
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/323830343a373138303a3a2f33322d3332203d3e20323730373933.roa
File: 323830343a373138303a3a2f33322d3332203d3e20323730373933.roa (raw, json)
Hash identifier: 1wDEeJrO1HxpDbQjHU4WwNTbAOCK+uVGw2nla9iuflw=
Subject key identifier: 60:0B:63:C4:D4:E4:7F:01:1F:11:67:EA:C2:FE:4B:FF:ED:2C:F2:EE
Certificate issuer: /CN=144DB8D5072DA69BE11C1887C1F907F9E34C2010
Certificate serial: 71405F1B4D98D0738E3A9FC1B61DA729436C073C
Authority key identifier: 14:4D:B8:D5:07:2D:A6:9B:E1:1C:18:87:C1:F9:07:F9:E3:4C:20:10
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/144DB8D5072DA69BE11C1887C1F907F9E34C2010.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/323830343a373138303a3a2f33322d3332203d3e20323730373933.roa
Signing time: Mon 10 Feb 2025 20:19:12 +0000
ROA not before: Mon 10 Feb 2025 20:14:12 +0000
ROA not after: Mon 09 Feb 2026 20:19:12 +0000
asID: 270793
IP address blocks: 2804:7180::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:40:5f:1b:4d:98:d0:73:8e:3a:9f:c1:b6:1d:a7:29:43:6c:07:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=144DB8D5072DA69BE11C1887C1F907F9E34C2010
Validity
Not Before: Feb 10 20:14:12 2025 GMT
Not After : Feb 9 20:19:12 2026 GMT
Subject: CN=600B63C4D4E47F011F1167EAC2FE4BFFED2CF2EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:21:95:33:19:3f:8f:14:0f:f1:83:55:51:69:
a3:10:2f:3f:17:ca:19:43:eb:fe:91:52:c1:8a:d6:
a8:5e:b0:b4:eb:6b:7f:b6:10:be:7a:4d:d0:10:f9:
bc:1f:c5:f6:ad:04:c5:05:f3:d3:69:68:04:14:57:
cf:db:99:ff:ff:2c:93:5a:50:72:be:2d:94:46:8f:
f3:a3:0e:1e:61:98:5f:d5:75:55:2f:02:60:10:3c:
02:ad:0e:48:c9:85:b8:19:e3:a7:7c:c2:47:1a:30:
7a:8c:d6:46:5e:7d:be:80:c8:70:d2:48:84:da:1b:
82:09:e0:9a:68:c1:88:fd:45:4e:d5:62:bc:03:e6:
d2:23:f0:0a:28:c3:10:93:49:aa:1f:1a:ba:57:ad:
4e:1c:df:7d:38:8f:08:15:cf:51:aa:d7:d7:d2:c5:
1b:f6:cb:a6:6c:a6:2f:36:11:04:1f:45:a3:e6:d3:
d1:20:41:fc:79:49:5d:8e:4c:97:24:42:9d:cd:92:
47:1f:a6:a9:3e:fe:60:a3:13:a4:17:73:1b:f5:70:
b1:23:61:ba:e6:76:88:d8:ec:b4:26:7c:52:1a:15:
1b:49:33:3a:26:eb:97:32:8c:5c:c9:1f:3a:8c:e0:
b4:95:2f:c7:77:b0:34:0e:84:48:c9:64:58:62:1e:
70:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0B:63:C4:D4:E4:7F:01:1F:11:67:EA:C2:FE:4B:FF:ED:2C:F2:EE
X509v3 Authority Key Identifier:
keyid:14:4D:B8:D5:07:2D:A6:9B:E1:1C:18:87:C1:F9:07:F9:E3:4C:20:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/144DB8D5072DA69BE11C1887C1F907F9E34C2010.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/144DB8D5072DA69BE11C1887C1F907F9E34C2010.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/323830343a373138303a3a2f33322d3332203d3e20323730373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7180::/32
