Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/323830343a343138633a383030303a3a2f33342d3334203d3e20323637343430.roa
File: 323830343a343138633a383030303a3a2f33342d3334203d3e20323637343430.roa (raw, json)
Hash identifier: 2bh6ar0j8X40SPeF81Y5IBtBMFr+W35muGfHtYjqVbc=
Subject key identifier: FD:87:BB:D9:E1:8B:6A:83:E4:1A:F2:30:3F:1E:B1:23:96:E9:50:0F
Certificate issuer: /CN=683528643A65F1188AB7E1EF5CB5E716A5A13959
Certificate serial: 7D8853AA4959A55A0A8BAAE4FB0DF932AAC627DE
Authority key identifier: 68:35:28:64:3A:65:F1:18:8A:B7:E1:EF:5C:B5:E7:16:A5:A1:39:59
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/683528643A65F1188AB7E1EF5CB5E716A5A13959.cer
Subject info access: rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/323830343a343138633a383030303a3a2f33342d3334203d3e20323637343430.roa
Signing time: Mon 20 Jan 2025 14:46:21 +0000
ROA not before: Mon 20 Jan 2025 14:41:21 +0000
ROA not after: Mon 19 Jan 2026 14:46:21 +0000
asID: 267440
IP address blocks: 2804:418c:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:88:53:aa:49:59:a5:5a:0a:8b:aa:e4:fb:0d:f9:32:aa:c6:27:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=683528643A65F1188AB7E1EF5CB5E716A5A13959
Validity
Not Before: Jan 20 14:41:21 2025 GMT
Not After : Jan 19 14:46:21 2026 GMT
Subject: CN=FD87BBD9E18B6A83E41AF2303F1EB12396E9500F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:c4:e0:b3:05:9f:9e:01:81:15:03:f0:b5:d6:
b2:73:71:e1:37:fa:a4:42:da:f7:41:1d:2d:13:1e:
9b:15:81:24:e8:74:d9:d7:c9:77:e7:98:a0:c0:52:
21:28:60:59:0b:db:0a:1d:07:58:58:ed:a0:21:04:
9d:42:a1:fe:8a:f7:dd:88:70:0e:52:1f:16:70:9e:
bd:3d:6d:69:c3:df:c4:73:f1:a6:0b:8f:28:1e:f0:
b0:b1:fc:a8:7d:03:d4:73:c4:c8:8e:5e:e4:13:48:
ef:47:b3:b7:58:38:18:06:a6:0a:ec:81:7a:b0:9a:
67:fc:72:2f:38:0c:de:dc:66:e5:c3:03:35:11:9c:
90:07:2a:8d:0c:c7:e1:01:a4:47:97:94:1a:54:20:
69:ea:fe:9d:f5:35:29:eb:a9:f4:1c:7d:6e:e3:9c:
80:c7:a2:f6:8d:20:67:2d:39:ee:bb:c1:26:c2:c9:
19:0f:a6:9f:be:63:da:93:29:c8:30:f0:1a:85:e8:
c7:28:fb:4a:98:ea:2a:13:0d:07:51:4d:42:34:5c:
9b:b9:51:49:6f:df:b2:3f:e5:c2:52:8f:16:9c:26:
68:a4:4d:89:96:a3:45:63:f3:3f:74:26:a7:0d:76:
c1:81:c3:ba:34:cc:2b:d9:de:af:57:d4:08:85:be:
96:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:87:BB:D9:E1:8B:6A:83:E4:1A:F2:30:3F:1E:B1:23:96:E9:50:0F
X509v3 Authority Key Identifier:
keyid:68:35:28:64:3A:65:F1:18:8A:B7:E1:EF:5C:B5:E7:16:A5:A1:39:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/683528643A65F1188AB7E1EF5CB5E716A5A13959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/683528643A65F1188AB7E1EF5CB5E716A5A13959.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/323830343a343138633a383030303a3a2f33342d3334203d3e20323637343430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:418c:8000::/34
