Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/1/323830343a6431633a3a2f33322d313238203d3e203532363030.roa
File: 323830343a6431633a3a2f33322d313238203d3e203532363030.roa (raw, json)
Hash identifier: KALs4Bg1TQfELrRE+85zSdFG7MESCGOAh2u6gZmU89k=
Subject key identifier: B2:F2:0E:07:4B:13:21:15:86:9F:71:CC:F4:8B:C2:26:7F:13:02:1A
Certificate issuer: /CN=59F73133C9108C206FE9409E22591FE97847518A
Certificate serial: 439862D0A7857C5FBDC70F3C870916A842DCDC59
Authority key identifier: 59:F7:31:33:C9:10:8C:20:6F:E9:40:9E:22:59:1F:E9:78:47:51:8A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59F73133C9108C206FE9409E22591FE97847518A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/1/323830343a6431633a3a2f33322d313238203d3e203532363030.roa
Signing time: Thu 06 Mar 2025 18:53:34 +0000
ROA not before: Thu 06 Mar 2025 18:48:34 +0000
ROA not after: Thu 05 Mar 2026 18:53:34 +0000
asID: 52600
IP address blocks: 2804:d1c::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:98:62:d0:a7:85:7c:5f:bd:c7:0f:3c:87:09:16:a8:42:dc:dc:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59F73133C9108C206FE9409E22591FE97847518A
Validity
Not Before: Mar 6 18:48:34 2025 GMT
Not After : Mar 5 18:53:34 2026 GMT
Subject: CN=B2F20E074B132115869F71CCF48BC2267F13021A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c3:81:86:4e:2a:9b:6e:80:f7:a2:47:bd:f7:
4a:f6:0d:09:cf:b0:da:33:78:6d:18:70:8c:8b:ea:
2f:fd:c0:24:1d:fe:e1:3b:6f:eb:9f:12:ef:35:f7:
74:c3:4f:1c:08:9f:ab:2e:5d:f7:fe:a8:82:51:3b:
5d:e3:25:c8:4c:ce:46:5c:3c:2e:7e:b7:0d:3e:cb:
2a:80:b7:88:81:82:f8:03:4f:4e:2a:3e:1b:c7:7e:
8e:70:fe:79:ab:34:1f:a4:94:1a:77:1f:be:37:63:
e0:25:29:ee:06:25:f7:ce:f2:2e:10:96:1f:d3:eb:
37:52:da:00:d0:d9:c5:14:ee:4d:76:56:7d:a2:1a:
16:53:d9:f9:9b:cc:2e:2e:35:58:9e:26:1e:4f:f1:
7a:8e:6a:e3:8c:62:c2:6f:c7:ae:1b:7b:c4:4e:57:
e8:e1:05:a4:08:05:f2:ff:45:38:2f:94:ae:f2:c3:
6f:c4:ea:47:4a:27:d9:5b:50:19:77:8f:74:7d:06:
42:f6:33:df:5f:2d:6a:8a:fc:b3:26:3c:de:61:aa:
19:ab:da:c8:70:45:64:0a:5c:ef:3c:94:a8:22:0c:
b2:3d:50:27:83:a4:5b:a4:d4:bc:ab:39:e1:2a:78:
c0:83:70:64:7c:6e:3c:56:86:ce:fb:51:17:cd:d8:
1d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F2:0E:07:4B:13:21:15:86:9F:71:CC:F4:8B:C2:26:7F:13:02:1A
X509v3 Authority Key Identifier:
keyid:59:F7:31:33:C9:10:8C:20:6F:E9:40:9E:22:59:1F:E9:78:47:51:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/1/59F73133C9108C206FE9409E22591FE97847518A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59F73133C9108C206FE9409E22591FE97847518A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/1/323830343a6431633a3a2f33322d313238203d3e203532363030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:d1c::/32
