Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/1/323830343a3363303a3a2f33322d3438203d3e203238363035.roa
File: 323830343a3363303a3a2f33322d3438203d3e203238363035.roa (raw, json)
Hash identifier: nGlg6LWeagdw4yvA2MI0P2eaWYZ42ahQsC597OoQ9Zs=
Subject key identifier: 9E:E8:8F:2F:C3:B2:FD:F5:06:47:86:87:A4:42:1A:38:C8:37:DA:6E
Certificate issuer: /CN=8C9729F4127E02F7A44B4F2867186BDE45DBA2DB
Certificate serial: 163804704A13E95C76A577204417DA56DC37F89C
Authority key identifier: 8C:97:29:F4:12:7E:02:F7:A4:4B:4F:28:67:18:6B:DE:45:DB:A2:DB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C9729F4127E02F7A44B4F2867186BDE45DBA2DB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/1/323830343a3363303a3a2f33322d3438203d3e203238363035.roa
Signing time: Thu 06 Mar 2025 15:19:17 +0000
ROA not before: Thu 06 Mar 2025 15:14:17 +0000
ROA not after: Thu 05 Mar 2026 15:19:17 +0000
asID: 28605
IP address blocks: 2804:3c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:38:04:70:4a:13:e9:5c:76:a5:77:20:44:17:da:56:dc:37:f8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C9729F4127E02F7A44B4F2867186BDE45DBA2DB
Validity
Not Before: Mar 6 15:14:17 2025 GMT
Not After : Mar 5 15:19:17 2026 GMT
Subject: CN=9EE88F2FC3B2FDF506478687A4421A38C837DA6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:db:a7:79:e4:42:0e:be:10:b8:af:59:76:82:
16:95:0b:27:bc:a0:52:6b:c1:d1:92:4a:23:f7:bc:
6e:23:3a:8d:a4:9d:80:cb:86:1d:b9:3a:ad:e4:7a:
10:97:08:cd:77:4a:4c:32:00:ac:90:d8:c1:3c:c0:
0e:70:22:6f:c7:04:f3:3d:a0:1a:c7:22:98:02:1a:
3b:de:92:d0:78:60:a1:cd:ea:07:6c:fe:5d:e7:36:
b3:c9:20:76:c8:79:b7:92:b8:91:12:b9:10:27:23:
23:9b:fe:b3:25:eb:b1:27:66:af:73:78:86:65:f7:
ba:a8:a2:b4:98:4a:30:14:fd:15:c5:1b:e8:db:46:
55:bc:ab:58:e5:66:31:64:bf:76:35:06:ca:ec:eb:
17:e4:4d:9d:69:c7:c6:45:ab:84:fe:c5:9d:f1:a8:
0b:0b:dd:63:8a:77:74:8f:7c:41:6e:29:16:75:e5:
a6:69:ba:a6:56:72:99:c1:73:d1:ae:99:84:0d:45:
9e:1c:08:76:5e:62:00:41:48:c0:c5:10:da:48:0d:
25:9a:0a:5f:55:b1:3c:1b:e4:78:6a:82:e0:0b:7b:
15:a7:3b:3c:4f:8b:48:e9:56:b3:d4:63:0b:04:23:
1d:0b:f9:da:68:81:b7:b9:45:06:53:8a:12:78:97:
64:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E8:8F:2F:C3:B2:FD:F5:06:47:86:87:A4:42:1A:38:C8:37:DA:6E
X509v3 Authority Key Identifier:
keyid:8C:97:29:F4:12:7E:02:F7:A4:4B:4F:28:67:18:6B:DE:45:DB:A2:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/1/8C9729F4127E02F7A44B4F2867186BDE45DBA2DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C9729F4127E02F7A44B4F2867186BDE45DBA2DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/1/323830343a3363303a3a2f33322d3438203d3e203238363035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3c0::/32
