Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/528Nrddr8YmBsCjcXJtuPmKv4hpxAdFhQaARnGJJgUpt/0/323830343a356362303a3a2f33322d313238203d3e20323638393234.roa
File: 323830343a356362303a3a2f33322d313238203d3e20323638393234.roa (raw, json)
Hash identifier: F0xTSiwnzXDkd1AkNb78HDli7pjU4JCdOZeLmRpGOLk=
Subject key identifier: 40:89:7C:C4:62:EF:2E:58:3E:D8:8B:6C:F8:51:BB:DC:71:A5:8F:78
Certificate issuer: /CN=E00A7C09092FA92DBB3CC87791CF71DB9EAF047A
Certificate serial: 56F98985C5B3D8CC686D1DD4B670D9198231F91F
Authority key identifier: E0:0A:7C:09:09:2F:A9:2D:BB:3C:C8:77:91:CF:71:DB:9E:AF:04:7A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E00A7C09092FA92DBB3CC87791CF71DB9EAF047A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/528Nrddr8YmBsCjcXJtuPmKv4hpxAdFhQaARnGJJgUpt/0/323830343a356362303a3a2f33322d313238203d3e20323638393234.roa
Signing time: Mon 24 Feb 2025 20:48:51 +0000
ROA not before: Mon 24 Feb 2025 20:43:51 +0000
ROA not after: Mon 23 Feb 2026 20:48:51 +0000
asID: 268924
IP address blocks: 2804:5cb0::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:f9:89:85:c5:b3:d8:cc:68:6d:1d:d4:b6:70:d9:19:82:31:f9:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E00A7C09092FA92DBB3CC87791CF71DB9EAF047A
Validity
Not Before: Feb 24 20:43:51 2025 GMT
Not After : Feb 23 20:48:51 2026 GMT
Subject: CN=40897CC462EF2E583ED88B6CF851BBDC71A58F78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:83:60:d5:50:c3:f8:a0:31:96:5d:b2:67:e9:
55:54:dd:94:3c:03:aa:7b:49:d9:42:89:ef:3c:9b:
72:15:e7:af:0b:eb:9e:26:34:2e:be:f3:33:14:de:
50:c7:91:62:c7:95:fd:02:96:7d:b8:c2:5b:59:1f:
79:35:14:21:33:5c:de:51:f5:07:1b:28:f2:bc:45:
2c:59:a0:cd:b7:1d:0d:d3:49:52:8f:ce:c0:fd:61:
17:11:0a:8e:9e:a5:6f:f5:07:bb:80:bd:e1:a1:33:
d8:77:7d:d4:4f:67:55:a3:35:6d:1f:ef:be:8c:94:
cc:72:b0:91:bb:f1:19:b9:8d:de:b2:23:d5:78:54:
13:df:06:1d:e7:4a:4b:67:5b:28:ae:55:75:64:0b:
c4:82:64:32:93:b0:e1:22:0b:a8:df:9f:28:69:47:
e1:34:5a:1e:b6:27:24:6a:21:32:8c:74:17:e9:eb:
8d:bb:36:a0:63:80:c4:50:9e:5d:83:a3:4d:42:27:
a3:85:89:6d:6b:f5:53:f5:95:c8:d9:1c:32:c7:90:
2f:9c:6f:f2:0a:f2:8f:95:0c:f4:8f:e9:0c:3c:95:
f1:89:f1:3e:91:c2:4f:c2:6d:8e:62:f9:03:00:39:
67:36:96:92:68:f8:38:e7:57:a4:11:88:21:fb:7b:
9f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:89:7C:C4:62:EF:2E:58:3E:D8:8B:6C:F8:51:BB:DC:71:A5:8F:78
X509v3 Authority Key Identifier:
keyid:E0:0A:7C:09:09:2F:A9:2D:BB:3C:C8:77:91:CF:71:DB:9E:AF:04:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/528Nrddr8YmBsCjcXJtuPmKv4hpxAdFhQaARnGJJgUpt/0/E00A7C09092FA92DBB3CC87791CF71DB9EAF047A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E00A7C09092FA92DBB3CC87791CF71DB9EAF047A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/528Nrddr8YmBsCjcXJtuPmKv4hpxAdFhQaARnGJJgUpt/0/323830343a356362303a3a2f33322d313238203d3e20323638393234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5cb0::/32