Signature Algorithm: sha256WithRSAEncryption
b7:e3:af:88:48:4b:03:71:69:54:f3:c0:3e:cd:48:18:81:ad:
77:66:49:c6:8a:2f:e1:a8:4d:70:8e:01:42:95:b2:d4:ce:93:
7e:52:91:5a:ad:ab:4e:63:dc:59:72:64:e3:fd:48:73:71:be:
fa:e2:40:20:2d:f6:9a:3b:3d:fd:2d:15:90:a0:d3:83:d8:49:
af:cd:8b:62:d0:65:4e:14:23:2e:bd:5f:ad:f8:45:53:2a:a4:
e2:45:bb:4e:0f:d5:2e:c8:f2:b4:27:43:ef:1a:b3:32:92:8e:
51:a4:d0:c4:50:37:a4:53:80:2f:d5:f6:cc:31:a5:4b:b9:e7:
d5:00:0f:81:5a:40:39:3d:05:af:ef:e0:44:ab:e4:20:43:3f:
d5:47:31:b9:6f:5e:c0:9d:0e:6c:e5:ac:89:88:3c:a4:93:3d:
5c:6d:05:6e:a0:07:d1:a3:49:1e:88:ef:cf:8f:82:7c:62:fc:
c3:83:1f:ca:1d:9e:9c:27:a4:29:40:92:6a:f0:93:6e:57:b6:
73:b1:1c:c6:ca:88:18:de:1f:3d:2e:01:e6:3b:f6:c5:2a:06:
80:1c:52:ee:f3:28:43:8c:d9:1a:28:73:ef:1d:1d:26:a1:b7:
0b:2a:45:69:b4:94:f2:56:ed:24:f9:2d:c6:05:54:dd:e2:2f:
03:9f:1c:25
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUQ5hi0KeFfF+9xw88hwkWqELc3FkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlGNzMxMzNDOTEwOEMyMDZGRTk0MDlFMjI1OTFGRTk3
ODQ3NTE4QTAeFw0yNTAzMDYxODQ4MzRaFw0yNjAzMDUxODUzMzRaMDMxMTAvBgNV
BAMTKEIyRjIwRTA3NEIxMzIxMTU4NjlGNzFDQ0Y0OEJDMjI2N0YxMzAyMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/w4GGTiqbboD3oke990r2DQnP
sNozeG0YcIyL6i/9wCQd/uE7b+ufEu8193TDTxwIn6suXff+qIJRO13jJchMzkZc
PC5+tw0+yyqAt4iBgvgDT04qPhvHfo5w/nmrNB+klBp3H743Y+AlKe4GJffO8i4Q
lh/T6zdS2gDQ2cUU7k12Vn2iGhZT2fmbzC4uNVieJh5P8XqOauOMYsJvx64be8RO
V+jhBaQIBfL/RTgvlK7yw2/E6kdKJ9lbUBl3j3R9BkL2M99fLWqK/LMmPN5hqhmr
2shwRWQKXO88lKgiDLI9UCeDpFuk1LyrOeEqeMCDcGR8bjxWhs77URfN2B1VAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUsvIOB0sTIRWGn3HM9IvCJn8TAhowHwYDVR0j
BBgwFoAUWfcxM8kQjCBv6UCeIlkf6XhHUYowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXhORVdqaGNpdnIzdUM1NGtaNUdva3hpWGNyV0w0Ync4alM5WERQR2o1
Mm4vMS81OUY3MzEzM0M5MTA4QzIwNkZFOTQwOUUyMjU5MUZFOTc4NDc1MThBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU5RjczMTMzQzkxMDhDMjA2
RkU5NDA5RTIyNTkxRkU5Nzg0NzUxOEEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl4TkVXamhjaXZyM3VDNTRrWjVHb2t4aVhjcldMNGJ3OGpTOVhEUEdqNTJuLzEv
MzIzODMwMzQzYTY0MzE2MzNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzUzMjM2
MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEDRwwDQYJKoZIhvcNAQELBQADggEBALfjr4hISwNx
aVTzwD7NSBiBrXdmScaKL+GoTXCOAUKVstTOk35SkVqtq05j3FlyZOP9SHNxvvri
QCAt9po7Pf0tFZCg04PYSa/Ni2LQZU4UIy69X634RVMqpOJFu04P1S7I8rQnQ+8a
szKSjlGk0MRQN6RTgC/V9swxpUu559UAD4FaQDk9Ba/v4ESr5CBDP9VHMblvXsCd
DmzlrImIPKSTPVxtBW6gB9GjSR6I78+Pgnxi/MODH8odnpwnpClAkmrwk25XtnOx
HMbKiBjeHz0uAeY79sUqBoAcUu7zKEOM2Rooc+8dHSahtwsqRWm0lPJW7ST5LcYF
VN3iLwOfHCU=
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:55:04 2025 by rpki-client