Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a343030303a3a2f33342d3334203d3e20323637393432.roa
File: 323830343a353539303a343030303a3a2f33342d3334203d3e20323637393432.roa (raw, json)
Hash identifier: f2hNLXUA4JIXOfbyOyBVYxj8AcvU132Fci5mMOtEqlQ=
Subject key identifier: 3E:E2:2B:9A:77:DB:A7:79:68:CE:7A:6B:34:25:E6:EC:AE:D5:71:57
Certificate issuer: /CN=0FD65004E7C4085F2D33DF17345261EDD9B3A811
Certificate serial: 11DDC10FA08E4EB7DC3BCEBF9FB6B68144521F99
Authority key identifier: 0F:D6:50:04:E7:C4:08:5F:2D:33:DF:17:34:52:61:ED:D9:B3:A8:11
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FD65004E7C4085F2D33DF17345261EDD9B3A811.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a343030303a3a2f33342d3334203d3e20323637393432.roa
Signing time: Wed 26 Mar 2025 16:49:53 +0000
ROA not before: Wed 26 Mar 2025 16:44:53 +0000
ROA not after: Wed 25 Mar 2026 16:49:53 +0000
asID: 267942
IP address blocks: 2804:5590:4000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:dd:c1:0f:a0:8e:4e:b7:dc:3b:ce:bf:9f:b6:b6:81:44:52:1f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FD65004E7C4085F2D33DF17345261EDD9B3A811
Validity
Not Before: Mar 26 16:44:53 2025 GMT
Not After : Mar 25 16:49:53 2026 GMT
Subject: CN=3EE22B9A77DBA77968CE7A6B3425E6ECAED57157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4e:21:06:a1:41:32:12:f4:c3:af:1a:fd:83:
b2:c4:f9:08:5f:ee:69:dd:ef:11:a4:42:68:17:0a:
49:ad:80:b3:6d:75:6a:3a:15:13:1a:c9:f1:29:6b:
69:6e:85:f9:5f:dd:9d:46:bd:9e:65:a9:78:b7:0d:
1e:66:eb:d8:a0:0a:3f:db:a8:85:a4:7e:ef:21:39:
6d:2a:16:6e:22:75:02:74:bb:3d:18:33:28:f6:9d:
84:e8:80:19:8a:18:bd:e8:66:de:74:df:82:67:71:
98:1f:ea:56:0c:68:d8:29:ef:27:70:02:01:c6:8b:
90:f3:8d:ba:60:b7:b4:8b:f6:63:b4:e9:b7:b4:5e:
a8:ff:f6:4c:eb:da:27:9e:e8:c2:75:5b:c6:61:9d:
63:f2:4e:52:5c:5c:df:0b:2d:0a:9c:df:c0:fa:e0:
49:f1:99:a2:c8:68:98:61:63:5e:0a:29:85:87:78:
0a:5e:7c:9d:80:c2:13:60:6f:14:25:01:05:6c:c0:
b9:ca:71:2d:88:bc:03:76:d4:9b:10:24:3e:31:a9:
66:8d:d3:3b:b5:0f:d6:82:93:80:71:e2:f2:02:b9:
a7:bc:19:20:4f:12:22:ae:de:36:eb:5b:2d:4f:5d:
14:a7:4e:7d:15:94:f7:24:4d:6a:8c:9a:e0:8f:0c:
38:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E2:2B:9A:77:DB:A7:79:68:CE:7A:6B:34:25:E6:EC:AE:D5:71:57
X509v3 Authority Key Identifier:
keyid:0F:D6:50:04:E7:C4:08:5F:2D:33:DF:17:34:52:61:ED:D9:B3:A8:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/0FD65004E7C4085F2D33DF17345261EDD9B3A811.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FD65004E7C4085F2D33DF17345261EDD9B3A811.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a343030303a3a2f33342d3334203d3e20323637393432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5590:4000::/34
