Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9Jntmgh3CAPNBCL9EALqgi6ffxESBTypqRrVfqixHCsj/0/323830343a346362303a3a2f33342d313238203d3e20323637333835.roa
File: 323830343a346362303a3a2f33342d313238203d3e20323637333835.roa (raw, json)
Hash identifier: MxN3sQ7DiVIAbxEmIqtHs315v2THdCLVIjHFC01hUkw=
Subject key identifier: D9:34:EC:56:50:F5:45:CD:93:9A:95:81:DB:25:46:0F:80:FE:E0:EE
Certificate issuer: /CN=2544A744BF63CAFEE703C310B888A17EEA5620E4
Certificate serial: 1B53A4CDB6C518458D2C6B54A8F40C12AC37724C
Authority key identifier: 25:44:A7:44:BF:63:CA:FE:E7:03:C3:10:B8:88:A1:7E:EA:56:20:E4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2544A744BF63CAFEE703C310B888A17EEA5620E4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9Jntmgh3CAPNBCL9EALqgi6ffxESBTypqRrVfqixHCsj/0/323830343a346362303a3a2f33342d313238203d3e20323637333835.roa
Signing time: Sat 08 Feb 2025 21:14:46 +0000
ROA not before: Sat 08 Feb 2025 21:09:46 +0000
ROA not after: Sat 07 Feb 2026 21:14:46 +0000
asID: 267385
IP address blocks: 2804:4cb0::/34 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:53:a4:cd:b6:c5:18:45:8d:2c:6b:54:a8:f4:0c:12:ac:37:72:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2544A744BF63CAFEE703C310B888A17EEA5620E4
Validity
Not Before: Feb 8 21:09:46 2025 GMT
Not After : Feb 7 21:14:46 2026 GMT
Subject: CN=D934EC5650F545CD939A9581DB25460F80FEE0EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:48:64:06:fa:51:54:84:45:e2:5a:18:d4:b9:
79:f0:f4:6f:1a:c5:1c:6d:43:25:c7:7c:ff:20:d9:
f6:f4:67:c9:a6:ee:f6:aa:bc:fd:fd:c4:4e:5c:25:
3e:83:81:70:d9:ff:79:65:ff:8f:5a:d0:3a:27:b1:
d2:10:3d:98:36:c6:14:59:94:db:b1:80:27:0f:e8:
d4:23:d5:d8:3c:ea:49:a3:86:53:96:94:0c:5e:62:
8f:7f:c9:56:93:7c:55:c5:4f:57:8f:6e:c6:c2:98:
15:49:f9:77:9b:48:4a:e3:c3:24:d3:17:ed:57:be:
da:0b:ad:bc:f5:23:d6:57:ba:ed:6b:19:7a:02:a9:
cf:7f:5c:ba:59:e5:40:ec:c4:fc:1a:42:17:91:ba:
ef:bd:af:58:3e:fc:e9:93:8a:11:12:44:1d:1b:e2:
8b:71:e8:c1:9c:55:30:63:38:cb:23:42:72:37:51:
83:07:d3:34:cc:c4:c4:60:ab:23:a8:02:74:d6:b8:
76:72:85:d0:d1:ec:39:76:c8:e2:17:d5:3c:14:af:
13:b2:e0:8c:9b:0e:6c:53:be:74:98:ef:65:a8:69:
34:db:10:e2:2e:e1:97:28:c8:89:33:52:6f:e7:f1:
47:d8:fe:d1:9b:03:16:f0:47:7a:fb:dc:65:2f:f9:
a9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:34:EC:56:50:F5:45:CD:93:9A:95:81:DB:25:46:0F:80:FE:E0:EE
X509v3 Authority Key Identifier:
keyid:25:44:A7:44:BF:63:CA:FE:E7:03:C3:10:B8:88:A1:7E:EA:56:20:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9Jntmgh3CAPNBCL9EALqgi6ffxESBTypqRrVfqixHCsj/0/2544A744BF63CAFEE703C310B888A17EEA5620E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2544A744BF63CAFEE703C310B888A17EEA5620E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Jntmgh3CAPNBCL9EALqgi6ffxESBTypqRrVfqixHCsj/0/323830343a346362303a3a2f33342d313238203d3e20323637333835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4cb0::/34
