Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a623a3a2f34382d3438203d3e203238323032.roa
File: 323830343a3837633a623a3a2f34382d3438203d3e203238323032.roa (raw, json)
Hash identifier: LaIShfq18e9tXfUfAfyeokvYpZr6fgWok2A5BYgn6tI=
Subject key identifier: BE:A4:02:A9:7B:7A:81:3D:31:04:2A:20:4D:5F:6D:08:78:F8:1B:67
Certificate issuer: /CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Certificate serial: 2864A876DDB3656478344AC1F3EE711B9EF9913E
Authority key identifier: 65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a623a3a2f34382d3438203d3e203238323032.roa
Signing time: Fri 10 Jan 2025 14:19:30 +0000
ROA not before: Fri 10 Jan 2025 14:14:30 +0000
ROA not after: Fri 09 Jan 2026 14:19:30 +0000
asID: 28202
IP address blocks: 2804:87c:b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:64:a8:76:dd:b3:65:64:78:34:4a:c1:f3:ee:71:1b:9e:f9:91:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Validity
Not Before: Jan 10 14:14:30 2025 GMT
Not After : Jan 9 14:19:30 2026 GMT
Subject: CN=BEA402A97B7A813D31042A204D5F6D0878F81B67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:97:96:77:95:fb:3c:4a:b8:f7:c6:7c:1b:d3:
65:ea:a3:eb:8f:e3:59:51:29:5b:94:b9:88:58:4a:
fc:46:11:8b:87:81:5f:72:02:6f:4d:65:d8:91:dc:
fa:7c:cc:89:b2:c9:50:6b:6d:53:5f:66:f7:62:2d:
e8:0e:3e:5a:85:75:4e:7d:f2:32:7c:cc:05:68:34:
15:d5:07:53:d2:aa:2c:6a:cc:28:c2:c4:48:26:2e:
8b:18:5b:b5:5f:71:1d:7b:18:89:f5:3d:f9:c9:60:
27:5f:1a:6a:3d:c1:11:7c:00:b4:10:05:67:fa:6c:
0c:5b:1d:06:39:c5:eb:66:e0:38:00:10:44:f8:db:
19:9b:2d:f4:0e:4b:7a:1e:1b:c6:d9:3d:53:0c:4d:
16:18:96:31:9b:c8:4c:30:b7:f0:83:98:d8:bc:d5:
78:13:fc:99:0f:01:93:21:e1:ff:77:10:4b:46:7b:
3d:e2:74:07:4a:38:30:ba:dc:e3:01:bc:ec:a0:fb:
ce:57:bb:8a:db:1b:e0:62:25:b0:fb:20:17:82:e1:
a5:9c:13:ad:ee:88:51:60:f5:2e:bd:70:01:7c:f3:
50:ff:fb:e8:62:2e:c5:80:8d:55:95:a2:ff:a4:42:
e2:23:43:b9:e1:5c:e7:01:23:6f:41:9c:94:0a:88:
b5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A4:02:A9:7B:7A:81:3D:31:04:2A:20:4D:5F:6D:08:78:F8:1B:67
X509v3 Authority Key Identifier:
keyid:65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/323830343a3837633a623a3a2f34382d3438203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:87c:b::/48
Signature Algorithm: sha256WithRSAEncryption
21:a0:a3:3f:ca:6f:4f:9f:f4:9f:e9:a3:be:83:2b:0b:ef:76:
e0:bb:28:d5:72:b1:88:e7:ca:76:28:ba:a2:77:98:ed:c6:6d:
ba:cf:1c:41:42:69:b7:ea:31:85:63:36:5e:15:56:5b:f9:cd:
c5:d1:81:fc:bb:99:8e:91:93:2c:99:12:07:ef:38:ee:95:05:
2c:50:c3:86:f0:1f:85:2b:05:50:4f:ff:34:0d:ad:71:2d:67:
2c:c0:2e:a3:be:f0:1f:56:fe:18:3b:42:1c:0e:61:4e:25:13:
d6:e2:08:1c:7f:d4:f0:89:d6:48:8d:75:4e:49:ad:5f:78:2c:
c8:ea:c5:27:75:83:05:df:ba:5e:54:d5:15:e0:de:d0:ba:5b:
64:85:19:87:8e:10:97:fa:61:b0:f2:ec:ce:b5:a2:8f:e7:4b:
d2:84:2e:5e:d1:b0:ef:82:7a:b9:bd:82:74:a8:35:49:50:1d:
87:2e:2c:fe:98:fe:d8:ab:42:b8:c7:08:6a:3f:7a:dc:02:a9:
5d:07:8f:d8:38:e6:90:f5:ff:c5:c2:56:4c:3c:71:20:28:c4:
e3:ac:54:23:be:a1:3b:dc:12:a7:46:5f:86:b1:a9:81:2b:5c:
c8:7c:31:c9:ab:12:4a:0f:83:16:9e:23:c3:ef:f2:ff:f5:a0:
9b:d2:16:14
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUKGSodt2zZWR4NErB8+5xG575kT4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU2MUM2QThFNjM1RUQwOTFCRTVBNTUzRjdFQjBCMTJG
NUU0NDQ5NTAeFw0yNTAxMTAxNDE0MzBaFw0yNjAxMDkxNDE5MzBaMDMxMTAvBgNV
BAMTKEJFQTQwMkE5N0I3QTgxM0QzMTA0MkEyMDRENUY2RDA4NzhGODFCNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/l5Z3lfs8Srj3xnwb02Xqo+uP
41lRKVuUuYhYSvxGEYuHgV9yAm9NZdiR3Pp8zImyyVBrbVNfZvdiLegOPlqFdU59
8jJ8zAVoNBXVB1PSqixqzCjCxEgmLosYW7VfcR17GIn1PfnJYCdfGmo9wRF8ALQQ
BWf6bAxbHQY5xetm4DgAEET42xmbLfQOS3oeG8bZPVMMTRYYljGbyEwwt/CDmNi8
1XgT/JkPAZMh4f93EEtGez3idAdKODC63OMBvOyg+85Xu4rbG+BiJbD7IBeC4aWc
E63uiFFg9S69cAF881D/++hiLsWAjVWVov+kQuIjQ7nhXOcBI29BnJQKiLUvAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUvqQCqXt6gT0xBCogTV9tCHj4G2cwHwYDVR0j
BBgwFoAUZWHGqOY17Qkb5aVT9+sLEvXkRJUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGRQN05GMUJkM3ZBekdEY2o3dm1RVlc5ZmtyQVE3UHltUDl1eE04Qk1V
V00vNS82NTYxQzZBOEU2MzVFRDA5MUJFNUE1NTNGN0VCMEIxMkY1RTQ0NDk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1NjFDNkE4RTYzNUVEMDkx
QkU1QTU1M0Y3RUIwQjEyRjVFNDQ0OTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRkUDdORjFCZDN2QXpHRGNqN3ZtUVZXOWZrckFRN1B5bVA5dXhNOEJNVVdNLzUv
MzIzODMwMzQzYTM4Mzc2MzNhNjIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM4
MzIzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcAKAQIfAALMA0GCSqGSIb3DQEBCwUAA4IBAQAhoKM/
ym9Pn/Sf6aO+gysL73bguyjVcrGI58p2KLqid5jtxm26zxxBQmm36jGFYzZeFVZb
+c3F0YH8u5mOkZMsmRIH7zjulQUsUMOG8B+FKwVQT/80Da1xLWcswC6jvvAfVv4Y
O0IcDmFOJRPW4ggcf9TwidZIjXVOSa1feCzI6sUndYMF37peVNUV4N7QultkhRmH
jhCX+mGw8uzOtaKP50vShC5e0bDvgnq5vYJ0qDVJUB2HLiz+mP7Yq0K4xwhqP3rc
AqldB4/YOOaQ9f/FwlZMPHEgKMTjrFQjvqE73BKnRl+GsamBK1zIfDHJqxJKD4MW
niPD7/L/9aCb0hYU
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:53 2025 by rpki-client