Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/323830343a3838303a666330303a3a2f33382d3338203d3e203238323730.roa
File: 323830343a3838303a666330303a3a2f33382d3338203d3e203238323730.roa (raw, json)
Hash identifier: K6oWZzC3cv9zIDZvNTl1e5Uga1lmvzvBn8P+CIfJZ68=
Subject key identifier: CF:F2:F9:E9:AD:D5:E8:3C:A4:76:23:23:A4:70:01:38:35:B0:7D:36
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 106376A1AFB70EBCDA3C96AC3AFAD71C45CDE5A5
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/323830343a3838303a666330303a3a2f33382d3338203d3e203238323730.roa
Signing time: Thu 07 Nov 2024 20:40:12 +0000
ROA not before: Thu 07 Nov 2024 20:35:12 +0000
ROA not after: Thu 06 Nov 2025 20:40:12 +0000
asID: 28270
IP address blocks: 2804:880:fc00::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:63:76:a1:af:b7:0e:bc:da:3c:96:ac:3a:fa:d7:1c:45:cd:e5:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:12 2024 GMT
Not After : Nov 6 20:40:12 2025 GMT
Subject: CN=CFF2F9E9ADD5E83CA4762323A470013835B07D36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9b:12:a9:c6:56:81:1b:cd:9b:04:b8:90:dd:
14:3b:58:67:d9:21:17:5e:03:50:2d:be:a7:5a:00:
a2:ee:91:8d:4d:6f:5e:b5:19:bf:18:e0:02:1e:59:
56:c7:c1:8d:37:cf:c9:37:ba:b3:17:8d:c7:b8:96:
78:91:96:34:72:c0:1f:b5:22:23:eb:7b:ab:8a:5e:
40:fb:22:89:d8:4b:ed:30:45:8e:39:70:f4:1d:84:
35:0e:ba:36:a7:48:5c:4c:31:8d:c9:ab:de:02:8f:
dc:b5:ed:84:f0:13:4f:10:54:16:9b:09:e2:77:5a:
ff:65:14:61:ce:86:9f:f9:34:d8:56:c3:cc:ee:0a:
a7:77:37:2e:55:b4:91:f5:12:6e:f1:e7:b9:26:fb:
7f:51:8d:90:aa:ad:0e:0e:c7:1f:45:88:99:15:ca:
9b:9a:25:26:d8:74:42:b6:b6:a5:dd:70:4c:90:f9:
32:58:ca:45:62:cc:81:02:62:ef:56:43:b6:5d:79:
e7:17:3f:2f:c7:08:e3:ad:74:a3:7b:d5:c0:c9:e4:
14:96:b0:a2:07:a0:32:39:3a:7a:c5:30:aa:5b:5e:
52:1f:15:08:d1:c5:2c:fb:cb:36:70:72:28:3c:ac:
8c:1a:76:31:f3:5c:0f:7c:39:d9:d5:34:5e:12:dc:
da:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F2:F9:E9:AD:D5:E8:3C:A4:76:23:23:A4:70:01:38:35:B0:7D:36
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/323830343a3838303a666330303a3a2f33382d3338203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:880:fc00::/38
Signature Algorithm: sha256WithRSAEncryption
8a:6b:25:1e:e8:04:ac:2e:c5:4d:11:4f:1f:9b:3d:32:5c:b7:
40:b2:83:c2:7a:87:10:81:10:e1:0c:ab:9c:c4:a7:e1:4c:96:
ab:0a:ac:7b:dc:1d:9d:d8:5f:cc:2d:82:6f:f8:20:5b:f7:52:
