Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a353030303a3a2f33362d3336203d3e20323637393432.roa
File: 323830343a353539303a353030303a3a2f33362d3336203d3e20323637393432.roa (raw, json)
Hash identifier: LN/z9S5vWEy9mylIA0kUVbeOxkZ8bjdOcIiLHgwbcOs=
Subject key identifier: 52:AC:AF:A2:12:48:6D:D7:64:CB:59:F1:34:FB:2D:C9:08:03:CE:E2
Certificate issuer: /CN=0FD65004E7C4085F2D33DF17345261EDD9B3A811
Certificate serial: 0631E74ADBBF98AC76D0FB23723F5E6838344513
Authority key identifier: 0F:D6:50:04:E7:C4:08:5F:2D:33:DF:17:34:52:61:ED:D9:B3:A8:11
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FD65004E7C4085F2D33DF17345261EDD9B3A811.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a353030303a3a2f33362d3336203d3e20323637393432.roa
Signing time: Wed 26 Mar 2025 16:49:59 +0000
ROA not before: Wed 26 Mar 2025 16:44:59 +0000
ROA not after: Wed 25 Mar 2026 16:49:59 +0000
asID: 267942
IP address blocks: 2804:5590:5000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:31:e7:4a:db:bf:98:ac:76:d0:fb:23:72:3f:5e:68:38:34:45:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FD65004E7C4085F2D33DF17345261EDD9B3A811
Validity
Not Before: Mar 26 16:44:59 2025 GMT
Not After : Mar 25 16:49:59 2026 GMT
Subject: CN=52ACAFA212486DD764CB59F134FB2DC90803CEE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:93:7f:6c:49:3f:00:d4:d5:a2:4f:88:da:7a:
95:33:13:f5:ef:31:3d:16:d2:0a:e0:ee:d6:55:09:
4c:2f:ae:d0:af:a3:9e:b6:ae:5e:4c:98:dd:87:c3:
ef:04:79:1b:fa:74:cc:4e:73:00:06:a6:01:29:5f:
4a:29:5b:f7:92:3a:97:0d:3c:04:9e:19:f0:40:08:
d1:12:57:26:46:4c:56:c0:68:a1:4d:3d:2b:2b:21:
3a:0b:8b:31:a9:bc:cd:a3:05:15:49:67:a5:f3:28:
d9:80:8c:28:61:81:e0:7c:de:cc:8f:97:c0:4b:ac:
ec:46:07:82:2c:38:2c:b0:6e:e8:ec:f5:d4:4a:79:
f4:0b:65:8e:20:9d:53:3f:4c:db:19:6e:ec:ce:f6:
4b:f8:14:c3:68:7f:e1:3c:94:29:45:68:fa:ab:2a:
b6:bd:d1:0b:85:1f:b3:95:ec:78:a0:92:20:43:5f:
c5:c3:ef:8e:39:1a:83:19:b5:b4:56:e1:19:6f:c2:
c3:9e:4e:52:a5:02:e7:0e:d1:74:ad:40:5a:b0:cd:
67:04:53:76:e2:65:81:6f:4d:73:7d:a6:44:fa:c2:
94:aa:96:6b:16:d1:16:2b:b9:67:1e:39:cc:72:75:
e8:fc:38:66:72:4f:23:d5:50:38:d3:78:b7:af:4e:
fd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AC:AF:A2:12:48:6D:D7:64:CB:59:F1:34:FB:2D:C9:08:03:CE:E2
X509v3 Authority Key Identifier:
keyid:0F:D6:50:04:E7:C4:08:5F:2D:33:DF:17:34:52:61:ED:D9:B3:A8:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/0FD65004E7C4085F2D33DF17345261EDD9B3A811.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FD65004E7C4085F2D33DF17345261EDD9B3A811.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a353030303a3a2f33362d3336203d3e20323637393432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5590:5000::/36
