Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/323830343a333365633a3a2f33332d3333203d3e20323635343235.roa
File: 323830343a333365633a3a2f33332d3333203d3e20323635343235.roa (raw, json)
Hash identifier: sau1gZQqGxfz85qo0i2qbo2Nh7RVr0qJvhyo/Ete0UI=
Subject key identifier: 0B:8E:9B:0D:E4:EB:0B:A7:E8:F8:61:83:3A:4A:97:49:CA:F6:D5:4B
Certificate issuer: /CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
Certificate serial: 2ED9C4A38DF0BE1152BAE084FD86EA330A6DEFC2
Authority key identifier: 0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/323830343a333365633a3a2f33332d3333203d3e20323635343235.roa
Signing time: Wed 05 Mar 2025 19:00:00 +0000
ROA not before: Wed 05 Mar 2025 18:55:00 +0000
ROA not after: Wed 04 Mar 2026 19:00:00 +0000
asID: 265425
IP address blocks: 2804:33ec::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:d9:c4:a3:8d:f0:be:11:52:ba:e0:84:fd:86:ea:33:0a:6d:ef:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
Validity
Not Before: Mar 5 18:55:00 2025 GMT
Not After : Mar 4 19:00:00 2026 GMT
Subject: CN=0B8E9B0DE4EB0BA7E8F861833A4A9749CAF6D54B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3f:82:d9:56:cb:96:49:35:e7:ba:a0:76:ac:
d3:2e:bc:99:72:ba:7a:11:b2:e9:21:64:78:7c:cf:
66:3b:09:d2:e5:dd:24:a6:26:ab:c5:ed:3d:81:66:
1c:a4:e5:ba:57:7f:85:a3:fa:46:33:f7:6b:70:38:
3e:7c:dd:23:56:b4:a1:54:b4:c3:87:db:4e:2b:30:
7c:ff:49:2e:61:7c:9b:db:56:f8:e4:3e:e7:db:df:
ba:e2:68:e6:d9:0a:c5:1f:4e:a4:b9:a2:64:91:c0:
10:a8:75:db:53:c0:1f:59:e7:69:5f:e7:2d:f8:cd:
cb:2e:86:5d:fc:24:60:1b:2f:99:17:c7:53:98:ba:
57:bd:c9:61:3e:f7:52:69:42:79:52:ad:c6:46:85:
d8:72:9f:56:9a:3c:b2:7a:e2:79:06:6d:54:04:16:
6f:37:d7:d7:77:29:e6:b2:5b:d4:a9:ba:ee:71:37:
8a:c6:53:a5:7a:fc:ad:a0:a9:17:81:5e:12:8b:1f:
7f:49:46:b4:cd:1d:26:55:ba:a7:8a:8c:08:c5:67:
ec:9b:e8:96:42:e8:a2:32:4e:b1:39:93:e8:ee:74:
73:4f:07:e4:74:fb:79:19:25:40:44:89:a8:f0:87:
09:b1:8f:3d:a7:0c:8e:3f:3a:6d:ae:ab:f2:32:3a:
6a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8E:9B:0D:E4:EB:0B:A7:E8:F8:61:83:3A:4A:97:49:CA:F6:D5:4B
X509v3 Authority Key Identifier:
keyid:0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/323830343a333365633a3a2f33332d3333203d3e20323635343235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:33ec::/33
Signature Algorithm: sha256WithRSAEncryption
5e:c9:71:11:8d:08:87:c9:69:f1:35:04:7f:80:95:9f:6a:e6:
82:9e:4c:01:5f:a7:98:dc:7f:09:31:2b:32:6a:4c:e1:ea:50:
5b:ec:2f:3c:f6:02:8f:d2:48:22:50:34:03:90:6c:e0:8a:57:
60:2e:26:d8:b9:6d:67:93:89:a0:98:47:a4:e5:66:07:dc:76:
1e:9a:93:25:de:be:49:2e:46:12:a5:21:cb:68:d8:24:0f:ef:
da:86:18:3f:5d:9c:01:19:24:18:5e:42:34:38:85:6c:2a:f2:
d0:6f:84:b6:03:4a:89:07:72:a5:e7:a6:ae:91:9a:06:4a:c4:
e3:e9:c5:06:aa:70:d2:ef:09:6d:8c:a8:63:87:ea:9a:fe:47:
42:99:0a:f5:c9:fb:ae:ee:eb:24:82:9d:fc:1a:13:19:53:9e:
cf:8c:6f:d5:27:22:84:02:1c:e4:52:2f:48:49:56:4d:cd:e9:
4a:13:f7:41:66:c6:eb:b8:4c:ad:e6:2c:9c:25:86:ea:66:8c:
c6:11:f5:55:06:a4:3d:c0:a3:81:a1:a7:5c:69:df:a6:7a:59:
ce:91:ad:ee:22:05:0f:3b:15:35:ee:c4:4c:89:b8:6b:a0:1b:
e0:60:cb:b1:2d:50:1e:2b:48:9e:e8:6b:9d:5a:ef:b0:64:56:
3e:65:00:b8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULtnEo43wvhFSuuCE/YbqMwpt78IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEIwNkQzQkQ0MkFFMjk1RjE3Q0Y1MkQ1OEE1QkEzMEJD
RTkxQkZGOTAeFw0yNTAzMDUxODU1MDBaFw0yNjAzMDQxOTAwMDBaMDMxMTAvBgNV
BAMTKDBCOEU5QjBERTRFQjBCQTdFOEY4NjE4MzNBNEE5NzQ5Q0FGNkQ1NEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7P4LZVsuWSTXnuqB2rNMuvJly
unoRsukhZHh8z2Y7CdLl3SSmJqvF7T2BZhyk5bpXf4Wj+kYz92twOD583SNWtKFU
tMOH204rMHz/SS5hfJvbVvjkPufb37riaObZCsUfTqS5omSRwBCoddtTwB9Z52lf
5y34zcsuhl38JGAbL5kXx1OYule9yWE+91JpQnlSrcZGhdhyn1aaPLJ64nkGbVQE
Fm8319d3KeayW9Spuu5xN4rGU6V6/K2gqReBXhKLH39JRrTNHSZVuqeKjAjFZ+yb
6JZC6KIyTrE5k+judHNPB+R0+3kZJUBEiajwhwmxjz2nDI4/Om2uq/IyOmq5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUC46bDeTrC6fo+GGDOkqXScr21UswHwYDVR0j
BBgwFoAUCwbTvUKuKV8Xz1LVilujC86Rv/kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUVXMVM1RnNhTUhpNE5vWjlGeVF1S3lpeU14Q3VQZzZVeGlQNng1QTdV
NGgvMi8wQjA2RDNCRDQyQUUyOTVGMTdDRjUyRDU4QTVCQTMwQkNFOTFCRkY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBCMDZEM0JENDJBRTI5NUYx
N0NGNTJENThBNUJBMzBCQ0U5MUJGRjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVFVzFTNUZzYU1IaTROb1o5RnlRdUt5aXlNeEN1UGc2VXhpUDZ4NUE3VTRoLzIv
MzIzODMwMzQzYTMzMzM2NTYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM1
MzQzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQz7AAwDQYJKoZIhvcNAQELBQADggEBAF7JcRGN
CIfJafE1BH+AlZ9q5oKeTAFfp5jcfwkxKzJqTOHqUFvsLzz2Ao/SSCJQNAOQbOCK
V2AuJti5bWeTiaCYR6TlZgfcdh6akyXevkkuRhKlIcto2CQP79qGGD9dnAEZJBhe
QjQ4hWwq8tBvhLYDSokHcqXnpq6RmgZKxOPpxQaqcNLvCW2MqGOH6pr+R0KZCvXJ
+67u6ySCnfwaExlTns+Mb9UnIoQCHORSL0hJVk3N6UoT90Fmxuu4TK3mLJwlhupm
jMYR9VUGpD3Ao4Ghp1xp36Z6Wc6Rre4iBQ87FTXuxEyJuGugG+Bgy7EtUB4rSJ7o
a51a77BkVj5lALg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:42:03 2025 by rpki-client