Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HCw6Q9jetNi2v9dF2SWPrV58kXcRh7ot6YKgjjGhNCVh/0/323830343a313931633a3a2f33322d3334203d3e203532363431.roa
File: 323830343a313931633a3a2f33322d3334203d3e203532363431.roa (raw, json)
Hash identifier: L/m8jQy8qVAV1eDlrrcnBaH/nrD3485XT8cCErC/zkQ=
Subject key identifier: 4F:9C:E3:3F:CD:05:4D:EC:BF:C1:F5:97:E8:BD:1A:9E:4F:96:84:97
Certificate issuer: /CN=3BC35960C45E5F0F3B6EDEF99F631912B34FA4C5
Certificate serial: 47D0CE125DE0221B2856F93FF19F43C476B7517C
Authority key identifier: 3B:C3:59:60:C4:5E:5F:0F:3B:6E:DE:F9:9F:63:19:12:B3:4F:A4:C5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BC35960C45E5F0F3B6EDEF99F631912B34FA4C5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HCw6Q9jetNi2v9dF2SWPrV58kXcRh7ot6YKgjjGhNCVh/0/323830343a313931633a3a2f33322d3334203d3e203532363431.roa
Signing time: Fri 24 Jan 2025 15:24:11 +0000
ROA not before: Fri 24 Jan 2025 15:19:11 +0000
ROA not after: Fri 23 Jan 2026 15:24:11 +0000
asID: 52641
IP address blocks: 2804:191c::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:d0:ce:12:5d:e0:22:1b:28:56:f9:3f:f1:9f:43:c4:76:b7:51:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BC35960C45E5F0F3B6EDEF99F631912B34FA4C5
Validity
Not Before: Jan 24 15:19:11 2025 GMT
Not After : Jan 23 15:24:11 2026 GMT
Subject: CN=4F9CE33FCD054DECBFC1F597E8BD1A9E4F968497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:64:5f:51:d2:d4:76:88:36:62:d4:18:c1:29:
95:33:d3:c8:a6:ab:33:2a:c2:4b:4b:47:77:7f:4b:
f4:a2:e8:0d:0a:ce:99:23:2d:38:c9:2d:d2:7c:6c:
6f:33:d9:2b:3b:04:d8:21:dc:c0:ee:8a:ae:27:22:
0a:2f:df:16:1b:bb:7a:06:57:fc:73:c7:63:de:96:
6b:85:47:2a:57:1c:e0:38:ac:55:f2:46:f6:c3:46:
6e:b6:c9:c4:0e:0e:1b:1a:80:9f:55:ec:a1:af:3c:
ee:47:1f:28:fd:93:c5:d1:58:94:bd:35:c3:53:75:
f8:cb:83:95:8d:8c:a0:b3:7d:3d:ac:c0:17:e8:6c:
64:97:62:d9:b8:f7:a0:54:91:c6:40:89:a8:bf:69:
ec:18:fc:40:54:d8:b4:fd:ef:19:b0:de:3d:99:35:
56:7f:38:ad:6a:09:77:a5:16:d3:e0:19:0f:db:36:
94:b6:68:b9:1e:0b:f2:f4:eb:57:f7:f4:57:0a:2f:
f6:81:c5:c1:a5:ab:cc:0b:4b:c0:75:84:91:9e:9e:
d5:08:85:62:b4:b8:9a:56:bf:ef:3e:43:92:bc:7d:
9d:ae:6c:60:4d:9e:72:24:a4:82:63:19:7e:66:49:
b6:d1:6b:90:fc:bd:45:3e:cc:55:ca:57:3d:c6:d7:
12:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9C:E3:3F:CD:05:4D:EC:BF:C1:F5:97:E8:BD:1A:9E:4F:96:84:97
X509v3 Authority Key Identifier:
keyid:3B:C3:59:60:C4:5E:5F:0F:3B:6E:DE:F9:9F:63:19:12:B3:4F:A4:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HCw6Q9jetNi2v9dF2SWPrV58kXcRh7ot6YKgjjGhNCVh/0/3BC35960C45E5F0F3B6EDEF99F631912B34FA4C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BC35960C45E5F0F3B6EDEF99F631912B34FA4C5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCw6Q9jetNi2v9dF2SWPrV58kXcRh7ot6YKgjjGhNCVh/0/323830343a313931633a3a2f33322d3334203d3e203532363431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:191c::/32