Signature Algorithm: sha256WithRSAEncryption
a8:7b:2a:01:63:14:6a:a7:82:e5:49:9d:09:b5:8f:79:b0:94:
43:e2:96:47:9b:c1:0e:37:72:99:8d:7f:ae:0b:ed:86:ef:fd:
d8:f5:b5:90:99:7d:19:5d:38:1f:ae:72:b4:96:6a:83:09:0d:
46:17:78:2a:5a:8a:ac:6d:b0:30:fb:e2:cc:68:2f:6e:15:46:
87:ea:17:64:a9:8c:81:84:c7:01:ff:6f:d8:23:e3:c2:03:28:
1b:ec:2e:e9:93:98:5f:fe:37:94:d2:b7:3d:62:39:8f:09:80:
93:e8:74:ef:67:07:b4:c3:48:26:31:7d:41:99:1d:63:a9:3d:
8e:04:cc:55:9e:4b:c7:d5:6c:53:f8:82:1d:0f:0c:74:3a:fb:
92:8a:49:5c:0b:b6:15:4e:e6:e9:03:61:db:06:91:79:98:c5:
b8:aa:5d:0f:53:1f:7c:2e:d3:3c:61:87:64:da:d1:f4:d0:0f:
0d:51:21:a6:a3:8e:bd:47:10:b1:b4:4b:17:e2:0e:a8:02:8e:
45:59:03:03:ac:d1:29:57:35:f1:4f:9e:db:01:27:33:3a:3d:
d7:fd:09:07:b4:0c:2b:ba:0a:f4:fa:60:15:52:e4:a7:55:61:
a9:3e:f6:d3:ad:66:dd:09:dc:93:8f:1a:d9:bd:c0:ec:c9:d8:
4e:09:af:13
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUcUBfG02Y0HOOOp/Bth2nKUNsBzwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ0REI4RDUwNzJEQTY5QkUxMUMxODg3QzFGOTA3RjlF
MzRDMjAxMDAeFw0yNTAyMTAyMDE0MTJaFw0yNjAyMDkyMDE5MTJaMDMxMTAvBgNV
BAMTKDYwMEI2M0M0RDRFNDdGMDExRjExNjdFQUMyRkU0QkZGRUQyQ0YyRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmIZUzGT+PFA/xg1VRaaMQLz8X
yhlD6/6RUsGK1qhesLTra3+2EL56TdAQ+bwfxfatBMUF89NpaAQUV8/bmf//LJNa
UHK+LZRGj/OjDh5hmF/VdVUvAmAQPAKtDkjJhbgZ46d8wkcaMHqM1kZefb6AyHDS
SITaG4IJ4JpowYj9RU7VYrwD5tIj8AoowxCTSaofGrpXrU4c3304jwgVz1Gq19fS
xRv2y6Zspi82EQQfRaPm09EgQfx5SV2OTJckQp3Nkkcfpqk+/mCjE6QXcxv1cLEj
YbrmdojY7LQmfFIaFRtJMzom65cyjFzJHzqM4LSVL8d3sDQOhEjJZFhiHnCDAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUYAtjxNTkfwEfEWfqwv5L/+0s8u4wHwYDVR0j
BBgwFoAUFE241QctppvhHBiHwfkH+eNMIBAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUF0M29hYmVpUHZUQW42U2dUd3NRS1REcmtMMWJNaDM3dlJQb2pYOEV1
bzMvMC8xNDREQjhENTA3MkRBNjlCRTExQzE4ODdDMUY5MDdGOUUzNEMyMDEwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE0NERCOEQ1MDcyREE2OUJF
MTFDMTg4N0MxRjkwN0Y5RTM0QzIwMTAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FBdDNvYWJlaVB2VEFuNlNnVHdzUUtURHJrTDFiTWgzN3ZSUG9qWDhFdW8zLzAv
MzIzODMwMzQzYTM3MzEzODMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMw
MzczOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARxgDANBgkqhkiG9w0BAQsFAAOCAQEAqHsqAWMU
aqeC5UmdCbWPebCUQ+KWR5vBDjdymY1/rgvthu/92PW1kJl9GV04H65ytJZqgwkN
Rhd4KlqKrG2wMPvizGgvbhVGh+oXZKmMgYTHAf9v2CPjwgMoG+wu6ZOYX/43lNK3
PWI5jwmAk+h072cHtMNIJjF9QZkdY6k9jgTMVZ5Lx9VsU/iCHQ8MdDr7kopJXAu2
FU7m6QNh2waReZjFuKpdD1MffC7TPGGHZNrR9NAPDVEhpqOOvUcQsbRLF+IOqAKO
RVkDA6zRKVc18U+e2wEnMzo91/0JB7QMK7oK9PpgFVLkp1VhqT72061m3Qnck48a
2b3A7MnYTgmvEw==
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:10:26 2025 by rpki-client