Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a383030303a3a2f33342d3334203d3e20323732313832.roa
File: 323830343a383333303a383030303a3a2f33342d3334203d3e20323732313832.roa (raw, json)
Hash identifier: SzA9LaB8AXkC+YrHhcvMlnjWPujSFOq5cMUKCk4AYec=
Subject key identifier: 5A:D3:4A:71:91:6F:DD:5A:DF:97:32:B3:56:77:1B:EF:8C:44:F3:7E
Certificate issuer: /CN=559FAD9D2467C9C1C11068D2B0E3E2E7CD1C1B3F
Certificate serial: 39C0BC0B3A9EE53BCF29E90C74EAB6B9E37BC917
Authority key identifier: 55:9F:AD:9D:24:67:C9:C1:C1:10:68:D2:B0:E3:E2:E7:CD:1C:1B:3F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/559FAD9D2467C9C1C11068D2B0E3E2E7CD1C1B3F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a383030303a3a2f33342d3334203d3e20323732313832.roa
Signing time: Thu 20 Mar 2025 19:36:14 +0000
ROA not before: Thu 20 Mar 2025 19:31:14 +0000
ROA not after: Thu 19 Mar 2026 19:36:14 +0000
asID: 272182
IP address blocks: 2804:8330:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:c0:bc:0b:3a:9e:e5:3b:cf:29:e9:0c:74:ea:b6:b9:e3:7b:c9:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559FAD9D2467C9C1C11068D2B0E3E2E7CD1C1B3F
Validity
Not Before: Mar 20 19:31:14 2025 GMT
Not After : Mar 19 19:36:14 2026 GMT
Subject: CN=5AD34A71916FDD5ADF9732B356771BEF8C44F37E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:40:c4:40:e4:a0:31:b2:e2:b0:29:cb:f8:63:
a4:10:fd:91:50:2d:3c:f2:5b:1f:d8:12:3b:19:3d:
f7:92:da:c1:48:07:32:3d:02:ed:0b:a6:5e:d0:02:
bd:c7:01:e2:ef:3d:c4:68:b1:63:06:c9:65:b9:68:
28:cb:11:72:df:77:9e:66:60:a8:3b:66:03:4f:2a:
7b:72:2c:2f:99:2a:ef:f2:33:32:46:9b:7c:ee:41:
a4:ac:d7:98:a1:8a:91:96:a0:3d:e6:3d:82:ad:12:
d3:ca:ff:c9:5a:a9:73:b7:6d:97:73:b8:f9:e5:7d:
b5:a5:ea:73:b7:93:78:ce:8f:e9:e7:26:96:5a:63:
88:d3:04:60:39:43:9b:3e:f0:aa:a1:7f:25:c9:ec:
76:64:69:38:4e:6c:42:79:7c:85:fe:d6:fa:32:27:
42:ff:14:29:62:31:c5:1c:93:f6:3c:30:89:20:65:
87:84:72:9a:df:ee:57:79:c0:3d:6a:77:f8:e7:0f:
05:fc:1d:86:f5:5f:ae:ea:35:78:6c:9e:dc:6c:6f:
31:de:48:3a:99:81:60:55:b1:67:97:88:2c:89:1f:
2c:08:ad:af:95:d1:24:d5:ff:65:00:06:9c:e2:64:
50:9e:0b:1b:d5:a1:f6:09:21:e7:33:f6:5f:fb:16:
83:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D3:4A:71:91:6F:DD:5A:DF:97:32:B3:56:77:1B:EF:8C:44:F3:7E
X509v3 Authority Key Identifier:
keyid:55:9F:AD:9D:24:67:C9:C1:C1:10:68:D2:B0:E3:E2:E7:CD:1C:1B:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/559FAD9D2467C9C1C11068D2B0E3E2E7CD1C1B3F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/559FAD9D2467C9C1C11068D2B0E3E2E7CD1C1B3F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a383030303a3a2f33342d3334203d3e20323732313832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8330:8000::/34
