Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a393030303a3a2f33362d3336203d3e20323637393432.roa
File: 323830343a353539303a393030303a3a2f33362d3336203d3e20323637393432.roa (raw, json)
Hash identifier: 6tGy76Tt6OShtxYUVlUPJzI2BU3+MGRgBhmpdRnh0PA=
Subject key identifier: 74:4C:CF:81:91:27:82:DD:46:8B:0F:45:0C:AD:22:D7:82:4D:0F:B5
Certificate issuer: /CN=0FD65004E7C4085F2D33DF17345261EDD9B3A811
Certificate serial: 71A3F0DE580C099EF6A1C816F121FDBBB6D5EAB5
Authority key identifier: 0F:D6:50:04:E7:C4:08:5F:2D:33:DF:17:34:52:61:ED:D9:B3:A8:11
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FD65004E7C4085F2D33DF17345261EDD9B3A811.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a393030303a3a2f33362d3336203d3e20323637393432.roa
Signing time: Wed 26 Mar 2025 16:50:23 +0000
ROA not before: Wed 26 Mar 2025 16:45:23 +0000
ROA not after: Wed 25 Mar 2026 16:50:23 +0000
asID: 267942
IP address blocks: 2804:5590:9000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:a3:f0:de:58:0c:09:9e:f6:a1:c8:16:f1:21:fd:bb:b6:d5:ea:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FD65004E7C4085F2D33DF17345261EDD9B3A811
Validity
Not Before: Mar 26 16:45:23 2025 GMT
Not After : Mar 25 16:50:23 2026 GMT
Subject: CN=744CCF81912782DD468B0F450CAD22D7824D0FB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6a:a8:58:16:e8:e0:4c:de:3c:0f:ea:b9:62:
a5:71:e5:c9:3c:8e:7e:b7:47:ff:2d:71:0f:aa:ca:
19:bd:42:84:0b:ca:50:6e:c5:2e:a9:f9:6f:da:04:
fc:c9:1d:97:e3:3c:db:60:5e:bf:ac:19:8e:8a:5e:
da:b3:ac:3c:34:65:d6:54:9b:14:d5:b6:65:67:ad:
eb:fa:f6:58:46:90:6e:47:74:18:87:e7:1a:c6:68:
0b:9a:44:58:fb:81:1c:3d:b5:24:08:b6:0f:ab:d1:
33:b7:92:e9:6f:ea:92:04:9e:1e:2b:d1:26:d7:27:
f6:e6:12:6e:89:60:dc:06:40:4b:12:2a:d4:df:37:
51:51:0a:95:68:1b:20:4a:35:df:01:21:f7:c6:55:
2b:fc:48:b5:8e:f6:f8:d2:b8:f4:0d:3f:36:b9:e1:
d0:02:90:94:63:02:13:1c:60:7d:87:41:f7:2e:95:
f5:17:2e:5b:ba:50:50:15:2d:db:17:6a:b4:68:a9:
71:80:31:7f:17:81:f7:1b:75:82:d6:0f:f2:80:3f:
3c:b3:36:89:55:bc:52:ee:e8:81:3d:09:6b:54:4b:
d8:4e:a4:c4:4b:57:14:41:d7:27:49:8d:f1:a1:ff:
2d:7f:3f:e9:88:af:e8:e9:cb:66:09:13:d7:cb:ae:
b8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:4C:CF:81:91:27:82:DD:46:8B:0F:45:0C:AD:22:D7:82:4D:0F:B5
X509v3 Authority Key Identifier:
keyid:0F:D6:50:04:E7:C4:08:5F:2D:33:DF:17:34:52:61:ED:D9:B3:A8:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/0FD65004E7C4085F2D33DF17345261EDD9B3A811.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FD65004E7C4085F2D33DF17345261EDD9B3A811.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a393030303a3a2f33362d3336203d3e20323637393432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5590:9000::/36
