Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/323830343a336135383a3a2f33322d3332203d3e20323636303834.roa
File: 323830343a336135383a3a2f33322d3332203d3e20323636303834.roa (raw, json)
Hash identifier: sEDi9DwKH3RgvOw8jDr36sB6k6gHWPRVR+WX1w3q6W4=
Subject key identifier: 06:D2:C4:9C:B4:DC:E2:CB:65:E8:47:6C:9B:26:83:31:0B:4F:42:54
Certificate issuer: /CN=890AD584C83D44FFB2DFFF955D1BD1C72FF0F629
Certificate serial: 64051A6177C1657475FAB6FDD5750C20C3C9EE74
Authority key identifier: 89:0A:D5:84:C8:3D:44:FF:B2:DF:FF:95:5D:1B:D1:C7:2F:F0:F6:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer
Subject info access: rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/323830343a336135383a3a2f33322d3332203d3e20323636303834.roa
Signing time: Thu 06 Mar 2025 10:52:47 +0000
ROA not before: Thu 06 Mar 2025 10:47:47 +0000
ROA not after: Thu 05 Mar 2026 10:52:47 +0000
asID: 266084
IP address blocks: 2804:3a58::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:05:1a:61:77:c1:65:74:75:fa:b6:fd:d5:75:0c:20:c3:c9:ee:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=890AD584C83D44FFB2DFFF955D1BD1C72FF0F629
Validity
Not Before: Mar 6 10:47:47 2025 GMT
Not After : Mar 5 10:52:47 2026 GMT
Subject: CN=06D2C49CB4DCE2CB65E8476C9B2683310B4F4254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5a:fb:27:08:9d:b1:5e:3f:c1:8e:02:a9:45:
d3:0f:fa:b0:e2:51:8a:93:15:70:06:c6:be:03:57:
5f:78:c6:88:2d:92:c5:00:6a:0d:2f:0c:1a:55:b6:
ad:52:9a:30:cd:65:ed:07:04:81:f9:87:ac:7b:90:
92:8d:10:66:67:8e:81:f6:24:7f:b7:95:ff:13:ff:
26:71:47:01:ee:55:e3:e1:cf:8f:dc:9b:96:ad:a1:
e3:d7:51:75:03:ce:56:be:3a:3d:e8:ad:91:86:12:
6f:7b:3e:a8:f9:01:39:97:bb:e0:57:9c:9c:57:6c:
d0:fa:73:b0:54:46:57:69:d6:49:c7:1e:fb:90:60:
75:b1:03:0e:3c:ca:f2:4b:04:e1:f8:e6:ad:81:33:
ab:a0:49:5f:c4:55:ae:04:6b:b8:d2:2e:a5:05:e8:
82:0a:0f:71:98:4f:ae:8d:dc:21:e4:f2:d0:53:1f:
29:07:3b:17:9b:70:6d:c1:14:f4:df:0f:50:37:0b:
46:8c:e1:18:13:68:bf:75:0b:b6:15:87:77:d1:76:
b9:f8:49:0c:f4:ec:c9:73:b4:bc:ca:b2:72:4a:4d:
07:70:1b:38:a2:fb:7d:a6:d4:ae:a5:e9:0b:e4:20:
2c:dc:ed:cb:83:d3:25:cc:a4:d4:ba:29:4c:94:ac:
d2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D2:C4:9C:B4:DC:E2:CB:65:E8:47:6C:9B:26:83:31:0B:4F:42:54
X509v3 Authority Key Identifier:
keyid:89:0A:D5:84:C8:3D:44:FF:B2:DF:FF:95:5D:1B:D1:C7:2F:F0:F6:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/323830343a336135383a3a2f33322d3332203d3e20323636303834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3a58::/32
Signature Algorithm: sha256WithRSAEncryption
6e:8e:48:05:b0:c7:cf:33:4c:37:28:ff:e1:09:fa:de:c2:02:
