Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/1/323830343a353734303a3a2f33322d3332203d3e20323638303534.roa
File: 323830343a353734303a3a2f33322d3332203d3e20323638303534.roa (raw, json)
Hash identifier: NqyuEqySX2bu1YxHZeUaS8vtKs1N0Iwy2I9K761DusY=
Subject key identifier: 4C:D0:56:5F:B4:97:1D:72:F2:3A:AA:6D:35:1A:3D:F4:E1:26:B1:2A
Certificate issuer: /CN=A944FE7AA3B4B99B28426E9A7E20124A50450D12
Certificate serial: 1A8142A84181D6A2DBC9640537848A4DC4C9C466
Authority key identifier: A9:44:FE:7A:A3:B4:B9:9B:28:42:6E:9A:7E:20:12:4A:50:45:0D:12
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A944FE7AA3B4B99B28426E9A7E20124A50450D12.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/1/323830343a353734303a3a2f33322d3332203d3e20323638303534.roa
Signing time: Sat 08 Mar 2025 16:03:28 +0000
ROA not before: Sat 08 Mar 2025 15:58:28 +0000
ROA not after: Sat 07 Mar 2026 16:03:28 +0000
asID: 268054
IP address blocks: 2804:5740::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:81:42:a8:41:81:d6:a2:db:c9:64:05:37:84:8a:4d:c4:c9:c4:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A944FE7AA3B4B99B28426E9A7E20124A50450D12
Validity
Not Before: Mar 8 15:58:28 2025 GMT
Not After : Mar 7 16:03:28 2026 GMT
Subject: CN=4CD0565FB4971D72F23AAA6D351A3DF4E126B12A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5e:63:d5:95:33:49:99:45:2f:e1:58:e1:9f:
09:23:52:87:ac:bf:d2:26:b8:73:66:2f:37:be:cf:
17:7d:f3:65:b6:e6:f9:b3:90:51:84:70:4f:24:c3:
e4:39:d8:3a:3a:91:66:24:d1:d6:b1:31:6a:2b:12:
9c:a7:0f:f4:af:11:ce:10:5a:49:f0:5e:e5:f3:ad:
9b:20:50:01:40:a1:d3:e3:3a:aa:fd:53:27:e7:24:
c2:8e:f1:8f:c9:55:d4:a4:2a:4c:25:4d:66:e1:fb:
28:b5:94:c5:b7:f4:64:e0:82:c8:85:fe:0c:33:cf:
e5:be:75:22:61:b6:67:ad:77:30:1b:66:59:09:5d:
a4:a7:f4:d8:72:dc:45:fb:4f:b7:d2:c8:14:f8:45:
b5:9c:4c:1d:aa:d4:2e:5b:59:3b:26:69:6a:e0:83:
a8:27:c1:14:47:a8:b6:ff:77:5a:6d:88:99:93:9d:
a5:ec:85:4b:53:8e:ac:80:88:08:4e:7c:8e:ea:1c:
3e:c2:06:78:ea:18:37:18:cc:3f:8d:ef:6c:ee:fb:
60:6c:0b:c9:e0:8f:aa:36:36:c7:a1:b9:42:9e:21:
29:a1:69:2b:62:6d:7d:be:30:c0:cf:71:86:1d:aa:
69:94:be:82:51:6c:43:32:fa:bb:fa:6c:0b:ea:d7:
5e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D0:56:5F:B4:97:1D:72:F2:3A:AA:6D:35:1A:3D:F4:E1:26:B1:2A
X509v3 Authority Key Identifier:
keyid:A9:44:FE:7A:A3:B4:B9:9B:28:42:6E:9A:7E:20:12:4A:50:45:0D:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/1/A944FE7AA3B4B99B28426E9A7E20124A50450D12.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A944FE7AA3B4B99B28426E9A7E20124A50450D12.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/1/323830343a353734303a3a2f33322d3332203d3e20323638303534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5740::/32
