Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GY4yLmNvZKpNFysEugwfWbyH32t6XvfaMDLoPKUbYG1U/0/323830343a323539303a3a2f33322d3333203d3e20323634323838.roa
File: 323830343a323539303a3a2f33322d3333203d3e20323634323838.roa (raw, json)
Hash identifier: PdaGEoTclKHyfqWiO4pIm80chtED8HFA1I0tty0GIIM=
Subject key identifier: 8E:E9:23:B4:E0:0D:1E:35:15:F9:8E:5A:58:FD:BC:85:09:03:B1:B7
Certificate issuer: /CN=309943EC91951A9ADF4A2C846825824B6F268881
Certificate serial: 2DEEBB702664173EAA4F2C0E8C93ED3D225598EB
Authority key identifier: 30:99:43:EC:91:95:1A:9A:DF:4A:2C:84:68:25:82:4B:6F:26:88:81
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/309943EC91951A9ADF4A2C846825824B6F268881.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GY4yLmNvZKpNFysEugwfWbyH32t6XvfaMDLoPKUbYG1U/0/323830343a323539303a3a2f33322d3333203d3e20323634323838.roa
Signing time: Fri 21 Feb 2025 12:32:42 +0000
ROA not before: Fri 21 Feb 2025 12:27:42 +0000
ROA not after: Fri 20 Feb 2026 12:32:42 +0000
asID: 264288
IP address blocks: 2804:2590::/32 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:ee:bb:70:26:64:17:3e:aa:4f:2c:0e:8c:93:ed:3d:22:55:98:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=309943EC91951A9ADF4A2C846825824B6F268881
Validity
Not Before: Feb 21 12:27:42 2025 GMT
Not After : Feb 20 12:32:42 2026 GMT
Subject: CN=8EE923B4E00D1E3515F98E5A58FDBC850903B1B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7a:f6:c9:b0:e5:b4:8c:0b:2b:0e:72:31:2a:
07:39:3b:4c:c5:9d:6d:1c:99:bc:55:5e:70:a8:50:
dd:72:b2:fb:22:96:fe:f1:55:ef:53:2b:a9:d3:58:
42:5d:89:3e:cf:e0:ed:42:a5:9d:9d:cf:e7:58:ef:
8f:09:82:32:ab:0f:df:db:d8:ba:b5:53:26:95:e1:
f4:d7:b0:7c:b4:a4:c5:53:69:0f:34:c7:41:b4:61:
f8:81:60:83:55:b1:89:ae:5c:f3:da:bc:7e:17:59:
0d:29:bc:0f:94:77:72:49:32:f3:97:fa:7c:e0:be:
c6:c8:9b:e7:be:15:75:b0:16:26:d4:f0:13:dd:86:
e1:9c:2b:4c:32:d8:c1:a8:65:cc:71:5b:b3:15:85:
e0:a8:33:14:8b:bb:af:0f:8e:54:46:21:46:07:05:
0a:71:e4:53:33:37:26:c7:ad:3a:60:86:8f:7d:da:
42:7c:35:22:ef:39:ce:cd:c8:35:e4:89:b6:8e:46:
6e:53:2b:eb:cd:60:9f:65:70:99:36:0f:7f:97:e8:
09:f5:f5:91:43:56:4f:d5:30:e0:b8:b3:a6:13:26:
2d:24:59:df:bc:25:49:d0:d9:09:5e:54:2a:f8:fb:
2b:24:bc:34:a2:9e:41:f6:29:e4:81:59:98:5b:c1:
a3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E9:23:B4:E0:0D:1E:35:15:F9:8E:5A:58:FD:BC:85:09:03:B1:B7
X509v3 Authority Key Identifier:
keyid:30:99:43:EC:91:95:1A:9A:DF:4A:2C:84:68:25:82:4B:6F:26:88:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GY4yLmNvZKpNFysEugwfWbyH32t6XvfaMDLoPKUbYG1U/0/309943EC91951A9ADF4A2C846825824B6F268881.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/309943EC91951A9ADF4A2C846825824B6F268881.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GY4yLmNvZKpNFysEugwfWbyH32t6XvfaMDLoPKUbYG1U/0/323830343a323539303a3a2f33322d3333203d3e20323634323838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2590::/32
