Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a343030303a3a2f33342d3334203d3e20323635353030.roa
File: 323830343a333531383a343030303a3a2f33342d3334203d3e20323635353030.roa (raw, json)
Hash identifier: 8Y6RA9r8mTqsJhjMB5oSZz4DAlERbUgsqu+ny8ALLE8=
Subject key identifier: F8:76:4F:61:4A:1F:93:79:B6:EA:57:05:04:FC:21:D1:F5:F5:2C:65
Certificate issuer: /CN=A1E125638591A773701BFD72EE9FA738B6EAA454
Certificate serial: 310B15B55D342B6570CE7C923D8123BF529A6C05
Authority key identifier: A1:E1:25:63:85:91:A7:73:70:1B:FD:72:EE:9F:A7:38:B6:EA:A4:54
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E125638591A773701BFD72EE9FA738B6EAA454.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a343030303a3a2f33342d3334203d3e20323635353030.roa
Signing time: Thu 26 Dec 2024 15:00:28 +0000
ROA not before: Thu 26 Dec 2024 14:55:28 +0000
ROA not after: Thu 25 Dec 2025 15:00:28 +0000
asID: 265500
IP address blocks: 2804:3518:4000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:0b:15:b5:5d:34:2b:65:70:ce:7c:92:3d:81:23:bf:52:9a:6c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1E125638591A773701BFD72EE9FA738B6EAA454
Validity
Not Before: Dec 26 14:55:28 2024 GMT
Not After : Dec 25 15:00:28 2025 GMT
Subject: CN=F8764F614A1F9379B6EA570504FC21D1F5F52C65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:88:1e:ce:d2:27:83:0c:77:55:3a:73:4e:1d:
8d:7e:aa:2b:e2:7e:bd:f4:58:41:98:6a:61:ef:3a:
78:c3:db:af:a5:d2:d4:56:b2:3b:a5:35:bc:fc:7f:
9d:54:0d:de:c7:b3:4c:2b:63:90:bd:1d:b1:cb:e1:
fb:38:1b:1f:d1:41:60:1a:25:33:ae:17:76:c8:b6:
b6:0d:7e:30:fd:8d:d1:c1:12:d7:79:f8:ce:50:95:
d8:9d:33:47:27:a2:9c:63:11:24:5e:fe:d2:1d:97:
53:6a:47:12:df:83:ab:ec:c9:86:3e:cd:11:2c:2b:
08:1c:e0:35:0c:71:9e:b9:0e:b9:4d:39:09:7b:b5:
b4:1b:2b:e4:13:1f:d2:1c:f9:7a:bb:dd:24:5d:a9:
dd:be:b5:eb:ca:78:f0:78:b4:f6:f8:a7:f1:44:57:
cc:71:05:03:aa:76:7b:7a:5e:ba:5c:dc:ca:ec:7f:
73:04:aa:2e:0f:17:01:25:06:98:d0:a1:17:a7:65:
e8:0b:7a:13:9c:ae:89:16:44:b2:89:b2:77:ef:4c:
af:12:31:2e:e7:ae:2a:8b:50:cf:81:cc:9b:35:54:
f3:73:a0:bd:57:e0:06:2e:41:38:4a:9f:f1:88:13:
4d:fd:48:cd:8a:aa:6a:d6:36:0d:d1:1e:39:cb:32:
78:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:76:4F:61:4A:1F:93:79:B6:EA:57:05:04:FC:21:D1:F5:F5:2C:65
X509v3 Authority Key Identifier:
keyid:A1:E1:25:63:85:91:A7:73:70:1B:FD:72:EE:9F:A7:38:B6:EA:A4:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/A1E125638591A773701BFD72EE9FA738B6EAA454.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E125638591A773701BFD72EE9FA738B6EAA454.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a343030303a3a2f33342d3334203d3e20323635353030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3518:4000::/34
