Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a623030303a3a2f33362d3336203d3e20323637393432.roa
File: 323830343a353539303a623030303a3a2f33362d3336203d3e20323637393432.roa (raw, json)
Hash identifier: TjSMLzhLYyaCqDFARCbTfs1znZOE7cUlapUDHtNtSn4=
Subject key identifier: 74:6E:8D:77:09:FB:65:C5:1C:D3:2E:05:19:36:ED:81:B9:78:43:A5
Certificate issuer: /CN=0FD65004E7C4085F2D33DF17345261EDD9B3A811
Certificate serial: 398440498AFA40A108BA9B8219F8748FBDF23F1A
Authority key identifier: 0F:D6:50:04:E7:C4:08:5F:2D:33:DF:17:34:52:61:ED:D9:B3:A8:11
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FD65004E7C4085F2D33DF17345261EDD9B3A811.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a623030303a3a2f33362d3336203d3e20323637393432.roa
Signing time: Wed 26 Mar 2025 16:51:01 +0000
ROA not before: Wed 26 Mar 2025 16:46:01 +0000
ROA not after: Wed 25 Mar 2026 16:51:01 +0000
asID: 267942
IP address blocks: 2804:5590:b000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:84:40:49:8a:fa:40:a1:08:ba:9b:82:19:f8:74:8f:bd:f2:3f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FD65004E7C4085F2D33DF17345261EDD9B3A811
Validity
Not Before: Mar 26 16:46:01 2025 GMT
Not After : Mar 25 16:51:01 2026 GMT
Subject: CN=746E8D7709FB65C51CD32E051936ED81B97843A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:85:2e:a8:f5:06:59:95:0e:6a:ea:99:67:23:
bf:52:ce:f7:53:45:2d:6f:8a:c9:55:7b:53:cd:1d:
20:26:74:c9:20:16:93:9b:be:ca:7a:58:68:e2:2d:
98:13:25:cf:44:73:32:01:93:70:1f:e7:c5:d0:b3:
2c:2c:1d:d3:20:62:ab:c0:1f:e7:e4:e4:a9:fa:35:
23:58:69:cb:05:f2:ae:0f:85:a4:27:91:7b:c4:1d:
96:59:0d:e2:32:9b:e7:d3:41:02:e0:69:1c:e4:44:
7f:2d:5a:09:dc:19:ca:1d:ae:ca:91:95:ca:e6:98:
f1:60:04:12:25:39:7d:2b:06:37:78:70:c0:de:9f:
2c:c2:96:54:5d:72:a6:4a:e0:55:15:b1:44:3f:23:
67:70:d8:f9:87:3c:c3:7e:06:4c:67:b6:ca:cd:f3:
98:05:d1:53:ef:6e:2a:6f:36:22:2c:9e:26:78:12:
93:22:d3:96:2a:52:fa:28:d7:f0:2d:33:bd:07:ed:
f6:94:12:9d:44:a2:3c:50:14:f9:db:d7:d4:14:c7:
44:94:e7:b6:ee:18:f2:21:fa:fe:0a:a4:ea:15:55:
58:71:34:0b:26:33:ad:72:91:9e:4a:ef:4b:e9:40:
6d:d9:55:ff:90:0b:36:9a:82:fb:a1:4d:65:f8:45:
81:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6E:8D:77:09:FB:65:C5:1C:D3:2E:05:19:36:ED:81:B9:78:43:A5
X509v3 Authority Key Identifier:
keyid:0F:D6:50:04:E7:C4:08:5F:2D:33:DF:17:34:52:61:ED:D9:B3:A8:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/0FD65004E7C4085F2D33DF17345261EDD9B3A811.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FD65004E7C4085F2D33DF17345261EDD9B3A811.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a623030303a3a2f33362d3336203d3e20323637393432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5590:b000::/36