Signature Algorithm: sha256WithRSAEncryption
43:f2:9a:e2:92:5a:7b:a1:f1:5c:18:d2:13:27:66:1f:87:dc:
40:e7:97:43:ea:97:62:0d:6f:d2:0a:bb:15:9a:57:01:3b:fa:
f6:e0:a0:f5:74:ef:7b:ed:5f:29:73:9b:28:e5:2e:3e:19:f4:
43:ac:31:bb:f6:02:4d:77:e7:e2:a4:26:f0:79:c4:4f:ac:fd:
a0:b1:f9:23:1f:48:4f:30:e1:91:3a:32:df:4b:5a:cb:72:7b:
48:cb:7b:d1:9a:57:cf:50:3b:bd:5f:7c:f0:7b:15:6f:dd:50:
ca:cb:58:d2:17:ba:c6:36:7e:c2:cd:34:f9:e5:ec:d3:49:d1:
e1:d2:69:b5:e1:b8:61:8a:fa:19:7f:20:49:45:2b:6d:da:c9:
cf:de:c9:6a:35:86:a1:93:c4:3c:41:98:26:cd:11:a7:08:6d:
af:a9:c4:e4:57:f3:0a:b9:cb:30:2d:27:1d:6f:33:f8:64:6c:
32:f0:48:1c:d4:d1:c7:da:da:90:82:34:f1:4a:af:c7:80:32:
4e:30:0e:62:cb:0b:fe:3b:ee:4e:07:ac:0f:60:49:53:f6:9f:
d1:da:09:13:21:22:4f:83:4b:e5:4d:bd:79:e5:b5:f7:da:d7:
8e:c8:60:ae:3f:8d:12:50:6b:0a:33:46:d3:d4:dd:69:3f:3f:
ac:1b:68:b5
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIULe67cCZkFz6qTywOjJPtPSJVmOswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA5OTQzRUM5MTk1MUE5QURGNEEyQzg0NjgyNTgyNEI2
RjI2ODg4MTAeFw0yNTAyMjExMjI3NDJaFw0yNjAyMjAxMjMyNDJaMDMxMTAvBgNV
BAMTKDhFRTkyM0I0RTAwRDFFMzUxNUY5OEU1QTU4RkRCQzg1MDkwM0IxQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvevbJsOW0jAsrDnIxKgc5O0zF
nW0cmbxVXnCoUN1ysvsilv7xVe9TK6nTWEJdiT7P4O1CpZ2dz+dY748JgjKrD9/b
2Lq1UyaV4fTXsHy0pMVTaQ80x0G0YfiBYINVsYmuXPPavH4XWQ0pvA+Ud3JJMvOX
+nzgvsbIm+e+FXWwFibU8BPdhuGcK0wy2MGoZcxxW7MVheCoMxSLu68PjlRGIUYH
BQpx5FMzNybHrTpgho992kJ8NSLvOc7NyDXkibaORm5TK+vNYJ9lcJk2D3+X6An1
9ZFDVk/VMOC4s6YTJi0kWd+8JUnQ2QleVCr4+yskvDSinkH2KeSBWZhbwaP7AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUjukjtOANHjUV+Y5aWP28hQkDsbcwHwYDVR0j
BBgwFoAUMJlD7JGVGprfSiyEaCWCS28miIEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1k0eUxtTnZaS3BORnlzRXVnd2ZXYnlIMzJ0Nlh2ZmFNRExvUEtVYllH
MVUvMC8zMDk5NDNFQzkxOTUxQTlBREY0QTJDODQ2ODI1ODI0QjZGMjY4ODgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMwOTk0M0VDOTE5NTFBOUFE
RjRBMkM4NDY4MjU4MjRCNkYyNjg4ODEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dZNHlMbU52WktwTkZ5c0V1Z3dmV2J5SDMydDZYdmZhTURMb1BLVWJZRzFVLzAv
MzIzODMwMzQzYTMyMzUzOTMwM2EzYTJmMzMzMjJkMzMzMzIwM2QzZTIwMzIzNjM0
MzIzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQlkDANBgkqhkiG9w0BAQsFAAOCAQEAQ/Ka4pJa
e6HxXBjSEydmH4fcQOeXQ+qXYg1v0gq7FZpXATv69uCg9XTve+1fKXObKOUuPhn0
Q6wxu/YCTXfn4qQm8HnET6z9oLH5Ix9ITzDhkToy30tay3J7SMt70ZpXz1A7vV98
8HsVb91QystY0he6xjZ+ws00+eXs00nR4dJpteG4YYr6GX8gSUUrbdrJz97JajWG
oZPEPEGYJs0Rpwhtr6nE5FfzCrnLMC0nHW8z+GRsMvBIHNTRx9rakII08Uqvx4Ay
TjAOYssL/jvuTgesD2BJU/af0doJEyEiT4NL5U29eeW199rXjshgrj+NElBrCjNG
09TdaT8/rBtotQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:41:40 2025 by rpki-client