Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/323830343a366166633a3a2f33322d3334203d3e20323730333730.roa
File: 323830343a366166633a3a2f33322d3334203d3e20323730333730.roa (raw, json)
Hash identifier: 55fkKjzYY4cFKrZUo6KorCBrFStzFQqMNCaqWAsKOv0=
Subject key identifier: 4A:B0:86:C7:E8:37:BE:A1:D1:2D:40:54:2F:2F:61:75:B9:32:9A:2D
Certificate issuer: /CN=C53FFF72C11B3649D5A047FD42D3DD312B1842CF
Certificate serial: 54CAF2D0973608D740FC44DA120BE145CFE8F2DB
Authority key identifier: C5:3F:FF:72:C1:1B:36:49:D5:A0:47:FD:42:D3:DD:31:2B:18:42:CF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/323830343a366166633a3a2f33322d3334203d3e20323730333730.roa
Signing time: Thu 06 Mar 2025 10:07:42 +0000
ROA not before: Thu 06 Mar 2025 10:02:42 +0000
ROA not after: Thu 05 Mar 2026 10:07:42 +0000
asID: 270370
IP address blocks: 2804:6afc::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:ca:f2:d0:97:36:08:d7:40:fc:44:da:12:0b:e1:45:cf:e8:f2:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C53FFF72C11B3649D5A047FD42D3DD312B1842CF
Validity
Not Before: Mar 6 10:02:42 2025 GMT
Not After : Mar 5 10:07:42 2026 GMT
Subject: CN=4AB086C7E837BEA1D12D40542F2F6175B9329A2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:36:48:cc:af:7a:8e:6f:3b:a3:e2:4b:2e:60:
2d:d6:81:a4:31:21:75:18:a3:15:54:34:4a:1e:54:
91:db:b2:7c:d0:27:cf:53:67:43:91:ab:9f:69:5b:
9f:1c:56:88:2c:04:50:64:64:ff:7c:02:05:d9:5d:
2d:98:37:aa:47:b2:4e:8c:eb:28:7f:01:ba:b0:22:
d6:aa:58:a1:2d:a4:d4:83:b3:31:d0:f2:31:fc:a6:
44:99:9f:45:12:08:1d:35:e9:09:52:87:62:4f:90:
e1:c5:26:18:af:8c:66:27:43:7c:19:e1:e3:20:01:
0c:ea:43:53:05:fd:6f:b7:29:fb:1c:c0:0d:2e:e9:
10:98:46:14:0c:de:d1:0b:8b:0d:e6:1d:61:05:2f:
23:e0:8e:be:5c:6e:8e:30:cb:2f:81:31:3d:b5:22:
dd:56:08:56:db:9e:84:82:8f:f9:47:34:09:5c:90:
60:25:9c:7f:09:ae:51:a1:3b:33:f8:c4:db:7d:2b:
01:17:a9:72:c6:f4:dd:16:50:5f:49:9b:27:f1:2e:
f8:bf:cd:32:ec:65:40:89:04:46:df:b2:f3:1e:ba:
d5:47:f2:dc:26:54:6e:d2:1f:6a:16:7d:60:4c:3f:
c4:b7:99:37:2c:17:43:76:81:d6:fd:ff:b3:58:7c:
55:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B0:86:C7:E8:37:BE:A1:D1:2D:40:54:2F:2F:61:75:B9:32:9A:2D
X509v3 Authority Key Identifier:
keyid:C5:3F:FF:72:C1:1B:36:49:D5:A0:47:FD:42:D3:DD:31:2B:18:42:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/323830343a366166633a3a2f33322d3334203d3e20323730333730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6afc::/32
Signature Algorithm: sha256WithRSAEncryption
0c:d6:e3:11:15:b0:48:86:71:fb:72:55:01:ec:4d:78:ec:1c:
77:b3:dd:9b:b9:78:50:72:86:9d:4a:fb:41:54:55:09:2a:47:
d5:9e:9c:e2:77:c0:e7:59:45:2b:77:35:d5:ce:ce:18:9d:9b:
d1:10:4a:8a:ee:a1:eb:71:07:50:ef:b3:ef:b0:a4:18:0c:bc:
12:dd:e6:46:b9:a5:04:68:22:00:19:16:b6:30:37:fc:81:94:
2c:9c:6a:34:cd:bd:94:e3:dd:ec:9a:0c:5f:00:45:60:58:fa:
95:5c:f7:54:04:8d:60:a4:04:a5:e4:71:51:a3:06:e6:33:fa:
f1:47:63:c8:4f:b9:72:74:e2:f9:10:6f:4c:b4:76:93:fb:ab:
f3:c2:0d:3d:6d:04:b4:1c:51:d7:ae:e7:8f:a9:0e:69:3a:cd:
f9:6a:58:c2:8d:a0:0a:a2:28:e3:23:65:99:34:e5:5b:6c:b7:
62:b2:c4:90:14:95:cb:6d:d8:a9:9a:d3:12:64:8d:80:f8:ac:
26:f2:49:64:5f:51:37:15:dc:19:cf:dd:32:72:71:86:56:89:
da:16:63:11:a9:b6:c7:25:71:32:4c:77:c3:46:47:7f:0e:04:
35:8b:72:e8:32:c3:1c:2c:09:e4:7e:4d:5d:89:f5:c4:df:eb:
4f:8f:5b:6e
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUVMry0Jc2CNdA/ETaEgvhRc/o8tswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzUzRkZGNzJDMTFCMzY0OUQ1QTA0N0ZENDJEM0REMzEy
QjE4NDJDRjAeFw0yNTAzMDYxMDAyNDJaFw0yNjAzMDUxMDA3NDJaMDMxMTAvBgNV
BAMTKDRBQjA4NkM3RTgzN0JFQTFEMTJENDA1NDJGMkY2MTc1QjkzMjlBMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCNkjMr3qObzuj4ksuYC3WgaQx
IXUYoxVUNEoeVJHbsnzQJ89TZ0ORq59pW58cVogsBFBkZP98AgXZXS2YN6pHsk6M
6yh/AbqwItaqWKEtpNSDszHQ8jH8pkSZn0USCB016QlSh2JPkOHFJhivjGYnQ3wZ
4eMgAQzqQ1MF/W+3KfscwA0u6RCYRhQM3tELiw3mHWEFLyPgjr5cbo4wyy+BMT21
It1WCFbbnoSCj/lHNAlckGAlnH8JrlGhOzP4xNt9KwEXqXLG9N0WUF9JmyfxLvi/
zTLsZUCJBEbfsvMeutVH8twmVG7SH2oWfWBMP8S3mTcsF0N2gdb9/7NYfFWFAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUSrCGx+g3vqHRLUBULy9hdbkymi0wHwYDVR0j
BBgwFoAUxT//csEbNknVoEf9QtPdMSsYQs8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnQzYkdaWHo4bUpEckRkbVo2TkRjMnhaRHNiamZnRXJocmpXZTdIdjhv
UU0vMS9DNTNGRkY3MkMxMUIzNjQ5RDVBMDQ3RkQ0MkQzREQzMTJCMTg0MkNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M1M0ZGRjcyQzExQjM2NDlE
NUEwNDdGRDQyRDNERDMxMkIxODQyQ0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ0M2JHWlh6OG1KRHJEZG1aNk5EYzJ4WkRzYmpmZ0VyaHJqV2U3SHY4b1FNLzEv
MzIzODMwMzQzYTM2NjE2NjYzM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNzMw
MzMzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARq/DANBgkqhkiG9w0BAQsFAAOCAQEADNbjERWw
SIZx+3JVAexNeOwcd7Pdm7l4UHKGnUr7QVRVCSpH1Z6c4nfA51lFK3c11c7OGJ2b
0RBKiu6h63EHUO+z77CkGAy8Et3mRrmlBGgiABkWtjA3/IGULJxqNM29lOPd7JoM
XwBFYFj6lVz3VASNYKQEpeRxUaMG5jP68UdjyE+5cnTi+RBvTLR2k/ur88INPW0E
tBxR167nj6kOaTrN+WpYwo2gCqIo4yNlmTTlW2y3YrLEkBSVy23YqZrTEmSNgPis
JvJJZF9RNxXcGc/dMnJxhlaJ2hZjEam2xyVxMkx3w0ZHfw4ENYty6DLDHCwJ5H5N
XYn1xN/rT49bbg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:41:58 2025 by rpki-client