Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313431383a3a2f34382d3438203d3e203131303937.roa
File: 323830313a38303a313431383a3a2f34382d3438203d3e203131303937.roa (raw, json)
Hash identifier: /u3KDALfJ9hzHHVLVSjgNQ49MGr81XREWSNWBDyrHiI=
Subject key identifier: A1:28:85:59:EA:D3:AF:F3:5C:4B:C9:C4:0F:BC:68:9F:71:11:B8:9B
Certificate issuer: /CN=38EA6456C8B35EB75FBC6A42DA7F260358634F2F
Certificate serial: 341CCC96FBB778F9E173231150099A0A6DC8FAA4
Authority key identifier: 38:EA:64:56:C8:B3:5E:B7:5F:BC:6A:42:DA:7F:26:03:58:63:4F:2F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313431383a3a2f34382d3438203d3e203131303937.roa
Signing time: Thu 06 Mar 2025 17:44:16 +0000
ROA not before: Thu 06 Mar 2025 17:39:16 +0000
ROA not after: Thu 05 Mar 2026 17:44:16 +0000
asID: 11097
IP address blocks: 2801:80:1418::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:1c:cc:96:fb:b7:78:f9:e1:73:23:11:50:09:9a:0a:6d:c8:fa:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38EA6456C8B35EB75FBC6A42DA7F260358634F2F
Validity
Not Before: Mar 6 17:39:16 2025 GMT
Not After : Mar 5 17:44:16 2026 GMT
Subject: CN=A1288559EAD3AFF35C4BC9C40FBC689F7111B89B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0e:77:84:f6:9d:57:72:08:33:65:a7:5b:f6:
4d:e0:a0:b5:6b:b9:22:79:44:40:fa:15:c2:85:50:
35:33:50:d1:a4:a5:df:8a:22:ab:12:16:53:f1:b0:
01:ad:61:9c:6d:ac:38:01:90:a9:e0:24:84:88:83:
3e:38:58:01:08:36:a6:67:1d:a4:c4:e5:97:79:06:
3e:51:c7:2b:b6:8f:36:db:56:b1:f3:d8:ae:67:9d:
df:ac:c8:13:e6:79:ce:67:b1:6f:61:63:f6:21:ee:
a6:d1:1a:1e:81:af:8b:ad:37:a0:17:25:07:96:c5:
10:91:a6:8c:3f:b1:5e:fc:7d:c6:17:97:05:aa:4b:
66:c1:b0:6a:4f:43:06:e0:de:8c:6a:a5:ea:93:69:
a3:06:36:a2:5c:83:bf:cd:8e:f3:b5:d4:6e:77:e3:
6e:30:5d:99:7f:3c:5c:7f:aa:bd:8f:3a:9a:4b:44:
42:3b:77:4a:5a:a1:72:d1:c9:a1:99:d9:0f:52:bb:
ad:84:dc:5f:98:b4:6d:53:52:49:44:6a:cd:ce:11:
2c:c4:d3:55:8a:5b:ad:ce:6b:e8:d7:b9:ec:68:82:
20:d0:13:d9:eb:d7:26:55:3d:b6:95:8c:b7:ba:96:
81:8e:02:09:8b:28:ac:b6:17:b6:6f:48:fc:f5:7c:
8d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:28:85:59:EA:D3:AF:F3:5C:4B:C9:C4:0F:BC:68:9F:71:11:B8:9B
X509v3 Authority Key Identifier:
keyid:38:EA:64:56:C8:B3:5E:B7:5F:BC:6A:42:DA:7F:26:03:58:63:4F:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313431383a3a2f34382d3438203d3e203131303937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:80:1418::/48
Signature Algorithm: sha256WithRSAEncryption
70:da:1e:af:70:fb:9a:37:8c:57:61:62:2b:5e:7f:f6:b4:2a:
ed:6b:b0:55:01:e4:6f:a7:e9:23:e4:df:97:e4:00:1f:95:84:
2d:f8:22:d4:39:76:9d:d9:fd:88:2f:e6:67:87:d8:ff:ea:92:
70:e6:71:fb:46:af:a2:c2:f4:51:e9:90:5e:97:64:e4:7f:c8:
cc:9f:52:a5:1c:77:27:0f:ca:84:a8:81:e3:25:c3:08:31:79:
ca:7e:94:35:cb:1f:34:e1:6a:c7:60:10:fc:c0:50:4d:2c:bc:
51:fb:3e:31:a4:ed:bc:31:ad:10:d9:fe:0f:17:d2:78:86:59:
97:5c:26:fe:89:eb:ee:7f:49:78:10:02:d7:8c:41:28:b9:07:
29:e2:01:f8:90:be:de:b8:20:b3:a9:c7:4b:9e:2f:85:64:f1:
c9:27:b2:06:cb:6b:fd:5d:d8:3e:33:fa:88:8a:50:ab:05:e9:
f8:35:43:83:48:bc:a9:6b:e9:3e:1c:70:2d:30:0c:50:0b:6b:
ab:e8:1c:97:57:5c:da:9c:4c:85:54:07:4e:17:cf:23:b5:88:
cb:0d:2a:ca:44:7d:b3:aa:4f:c3:f0:51:8c:83:12:44:73:2f:
45:0c:50:cd:f2:e7:a0:fa:28:0c:98:7c:e1:5d:e8:93:e6:75:
d7:3b:70:20
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUNBzMlvu3ePnhcyMRUAmaCm3I+qQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhFQTY0NTZDOEIzNUVCNzVGQkM2QTQyREE3RjI2MDM1
ODYzNEYyRjAeFw0yNTAzMDYxNzM5MTZaFw0yNjAzMDUxNzQ0MTZaMDMxMTAvBgNV
BAMTKEExMjg4NTU5RUFEM0FGRjM1QzRCQzlDNDBGQkM2ODlGNzExMUI4OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqDneE9p1XcggzZadb9k3goLVr
uSJ5RED6FcKFUDUzUNGkpd+KIqsSFlPxsAGtYZxtrDgBkKngJISIgz44WAEINqZn
HaTE5Zd5Bj5Rxyu2jzbbVrHz2K5nnd+syBPmec5nsW9hY/Yh7qbRGh6Br4utN6AX
JQeWxRCRpow/sV78fcYXlwWqS2bBsGpPQwbg3oxqpeqTaaMGNqJcg7/NjvO11G53
424wXZl/PFx/qr2POppLREI7d0paoXLRyaGZ2Q9Su62E3F+YtG1TUklEas3OESzE
01WKW63Oa+jXuexogiDQE9nr1yZVPbaVjLe6loGOAgmLKKy2F7ZvSPz1fI0fAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUoSiFWerTr/NcS8nED7xon3ERuJswHwYDVR0j
BBgwFoAUOOpkVsizXrdfvGpC2n8mA1hjTy8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFoybm9zVVFQYnRtQkp4V0d4RkVmMUozM1p4VTZZak5TY3NOZFAxdVBp
ZWUvMC8zOEVBNjQ1NkM4QjM1RUI3NUZCQzZBNDJEQTdGMjYwMzU4NjM0RjJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4RUE2NDU2QzhCMzVFQjc1
RkJDNkE0MkRBN0YyNjAzNTg2MzRGMkYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRaMm5vc1VRUGJ0bUJKeFdHeEZFZjFKMzNaeFU2WWpOU2NzTmRQMXVQaWVlLzAv
MzIzODMwMzEzYTM4MzAzYTMxMzQzMTM4M2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzEzMTMwMzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBAIAUGDANBgkqhkiG9w0BAQsFAAOCAQEA
cNoer3D7mjeMV2FiK15/9rQq7WuwVQHkb6fpI+Tfl+QAH5WELfgi1Dl2ndn9iC/m
Z4fY/+qScOZx+0avosL0UemQXpdk5H/IzJ9SpRx3Jw/KhKiB4yXDCDF5yn6UNcsf
NOFqx2AQ/MBQTSy8Ufs+MaTtvDGtENn+DxfSeIZZl1wm/onr7n9JeBAC14xBKLkH
KeIB+JC+3rggs6nHS54vhWTxySeyBstr/V3YPjP6iIpQqwXp+DVDg0i8qWvpPhxw
LTAMUAtrq+gcl1dc2pxMhVQHThfPI7WIyw0qykR9s6pPw/BRjIMSRHMvRQxQzfLn
oPooDJh84V3ok+Z11ztwIA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 19:11:40 2025 by rpki-client