A:25:AE:24:2D:3C:39:F2:7A:5E:74:BC:8F:98:40
Certificate issuer: /CN=8BCC3BCD747996DEA6D7F16098CF132148801B30
Certificate serial: 1A1CADF255AAC66AEE6DD1E261FCC245B97EEC4E
Authority key identifier: 8B:CC:3B:CD:74:79:96:DE:A6:D7:F1:60:98:CF:13:21:48:80:1B:30
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/323830343a323964303a3a2f33322d3332203d3e20323634303336.roa
Signing time: Mon 03 Mar 2025 12:19:53 +0000
ROA not before: Mon 03 Mar 2025 12:14:53 +0000
ROA not after: Mon 02 Mar 2026 12:19:53 +0000
asID: 264036
IP address blocks: 2804:29d0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:1c:ad:f2:55:aa:c6:6a:ee:6d:d1:e2:61:fc:c2:45:b9:7e:ec:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BCC3BCD747996DEA6D7F16098CF132148801B30
Validity
Not Before: Mar 3 12:14:53 2025 GMT
Not After : Mar 2 12:19:53 2026 GMT
Subject: CN=B2657D502A0A25AE242D3C39F27A5E74BC8F9840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4c:9f:28:10:bc:68:19:55:78:65:5e:fe:dc:
a0:27:f0:fd:4f:93:91:ad:c9:b3:da:27:ac:03:90:
8d:cf:c7:a3:24:97:57:f1:9d:ff:3e:45:43:14:ab:
58:df:cd:74:8b:82:f8:8c:62:9b:ea:b4:5d:4e:a3:
9c:8e:a2:20:4a:e1:86:ab:1a:8f:e3:c2:8d:42:14:
ee:c2:c3:66:50:a7:48:6a:84:c6:90:a6:0a:07:ee:
73:d2:3f:bf:70:5f:3c:75:aa:7e:db:16:33:b9:10:
1f:aa:c8:f6:3c:62:fb:99:f6:d7:bb:65:df:a7:e0:
a1:0a:9d:2d:cf:7a:87:d5:33:93:e7:a6:84:4f:46:
fd:c9:0d:aa:fb:85:95:d4:ee:50:1e:ee:7f:da:f9:
df:24:d5:95:86:1f:0d:27:c7:30:10:e7:f5:7f:90:
0a:b4:97:b9:48:d5:0c:26:cb:ec:9e:ad:2b:c0:dd:
42:92:9a:bf:3a:25:c7:31:a5:33:ad:63:9c:48:cc:
26:7a:8e:a0:28:99:db:27:d0:61:de:87:1a:8b:35:
6c:e1:0f:7b:45:ae:f0:27:54:3c:0e:dd:80:f0:0f:
e4:23:b6:08:33:b6:8c:09:20:36:b1:36:5d:f8:5c:
97:48:f1:61:4f:00:20:14:50:3f:1a:43:2a:0e:d7:
4c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:65:7D:50:2A:0A:25:AE:24:2D:3C:39:F2:7A:5E:74:BC:8F:98:40
X509v3 Authority Key Identifier:
keyid:8B:CC:3B:CD:74:79:96:DE:A6:D7:F1:60:98:CF:13:21:48:80:1B:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/323830343a323964303a3a2f33322d3332203d3e20323634303336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:29d0::/32
Signature Algorithm: sha256WithRSAEncryption
15:9e:53:ef:7a:f4:4a:83:04:40:f7:75:23:62:5e:d6:6a:f3:
6b:78:52:8c:7d:83:83:37:b4:d0:49:8b:99:26:59:50:18:dd:
e0:cc:71:7d:74:16:19:4b:ae:f2:e7:ea:a8:02:b0:ba:ac:0a:
cb:5f:e1:40:ea:a1:83:53:3e:ea:d2:7c:27:74:2c:b0:46:c1:
84:45:2a:dd:24:4a:c7:45:7c:dc:2d:4c:b7:0e:8d:4a:e5:b4:
f7:80:10:86:0b:a0:be:61:01:b8:9d:ed:8c:5b:36:c9:c7:50:
8a:f8:e4:e8:5b:09:ff:d1:13:03:2c:7e:4a:ef:6d:fc:0d:02:
8f:48:e9:f1:bb:ef:f5:ad:7f:7b:4f:cb:60:1d:44:ab:b4:9b:
f0:9e:8a:d3:31:8b:33:cc:d5:af:19:72:3c:0c:76:d8:c1:cb:
cd:6e:4d:08:54:69:3e:6f:20:c6:ab:e0:42:35:0f:94:cb:c6:
92:ec:c8:4c:98:78:f1:00:c9:3a:a2:db:4a:38:9d:45:ac:8b:
f7:c3:49:71:2d:38:f1:7e:91:50:9f:25:f1:11:cd:1e:1f:17:
4f:17:43:fb:c1:54:b7:4d:fa:b0:3d:f5:31:04:67:28:de:40:
be:20:55:6b:f7:f9:9f:f2:3d:bc:29:67:d1:8d:31:10:b6:c7:
8b:fb:f0:1f
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUGhyt8lWqxmrubdHiYfzCRbl+7E4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEJDQzNCQ0Q3NDc5OTZERUE2RDdGMTYwOThDRjEzMjE0
ODgwMUIzMDAeFw0yNTAzMDMxMjE0NTNaFw0yNjAzMDIxMjE5NTNaMDMxMTAvBgNV
BAMTKEIyNjU3RDUwMkEwQTI1QUUyNDJEM0MzOUYyN0E1RTc0QkM4Rjk4NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0TJ8oELxoGVV4ZV7+3KAn8P1P
k5GtybPaJ6wDkI3Px6Mkl1fxnf8+RUMUq1jfzXSLgviMYpvqtF1Oo5yOoiBK4Yar
Go/jwo1CFO7Cw2ZQp0hqhMaQpgoH7nPSP79wXzx1qn7bFjO5EB+qyPY8YvuZ9te7
Zd+n4KEKnS3PeofVM5PnpoRPRv3JDar7hZXU7lAe7n/a+d8k1ZWGHw0nxzAQ5/V/
kAq0l7lI1Qwmy+yerSvA3UKSmr86JccxpTOtY5xIzCZ6jqAomdsn0GHehxqLNWzh
D3tFrvAnVDwO3YDwD+QjtggztowJIDaxNl34XJdI8WFPACAUUD8aQyoO10yfAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUsmV9UCoKJa4kLTw58npedLyPmEAwHwYDVR0j
BBgwFoAUi8w7zXR5lt6m1/FgmM8TIUiAGzAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0JmVGhhbmliUDliZTQ1cFhxc3J6VE1KYkRtQmYxeW1ONDVDQkRRcm1u
eGIvMS84QkNDM0JDRDc0Nzk5NkRFQTZEN0YxNjA5OENGMTMyMTQ4ODAxQjMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCQ0MzQkNENzQ3OTk2REVB
NkQ3RjE2MDk4Q0YxMzIxNDg4MDFCMzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dCZlRoYW5pYlA5YmU0NXBYcXNyelRNSmJEbUJmMXltTjQ1Q0JEUXJtbnhiLzEv
MzIzODMwMzQzYTMyMzk2NDMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzAzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQp0DANBgkqhkiG9w0BAQsFAAOCAQEAFZ5T73r0
SoMEQPd1I2Je1mrza3hSjH2Dgze00EmLmSZZUBjd4MxxfXQWGUuu8ufqqAKwuqwK
y1/hQOqhg1M+6tJ8J3QssEbBhEUq3SRKx0V83C1Mtw6NSuW094AQhgugvmEBuJ3t
jFs2ycdQivjk6FsJ/9ETAyx+Su9t/A0Cj0jp8bvv9a1/e0/LYB1Eq7Sb8J6K0zGL
M8zVrxlyPAx22MHLzW5NCFRpPm8gxqvgQjUPlMvGkuzITJh48QDJOqLbSjidRayL
98NJcS048X6RUJ8l8RHNHh8XTxdD+8FUt036sD31MQRnKN5AviBVa/f5n/I9vCln
0Y0xELbHi/vwHw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:49:55 2025 by rpki-client