Signature Algorithm: sha256WithRSAEncryption
20:48:bb:19:39:40:81:89:c6:4a:8e:5c:2a:1b:1f:b8:23:d2:
53:9f:74:21:f6:d1:ca:5b:52:55:2c:f3:7f:3b:2e:4d:d6:56:
65:78:e4:f1:74:7a:c5:cb:1d:59:0a:a6:43:73:09:3b:dc:13:
2c:a2:45:68:a8:37:69:fc:0e:da:69:2f:f3:31:ea:0f:df:ab:
3c:e6:91:08:4d:e9:24:6a:81:f1:31:28:2d:9a:9a:50:8b:09:
82:2d:18:92:6b:1c:f3:0f:30:e6:b4:d0:72:ee:9a:be:35:7a:
e5:3e:02:44:f5:b0:0c:e6:18:3d:97:23:b9:c5:a8:a2:8c:2b:
74:9a:02:3e:7c:fe:71:f0:17:6c:91:fb:22:47:8b:6a:20:78:
3b:99:73:ef:b0:fe:07:7b:cc:79:78:4f:ca:dc:b8:00:fb:66:
31:a5:22:03:73:c3:39:45:fb:36:f4:95:d0:ff:6b:b9:23:9f:
72:84:c9:ac:fc:97:85:c7:d3:88:ce:da:19:f1:f1:a0:a6:81:
c3:fd:12:28:f4:ae:7d:e9:75:10:2a:68:d9:bf:e9:34:8e:71:
9f:67:d5:20:2a:f7:72:bc:73:87:fa:61:e5:1f:e5:a1:5a:b3:
1f:30:c3:78:3c:41:08:c0:b5:04:f3:ca:fd:e5:95:2f:2d:57:
ae:78:73:97
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUcaPw3lgMCZ72ocgW8SH9u7bV6rUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEZENjUwMDRFN0M0MDg1RjJEMzNERjE3MzQ1MjYxRURE
OUIzQTgxMTAeFw0yNTAzMjYxNjQ1MjNaFw0yNjAzMjUxNjUwMjNaMDMxMTAvBgNV
BAMTKDc0NENDRjgxOTEyNzgyREQ0NjhCMEY0NTBDQUQyMkQ3ODI0RDBGQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFaqhYFujgTN48D+q5YqVx5ck8
jn63R/8tcQ+qyhm9QoQLylBuxS6p+W/aBPzJHZfjPNtgXr+sGY6KXtqzrDw0ZdZU
mxTVtmVnrev69lhGkG5HdBiH5xrGaAuaRFj7gRw9tSQItg+r0TO3kulv6pIEnh4r
0SbXJ/bmEm6JYNwGQEsSKtTfN1FRCpVoGyBKNd8BIffGVSv8SLWO9vjSuPQNPza5
4dACkJRjAhMcYH2HQfculfUXLlu6UFAVLdsXarRoqXGAMX8XgfcbdYLWD/KAPzyz
NolVvFLu6IE9CWtUS9hOpMRLVxRB1ydJjfGh/y1/P+mIr+jpy2YJE9fLrrhbAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUdEzPgZEngt1Giw9FDK0i14JND7UwHwYDVR0j
BBgwFoAUD9ZQBOfECF8tM98XNFJh7dmzqBEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUNCbkZOcGNrdlBlTjFwVXB2WVU3alI1MkhwYjFYNkRINFV3eFB5d3J0
aUEvMC8wRkQ2NTAwNEU3QzQwODVGMkQzM0RGMTczNDUyNjFFREQ5QjNBODExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGRDY1MDA0RTdDNDA4NUYy
RDMzREYxNzM0NTI2MUVERDlCM0E4MTEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVDQm5GTnBja3ZQZU4xcFVwdllVN2pSNTJIcGIxWDZESDRVd3hQeXdydGlBLzAv
MzIzODMwMzQzYTM1MzUzOTMwM2EzOTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNzM5MzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEVZCQMA0GCSqGSIb3DQEBCwUA
A4IBAQAgSLsZOUCBicZKjlwqGx+4I9JTn3Qh9tHKW1JVLPN/Oy5N1lZleOTxdHrF
yx1ZCqZDcwk73BMsokVoqDdp/A7aaS/zMeoP36s85pEITekkaoHxMSgtmppQiwmC
LRiSaxzzDzDmtNBy7pq+NXrlPgJE9bAM5hg9lyO5xaiijCt0mgI+fP5x8Bdskfsi
R4tqIHg7mXPvsP4He8x5eE/K3LgA+2YxpSIDc8M5Rfs29JXQ/2u5I59yhMms/JeF
x9OIztoZ8fGgpoHD/RIo9K596XUQKmjZv+k0jnGfZ9UgKvdyvHOH+mHlH+WhWrMf
MMN4PEEIwLUE88r95ZUvLVeueHOX
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:05:14 2025 by rpki-client