Signature Algorithm: sha256WithRSAEncryption
12:94:a2:b7:c4:6d:ea:1c:bc:6c:ee:e0:fa:14:8a:2e:fa:45:
7b:44:7d:93:c5:c6:93:28:70:ca:40:80:e9:80:5c:ca:41:6c:
e4:46:d9:4d:a3:8d:be:32:21:f5:a0:05:43:c1:bd:ea:ad:5c:
9b:1e:e1:d6:13:8b:ac:9c:0a:89:64:38:bb:6e:81:42:c0:0d:
b0:68:03:2a:99:e6:b5:d5:cf:8a:bc:ee:67:a0:07:0e:20:bc:
01:8b:e9:d3:75:61:5f:88:95:43:d8:7d:ad:2c:3e:94:86:07:
49:95:d2:0a:b4:2b:8e:60:90:4a:ab:e5:ff:02:f3:04:cc:66:
22:9c:aa:53:49:61:be:ea:36:cb:2e:3e:3d:40:73:2f:9b:7f:
da:c1:19:f7:c2:a3:d2:9a:33:88:14:9f:d8:36:91:6b:66:4c:
7d:8c:2f:3b:36:8e:ad:55:b7:b1:09:ac:b3:10:5c:60:86:cb:
c6:bf:0d:aa:94:5b:59:a0:06:de:2c:0b:28:6b:7f:8a:e1:7b:
a7:6c:12:ea:46:bf:93:b7:48:ef:14:f0:5d:1f:37:c4:5f:3a:
66:82:9f:3f:bd:66:26:7d:94:cf:0a:be:07:e6:a3:f7:36:d7:
ee:a7:b6:b8:5d:5c:9e:da:f4:f5:bb:9c:b2:f7:8f:ca:1f:b5:
af:8f:0c:59
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUOYRASYr6QKEIupuCGfh0j73yPxowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEZENjUwMDRFN0M0MDg1RjJEMzNERjE3MzQ1MjYxRURE
OUIzQTgxMTAeFw0yNTAzMjYxNjQ2MDFaFw0yNjAzMjUxNjUxMDFaMDMxMTAvBgNV
BAMTKDc0NkU4RDc3MDlGQjY1QzUxQ0QzMkUwNTE5MzZFRDgxQjk3ODQzQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqhS6o9QZZlQ5q6plnI79SzvdT
RS1vislVe1PNHSAmdMkgFpObvsp6WGjiLZgTJc9EczIBk3Af58XQsywsHdMgYqvA
H+fk5Kn6NSNYacsF8q4PhaQnkXvEHZZZDeIym+fTQQLgaRzkRH8tWgncGcodrsqR
lcrmmPFgBBIlOX0rBjd4cMDenyzCllRdcqZK4FUVsUQ/I2dw2PmHPMN+BkxntsrN
85gF0VPvbipvNiIsniZ4EpMi05YqUvoo1/AtM70H7faUEp1EojxQFPnb19QUx0SU
57buGPIh+v4KpOoVVVhxNAsmM61ykZ5K70vpQG3ZVf+QCzaagvuhTWX4RYEXAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUdG6Ndwn7ZcUc0y4FGTbtgbl4Q6UwHwYDVR0j
BBgwFoAUD9ZQBOfECF8tM98XNFJh7dmzqBEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUNCbkZOcGNrdlBlTjFwVXB2WVU3alI1MkhwYjFYNkRINFV3eFB5d3J0
aUEvMC8wRkQ2NTAwNEU3QzQwODVGMkQzM0RGMTczNDUyNjFFREQ5QjNBODExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGRDY1MDA0RTdDNDA4NUYy
RDMzREYxNzM0NTI2MUVERDlCM0E4MTEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVDQm5GTnBja3ZQZU4xcFVwdllVN2pSNTJIcGIxWDZESDRVd3hQeXdydGlBLzAv
MzIzODMwMzQzYTM1MzUzOTMwM2E2MjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNzM5MzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEVZCwMA0GCSqGSIb3DQEBCwUA
A4IBAQASlKK3xG3qHLxs7uD6FIou+kV7RH2TxcaTKHDKQIDpgFzKQWzkRtlNo42+
MiH1oAVDwb3qrVybHuHWE4usnAqJZDi7boFCwA2waAMqmea11c+KvO5noAcOILwB
i+nTdWFfiJVD2H2tLD6UhgdJldIKtCuOYJBKq+X/AvMEzGYinKpTSWG+6jbLLj49
QHMvm3/awRn3wqPSmjOIFJ/YNpFrZkx9jC87No6tVbexCayzEFxghsvGvw2qlFtZ
oAbeLAsoa3+K4XunbBLqRr+Tt0jvFPBdHzfEXzpmgp8/vWYmfZTPCr4H5qP3Ntfu
p7a4XVye2vT1u5yy94/KH7WvjwxZ
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:07:47 2025 by rpki-client