Signature Algorithm: sha256WithRSAEncryption
e3:a9:63:4a:8d:9f:12:48:e6:b1:0f:d5:54:3b:ea:ef:ad:83:
33:bb:9b:a6:d4:e7:6a:6b:67:f6:b5:58:16:c3:57:78:4f:4a:
0f:90:2a:16:fa:33:53:1a:5f:c7:97:97:3e:7b:ff:4f:94:34:
ff:1f:d4:d8:93:9e:2b:7a:73:2c:58:46:5d:47:4a:5a:ad:9c:
9a:1a:b9:25:2b:27:16:90:d6:4e:e1:95:de:13:80:ed:09:c8:
c1:b0:a2:5c:d9:b7:72:fb:6d:d8:a7:e1:92:1e:6c:90:92:43:
36:1e:27:7c:0c:8d:37:93:29:90:80:c6:c5:b8:b5:9a:01:22:
8c:bf:ec:01:05:5b:38:37:87:c8:af:fa:e9:ac:59:8d:58:10:
74:05:39:67:ae:14:99:e4:7f:54:c9:6e:5f:6d:c5:e8:4e:dc:
5c:41:e1:a0:0e:fc:da:74:c1:fa:d5:11:61:a9:4e:17:95:3f:
1b:86:e2:12:1e:f9:bf:37:1c:1a:f2:dc:44:f1:68:a9:8b:e7:
0a:32:c3:a8:21:1e:07:80:6f:5f:ff:e9:ee:db:b9:d6:6a:60:
5e:66:7a:6c:21:38:96:2f:e8:17:c0:18:0a:99:9f:be:16:e7:
20:75:2d:ef:d4:89:74:e3:3b:1b:8d:e9:da:e1:60:58:ab:00:
6f:04:23:1d
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUFjgEcEoT6Vx2pXcgRBfaVtw3+JwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEM5NzI5RjQxMjdFMDJGN0E0NEI0RjI4NjcxODZCREU0
NURCQTJEQjAeFw0yNTAzMDYxNTE0MTdaFw0yNjAzMDUxNTE5MTdaMDMxMTAvBgNV
BAMTKDlFRTg4RjJGQzNCMkZERjUwNjQ3ODY4N0E0NDIxQTM4QzgzN0RBNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM26d55EIOvhC4r1l2ghaVCye8
oFJrwdGSSiP3vG4jOo2knYDLhh25Oq3kehCXCM13SkwyAKyQ2ME8wA5wIm/HBPM9
oBrHIpgCGjvektB4YKHN6gds/l3nNrPJIHbIebeSuJESuRAnIyOb/rMl67EnZq9z
eIZl97qoorSYSjAU/RXFG+jbRlW8q1jlZjFkv3Y1Bsrs6xfkTZ1px8ZFq4T+xZ3x
qAsL3WOKd3SPfEFuKRZ15aZpuqZWcpnBc9GumYQNRZ4cCHZeYgBBSMDFENpIDSWa
Cl9VsTwb5HhqguALexWnOzxPi0jpVrPUYwsEIx0L+dpogbe5RQZTihJ4l2S/AgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUnuiPL8Oy/fUGR4aHpEIaOMg32m4wHwYDVR0j
BBgwFoAUjJcp9BJ+AvekS08oZxhr3kXbotswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFo5OHdVNWk1Y005N0hoaTZVb2JQbWNiZE1IZVhlM0VXeUF2NFAxbVpI
eVMvMS84Qzk3MjlGNDEyN0UwMkY3QTQ0QjRGMjg2NzE4NkJERTQ1REJBMkRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDOTcyOUY0MTI3RTAyRjdB
NDRCNEYyODY3MTg2QkRFNDVEQkEyREIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRaOTh3VTVpNWNNOTdIaGk2VW9iUG1jYmRNSGVYZTNFV3lBdjRQMW1aSHlTLzEv
MzIzODMwMzQzYTMzNjMzMDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzgzNjMw
MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAPAMA0GCSqGSIb3DQEBCwUAA4IBAQDjqWNKjZ8SSOax
D9VUO+rvrYMzu5um1Odqa2f2tVgWw1d4T0oPkCoW+jNTGl/Hl5c+e/9PlDT/H9TY
k54renMsWEZdR0parZyaGrklKycWkNZO4ZXeE4DtCcjBsKJc2bdy+23Yp+GSHmyQ
kkM2Hid8DI03kymQgMbFuLWaASKMv+wBBVs4N4fIr/rprFmNWBB0BTlnrhSZ5H9U
yW5fbcXoTtxcQeGgDvzadMH61RFhqU4XlT8bhuISHvm/Nxwa8txE8Wipi+cKMsOo
IR4HgG9f/+nu27nWamBeZnpsITiWL+gXwBgKmZ++FucgdS3v1Il04zsbjena4WBY
qwBvBCMd
-----END CERTIFICATE-----
Generated at Sat May 10 18:22:46 2025 by rpki-client