Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/323830343a336230633a3a2f33322d3333203d3e20323636313236.roa
File: 323830343a336230633a3a2f33322d3333203d3e20323636313236.roa (raw, json)
Hash identifier: b78eH9iE1lP2ssDkb0TNloMMWzmhsxuPlTJnnpjNVZo=
Subject key identifier: 31:C8:E2:9C:E1:87:FB:80:15:6C:1C:98:EC:82:7A:CF:9F:F6:55:7E
Certificate issuer: /CN=A8D522AC61898562D95EA2A986B1B1C2668D51B1
Certificate serial: 5C8A47A14169EAAA5883E530E53F101685B58D6F
Authority key identifier: A8:D5:22:AC:61:89:85:62:D9:5E:A2:A9:86:B1:B1:C2:66:8D:51:B1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8D522AC61898562D95EA2A986B1B1C2668D51B1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/323830343a336230633a3a2f33322d3333203d3e20323636313236.roa
Signing time: Thu 26 Dec 2024 22:13:39 +0000
ROA not before: Thu 26 Dec 2024 22:08:39 +0000
ROA not after: Thu 25 Dec 2025 22:13:39 +0000
asID: 266126
IP address blocks: 2804:3b0c::/32 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:8a:47:a1:41:69:ea:aa:58:83:e5:30:e5:3f:10:16:85:b5:8d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8D522AC61898562D95EA2A986B1B1C2668D51B1
Validity
Not Before: Dec 26 22:08:39 2024 GMT
Not After : Dec 25 22:13:39 2025 GMT
Subject: CN=31C8E29CE187FB80156C1C98EC827ACF9FF6557E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:74:45:15:9a:68:66:52:42:09:51:fe:34:36:
1c:5f:7d:d3:d4:f2:98:20:a0:3d:26:79:7a:5e:4d:
ce:57:72:c4:a6:5b:f6:74:70:a6:92:7e:bb:89:05:
76:c5:82:0b:d2:b2:fe:b4:56:37:df:59:68:11:c3:
a5:f4:64:93:38:09:64:e5:09:ce:d7:b7:d5:e8:78:
38:81:ab:45:dc:ad:df:24:49:f2:d4:70:49:f9:4a:
66:bf:9b:68:d0:83:fe:51:f5:98:a5:2d:3d:61:ed:
88:c6:fc:07:1c:39:bd:30:11:10:0e:87:6e:ae:cc:
0d:c9:65:25:92:f9:f9:b6:8a:28:b2:1e:75:25:a9:
e2:88:a4:be:48:09:cf:c3:36:3c:87:42:d3:46:3b:
9e:68:7d:15:29:01:49:2e:ec:7b:73:5e:5e:a3:88:
b7:3d:0a:f2:08:68:a9:11:1b:47:fd:7a:2b:aa:73:
52:f5:98:5b:3c:46:2d:38:39:ea:68:0c:58:4d:60:
c8:c5:af:05:1f:6f:10:91:a4:07:8c:08:bc:3c:b9:
5f:8c:e2:77:da:72:fd:33:bf:76:15:d3:66:40:4e:
e9:58:ef:78:a7:f9:44:96:77:29:79:83:84:e7:5c:
01:bf:87:98:6a:cd:e8:61:fe:1b:9a:c1:2e:0b:b8:
54:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C8:E2:9C:E1:87:FB:80:15:6C:1C:98:EC:82:7A:CF:9F:F6:55:7E
X509v3 Authority Key Identifier:
keyid:A8:D5:22:AC:61:89:85:62:D9:5E:A2:A9:86:B1:B1:C2:66:8D:51:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/A8D522AC61898562D95EA2A986B1B1C2668D51B1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8D522AC61898562D95EA2A986B1B1C2668D51B1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/323830343a336230633a3a2f33322d3333203d3e20323636313236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3b0c::/32
