Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31353a3a2f34382d313238203d3e203532353830.roa
File: 323830343a6366383a31353a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier: CQDg0JnD3jYmsRTUfVxccO/uIVOKuDD3NhalDFp0+Js=
Subject key identifier: 84:73:DD:04:F0:D4:83:2B:73:1C:22:0D:8C:FF:E3:BB:EC:5F:FE:D1
Certificate issuer: /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial: 3A3F5F18B11B0F9976EA31F899CF56FAE7079E79
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31353a3a2f34382d313238203d3e203532353830.roa
Signing time: Fri 14 Feb 2025 19:26:41 +0000
ROA not before: Fri 14 Feb 2025 19:21:41 +0000
ROA not after: Fri 13 Feb 2026 19:26:41 +0000
asID: 52580
IP address blocks: 2804:cf8:15::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:3f:5f:18:b1:1b:0f:99:76:ea:31:f8:99:cf:56:fa:e7:07:9e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
Validity
Not Before: Feb 14 19:21:41 2025 GMT
Not After : Feb 13 19:26:41 2026 GMT
Subject: CN=8473DD04F0D4832B731C220D8CFFE3BBEC5FFED1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7e:a4:12:4c:1c:56:f0:fc:66:7b:63:46:e0:
1a:a7:ef:ae:1f:90:de:ae:11:14:c8:d9:f1:ef:bf:
cb:d7:cd:51:a2:98:7b:7f:8e:8e:65:72:57:32:cc:
ec:12:a8:a4:73:74:e8:2b:06:f9:16:bf:23:11:ad:
da:bb:ac:2a:82:85:5b:21:c0:47:74:84:13:c2:5d:
2c:8a:32:05:3f:df:d6:fd:f2:ce:0b:4d:77:f6:eb:
65:00:69:40:f8:93:96:50:31:0c:50:6b:ea:82:d9:
ae:70:48:74:eb:df:98:31:2c:96:2d:6f:eb:87:09:
8b:39:fd:7c:2a:6c:6a:50:aa:c2:30:8f:fb:74:34:
93:ab:85:9b:2e:72:97:e0:09:03:15:9f:d9:53:c4:
f3:fc:e8:76:96:45:95:e3:a3:a5:c7:a2:f1:63:6f:
8c:c1:3a:cb:5d:0e:4c:cc:c4:16:b8:be:d8:62:27:
22:ce:6f:40:3b:e1:6d:cb:1e:b8:60:f3:50:2a:36:
40:2c:f5:c3:f7:59:39:dc:53:63:9b:76:0a:90:b2:
77:24:33:24:61:13:92:3e:83:f6:8c:19:3e:9e:cf:
b2:19:fc:cd:3c:1d:59:6a:af:5b:63:6c:03:2f:77:
fb:a6:27:53:ab:c0:05:ec:b1:41:62:56:09:34:38:
3b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:73:DD:04:F0:D4:83:2B:73:1C:22:0D:8C:FF:E3:BB:EC:5F:FE:D1
X509v3 Authority Key Identifier:
keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31353a3a2f34382d313238203d3e203532353830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:cf8:15::/48
Signature Algorithm: sha256WithRSAEncryption
34:56:5c:c2:63:82:af:9a:50:94:f6:8a:40:af:11:9e:0b:00:
7f:30:5a:4e:78:b1:ee:ec:1e:a9:28:fa:4e:75:5e:a5:49:b0:
ef:c8:d0:24:2d:14:dd:f7:0b:0d:3f:27:31:c9:7d:cd:ca:77:
a9:2a:4a:cb:99:e8:d5:49:87:26:17:4d:a2:d5:b1:25:5b:f9:
46:7b:0a:f0:64:d3:2d:aa:ae:9c:ba:f7:ea:61:ae:de:1a:82:
bb:44:24:1e:ef:02:d2:06:ad:86:38:17:5c:91:b5:31:d3:3c:
cd:ff:b8:99:ab:81:c6:60:0d:a5:c3:e1:4e:c8:a3:1e:8a:39:
47:5f:20:4a:63:d9:39:e3:f8:b4:76:cf:06:a6:27:f1:4a:e4:
c2:48:54:46:93:a6:ca:bc:88:52:5f:53:96:69:59:31:be:fc:
0f:77:d4:de:ab:4b:64:0a:60:6b:99:bb:e0:68:a7:a9:52:e2:
8d:1b:9e:a1:47:d9:ce:45:b1:57:b5:45:b3:92:14:b8:4c:2f:
7f:11:70:4e:4f:0b:67:86:6d:f4:db:10:ed:3f:ef:ed:f2:a2:
37:0d:bf:d4:8d:a0:ec:ee:c8:ca:df:65:04:87:f0:86:7e:01:
53:70:2f:a8:62:b6:bb:79:dc:55:01:fe:d7:ef:7b:47:4c:9a:
cd:57:87:f7
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUOj9fGLEbD5l26jH4mc9W+ucHnnkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkYzNjE3M0UwOTcxNjlCQTA0NDUzOEI2NDI1ODAwMEI0
MkZBQkQ4QzAeFw0yNTAyMTQxOTIxNDFaFw0yNjAyMTMxOTI2NDFaMDMxMTAvBgNV
BAMTKDg0NzNERDA0RjBENDgzMkI3MzFDMjIwRDhDRkZFM0JCRUM1RkZFRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDffqQSTBxW8Pxme2NG4Bqn764f
kN6uERTI2fHvv8vXzVGimHt/jo5lclcyzOwSqKRzdOgrBvkWvyMRrdq7rCqChVsh
wEd0hBPCXSyKMgU/39b98s4LTXf262UAaUD4k5ZQMQxQa+qC2a5wSHTr35gxLJYt
b+uHCYs5/XwqbGpQqsIwj/t0NJOrhZsucpfgCQMVn9lTxPP86HaWRZXjo6XHovFj
b4zBOstdDkzMxBa4vthiJyLOb0A74W3LHrhg81AqNkAs9cP3WTncU2ObdgqQsnck
MyRhE5I+g/aMGT6ez7IZ/M08HVlqr1tjbAMvd/umJ1OrwAXssUFiVgk0ODu5AgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUhHPdBPDUgytzHCINjP/ju+xf/tEwHwYDVR0j
BBgwFoAU/zYXPglxaboERTi2QlgAC0L6vYwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHBUOGppQldteU4zUnhuakdvUGNZR3BWUnd1VkYzZE1Wd1JldjNGTnp0
aTEvMC9GRjM2MTczRTA5NzE2OUJBMDQ0NTM4QjY0MjU4MDAwQjQyRkFCRDhDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGMzYxNzNFMDk3MTY5QkEw
NDQ1MzhCNjQyNTgwMDBCNDJGQUJEOEMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hwVDhqaUJXbXlOM1J4bmpHb1BjWUdwVlJ3dVZGM2RNVndSZXYzRk56dGkxLzAv
MzIzODMwMzQzYTYzNjYzODNhMzEzNTNhM2EyZjM0MzgyZDMxMzIzODIwM2QzZTIw
MzUzMjM1MzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEDPgAFTANBgkqhkiG9w0BAQsFAAOCAQEA
NFZcwmOCr5pQlPaKQK8RngsAfzBaTnix7uweqSj6TnVepUmw78jQJC0U3fcLDT8n
Mcl9zcp3qSpKy5no1UmHJhdNotWxJVv5RnsK8GTTLaqunLr36mGu3hqCu0QkHu8C
0gathjgXXJG1MdM8zf+4mauBxmANpcPhTsijHoo5R18gSmPZOeP4tHbPBqYn8Urk
wkhURpOmyryIUl9TlmlZMb78D3fU3qtLZApga5m74GinqVLijRueoUfZzkWxV7VF
s5IUuEwvfxFwTk8LZ4Zt9NsQ7T/v7fKiNw2/1I2g7O7Iyt9lBIfwhn4BU3AvqGK2
u3ncVQH+1+97R0yazVeH9w==
-----END CERTIFICATE-----
Generated at Mon Apr 7 22:46:49 2025 by rpki-client