Signature Algorithm: sha256WithRSAEncryption
4b:ad:91:05:6c:85:39:a7:59:ba:bd:4c:2f:61:33:c0:3b:01:
58:ba:f3:de:b2:dc:36:f0:e9:48:eb:f2:4f:31:e4:d6:bf:e9:
c7:5e:40:7a:a9:31:82:b7:cd:1f:02:85:59:ad:bf:44:06:cd:
a2:3a:b0:65:60:e6:8e:e2:40:e6:e8:0c:02:50:9b:b7:45:0d:
d1:bd:a2:3a:bf:8c:82:ad:dc:00:70:72:cb:5b:4e:be:94:a7:
8f:61:69:3e:42:17:93:68:02:da:e1:91:04:8d:fe:47:f3:65:
53:06:ac:6e:77:d3:19:ff:4a:02:cb:17:49:98:e2:c2:0b:d1:
45:40:bb:53:33:09:cf:8b:e5:f5:2c:a2:ff:26:d6:1e:13:3d:
28:a8:97:57:2c:d2:50:d0:b6:79:64:57:aa:fa:79:0f:ed:a4:
eb:c5:b2:ba:07:10:b6:e7:00:5c:ec:c5:e1:ac:7f:6f:89:6c:
ce:cb:fe:cd:7b:2e:11:68:2d:bc:99:d6:ee:ea:f6:01:96:e0:
43:b0:10:80:b2:8e:10:29:2b:8f:9b:03:8a:65:69:b3:59:1b:
2d:5b:be:0f:f2:93:8b:d0:b8:70:32:4d:10:a6:c0:2d:bc:03:
55:9c:17:25:b8:1e:4b:18:4c:3a:33:d2:75:d5:d6:b4:bb:16:
e3:f3:f7:b9
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUVvmJhcWz2MxobR3UtnDZGYIx+R8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTAwQTdDMDkwOTJGQTkyREJCM0NDODc3OTFDRjcxREI5
RUFGMDQ3QTAeFw0yNTAyMjQyMDQzNTFaFw0yNjAyMjMyMDQ4NTFaMDMxMTAvBgNV
BAMTKDQwODk3Q0M0NjJFRjJFNTgzRUQ4OEI2Q0Y4NTFCQkRDNzFBNThGNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyg2DVUMP4oDGWXbJn6VVU3ZQ8
A6p7SdlCie88m3IV568L654mNC6+8zMU3lDHkWLHlf0Cln24wltZH3k1FCEzXN5R
9QcbKPK8RSxZoM23HQ3TSVKPzsD9YRcRCo6epW/1B7uAveGhM9h3fdRPZ1WjNW0f
776MlMxysJG78Rm5jd6yI9V4VBPfBh3nSktnWyiuVXVkC8SCZDKTsOEiC6jfnyhp
R+E0Wh62JyRqITKMdBfp6427NqBjgMRQnl2Do01CJ6OFiW1r9VP1lcjZHDLHkC+c
b/IK8o+VDPSP6Qw8lfGJ8T6Rwk/CbY5i+QMAOWc2lpJo+DjnV6QRiCH7e5/FAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUQIl8xGLvLlg+2Its+FG73HGlj3gwHwYDVR0j
BBgwFoAU4Ap8CQkvqS27PMh3kc9x256vBHowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTI4TnJkZHI4WW1Cc0NqY1hKdHVQbUt2NGhweEFkRmhRYUFSbkdKSmdV
cHQvMC9FMDBBN0MwOTA5MkZBOTJEQkIzQ0M4Nzc5MUNGNzFEQjlFQUYwNDdBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UwMEE3QzA5MDkyRkE5MkRC
QjNDQzg3NzkxQ0Y3MURCOUVBRjA0N0EuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzUyOE5yZGRyOFltQnNDamNYSnR1UG1LdjRocHhBZEZoUWFBUm5HSkpnVXB0LzAv
MzIzODMwMzQzYTM1NjM2MjMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzgzOTMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBFywMA0GCSqGSIb3DQEBCwUAA4IBAQBLrZEF
bIU5p1m6vUwvYTPAOwFYuvPestw28OlI6/JPMeTWv+nHXkB6qTGCt80fAoVZrb9E
Bs2iOrBlYOaO4kDm6AwCUJu3RQ3RvaI6v4yCrdwAcHLLW06+lKePYWk+QheTaALa
4ZEEjf5H82VTBqxud9MZ/0oCyxdJmOLCC9FFQLtTMwnPi+X1LKL/JtYeEz0oqJdX
LNJQ0LZ5ZFeq+nkP7aTrxbK6BxC25wBc7MXhrH9viWzOy/7Ney4RaC28mdbu6vYB
luBDsBCAso4QKSuPmwOKZWmzWRstW74P8pOL0LhwMk0QpsAtvANVnBcluB5LGEw6
M9J11da0uxbj8/e5
-----END CERTIFICATE-----
Generated at Mon Apr 7 12:06:24 2025 by rpki-client