Signature Algorithm: sha256WithRSAEncryption
8d:b1:d0:52:46:1f:eb:49:db:f3:6d:81:a7:00:7a:e6:32:3f:
81:49:1e:f1:66:5a:54:57:d9:b2:79:2e:8f:2f:3c:e8:1e:77:
fa:e1:22:60:1e:b1:aa:1b:54:eb:2b:e3:8b:44:a6:21:9f:c0:
6f:1a:99:c8:88:9b:90:ed:ea:b9:5a:03:97:98:d0:e6:f5:77:
21:b6:8c:47:43:b5:de:de:bf:ae:e6:c1:3e:44:37:8e:02:f1:
33:57:84:ac:80:8c:d1:a3:24:a3:b5:57:cf:71:9c:81:5e:7b:
2b:18:2e:b7:84:bf:fd:eb:fd:33:62:a9:af:63:82:11:69:59:
b0:5b:0c:a4:a0:c2:4e:e7:90:70:6e:bb:43:e1:50:a5:37:23:
38:56:e5:eb:83:98:c7:53:4a:8e:36:e8:42:7d:73:17:45:e5:
96:04:4d:ab:43:f2:a1:fd:8b:a7:3a:76:b8:6a:e2:34:6e:21:
6a:94:6a:5f:0c:43:1b:78:da:d1:cb:e1:fa:a0:c2:e9:01:86:
19:b5:f1:d8:21:b4:3a:70:95:f7:65:3c:91:a3:26:af:9d:14:
57:c2:6c:4c:59:24:45:2a:c9:35:cf:1e:38:94:56:91:11:e8:
92:9c:f8:7e:b7:64:5e:40:8c:9a:14:25:ce:f6:ac:7f:e4:29:
5a:b2:f9:53
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUfYhTqklZpVoKi6rk+w35MqrGJ94wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjgzNTI4NjQzQTY1RjExODhBQjdFMUVGNUNCNUU3MTZB
NUExMzk1OTAeFw0yNTAxMjAxNDQxMjFaFw0yNjAxMTkxNDQ2MjFaMDMxMTAvBgNV
BAMTKEZEODdCQkQ5RTE4QjZBODNFNDFBRjIzMDNGMUVCMTIzOTZFOTUwMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2xOCzBZ+eAYEVA/C11rJzceE3
+qRC2vdBHS0THpsVgSTodNnXyXfnmKDAUiEoYFkL2wodB1hY7aAhBJ1Cof6K992I
cA5SHxZwnr09bWnD38Rz8aYLjyge8LCx/Kh9A9RzxMiOXuQTSO9Hs7dYOBgGpgrs
gXqwmmf8ci84DN7cZuXDAzURnJAHKo0Mx+EBpEeXlBpUIGnq/p31NSnrqfQcfW7j
nIDHovaNIGctOe67wSbCyRkPpp++Y9qTKcgw8BqF6Mco+0qY6ioTDQdRTUI0XJu5
UUlv37I/5cJSjxacJmikTYmWo0Vj8z90JqcNdsGBw7o0zCvZ3q9X1AiFvpbzAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU/Ye72eGLaoPkGvIwPx6xI5bpUA8wHwYDVR0j
BBgwFoAUaDUoZDpl8RiKt+HvXLXnFqWhOVkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzluSGlENGlwenI3M1U4TDVTUUhNYUtSQmtTMUdzNWFoQTRjdDlSQzN3
OEEvMC82ODM1Mjg2NDNBNjVGMTE4OEFCN0UxRUY1Q0I1RTcxNkE1QTEzOTU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4MzUyODY0M0E2NUYxMTg4
QUI3RTFFRjVDQjVFNzE2QTVBMTM5NTkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc5bkhpRDRpcHpyNzNVOEw1U1FITWFLUkJrUzFHczVhaEE0Y3Q5UkMzdzhBLzAv
MzIzODMwMzQzYTM0MzEzODYzM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNzM0MzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEQYyAMA0GCSqGSIb3DQEBCwUA
A4IBAQCNsdBSRh/rSdvzbYGnAHrmMj+BSR7xZlpUV9myeS6PLzzoHnf64SJgHrGq
G1TrK+OLRKYhn8BvGpnIiJuQ7eq5WgOXmNDm9XchtoxHQ7Xe3r+u5sE+RDeOAvEz
V4SsgIzRoySjtVfPcZyBXnsrGC63hL/96/0zYqmvY4IRaVmwWwykoMJO55BwbrtD
4VClNyM4VuXrg5jHU0qONuhCfXMXReWWBE2rQ/Kh/YunOna4auI0biFqlGpfDEMb
eNrRy+H6oMLpAYYZtfHYIbQ6cJX3ZTyRoyavnRRXwmxMWSRFKsk1zx44lFaREeiS
nPh+t2ReQIyaFCXO9qx/5ClasvlT
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:04:29 2025 by rpki-client