Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/323830343a373361633a3a2f33322d3338203d3e20323730393330.roa
File: 323830343a373361633a3a2f33322d3338203d3e20323730393330.roa (raw, json)
Hash identifier: owzf7zzIDIr+t21Qf2WHxxQGHjzqMIe2UrtHq4PUUhc=
Subject key identifier: D0:32:5F:1A:AE:63:36:9C:6B:C9:81:4D:08:C3:0D:9C:D1:F4:27:CB
Certificate issuer: /CN=1EE4D67FA010E491BFEDFB7AA592F824EBBC5208
Certificate serial: 6C1C5FE2F9C81BB9E557EE26687F7B86E0F1F054
Authority key identifier: 1E:E4:D6:7F:A0:10:E4:91:BF:ED:FB:7A:A5:92:F8:24:EB:BC:52:08
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EE4D67FA010E491BFEDFB7AA592F824EBBC5208.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/323830343a373361633a3a2f33322d3338203d3e20323730393330.roa
Signing time: Tue 04 Mar 2025 14:41:49 +0000
ROA not before: Tue 04 Mar 2025 14:36:49 +0000
ROA not after: Tue 03 Mar 2026 14:41:49 +0000
asID: 270930
IP address blocks: 2804:73ac::/32 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:1c:5f:e2:f9:c8:1b:b9:e5:57:ee:26:68:7f:7b:86:e0:f1:f0:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1EE4D67FA010E491BFEDFB7AA592F824EBBC5208
Validity
Not Before: Mar 4 14:36:49 2025 GMT
Not After : Mar 3 14:41:49 2026 GMT
Subject: CN=D0325F1AAE63369C6BC9814D08C30D9CD1F427CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fd:0a:45:d0:5d:60:cc:9e:65:dc:2b:41:ad:
14:ac:8b:14:14:d6:24:a7:48:a6:bb:a0:63:75:06:
4f:f0:a3:b5:4c:b4:3c:67:75:e2:1a:58:57:94:74:
33:14:34:44:1d:2b:db:9d:bd:4b:a1:ad:84:ac:6d:
15:61:4d:e2:c8:81:27:49:eb:1d:51:f3:36:45:83:
1d:a8:26:7f:f0:47:04:04:ec:15:62:5a:63:8b:0a:
64:64:18:6f:63:5a:bb:37:4d:97:c3:c0:1f:16:9a:
bc:f3:a6:6f:21:ee:c7:f7:60:f5:d3:58:d9:21:21:
da:73:c9:ba:c7:99:61:6e:7c:ae:ef:27:5d:66:81:
24:89:d3:57:ad:5f:7d:7c:31:28:f4:dc:16:a3:b8:
2a:7e:6d:23:c6:34:0d:49:c2:26:68:bb:54:ef:3f:
fa:b0:b6:57:98:c7:d8:b4:38:24:bb:7e:07:53:0e:
d2:22:6d:8d:01:5c:f3:e8:1a:af:7d:00:ce:ed:36:
90:6b:02:fd:cc:3d:00:17:c0:6f:d0:89:12:8c:ee:
18:51:be:af:66:7e:e9:7f:1e:83:05:a4:92:a5:a3:
7b:a9:f6:b2:8c:43:bc:87:62:f1:75:ca:f7:30:72:
e6:7f:5b:9f:c2:6d:a1:23:51:75:25:41:d9:22:0b:
94:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:32:5F:1A:AE:63:36:9C:6B:C9:81:4D:08:C3:0D:9C:D1:F4:27:CB
X509v3 Authority Key Identifier:
keyid:1E:E4:D6:7F:A0:10:E4:91:BF:ED:FB:7A:A5:92:F8:24:EB:BC:52:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/1EE4D67FA010E491BFEDFB7AA592F824EBBC5208.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EE4D67FA010E491BFEDFB7AA592F824EBBC5208.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/323830343a373361633a3a2f33322d3338203d3e20323730393330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:73ac::/32