Signature Algorithm: sha256WithRSAEncryption
3a:53:af:59:4c:f3:60:80:a5:0e:74:e5:1a:3f:67:47:34:0a:
06:90:c3:fb:d5:bf:e9:b2:2b:e1:f6:03:36:2e:4c:de:ff:63:
89:ac:61:8e:41:ab:37:37:76:ee:3b:e3:2a:7d:06:ba:e3:7f:
db:0a:fb:52:3d:d7:7f:8b:ba:3c:62:10:79:17:47:f2:09:71:
5d:f9:b8:2c:b7:3e:82:b0:37:24:40:77:94:29:5b:5f:52:c6:
e0:f3:e9:fd:f2:aa:b3:65:2a:21:52:ec:48:73:25:13:ce:39:
c5:3a:76:ed:e9:dd:c8:1c:57:3b:f6:96:e7:e5:e0:5d:fe:79:
4b:d0:99:f5:cf:96:df:1f:be:93:95:bf:3b:cc:b2:a3:31:c4:
35:cd:f5:80:f0:79:f7:79:14:cb:aa:32:16:f8:57:d3:17:f3:
08:50:4f:03:a9:5f:38:f1:28:55:33:9c:b5:7d:5b:0d:67:f7:
ca:64:5c:77:20:03:92:ee:39:33:4b:3e:72:41:9e:a8:7b:df:
32:9c:9d:5b:e2:c2:18:b3:96:7c:84:cf:f2:68:61:76:4e:09:
4d:01:7d:55:9c:8b:07:5d:68:a1:23:28:2a:48:a6:04:42:6d:
09:17:83:52:7f:71:31:b2:01:f0:9d:9e:b1:ef:05:e7:bb:ac:
69:66:f5:75
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUGoFCqEGB1qLbyWQFN4SKTcTJxGYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTk0NEZFN0FBM0I0Qjk5QjI4NDI2RTlBN0UyMDEyNEE1
MDQ1MEQxMjAeFw0yNTAzMDgxNTU4MjhaFw0yNjAzMDcxNjAzMjhaMDMxMTAvBgNV
BAMTKDRDRDA1NjVGQjQ5NzFENzJGMjNBQUE2RDM1MUEzREY0RTEyNkIxMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbXmPVlTNJmUUv4VjhnwkjUoes
v9ImuHNmLze+zxd982W25vmzkFGEcE8kw+Q52Do6kWYk0daxMWorEpynD/SvEc4Q
WknwXuXzrZsgUAFAodPjOqr9UyfnJMKO8Y/JVdSkKkwlTWbh+yi1lMW39GTggsiF
/gwzz+W+dSJhtmetdzAbZlkJXaSn9Nhy3EX7T7fSyBT4RbWcTB2q1C5bWTsmaWrg
g6gnwRRHqLb/d1ptiJmTnaXshUtTjqyAiAhOfI7qHD7CBnjqGDcYzD+N72zu+2Bs
C8ngj6o2NsehuUKeISmhaStibX2+MMDPcYYdqmmUvoJRbEMy+rv6bAvq1159AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUTNBWX7SXHXLyOqptNRo99OEmsSowHwYDVR0j
BBgwFoAUqUT+eqO0uZsoQm6afiASSlBFDRIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlRSVnYyeHM5VnlhZjhwejZ5M1pvMVNmUTFMVldncjJaaE5oajFEcjY1
TEYvMS9BOTQ0RkU3QUEzQjRCOTlCMjg0MjZFOUE3RTIwMTI0QTUwNDUwRDEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5NDRGRTdBQTNCNEI5OUIy
ODQyNkU5QTdFMjAxMjRBNTA0NTBEMTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJUUlZ2MnhzOVZ5YWY4cHo2eTNabzFTZlExTFZXZ3IyWmhOaGoxRHI2NUxGLzEv
MzIzODMwMzQzYTM1MzczNDMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzAzNTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARXQDANBgkqhkiG9w0BAQsFAAOCAQEAOlOvWUzz
YIClDnTlGj9nRzQKBpDD+9W/6bIr4fYDNi5M3v9jiaxhjkGrNzd27jvjKn0GuuN/
2wr7Uj3Xf4u6PGIQeRdH8glxXfm4LLc+grA3JEB3lClbX1LG4PPp/fKqs2UqIVLs
SHMlE845xTp27endyBxXO/aW5+XgXf55S9CZ9c+W3x++k5W/O8yyozHENc31gPB5
93kUy6oyFvhX0xfzCFBPA6lfOPEoVTOctX1bDWf3ymRcdyADku45M0s+ckGeqHvf
MpydW+LCGLOWfITP8mhhdk4JTQF9VZyLB11ooSMoKkimBEJtCReDUn9xMbIB8J2e
se8F57usaWb1dQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 21:06:22 2025 by rpki-client