Signature Algorithm: sha256WithRSAEncryption
83:e4:7b:be:71:89:c3:ce:29:ed:8d:c5:23:a0:7b:5a:33:82:
58:ff:96:b6:de:cb:9e:d8:2e:14:6f:e9:58:df:75:45:2c:71:
e1:33:a7:60:8b:01:8e:8f:fa:de:e7:72:b0:5f:cf:5c:23:8c:
84:dc:49:00:07:73:87:c9:6a:44:fc:d5:30:a3:49:36:dc:3a:
d9:8d:fd:7a:51:7a:1e:31:16:d9:42:7a:2b:27:f6:70:68:50:
cb:4b:92:a6:fe:ec:10:4e:c3:fb:4b:96:55:59:72:d7:d3:3d:
3d:8a:09:ec:02:6e:a2:ef:78:54:5f:71:42:3e:d6:0c:1d:e9:
83:f2:ff:35:43:7d:e1:b1:61:3e:b1:3f:a6:f1:96:17:5e:34:
0b:3f:54:bb:6e:eb:b1:e1:cd:82:7d:a0:83:cb:8d:55:8a:e1:
8b:a6:8a:e1:58:3a:4b:fc:6a:ff:08:76:5f:af:68:f5:69:2b:
bb:ac:09:71:88:12:a6:fb:11:40:36:82:25:17:6f:33:33:4b:
8a:e2:1f:c9:bb:22:e2:04:52:1f:b5:a6:e0:67:38:76:a1:52:
87:66:97:3e:fc:c3:92:06:9c:a4:ab:01:a3:08:6f:2c:19:88:
5c:0d:20:a0:ed:a9:2e:06:d2:55:30:4b:67:b9:5a:bb:08:a2:
d2:59:8d:6d
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUR9DOEl3gIhsoVvk/8Z9DxHa3UXwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0JDMzU5NjBDNDVFNUYwRjNCNkVERUY5OUY2MzE5MTJC
MzRGQTRDNTAeFw0yNTAxMjQxNTE5MTFaFw0yNjAxMjMxNTI0MTFaMDMxMTAvBgNV
BAMTKDRGOUNFMzNGQ0QwNTRERUNCRkMxRjU5N0U4QkQxQTlFNEY5Njg0OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxZF9R0tR2iDZi1BjBKZUz08im
qzMqwktLR3d/S/Si6A0KzpkjLTjJLdJ8bG8z2Ss7BNgh3MDuiq4nIgov3xYbu3oG
V/xzx2PelmuFRypXHOA4rFXyRvbDRm62ycQODhsagJ9V7KGvPO5HHyj9k8XRWJS9
NcNTdfjLg5WNjKCzfT2swBfobGSXYtm496BUkcZAiai/aewY/EBU2LT97xmw3j2Z
NVZ/OK1qCXelFtPgGQ/bNpS2aLkeC/L061f39FcKL/aBxcGlq8wLS8B1hJGentUI
hWK0uJpWv+8+Q5K8fZ2ubGBNnnIkpIJjGX5mSbbRa5D8vUU+zFXKVz3G1xInAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUT5zjP80FTey/wfWX6L0ank+WhJcwHwYDVR0j
BBgwFoAUO8NZYMReXw87bt75n2MZErNPpMUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEN3NlE5amV0TmkydjlkRjJTV1ByVjU4a1hjUmg3b3Q2WUtnampHaE5D
VmgvMC8zQkMzNTk2MEM0NUU1RjBGM0I2RURFRjk5RjYzMTkxMkIzNEZBNEM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNCQzM1OTYwQzQ1RTVGMEYz
QjZFREVGOTlGNjMxOTEyQjM0RkE0QzUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hDdzZROWpldE5pMnY5ZEYyU1dQclY1OGtYY1JoN290NllLZ2pqR2hOQ1ZoLzAv
MzIzODMwMzQzYTMxMzkzMTYzM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzUzMjM2
MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEGRwwDQYJKoZIhvcNAQELBQADggEBAIPke75xicPO
Ke2NxSOge1ozglj/lrbey57YLhRv6VjfdUUsceEzp2CLAY6P+t7ncrBfz1wjjITc
SQAHc4fJakT81TCjSTbcOtmN/XpReh4xFtlCeisn9nBoUMtLkqb+7BBOw/tLllVZ
ctfTPT2KCewCbqLveFRfcUI+1gwd6YPy/zVDfeGxYT6xP6bxlhdeNAs/VLtu67Hh
zYJ9oIPLjVWK4YumiuFYOkv8av8Idl+vaPVpK7usCXGIEqb7EUA2giUXbzMzS4ri
H8m7IuIEUh+1puBnOHahUodmlz78w5IGnKSrAaMIbywZiFwNIKDtqS4G0lUwS2e5
WrsIotJZjW0=
-----END CERTIFICATE-----
Generated at Tue Apr 29 13:11:27 2025 by rpki-client