Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4U6GM5QXtkikAZB38RcyfNH4Ho2Cesx4jbmfDdLzj258/0/323830343a353361383a3a2f33322d3334203d3e20323638353938.roa
File: 323830343a353361383a3a2f33322d3334203d3e20323638353938.roa (raw, json)
Hash identifier: 6bUV7avCOFeZS9GA2+RSPAYHOSd7mhVZVOGeetlqXyg=
Subject key identifier: 21:71:76:50:BC:69:75:EB:47:53:EF:F9:F6:D9:6C:86:4E:A2:22:0E
Certificate issuer: /CN=BB036EE1ED900E7F5470199DFFD0CDED2316DE76
Certificate serial: 60F7EB02DB9FB303D0D097F4A8E6B0FF56917AFF
Authority key identifier: BB:03:6E:E1:ED:90:0E:7F:54:70:19:9D:FF:D0:CD:ED:23:16:DE:76
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB036EE1ED900E7F5470199DFFD0CDED2316DE76.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4U6GM5QXtkikAZB38RcyfNH4Ho2Cesx4jbmfDdLzj258/0/323830343a353361383a3a2f33322d3334203d3e20323638353938.roa
Signing time: Tue 16 May 2023 22:59:21 +0000
ROA not before: Tue 16 May 2023 22:54:21 +0000
ROA not after: Tue 14 May 2024 22:59:21 +0000
asID: 268598
IP address blocks: 2804:53a8::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:f7:eb:02:db:9f:b3:03:d0:d0:97:f4:a8:e6:b0:ff:56:91:7a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BB036EE1ED900E7F5470199DFFD0CDED2316DE76
Validity
Not Before: May 16 22:54:21 2023 GMT
Not After : May 14 22:59:21 2024 GMT
Subject: CN=21717650BC6975EB4753EFF9F6D96C864EA2220E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8d:a6:37:20:5b:67:3c:8a:3d:b2:ed:fb:be:
01:6d:61:15:a1:f1:9a:8a:be:ae:fd:f0:df:76:f8:
2c:5c:01:61:35:8a:e7:c6:12:db:83:16:50:d5:71:
fe:c1:20:4f:ac:00:a6:ee:5e:5e:56:08:72:48:44:
22:82:46:d1:bd:2f:38:d2:05:87:52:7b:0a:98:a1:
0d:8a:cf:a9:aa:e1:1f:51:02:7f:e1:b5:88:70:ef:
9d:9c:0c:2b:41:a1:a1:d1:e3:a9:4c:3b:b8:e9:97:
7b:cb:d1:06:4f:3d:85:aa:99:48:ed:18:6a:4e:0d:
ec:ae:55:9d:4c:00:ea:00:80:92:13:2a:c6:df:79:
87:ed:ba:a0:ae:e8:94:05:c3:a3:52:c5:76:d7:5d:
b3:90:87:de:83:25:24:af:95:62:8f:d5:d2:d8:d3:
a3:10:6f:34:d8:a7:fb:fd:a6:e8:b7:3b:e7:b9:92:
ad:63:7c:b3:e0:a5:42:cf:53:a4:4e:7f:36:01:61:
7b:f1:a2:38:04:b1:64:22:74:e9:f4:b7:a4:6e:54:
32:d3:71:c5:57:1a:5f:41:73:33:e3:be:f0:00:a4:
6c:27:b2:35:fc:e5:73:7b:70:dc:04:fc:e8:9d:79:
83:53:33:ee:d9:f6:d2:99:ba:fb:9d:29:b4:d6:35:
40:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:71:76:50:BC:69:75:EB:47:53:EF:F9:F6:D9:6C:86:4E:A2:22:0E
X509v3 Authority Key Identifier:
keyid:BB:03:6E:E1:ED:90:0E:7F:54:70:19:9D:FF:D0:CD:ED:23:16:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4U6GM5QXtkikAZB38RcyfNH4Ho2Cesx4jbmfDdLzj258/0/BB036EE1ED900E7F5470199DFFD0CDED2316DE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB036EE1ED900E7F5470199DFFD0CDED2316DE76.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4U6GM5QXtkikAZB38RcyfNH4Ho2Cesx4jbmfDdLzj258/0/323830343a353361383a3a2f33322d3334203d3e20323638353938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:53a8::/32