Signature Algorithm: sha256WithRSAEncryption
84:b6:54:4a:ce:84:9f:17:76:a8:b8:d6:67:55:68:19:cf:be:
d4:1d:9c:9a:fc:c4:e4:59:15:47:d4:dc:ca:ad:36:c7:8b:6d:
99:88:39:af:ed:da:6d:cc:98:55:75:e7:6d:e9:61:89:ec:f2:
73:3d:a0:29:fb:bc:2f:24:d9:cd:66:98:ac:87:7f:7a:d1:35:
99:47:ae:fe:88:95:c8:8c:92:a2:3a:ff:5d:a8:34:05:8b:82:
15:b0:0b:27:40:68:ed:ae:f1:2d:ed:13:8f:18:92:c8:fd:3e:
5a:2e:09:cd:f6:b7:f3:91:79:13:2e:ef:ba:03:57:bd:d1:a2:
5d:9d:ee:16:5a:7f:76:45:ba:48:03:41:e0:6e:6f:1b:a7:21:
a2:90:f4:e8:b9:4d:16:b6:f3:30:52:e1:65:b0:89:b7:01:dd:
c4:ba:a0:1d:fe:14:08:eb:c9:ca:84:34:dc:fc:04:21:d0:ae:
7c:95:84:35:84:97:06:ef:3f:ca:bb:01:d3:89:0c:53:c3:b7:
58:01:38:94:0b:b8:58:4e:a9:9b:0e:8c:c7:ea:8d:b7:51:02:
bd:54:ee:3c:5d:14:9b:7a:9c:fc:7a:aa:9c:52:72:52:c2:90:
ac:34:22:1e:b2:06:04:63:1d:30:cc:b2:8b:f2:d7:7b:68:e4:
d0:63:dc:40
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUbBxf4vnIG7nlV+4maH97huDx8FQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUVFNEQ2N0ZBMDEwRTQ5MUJGRURGQjdBQTU5MkY4MjRF
QkJDNTIwODAeFw0yNTAzMDQxNDM2NDlaFw0yNjAzMDMxNDQxNDlaMDMxMTAvBgNV
BAMTKEQwMzI1RjFBQUU2MzM2OUM2QkM5ODE0RDA4QzMwRDlDRDFGNDI3Q0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK/QpF0F1gzJ5l3CtBrRSsixQU
1iSnSKa7oGN1Bk/wo7VMtDxndeIaWFeUdDMUNEQdK9udvUuhrYSsbRVhTeLIgSdJ
6x1R8zZFgx2oJn/wRwQE7BViWmOLCmRkGG9jWrs3TZfDwB8Wmrzzpm8h7sf3YPXT
WNkhIdpzybrHmWFufK7vJ11mgSSJ01etX318MSj03BajuCp+bSPGNA1JwiZou1Tv
P/qwtleYx9i0OCS7fgdTDtIibY0BXPPoGq99AM7tNpBrAv3MPQAXwG/QiRKM7hhR
vq9mful/HoMFpJKlo3up9rKMQ7yHYvF1yvcwcuZ/W5/CbaEjUXUlQdkiC5RvAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU0DJfGq5jNpxryYFNCMMNnNH0J8swHwYDVR0j
BBgwFoAUHuTWf6AQ5JG/7ft6pZL4JOu8UggwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzhOQXNXaHBZR0Z1Y0sxcGVjQWV3TkZocTg5TmgzM0duakFCYlFzQzdr
QUEvMC8xRUU0RDY3RkEwMTBFNDkxQkZFREZCN0FBNTkyRjgyNEVCQkM1MjA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFFRTRENjdGQTAxMEU0OTFC
RkVERkI3QUE1OTJGODI0RUJCQzUyMDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c4TkFzV2hwWUdGdWNLMXBlY0Fld05GaHE4OU5oMzNHbmpBQmJRc0M3a0FBLzAv
MzIzODMwMzQzYTM3MzM2MTYzM2EzYTJmMzMzMjJkMzMzODIwM2QzZTIwMzIzNzMw
MzkzMzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARzrDANBgkqhkiG9w0BAQsFAAOCAQEAhLZUSs6E
nxd2qLjWZ1VoGc++1B2cmvzE5FkVR9Tcyq02x4ttmYg5r+3abcyYVXXnbelhiezy
cz2gKfu8LyTZzWaYrId/etE1mUeu/oiVyIySojr/Xag0BYuCFbALJ0Bo7a7xLe0T
jxiSyP0+Wi4Jzfa385F5Ey7vugNXvdGiXZ3uFlp/dkW6SANB4G5vG6chopD06LlN
FrbzMFLhZbCJtwHdxLqgHf4UCOvJyoQ03PwEIdCufJWENYSXBu8/yrsB04kMU8O3
WAE4lAu4WE6pmw6Mx+qNt1ECvVTuPF0Um3qc/HqqnFJyUsKQrDQiHrIGBGMdMMyy
i/LXe2jk0GPcQA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:26:43 2025 by rpki-client