c2:7c:a4:cb:ab:4f:44:48:ca:72:8e:85:98:2b:26:b7:37:a3:
23:5d:2c:1c:d2:ea:e8:6e:9d:f3:00:65:a5:27:3e:11:8e:32:
94:30:7f:e2:99:1e:ab:3f:b4:c4:8c:d6:38:7b:ca:4f:80:6d:
0d:48:cb:9e:25:6b:b0:b1:21:07:74:3d:f3:1b:01:fc:bf:eb:
d8:05:72:ae:fc:56:54:68:5b:4c:9a:67:c8:5d:58:bf:a6:f7:
d9:0e:66:3b:99:a9:af:14:6e:51:59:94:18:03:9f:39:04:0c:
25:54:c9:56:c5:c6:a9:b7:d2:4b:12:fa:2e:ca:3a:39:7d:12:
29:4b:62:0b:29:d6:c1:5b:cb:4f:c5:62:ec:aa:8f:f0:a9:f0:
a3:46:a0:f0:ef:08:bf:56:6b:57:3a:eb:cf:7b:cd:01:1e:97:
27:1d:f9:3c:23:95:8e:19:0a:e8:1b:0b:b6:d9:a0:4c:30:e7:
9c:3b:86:8e:b9:b1:f3:8e:70:15:13:ec:e0:2b:e7:23:b0:83:
31:40:44:29:22:00:37:df:92:9b:e3:26:0e:d7:ba:97:81:e7:
a8:39:8f:92:bb:88:57:e5:bb:31:8d:b1:6b:2f:61:67:1b:93:
9a:1b:8f:90
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUZAUaYXfBZXR1+rb91XUMIMPJ7nQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODkwQUQ1ODRDODNENDRGRkIyREZGRjk1NUQxQkQxQzcy
RkYwRjYyOTAeFw0yNTAzMDYxMDQ3NDdaFw0yNjAzMDUxMDUyNDdaMDMxMTAvBgNV
BAMTKDA2RDJDNDlDQjREQ0UyQ0I2NUU4NDc2QzlCMjY4MzMxMEI0RjQyNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoWvsnCJ2xXj/BjgKpRdMP+rDi
UYqTFXAGxr4DV194xogtksUAag0vDBpVtq1SmjDNZe0HBIH5h6x7kJKNEGZnjoH2
JH+3lf8T/yZxRwHuVePhz4/cm5atoePXUXUDzla+Oj3orZGGEm97Pqj5ATmXu+BX
nJxXbND6c7BURldp1knHHvuQYHWxAw48yvJLBOH45q2BM6ugSV/EVa4Ea7jSLqUF
6IIKD3GYT66N3CHk8tBTHykHOxebcG3BFPTfD1A3C0aM4RgTaL91C7YVh3fRdrn4
SQz07MlztLzKsnJKTQdwGzii+32m1K6l6QvkICzc7cuD0yXMpNS6KUyUrNKrAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUBtLEnLTc4stl6EdsmyaDMQtPQlQwHwYDVR0j
BBgwFoAUiQrVhMg9RP+y3/+VXRvRxy/w9ikwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9ZRHp6elVXNjlGbmUyUkdaemJtWFpKcG1Hajl3Q2RqR0NhdEtEUDJNYVBV
LzEvODkwQUQ1ODRDODNENDRGRkIyREZGRjk1NUQxQkQxQzcyRkYwRjYyOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84OTBBRDU4NEM4M0Q0NEZGQjJE
RkZGOTU1RDFCRDFDNzJGRjBGNjI5LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Z
RHp6elVXNjlGbmUyUkdaemJtWFpKcG1Hajl3Q2RqR0NhdEtEUDJNYVBVLzEvMzIz
ODMwMzQzYTMzNjEzNTM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM2MzAz
ODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKAQ6WDANBgkqhkiG9w0BAQsFAAOCAQEAbo5IBbDHzzNM
Nyj/4Qn63sICwnyky6tPREjKco6FmCsmtzejI10sHNLq6G6d8wBlpSc+EY4ylDB/
4pkeqz+0xIzWOHvKT4BtDUjLniVrsLEhB3Q98xsB/L/r2AVyrvxWVGhbTJpnyF1Y
v6b32Q5mO5mprxRuUVmUGAOfOQQMJVTJVsXGqbfSSxL6Lso6OX0SKUtiCynWwVvL
T8Vi7KqP8Knwo0ag8O8Iv1ZrVzrrz3vNAR6XJx35PCOVjhkK6BsLttmgTDDnnDuG
jrmx845wFRPs4CvnI7CDMUBEKSIAN9+Sm+MmDte6l4HnqDmPkruIV+W7MY2xay9h
ZxuTmhuPkA==
-----END CERTIFICATE-----
Generated at Wed Apr 9 06:53:35 2025 by rpki-client