Signature Algorithm: sha256WithRSAEncryption
9e:c5:ba:3b:c6:3f:e7:ec:af:39:a3:fa:29:09:23:0d:4c:c1:
2f:d3:28:ca:1b:1b:69:78:1a:19:eb:31:0a:43:40:e5:21:84:
6a:58:1f:3f:36:0e:40:da:c9:a6:dc:39:47:ee:4a:43:2b:f8:
0a:65:f0:ee:c8:23:9d:7e:f0:72:9b:c3:5c:46:7c:46:d5:30:
66:db:57:02:91:80:38:3a:50:26:e6:88:0b:3d:82:02:6f:a7:
94:b0:94:c2:35:f9:ba:bf:54:d0:65:dd:41:3e:58:09:b7:01:
04:76:22:2a:a5:10:65:e9:e8:ea:e4:32:42:d4:ba:06:78:61:
ad:da:5b:db:d0:8c:8f:9c:9e:0f:a8:90:1b:e5:22:f9:dd:4f:
b6:bd:7b:e7:9f:d1:c9:dd:71:00:c2:ef:44:d8:11:c4:f7:23:
70:db:9c:3b:8f:8b:f7:99:65:5f:b3:4c:50:2e:a6:6a:8e:d8:
b2:84:34:d3:e1:fe:43:7a:00:db:9d:2b:d8:ca:57:23:b9:c4:
74:56:0c:50:51:85:fe:47:24:1e:f5:ee:80:87:07:91:b8:88:
dc:50:2e:25:8a:81:37:de:e4:6f:4e:09:d5:10:a8:f4:72:f8:
c3:b6:a9:30:d5:d5:9a:88:3d:20:c0:39:e9:40:28:b9:c9:ba:
a3:3f:4c:c6
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUXIpHoUFp6qpYg+Uw5T8QFoW1jW8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQThENTIyQUM2MTg5ODU2MkQ5NUVBMkE5ODZCMUIxQzI2
NjhENTFCMTAeFw0yNDEyMjYyMjA4MzlaFw0yNTEyMjUyMjEzMzlaMDMxMTAvBgNV
BAMTKDMxQzhFMjlDRTE4N0ZCODAxNTZDMUM5OEVDODI3QUNGOUZGNjU1N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEdEUVmmhmUkIJUf40NhxffdPU
8pggoD0meXpeTc5XcsSmW/Z0cKaSfruJBXbFggvSsv60VjffWWgRw6X0ZJM4CWTl
Cc7Xt9XoeDiBq0Xcrd8kSfLUcEn5Sma/m2jQg/5R9ZilLT1h7YjG/AccOb0wERAO
h26uzA3JZSWS+fm2iiiyHnUlqeKIpL5ICc/DNjyHQtNGO55ofRUpAUku7HtzXl6j
iLc9CvIIaKkRG0f9eiuqc1L1mFs8Ri04OepoDFhNYMjFrwUfbxCRpAeMCLw8uV+M
4nfacv0zv3YV02ZATulY73in+USWdyl5g4TnXAG/h5hqzehh/huawS4LuFTnAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUMcjinOGH+4AVbByY7IJ6z5/2VX4wHwYDVR0j
BBgwFoAUqNUirGGJhWLZXqKphrGxwmaNUbEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFRIeUZTSmhFSDM5b01yaXVQSGNZanUzcUNiaEN3RFRIVGVUd1BNcG9j
YlAvMC9BOEQ1MjJBQzYxODk4NTYyRDk1RUEyQTk4NkIxQjFDMjY2OEQ1MUIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4RDUyMkFDNjE4OTg1NjJE
OTVFQTJBOTg2QjFCMUMyNjY4RDUxQjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hUSHlGU0poRUgzOW9Ncml1UEhjWWp1M3FDYmhDd0RUSFRlVHdQTXBvY2JQLzAv
MzIzODMwMzQzYTMzNjIzMDYzM2EzYTJmMzMzMjJkMzMzMzIwM2QzZTIwMzIzNjM2
MzEzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ7DDANBgkqhkiG9w0BAQsFAAOCAQEAnsW6O8Y/
5+yvOaP6KQkjDUzBL9MoyhsbaXgaGesxCkNA5SGEalgfPzYOQNrJptw5R+5KQyv4
CmXw7sgjnX7wcpvDXEZ8RtUwZttXApGAODpQJuaICz2CAm+nlLCUwjX5ur9U0GXd
QT5YCbcBBHYiKqUQZeno6uQyQtS6Bnhhrdpb29CMj5yeD6iQG+Ui+d1Ptr1755/R
yd1xAMLvRNgRxPcjcNucO4+L95llX7NMUC6mao7YsoQ00+H+Q3oA250r2MpXI7nE
dFYMUFGF/kckHvXugIcHkbiI3FAuJYqBN97kb04J1RCo9HL4w7apMNXVmog9IMA5
6UAoucm6oz9Mxg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:45:48 2025 by rpki-client