Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/323830343a3133383a613030303a3a2f34372d3437203d3e203131343332.roa
File: 323830343a3133383a613030303a3a2f34372d3437203d3e203131343332.roa (raw, json)
Hash identifier: Ogv+aWRVYaq/m3tuVWrvpV5SQrW6nzj0FCPiU5vnQgE=
Subject key identifier: B3:50:99:A0:F3:84:1D:23:D0:B7:6F:B4:A2:9B:71:A7:8F:2C:18:82
Certificate issuer: /CN=EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD
Certificate serial: 552D0F1A94290896D185C54BCC126F49A2A8F3FB
Authority key identifier: EF:37:AC:3A:AD:D3:EB:0F:41:65:34:BF:4E:8C:B3:C7:1C:32:BA:AD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/323830343a3133383a613030303a3a2f34372d3437203d3e203131343332.roa
Signing time: Mon 17 Mar 2025 16:50:59 +0000
ROA not before: Mon 17 Mar 2025 16:45:59 +0000
ROA not after: Mon 16 Mar 2026 16:50:59 +0000
asID: 11432
IP address blocks: 2804:138:a000::/47 maxlen: 47
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:2d:0f:1a:94:29:08:96:d1:85:c5:4b:cc:12:6f:49:a2:a8:f3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD
Validity
Not Before: Mar 17 16:45:59 2025 GMT
Not After : Mar 16 16:50:59 2026 GMT
Subject: CN=B35099A0F3841D23D0B76FB4A29B71A78F2C1882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:62:c1:86:a9:03:11:88:38:6e:30:c2:dd:82:
f9:af:f2:d9:73:9a:18:bb:b0:83:7e:33:5f:45:78:
91:34:37:11:aa:e8:38:4d:82:58:97:f2:63:11:89:
38:19:2a:28:58:56:36:f3:e0:ec:60:0c:e1:bc:ab:
22:cb:e9:41:78:e3:36:43:64:0b:ad:cb:94:d3:ab:
7a:97:ec:e3:b7:4d:b9:46:43:ab:3c:6a:d6:ae:6f:
c1:0b:16:c0:1e:40:29:1e:0c:59:a1:ad:ac:43:9a:
50:8e:9a:36:70:ee:1a:1c:bf:61:bb:47:ba:8a:64:
2f:84:23:14:05:d0:3d:2f:fb:a6:e2:ed:7d:5a:fe:
75:90:40:c4:6b:f7:05:d5:c3:d5:e7:a5:b0:bd:cc:
0f:c4:cb:61:1d:9c:d4:69:1c:2a:5b:3c:5f:9d:18:
54:b7:6a:be:cc:b1:7b:09:b7:9d:db:8d:10:0a:71:
39:4f:a4:e9:3d:f3:d3:22:bf:f9:1d:b2:1f:3e:29:
54:4c:9e:69:42:7e:15:be:8f:00:f2:90:cf:54:85:
6a:18:2d:f1:ae:64:97:c9:3a:f0:cd:70:63:41:5e:
8b:ea:2d:6f:7b:fd:38:59:e2:32:08:ae:95:e6:d4:
c8:81:40:c9:59:98:11:d4:c4:8c:e4:59:19:29:ac:
36:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:50:99:A0:F3:84:1D:23:D0:B7:6F:B4:A2:9B:71:A7:8F:2C:18:82
X509v3 Authority Key Identifier:
keyid:EF:37:AC:3A:AD:D3:EB:0F:41:65:34:BF:4E:8C:B3:C7:1C:32:BA:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/323830343a3133383a613030303a3a2f34372d3437203d3e203131343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:138:a000::/47
Signature Algorithm: sha256WithRSAEncryption
04:84:2e:7c:50:cc:08:64:46:e7:f7:23:01:31:a7:3c:7a:67:
91:fb:97:c5:9e:7f:99:be:20:df:46:c5:a1:51:a6:39:d2:c7:
54:32:60:43:1a:bd:b1:0c:d1:08:7b:fb:d4:8d:aa:c4:0a:d8:
73:d9:79:f0:c5:cf:82:83:9c:03:cb:ba:95:a3:4f:1b:16:fe:
2f:b1:7e:9b:78:35:ea:88:04:85:81:7e:2f:f4:49:6e:85:a4:
ab:c8:77:83:1f:9b:0c:97:02:e0:41:a7:f4:2e:32:23:c5:64:
5f:06:9c:d5:ed:2f:84:21:9d:ba:26:aa:f9:c3:3e:8b:3a:63:
ed:23:21:fd:e0:a3:c0:70:fd:b8:02:b9:94:bf:8c:af:5e:48:
d2:c3:9e:48:83:9b:b4:a1:d3:40:09:77:81:9c:57:d9:25:fa:
32:f3:68:05:33:f6:92:d9:97:07:0b:5b:82:3b:2a:ea:cf:90:
c5:4a:85:ce:b3:e7:41:7a:43:2d:3d:35:7c:cb:59:b0:01:15:
d5:22:40:26:01:cc:ea:1f:76:ab:37:7d:4c:24:f2:df:b7:b9:
ea:3f:6f:10:5e:14:85:7c:bc:68:bf:07:1b:f9:8b:d0:c5:6f:
2d:3c:73:8c:5e:13:19:c8:44:cc:79:26:b6:ca:70:f3:5b:85:
68:c5:e7:0d
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUVS0PGpQpCJbRhcVLzBJvSaKo8/swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUYzN0FDM0FBREQzRUIwRjQxNjUzNEJGNEU4Q0IzQzcx
QzMyQkFBRDAeFw0yNTAzMTcxNjQ1NTlaFw0yNjAzMTYxNjUwNTlaMDMxMTAvBgNV
BAMTKEIzNTA5OUEwRjM4NDFEMjNEMEI3NkZCNEEyOUI3MUE3OEYyQzE4ODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsYsGGqQMRiDhuMMLdgvmv8tlz
mhi7sIN+M19FeJE0NxGq6DhNgliX8mMRiTgZKihYVjbz4OxgDOG8qyLL6UF44zZD
ZAuty5TTq3qX7OO3TblGQ6s8ataub8ELFsAeQCkeDFmhraxDmlCOmjZw7hocv2G7
R7qKZC+EIxQF0D0v+6bi7X1a/nWQQMRr9wXVw9XnpbC9zA/Ey2EdnNRpHCpbPF+d
GFS3ar7MsXsJt53bjRAKcTlPpOk989Miv/kdsh8+KVRMnmlCfhW+jwDykM9UhWoY
LfGuZJfJOvDNcGNBXovqLW97/ThZ4jIIrpXm1MiBQMlZmBHUxIzkWRkprDaFAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUs1CZoPOEHSPQt2+0optxp48sGIIwHwYDVR0j
BBgwFoAU7zesOq3T6w9BZTS/Toyzxxwyuq0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnhHaHNRUHhpYlR6NFpKVk1CUGpETXdSdE1BOExmdmJQdms1enFaTWRQ
alMvMC9FRjM3QUMzQUFERDNFQjBGNDE2NTM0QkY0RThDQjNDNzFDMzJCQUFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VGMzdBQzNBQUREM0VCMEY0
MTY1MzRCRjRFOENCM0M3MUMzMkJBQUQuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ4R2hzUVB4aWJUejRaSlZNQlBqRE13UnRNQThMZnZiUHZrNXpxWk1kUGpTLzAv
MzIzODMwMzQzYTMxMzMzODNhNjEzMDMwMzAzYTNhMmYzNDM3MmQzNDM3MjAzZDNl
MjAzMTMxMzQzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKAQBOKAAMA0GCSqGSIb3DQEBCwUAA4IB
AQAEhC58UMwIZEbn9yMBMac8emeR+5fFnn+ZviDfRsWhUaY50sdUMmBDGr2xDNEI
e/vUjarECthz2Xnwxc+Cg5wDy7qVo08bFv4vsX6beDXqiASFgX4v9EluhaSryHeD
H5sMlwLgQaf0LjIjxWRfBpzV7S+EIZ26Jqr5wz6LOmPtIyH94KPAcP24ArmUv4yv
XkjSw55Ig5u0odNACXeBnFfZJfoy82gFM/aS2ZcHC1uCOyrqz5DFSoXOs+dBekMt
PTV8y1mwARXVIkAmAczqH3arN31MJPLft7nqP28QXhSFfLxovwcb+YvQxW8tPHOM
XhMZyETMeSa2ynDzW4VoxecN
-----END CERTIFICATE-----
Generated at Mon Apr 7 12:11:28 2025 by rpki-client