Signature Algorithm: sha256WithRSAEncryption
8d:d2:6d:37:2a:f5:31:e0:c5:97:b2:a2:4c:2b:8c:3d:99:7c:
68:15:37:78:fb:6f:3e:a8:08:ef:47:08:8b:7b:ca:70:b5:85:
b9:f9:41:8b:80:4c:66:a8:8a:55:e9:b3:14:32:80:6e:29:b5:
b9:68:3a:01:96:c0:62:b8:e5:10:36:63:fd:e1:66:0d:65:2d:
71:79:5d:0d:1e:c0:b0:8c:81:b1:df:78:0a:c7:8a:5f:24:2c:
dd:03:f2:93:7b:85:17:91:d6:c7:09:d4:f3:ea:70:35:fc:78:
6c:9f:8c:65:6d:47:3a:53:3b:10:44:58:98:ef:63:ac:7b:6c:
64:e8:f8:cd:5d:6d:da:79:4a:4e:85:bb:14:09:6c:8e:e2:e2:
4a:1e:f7:9d:6b:a3:f3:66:0e:bf:2f:4e:82:37:60:6f:29:05:
ad:e9:44:e4:f0:80:78:4d:48:61:04:6e:75:67:b3:6a:32:0b:
20:11:45:b2:53:76:e7:2b:e9:7e:d1:82:66:a9:52:80:33:b9:
c6:da:90:75:44:fc:f0:3d:ea:67:9f:bc:89:2c:b9:c0:6a:b9:
0f:fa:a9:1f:50:6e:3a:0a:42:df:82:62:bb:a5:d2:82:4f:f4:
70:1e:32:2e:bd:ba:4a:f4:78:6a:7f:21:46:3a:0c:35:9d:fe:
b2:36:a6:42
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUBjHnStu/mKx20Psjcj9eaDg0RRMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEZENjUwMDRFN0M0MDg1RjJEMzNERjE3MzQ1MjYxRURE
OUIzQTgxMTAeFw0yNTAzMjYxNjQ0NTlaFw0yNjAzMjUxNjQ5NTlaMDMxMTAvBgNV
BAMTKDUyQUNBRkEyMTI0ODZERDc2NENCNTlGMTM0RkIyREM5MDgwM0NFRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6k39sST8A1NWiT4jaepUzE/Xv
MT0W0grg7tZVCUwvrtCvo562rl5MmN2Hw+8EeRv6dMxOcwAGpgEpX0opW/eSOpcN
PASeGfBACNESVyZGTFbAaKFNPSsrIToLizGpvM2jBRVJZ6XzKNmAjChhgeB83syP
l8BLrOxGB4IsOCywbujs9dRKefQLZY4gnVM/TNsZbuzO9kv4FMNof+E8lClFaPqr
Kra90QuFH7OV7HigkiBDX8XD7445GoMZtbRW4RlvwsOeTlKlAucO0XStQFqwzWcE
U3biZYFvTXN9pkT6wpSqlmsW0RYruWceOcxydej8OGZyTyPVUDjTeLevTv0lAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUUqyvohJIbddky1nxNPstyQgDzuIwHwYDVR0j
BBgwFoAUD9ZQBOfECF8tM98XNFJh7dmzqBEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUNCbkZOcGNrdlBlTjFwVXB2WVU3alI1MkhwYjFYNkRINFV3eFB5d3J0
aUEvMC8wRkQ2NTAwNEU3QzQwODVGMkQzM0RGMTczNDUyNjFFREQ5QjNBODExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGRDY1MDA0RTdDNDA4NUYy
RDMzREYxNzM0NTI2MUVERDlCM0E4MTEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVDQm5GTnBja3ZQZU4xcFVwdllVN2pSNTJIcGIxWDZESDRVd3hQeXdydGlBLzAv
MzIzODMwMzQzYTM1MzUzOTMwM2EzNTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNzM5MzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEVZBQMA0GCSqGSIb3DQEBCwUA
A4IBAQCN0m03KvUx4MWXsqJMK4w9mXxoFTd4+28+qAjvRwiLe8pwtYW5+UGLgExm
qIpV6bMUMoBuKbW5aDoBlsBiuOUQNmP94WYNZS1xeV0NHsCwjIGx33gKx4pfJCzd
A/KTe4UXkdbHCdTz6nA1/Hhsn4xlbUc6UzsQRFiY72Ose2xk6PjNXW3aeUpOhbsU
CWyO4uJKHveda6PzZg6/L06CN2BvKQWt6UTk8IB4TUhhBG51Z7NqMgsgEUWyU3bn
K+l+0YJmqVKAM7nG2pB1RPzwPepnn7yJLLnAarkP+qkfUG46CkLfgmK7pdKCT/Rw
HjIuvbpK9HhqfyFGOgw1nf6yNqZC
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:07:47 2025 by rpki-client