Signature Algorithm: sha256WithRSAEncryption
52:42:28:08:fd:39:a9:0e:99:cf:09:2b:ea:d3:8d:c8:a7:3d:
db:f7:6d:d6:18:fa:a8:bd:6d:52:27:ea:03:5e:9e:a7:f3:13:
da:2a:e9:0e:31:29:ce:a6:5d:bc:25:7e:28:73:cf:d4:ca:7a:
bb:ac:32:9e:3d:53:cf:a2:78:7f:f9:4a:d4:52:13:37:27:ae:
05:14:ac:a1:10:8f:a3:ed:b0:48:36:36:b0:9d:c0:d3:a3:9f:
57:95:02:1a:a4:b6:03:c8:96:1f:c4:f4:ad:c2:6d:d4:b3:90:
75:21:6c:b3:46:11:66:1c:ac:b5:57:72:2a:33:48:da:db:ab:
22:75:9a:a5:cf:a1:41:0c:c0:30:3d:6c:6c:db:b6:05:83:9d:
91:e3:38:3c:db:2d:f5:09:a4:23:04:97:cd:c2:34:a5:30:80:
9b:ff:bc:60:d4:1c:bd:55:70:0d:5c:db:ba:9f:43:82:6d:e8:
0f:7b:05:8b:1e:f0:05:61:d2:7a:f8:7b:1d:af:79:a8:88:6e:
ff:4e:91:90:6b:5c:2c:95:39:03:1f:06:8b:a0:19:f0:6d:95:
f0:75:a4:f8:8c:c3:4c:c6:d1:1d:1b:e3:47:b9:b1:e5:39:6f:
f1:e5:5b:6d:7b:07:33:1e:b6:63:20:55:59:13:db:76:0f:df:
8f:af:e1:a8
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUEd3BD6COTrfcO86/n7a2gURSH5kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEZENjUwMDRFN0M0MDg1RjJEMzNERjE3MzQ1MjYxRURE
OUIzQTgxMTAeFw0yNTAzMjYxNjQ0NTNaFw0yNjAzMjUxNjQ5NTNaMDMxMTAvBgNV
BAMTKDNFRTIyQjlBNzdEQkE3Nzk2OENFN0E2QjM0MjVFNkVDQUVENTcxNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeTiEGoUEyEvTDrxr9g7LE+Qhf
7mnd7xGkQmgXCkmtgLNtdWo6FRMayfEpa2luhflf3Z1GvZ5lqXi3DR5m69igCj/b
qIWkfu8hOW0qFm4idQJ0uz0YMyj2nYTogBmKGL3oZt5034JncZgf6lYMaNgp7ydw
AgHGi5Dzjbpgt7SL9mO06be0Xqj/9kzr2iee6MJ1W8ZhnWPyTlJcXN8LLQqc38D6
4EnxmaLIaJhhY14KKYWHeApefJ2AwhNgbxQlAQVswLnKcS2IvAN21JsQJD4xqWaN
0zu1D9aCk4Bx4vICuae8GSBPEiKu3jbrWy1PXRSnTn0VlPckTWqMmuCPDDgPAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUPuIrmnfbp3loznprNCXm7K7VcVcwHwYDVR0j
BBgwFoAUD9ZQBOfECF8tM98XNFJh7dmzqBEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUNCbkZOcGNrdlBlTjFwVXB2WVU3alI1MkhwYjFYNkRINFV3eFB5d3J0
aUEvMC8wRkQ2NTAwNEU3QzQwODVGMkQzM0RGMTczNDUyNjFFREQ5QjNBODExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGRDY1MDA0RTdDNDA4NUYy
RDMzREYxNzM0NTI2MUVERDlCM0E4MTEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVDQm5GTnBja3ZQZU4xcFVwdllVN2pSNTJIcGIxWDZESDRVd3hQeXdydGlBLzAv
MzIzODMwMzQzYTM1MzUzOTMwM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNzM5MzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEVZBAMA0GCSqGSIb3DQEBCwUA
A4IBAQBSQigI/TmpDpnPCSvq043Ipz3b923WGPqovW1SJ+oDXp6n8xPaKukOMSnO
pl28JX4oc8/Uynq7rDKePVPPonh/+UrUUhM3J64FFKyhEI+j7bBINjawncDTo59X
lQIapLYDyJYfxPStwm3Us5B1IWyzRhFmHKy1V3IqM0ja26sidZqlz6FBDMAwPWxs
27YFg52R4zg82y31CaQjBJfNwjSlMICb/7xg1By9VXANXNu6n0OCbegPewWLHvAF
YdJ6+Hsdr3moiG7/TpGQa1wslTkDHwaLoBnwbZXwdaT4jMNMxtEdG+NHubHlOW/x
5VttewczHrZjIFVZE9t2D9+Pr+Go
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:05:21 2025 by rpki-client