Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/323830343a313033343a3a2f33322d3334203d3e20323633363234.roa
File: 323830343a313033343a3a2f33322d3334203d3e20323633363234.roa (raw, json)
Hash identifier: WEnoKN8Q2d5UmUIkM/SpEBblmOrv6HpXC417B/GS2hI=
Subject key identifier: 3E:87:03:ED:66:1F:FA:BC:D5:54:F1:17:ED:1B:18:78:CD:92:97:29
Certificate issuer: /CN=642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47
Certificate serial: 5ECBDCD7DFAFBC97FF0E706AD02E807332AB1EAB
Authority key identifier: 64:2E:A2:7E:A1:27:6F:A1:CA:55:EF:3F:D8:87:CF:C6:DD:A0:5C:47
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/323830343a313033343a3a2f33322d3334203d3e20323633363234.roa
Signing time: Mon 06 Jan 2025 19:43:25 +0000
ROA not before: Mon 06 Jan 2025 19:38:25 +0000
ROA not after: Mon 05 Jan 2026 19:43:25 +0000
asID: 263624
IP address blocks: 2804:1034::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:cb:dc:d7:df:af:bc:97:ff:0e:70:6a:d0:2e:80:73:32:ab:1e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47
Validity
Not Before: Jan 6 19:38:25 2025 GMT
Not After : Jan 5 19:43:25 2026 GMT
Subject: CN=3E8703ED661FFABCD554F117ED1B1878CD929729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7c:97:ac:f6:2f:a7:a5:f7:be:16:fc:3c:eb:
6b:e4:04:59:9f:fa:58:73:21:86:da:17:ee:54:b1:
f6:95:16:ae:85:99:aa:9d:91:0f:75:ce:cf:50:b0:
f4:c9:7d:26:5f:26:33:de:09:df:80:72:9e:ec:9a:
96:e1:90:fa:f9:33:1f:10:23:da:dd:4f:a5:57:cf:
d6:a6:c5:2e:77:d2:f2:84:49:77:1e:96:92:72:c7:
91:50:5b:17:37:53:75:c4:21:d5:ce:7f:ca:94:a8:
43:3b:96:89:40:40:61:97:0b:35:b3:72:69:18:82:
5a:6c:8d:49:cb:ae:52:24:fd:0a:2d:0a:0f:da:2a:
99:52:0b:b4:98:b2:ba:ac:10:96:c0:f3:07:92:16:
67:d6:58:8e:56:e7:8f:ac:3e:53:0b:d1:90:96:ef:
3e:0d:a4:74:fc:cf:f7:b7:c2:d4:74:e3:62:c8:8c:
c3:74:3a:e8:58:50:be:48:23:29:76:f2:5d:f3:7d:
32:80:3a:54:15:f3:e5:0a:4c:9c:b9:61:fb:dd:e7:
db:76:41:9e:80:64:98:22:4c:b1:17:0b:28:ae:18:
5d:a9:36:55:d6:c1:79:0a:78:7f:f5:4a:7d:4f:ad:
e4:da:cb:e7:e2:43:25:d9:62:fa:03:57:3b:18:c9:
bd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:87:03:ED:66:1F:FA:BC:D5:54:F1:17:ED:1B:18:78:CD:92:97:29
X509v3 Authority Key Identifier:
keyid:64:2E:A2:7E:A1:27:6F:A1:CA:55:EF:3F:D8:87:CF:C6:DD:A0:5C:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/323830343a313033343a3a2f33322d3334203d3e20323633363234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1034::/32
Signature Algorithm: sha256WithRSAEncryption
a2:5c:0d:8e:51:b8:54:1d:1c:d0:a2:ef:60:26:37:d5:f4:9f:
f3:59:98:89:34:3b:08:c0:a5:6d:09:29:22:29:10:a7:f7:3b:
57:d5:8c:5a:fd:7f:cb:8e:8f:55:e5:54:f1:cc:47:14:c2:a6:
4a:19:ce:64:87:47:c1:e9:5a:cd:bb:05:cc:72:c3:ba:69:86:
c9:d1:aa:87:37:d5:e0:79:09:fb:d6:48:4d:6d:c1:3e:7f:70:
86:2c:be:67:23:2f:f4:13:5c:68:7a:3e:79:82:ef:26:9b:f1:
5a:cf:fb:16:40:84:95:f4:4a:6c:62:ad:d2:af:ea:d6:b4:ad:
84:34:5c:28:08:35:fa:bf:b1:fe:07:43:52:3b:bb:bf:e5:3f:
40:06:a6:19:b4:27:ea:f2:f5:4c:45:80:f9:9e:6e:2f:fb:22:
1d:01:e7:59:61:39:46:b5:2c:7f:b2:54:2d:46:59:62:ee:df:
46:c4:a0:dc:80:54:d0:5e:d9:a0:a5:2c:87:74:d3:2a:d0:b8:
88:8b:4e:be:0c:f1:6c:02:f3:a9:ea:01:08:8f:7a:04:58:a1:
b3:3c:03:d1:1b:36:56:9c:df:c6:f9:d0:f5:d3:12:65:9f:ef:
95:b7:0d:3e:b1:fa:49:7a:79:96:00:68:4f:db:3c:78:55:be:
81:a7:64:dc
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUXsvc19+vvJf/DnBq0C6AczKrHqswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQyRUEyN0VBMTI3NkZBMUNBNTVFRjNGRDg4N0NGQzZE
REEwNUM0NzAeFw0yNTAxMDYxOTM4MjVaFw0yNjAxMDUxOTQzMjVaMDMxMTAvBgNV
BAMTKDNFODcwM0VENjYxRkZBQkNENTU0RjExN0VEMUIxODc4Q0Q5Mjk3MjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYfJes9i+npfe+Fvw862vkBFmf
+lhzIYbaF+5UsfaVFq6FmaqdkQ91zs9QsPTJfSZfJjPeCd+Acp7smpbhkPr5Mx8Q
I9rdT6VXz9amxS530vKESXcelpJyx5FQWxc3U3XEIdXOf8qUqEM7lolAQGGXCzWz
cmkYglpsjUnLrlIk/QotCg/aKplSC7SYsrqsEJbA8weSFmfWWI5W54+sPlML0ZCW
7z4NpHT8z/e3wtR042LIjMN0OuhYUL5IIyl28l3zfTKAOlQV8+UKTJy5Yfvd59t2
QZ6AZJgiTLEXCyiuGF2pNlXWwXkKeH/1Sn1PreTay+fiQyXZYvoDVzsYyb2pAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUPocD7WYf+rzVVPEX7RsYeM2SlykwHwYDVR0j
BBgwFoAUZC6ifqEnb6HKVe8/2IfPxt2gXEcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVpKZFF1RmM1QzM1Z3hkRldEcXMzekVkVkxTNXFlS0p5UWRwWUFES0ZB
aWcvMC82NDJFQTI3RUExMjc2RkExQ0E1NUVGM0ZEODg3Q0ZDNkREQTA1QzQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0MkVBMjdFQTEyNzZGQTFD
QTU1RUYzRkQ4ODdDRkM2RERBMDVDNDcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FaSmRRdUZjNUMzNWd4ZEZXRHFzM3pFZFZMUzVxZUtKeVFkcFlBREtGQWlnLzAv
MzIzODMwMzQzYTMxMzAzMzM0M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjMz
MzYzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQQNDANBgkqhkiG9w0BAQsFAAOCAQEAolwNjlG4
VB0c0KLvYCY31fSf81mYiTQ7CMClbQkpIikQp/c7V9WMWv1/y46PVeVU8cxHFMKm
ShnOZIdHwelazbsFzHLDummGydGqhzfV4HkJ+9ZITW3BPn9whiy+ZyMv9BNcaHo+
eYLvJpvxWs/7FkCElfRKbGKt0q/q1rSthDRcKAg1+r+x/gdDUju7v+U/QAamGbQn
6vL1TEWA+Z5uL/siHQHnWWE5RrUsf7JULUZZYu7fRsSg3IBU0F7ZoKUsh3TTKtC4
iItOvgzxbALzqeoBCI96BFihszwD0Rs2VpzfxvnQ9dMSZZ/vlbcNPrH6SXp5lgBo
T9s8eFW+gadk3A==
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:31:36 2025 by rpki-client