Signature Algorithm: sha256WithRSAEncryption
94:67:d3:9e:16:6b:25:bb:7f:54:a6:b4:35:f9:22:3d:d4:ab:
a7:78:73:0e:dd:49:48:be:47:4a:c7:24:af:a8:ea:c5:b8:a1:
ec:3c:6b:9e:e9:da:ca:3b:cc:13:4a:ee:b6:cb:7b:da:17:18:
7d:bc:48:f8:40:c2:43:f3:50:76:4f:c9:c6:11:8c:15:9f:99:
0d:8d:0b:3c:0b:85:53:c9:03:da:d5:00:cd:a8:b3:57:e0:da:
cd:33:b4:8b:09:17:2f:39:3f:e8:60:85:41:a5:54:5c:15:49:
a2:1b:4f:f4:6b:0c:9d:24:7e:73:89:21:13:cd:57:9e:41:c0:
76:f6:bb:c3:b5:a1:7c:a5:66:9c:75:74:5f:8e:f1:d1:ff:66:
78:b4:5e:c2:75:a4:21:a7:6e:5d:f4:60:3b:1e:2c:90:c9:e9:
8a:e1:57:a8:b5:ba:58:ce:b1:ae:1e:f2:56:39:6f:53:31:f0:
67:6f:35:c7:23:fb:98:7f:d4:7b:9a:cf:08:e5:33:47:cf:4a:
e4:86:e7:3f:52:54:26:ec:45:b1:0a:37:f8:c3:c2:ec:8f:8b:
59:c0:b2:18:dd:4b:f0:3e:0d:22:26:85:ee:af:c9:40:51:5c:
59:59:ce:d6:6f:1a:8c:a2:e8:97:3f:e3:63:6c:a3:8b:60:80:
2f:b9:e0:12
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUMQsVtV00K2VwznySPYEjv1KabAUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTFFMTI1NjM4NTkxQTc3MzcwMUJGRDcyRUU5RkE3MzhC
NkVBQTQ1NDAeFw0yNDEyMjYxNDU1MjhaFw0yNTEyMjUxNTAwMjhaMDMxMTAvBgNV
BAMTKEY4NzY0RjYxNEExRjkzNzlCNkVBNTcwNTA0RkMyMUQxRjVGNTJDNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4iB7O0ieDDHdVOnNOHY1+qivi
fr30WEGYamHvOnjD26+l0tRWsjulNbz8f51UDd7Hs0wrY5C9HbHL4fs4Gx/RQWAa
JTOuF3bItrYNfjD9jdHBEtd5+M5QldidM0cnopxjESRe/tIdl1NqRxLfg6vsyYY+
zREsKwgc4DUMcZ65DrlNOQl7tbQbK+QTH9Ic+Xq73SRdqd2+tevKePB4tPb4p/FE
V8xxBQOqdnt6Xrpc3Mrsf3MEqi4PFwElBpjQoRenZegLehOcrokWRLKJsnfvTK8S
MS7nriqLUM+BzJs1VPNzoL1X4AYuQThKn/GIE039SM2KqmrWNg3RHjnLMniZAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU+HZPYUofk3m26lcFBPwh0fX1LGUwHwYDVR0j
BBgwFoAUoeElY4WRp3NwG/1y7p+nOLbqpFQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1FBZGs3ZnplMWM3amgzZ29CNlZvcENTOHRqUVZOMUpmTlhCWmFoWFZj
eGovMC9BMUUxMjU2Mzg1OTFBNzczNzAxQkZENzJFRTlGQTczOEI2RUFBNDU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ExRTEyNTYzODU5MUE3NzM3
MDFCRkQ3MkVFOUZBNzM4QjZFQUE0NTQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NRQWRrN2Z6ZTFjN2poM2dvQjZWb3BDUzh0alFWTjFKZk5YQlphaFhWY3hqLzAv
MzIzODMwMzQzYTMzMzUzMTM4M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNTM1MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigENRhAMA0GCSqGSIb3DQEBCwUA
A4IBAQCUZ9OeFmslu39UprQ1+SI91KuneHMO3UlIvkdKxySvqOrFuKHsPGue6drK
O8wTSu62y3vaFxh9vEj4QMJD81B2T8nGEYwVn5kNjQs8C4VTyQPa1QDNqLNX4NrN
M7SLCRcvOT/oYIVBpVRcFUmiG0/0awydJH5ziSETzVeeQcB29rvDtaF8pWacdXRf
jvHR/2Z4tF7CdaQhp25d9GA7HiyQyemK4VeotbpYzrGuHvJWOW9TMfBnbzXHI/uY
f9R7ms8I5TNHz0rkhuc/UlQm7EWxCjf4w8Lsj4tZwLIY3UvwPg0iJoXur8lAUVxZ
Wc7WbxqMouiXP+NjbKOLYIAvueAS
-----END CERTIFICATE-----
Generated at Mon Apr 28 16:53:35 2025 by rpki-client