Signature Algorithm: sha256WithRSAEncryption
08:34:40:c4:1d:8f:16:e4:58:e0:c6:49:7e:47:f8:ee:05:8f:
be:7d:0d:2a:81:2f:fa:d3:2f:20:3c:a0:8d:14:ce:85:7f:7c:
ed:ae:c2:8b:5a:de:82:c3:c3:c7:33:ba:7e:36:5d:37:76:fe:
b8:06:f0:2a:c9:94:3f:ad:64:d9:69:22:02:b9:94:6b:12:6b:
89:90:ab:e4:f2:4c:8f:ee:5f:df:19:83:72:5b:db:6b:36:0f:
fa:69:7e:db:50:45:0a:0e:7a:08:1d:d3:67:1e:28:49:c7:aa:
a8:f7:fc:59:6a:da:1d:62:ed:90:52:8a:92:0b:35:1d:fd:02:
55:9e:2d:b2:a5:30:54:a1:9b:6b:75:73:c2:5f:f6:95:a4:db:
6b:52:b1:f4:61:0a:14:13:f5:03:7b:69:4b:f7:ba:d9:4b:4c:
97:b5:99:0a:a7:ac:28:66:20:21:a2:31:54:6b:e8:a1:0b:8b:
a5:da:86:21:2e:03:b1:da:34:d5:d6:7b:d2:ac:c3:22:7e:fb:
99:bb:a9:16:7f:4d:cd:07:01:d4:ca:93:ed:cc:e9:7f:26:75:
d6:51:80:52:22:8f:f3:53:4f:96:1c:04:5c:28:1d:bc:e3:49:
da:3a:af:c1:cb:c5:19:87:aa:69:87:4c:77:87:ae:81:b8:f8:
c7:80:a1:de
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUYPfrAtufswPQ0Jf0qOaw/1aRev8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkIwMzZFRTFFRDkwMEU3RjU0NzAxOTlERkZEMENERUQy
MzE2REU3NjAeFw0yMzA1MTYyMjU0MjFaFw0yNDA1MTQyMjU5MjFaMDMxMTAvBgNV
BAMTKDIxNzE3NjUwQkM2OTc1RUI0NzUzRUZGOUY2RDk2Qzg2NEVBMjIyMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1jaY3IFtnPIo9su37vgFtYRWh
8ZqKvq798N92+CxcAWE1iufGEtuDFlDVcf7BIE+sAKbuXl5WCHJIRCKCRtG9LzjS
BYdSewqYoQ2Kz6mq4R9RAn/htYhw752cDCtBoaHR46lMO7jpl3vL0QZPPYWqmUjt
GGpODeyuVZ1MAOoAgJITKsbfeYftuqCu6JQFw6NSxXbXXbOQh96DJSSvlWKP1dLY
06MQbzTYp/v9pui3O+e5kq1jfLPgpULPU6ROfzYBYXvxojgEsWQidOn0t6RuVDLT
ccVXGl9BczPjvvAApGwnsjX85XN7cNwE/OideYNTM+7Z9tKZuvudKbTWNUCtAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUIXF2ULxpdetHU+/59tlshk6iIg4wHwYDVR0j
BBgwFoAUuwNu4e2QDn9UcBmd/9DN7SMW3nYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFU2R001UVh0a2lrQVpCMzhSY3lmTkg0SG8yQ2VzeDRqYm1mRGRMemoy
NTgvMC9CQjAzNkVFMUVEOTAwRTdGNTQ3MDE5OURGRkQwQ0RFRDIzMTZERTc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JCMDM2RUUxRUQ5MDBFN0Y1
NDcwMTk5REZGRDBDREVEMjMxNkRFNzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRVNkdNNVFYdGtpa0FaQjM4UmN5Zk5INEhvMkNlc3g0amJtZkRkTHpqMjU4LzAv
MzIzODMwMzQzYTM1MzM2MTM4M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM4
MzUzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARTqDANBgkqhkiG9w0BAQsFAAOCAQEACDRAxB2P
FuRY4MZJfkf47gWPvn0NKoEv+tMvIDygjRTOhX987a7Ci1regsPDxzO6fjZdN3b+
uAbwKsmUP61k2WkiArmUaxJriZCr5PJMj+5f3xmDclvbazYP+ml+21BFCg56CB3T
Zx4oSceqqPf8WWraHWLtkFKKkgs1Hf0CVZ4tsqUwVKGba3Vzwl/2laTba1Kx9GEK
FBP1A3tpS/e62UtMl7WZCqesKGYgIaIxVGvooQuLpdqGIS4Dsdo01dZ70qzDIn77
mbupFn9NzQcB1MqT7czpfyZ11lGAUiKP81NPlhwEXCgdvONJ2jqvwcvFGYeqaYdM
d4eugbj4x4Ch3g==
-----END CERTIFICATE-----
Generated at Mon Apr 21 21:14:53 2025 by rpki-client