Signature Algorithm: sha256WithRSAEncryption
55:ea:28:ec:91:36:7e:21:8f:57:ea:90:b8:78:96:66:42:1b:
67:aa:f5:1d:38:7d:76:d6:c7:bc:16:dd:e0:91:ff:07:0c:db:
80:18:04:b1:ac:37:51:b8:ff:66:e5:a6:48:56:41:af:6e:7f:
76:33:40:fa:9f:cb:29:d3:e3:6a:a0:01:5d:f5:47:63:9a:68:
5f:f7:06:4e:f5:0c:bf:a4:37:c8:8e:e1:9c:4e:5c:05:50:7a:
ea:08:16:07:bd:be:82:ad:f8:6b:e1:bb:1b:06:0a:9a:14:02:
c0:72:a4:49:7d:eb:05:44:41:8f:5d:b2:8c:7a:74:0d:bc:7a:
14:3d:5f:ea:d5:66:89:be:db:9b:42:3f:63:e7:30:27:3c:dc:
6e:ae:0c:be:b7:59:1d:9b:17:09:ba:d6:df:78:ee:1c:03:3d:
28:9f:7b:f7:96:69:8d:0a:10:b2:fe:d2:b5:cb:6b:3c:b4:36:
61:12:14:d9:43:84:5c:55:4c:7c:77:2c:83:20:6e:46:7c:a6:
5f:7e:be:b1:c7:eb:e0:0b:2b:4d:95:18:86:2e:29:71:5e:4c:
81:3f:de:fb:8e:48:40:6b:0a:b6:d8:97:7a:2b:62:a8:cd:0b:
d3:29:6c:54:81:67:ba:2c:ec:ab:a1:d1:f4:56:68:18:7c:61:
b7:5f:7b:37
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUOcC8Czqe5TvPKekMdOq2ueN7yRcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTU5RkFEOUQyNDY3QzlDMUMxMTA2OEQyQjBFM0UyRTdD
RDFDMUIzRjAeFw0yNTAzMjAxOTMxMTRaFw0yNjAzMTkxOTM2MTRaMDMxMTAvBgNV
BAMTKDVBRDM0QTcxOTE2RkRENUFERjk3MzJCMzU2NzcxQkVGOEM0NEYzN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6QMRA5KAxsuKwKcv4Y6QQ/ZFQ
LTzyWx/YEjsZPfeS2sFIBzI9Au0Lpl7QAr3HAeLvPcRosWMGyWW5aCjLEXLfd55m
YKg7ZgNPKntyLC+ZKu/yMzJGm3zuQaSs15ihipGWoD3mPYKtEtPK/8laqXO3bZdz
uPnlfbWl6nO3k3jOj+nnJpZaY4jTBGA5Q5s+8KqhfyXJ7HZkaThObEJ5fIX+1voy
J0L/FCliMcUck/Y8MIkgZYeEcprf7ld5wD1qd/jnDwX8HYb1X67qNXhsntxsbzHe
SDqZgWBVsWeXiCyJHywIra+V0STV/2UABpziZFCeCxvVofYJIecz9l/7FoPhAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUWtNKcZFv3VrflzKzVncb74xE834wHwYDVR0j
BBgwFoAUVZ+tnSRnycHBEGjSsOPi580cGz8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFR6ZEdLVVNaOXZCdktYdko1MWd4VnI5Y1dQR01BUEtYRjNIYWJvY2tG
UGcvMC81NTlGQUQ5RDI0NjdDOUMxQzExMDY4RDJCMEUzRTJFN0NEMUMxQjNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU1OUZBRDlEMjQ2N0M5QzFD
MTEwNjhEMkIwRTNFMkU3Q0QxQzFCM0YuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhUemRHS1VTWjl2QnZLWHZKNTFneFZyOWNXUEdNQVBLWEYzSGFib2NrRlBnLzAv
MzIzODMwMzQzYTM4MzMzMzMwM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMjMxMzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEgzCAMA0GCSqGSIb3DQEBCwUA
A4IBAQBV6ijskTZ+IY9X6pC4eJZmQhtnqvUdOH121se8Ft3gkf8HDNuAGASxrDdR
uP9m5aZIVkGvbn92M0D6n8sp0+NqoAFd9Udjmmhf9wZO9Qy/pDfIjuGcTlwFUHrq
CBYHvb6Crfhr4bsbBgqaFALAcqRJfesFREGPXbKMenQNvHoUPV/q1WaJvtubQj9j
5zAnPNxurgy+t1kdmxcJutbfeO4cAz0on3v3lmmNChCy/tK1y2s8tDZhEhTZQ4Rc
VUx8dyyDIG5GfKZffr6xx+vgCytNlRiGLilxXkyBP977jkhAawq22Jd6K2KozQvT
KWxUgWe6LOyrodH0VmgYfGG3X3s3
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:36:16 2025 by rpki-client