9c:4a:c2:e5:80:6a:fa:7a:1e:83:d9:97:48:3d:c0:0f:4a:68:
40:f3:d7:a7:a1:58:61:da:a7:c3:1e:60:d8:09:a3:09:41:48:
d7:ee:03:3c:5c:d7:9f:82:87:09:94:7a:71:d8:29:d6:c1:41:
16:e3:e2:ed:93:6d:35:4c:21:9a:da:86:80:3c:5f:82:67:5b:
9f:47:c3:18:31:25:10:b5:b4:7e:f5:fa:1e:90:90:a9:e8:1e:
11:30:5b:ae:c3:f8:c3:69:11:7f:fe:c8:63:ed:fb:60:6f:8c:
76:9b:81:f1:7c:93:77:1f:5a:bb:5e:fe:6d:eb:e7:3d:30:95:
c2:8e:64:2e:50:30:0c:b4:e3:00:c6:df:bd:fd:32:95:35:3a:
80:5e:e6:31:b2:1d:c7:79:4a:49:2d:6d:a8:db:c1:fe:a4:0e:
fd:16:a0:22:4b:a2:eb:4a:08:05:d8:96:8d:e8:e2:63:b4:69:
fb:e4:83:2d:26:de:fd:f6:3f:8d:45:cb:f5:52:36:5b:7c:2e:
22:d2:05:40
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUEGN2oa+3DrzaPJasOvrXHEXN5aUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQThGOTlDMkVFMEJBMUQzN0NDN0FCRTdDNTA4OTg0QkFB
MEIwOEQ1QzAeFw0yNDExMDcyMDM1MTJaFw0yNTExMDYyMDQwMTJaMDMxMTAvBgNV
BAMTKENGRjJGOUU5QURENUU4M0NBNDc2MjMyM0E0NzAwMTM4MzVCMDdEMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3mxKpxlaBG82bBLiQ3RQ7WGfZ
IRdeA1AtvqdaAKLukY1Nb161Gb8Y4AIeWVbHwY03z8k3urMXjce4lniRljRywB+1
IiPre6uKXkD7IonYS+0wRY45cPQdhDUOujanSFxMMY3Jq94Cj9y17YTwE08QVBab
CeJ3Wv9lFGHOhp/5NNhWw8zuCqd3Ny5VtJH1Em7x57km+39RjZCqrQ4Oxx9FiJkV
ypuaJSbYdEK2tqXdcEyQ+TJYykVizIECYu9WQ7ZdeecXPy/HCOOtdKN71cDJ5BSW
sKIHoDI5OnrFMKpbXlIfFQjRxSz7yzZwcig8rIwadjHzXA98OdnVNF4S3Nr5AgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQUz/L56a3V6DykdiMjpHABODWwfTYwHwYDVR0j
BBgwFoAUqPmcLuC6HTfMer58UImEuqCwjVwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC9BOEY5OUMyRUUwQkExRDM3Q0M3QUJFN0M1MDg5ODRCQUEwQjA4RDVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4Rjk5QzJFRTBCQTFEMzdD
QzdBQkU3QzUwODk4NEJBQTBCMDhENUMuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzIzODMwMzQzYTM4MzgzMDNhNjY2MzMwMzAzYTNhMmYzMzM4MmQzMzM4MjAzZDNl
MjAzMjM4MzIzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCKAQIgPwwDQYJKoZIhvcNAQELBQADggEB
AIprJR7oBKwuxU0RTx+bPTJct0Cyg8J6hxCBEOEMq5zEp+FMlqsKrHvcHZ3YX8wt
gm/4IFv3UpxKwuWAavp6HoPZl0g9wA9KaEDz16ehWGHap8MeYNgJowlBSNfuAzxc
15+ChwmUenHYKdbBQRbj4u2TbTVMIZrahoA8X4JnW59HwxgxJRC1tH71+h6QkKno
HhEwW67D+MNpEX/+yGPt+2BvjHabgfF8k3cfWrte/m3r5z0wlcKOZC5QMAy04wDG
3739MpU1OoBe5jGyHcd5Skktbajbwf6kDv0WoCJLoutKCAXYlo3o4mO0afvkgy0m
3v32P41Fy/VSNlt8LiLSBUA=
-----END CERTIFICATE-----
Generated at Tue May 13 21:41:31 2025 by rpki-client