Signature Algorithm: sha256WithRSAEncryption
5a:74:4e:54:44:b6:8e:33:42:36:bd:7c:6e:21:6b:15:16:9d:
c0:5c:3a:8d:15:e8:e2:e4:37:71:36:e9:da:8d:f4:07:e1:ed:
62:c0:2d:0e:5e:83:3d:b2:02:3c:f7:01:6f:29:7d:3f:45:60:
21:86:96:c5:36:6b:49:e2:1a:4d:ac:c3:fe:af:1f:cf:0d:d0:
54:05:70:e1:50:26:40:bd:e3:48:70:78:fe:2e:8b:d3:0c:fa:
d7:6c:d5:93:ef:a2:6c:eb:33:1f:da:dc:0b:6e:f5:99:86:25:
5f:f5:48:74:71:cf:a3:8d:79:1e:f5:37:75:73:fe:43:38:d2:
05:90:fe:78:c6:31:f6:07:b3:8f:d1:44:16:fb:f2:64:6a:92:
37:fd:5a:de:63:63:04:dc:8c:ca:25:75:40:7d:ad:c7:96:67:
c1:5e:6e:8c:8a:64:0b:64:48:4b:f5:2f:92:6b:06:bb:2d:3e:
ab:46:6e:11:07:65:f3:11:ec:f1:62:68:a8:9b:73:1c:4a:3f:
9c:1c:ca:2b:67:97:9a:1d:67:24:9d:1a:11:b9:67:57:9c:86:
35:f9:5e:fa:ce:d8:f2:06:88:7d:0b:d6:7f:a1:ed:ff:bf:58:
e4:a7:a7:78:e8:93:30:3c:f4:9a:7c:07:e2:fc:78:70:3a:fd:
dd:9b:7e:a8
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUG1OkzbbFGEWNLGtUqPQMEqw3ckwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjU0NEE3NDRCRjYzQ0FGRUU3MDNDMzEwQjg4OEExN0VF
QTU2MjBFNDAeFw0yNTAyMDgyMTA5NDZaFw0yNjAyMDcyMTE0NDZaMDMxMTAvBgNV
BAMTKEQ5MzRFQzU2NTBGNTQ1Q0Q5MzlBOTU4MURCMjU0NjBGODBGRUUwRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmSGQG+lFUhEXiWhjUuXnw9G8a
xRxtQyXHfP8g2fb0Z8mm7vaqvP39xE5cJT6DgXDZ/3ll/49a0DonsdIQPZg2xhRZ
lNuxgCcP6NQj1dg86kmjhlOWlAxeYo9/yVaTfFXFT1ePbsbCmBVJ+XebSErjwyTT
F+1XvtoLrbz1I9ZXuu1rGXoCqc9/XLpZ5UDsxPwaQheRuu+9r1g+/OmTihESRB0b
4otx6MGcVTBjOMsjQnI3UYMH0zTMxMRgqyOoAnTWuHZyhdDR7Dl2yOIX1TwUrxOy
4IybDmxTvnSY72WoaTTbEOIu4ZcoyIkzUm/n8UfY/tGbAxbwR3r73GUv+an/AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU2TTsVlD1Rc2TmpWB2yVGD4D+4O4wHwYDVR0j
BBgwFoAUJUSnRL9jyv7nA8MQuIihfupWIOQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUpudG1naDNDQVBOQkNMOUVBTHFnaTZmZnhFU0JUeXBxUnJWZnFpeEhD
c2ovMC8yNTQ0QTc0NEJGNjNDQUZFRTcwM0MzMTBCODg4QTE3RUVBNTYyMEU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1NDRBNzQ0QkY2M0NBRkVF
NzAzQzMxMEI4ODhBMTdFRUE1NjIwRTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlKbnRtZ2gzQ0FQTkJDTDlFQUxxZ2k2ZmZ4RVNCVHlwcVJyVmZxaXhIQ3NqLzAv
MzIzODMwMzQzYTM0NjM2MjMwM2EzYTJmMzMzNDJkMzEzMjM4MjAzZDNlMjAzMjM2
MzczMzM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgYoBEywADANBgkqhkiG9w0BAQsFAAOCAQEAWnRO
VES2jjNCNr18biFrFRadwFw6jRXo4uQ3cTbp2o30B+HtYsAtDl6DPbICPPcBbyl9
P0VgIYaWxTZrSeIaTazD/q8fzw3QVAVw4VAmQL3jSHB4/i6L0wz612zVk++ibOsz
H9rcC271mYYlX/VIdHHPo415HvU3dXP+QzjSBZD+eMYx9gezj9FEFvvyZGqSN/1a
3mNjBNyMyiV1QH2tx5ZnwV5ujIpkC2RIS/UvkmsGuy0+q0ZuEQdl8xHs8WJoqJtz
HEo/nBzKK2eXmh1nJJ0aEblnV5yGNfle+s7Y8gaIfQvWf6Ht/79Y5KeneOiTMDz0
mnwH4vx4cDr93Zt+qA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 18:31:28 2025 by rpki-client