Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a623430303a3a2f34302d3438203d3e20323730393636.roa
File: 323830343a353938343a623430303a3a2f34302d3438203d3e20323730393636.roa (raw, json)
Hash identifier: XYc/yAHkZwD+d4Ar3KVJH68MrDcOdT8PTWwTkmtoTQg=
Subject key identifier: 1A:BF:1E:26:62:1C:92:09:CE:26:AD:28:B8:3F:D1:33:D3:51:78:C9
Certificate issuer: /CN=3A0553EF24FC84C740FC8DE9257801A2C7A0ADA1
Certificate serial: 2CCD2BD2865AF1F5A053DCB58B3659FF69687D97
Authority key identifier: 3A:05:53:EF:24:FC:84:C7:40:FC:8D:E9:25:78:01:A2:C7:A0:AD:A1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A0553EF24FC84C740FC8DE9257801A2C7A0ADA1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a623430303a3a2f34302d3438203d3e20323730393636.roa
Signing time: Sun 19 Jan 2025 00:41:25 +0000
ROA not before: Sun 19 Jan 2025 00:36:25 +0000
ROA not after: Sun 18 Jan 2026 00:41:25 +0000
asID: 270966
IP address blocks: 2804:5984:b400::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:cd:2b:d2:86:5a:f1:f5:a0:53:dc:b5:8b:36:59:ff:69:68:7d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A0553EF24FC84C740FC8DE9257801A2C7A0ADA1
Validity
Not Before: Jan 19 00:36:25 2025 GMT
Not After : Jan 18 00:41:25 2026 GMT
Subject: CN=1ABF1E26621C9209CE26AD28B83FD133D35178C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:14:d4:0b:b2:d9:71:7e:28:ba:a0:02:2e:38:
25:31:e0:7f:cb:80:10:f3:47:3b:66:48:a6:e3:02:
33:09:ed:17:18:b5:92:84:cc:a5:19:09:37:c3:66:
d1:e5:cd:ca:e4:97:f9:36:ae:4f:2d:f4:56:6e:a8:
5e:5d:86:bc:60:4f:ec:fc:a8:97:7d:ef:5d:e6:7e:
ef:46:d3:9c:13:e7:9a:2f:07:a5:a8:fb:d4:27:cb:
48:84:71:6d:57:b1:79:23:75:c8:7b:9a:12:0d:ee:
ed:13:13:5f:60:b3:5e:f4:97:67:96:af:c1:17:0c:
7b:36:23:58:f1:82:61:f0:0c:71:04:09:42:21:96:
a6:d7:b7:3f:34:b4:e9:86:6f:c6:41:bc:21:91:1a:
41:13:dc:38:d5:1a:d5:f7:27:0a:ae:6c:3e:15:0f:
f1:3d:fe:bd:cd:df:14:36:c6:5a:25:99:78:c4:d3:
7d:37:21:00:50:f6:38:da:27:65:fc:58:17:42:ac:
ea:af:e7:bf:54:ee:93:bc:98:d8:b8:0c:a4:fb:06:
f8:85:fb:53:7a:6d:d5:3f:54:ab:37:44:9e:5a:8e:
56:81:b6:ff:99:b0:eb:38:1a:fb:f9:81:44:9d:df:
01:1c:f1:e8:c2:d4:8c:98:69:d5:f9:04:12:33:48:
ce:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BF:1E:26:62:1C:92:09:CE:26:AD:28:B8:3F:D1:33:D3:51:78:C9
X509v3 Authority Key Identifier:
keyid:3A:05:53:EF:24:FC:84:C7:40:FC:8D:E9:25:78:01:A2:C7:A0:AD:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/3A0553EF24FC84C740FC8DE9257801A2C7A0ADA1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A0553EF24FC84C740FC8DE9257801A2C7A0ADA1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a623430303a3a2f34302d3438203d3e20323730393636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5984:b400::/40
Signature Algorithm: sha256WithRSAEncryption
60:9f:cd:55:58:d0:bb:9d:cf:a8:d0:f4:48:13:1a:50:62:2c:
2c:da:ba:65:a9:f9:94:70:87:ec:9b:26:43:97:88:1c:4f:02:
1f:b0:0b:8a:42:a1:31:d1:b9:55:f7:8e:99:11:b8:ef:9f:e8:
6f:83:b4:a6:4d:8f:cb:cf:cf:7e:c8:b3:ec:0d:17:0d:09:f5:
43:35:4c:a0:6e:f3:b8:db:9e:dc:1c:5d:ad:66:2e:f6:68:25:
f5:6d:e0:ee:b9:4e:55:13:66:32:71:11:a4:26:f6:42:03:7f:
40:c2:00:80:43:5d:7a:c6:d1:89:7b:95:a9:25:a5:d6:04:66:
26:3c:e0:9b:d7:4e:b8:56:a7:54:e4:b6:32:25:5e:16:5f:55:
01:5e:dd:a5:01:44:42:22:9d:74:a4:16:2e:a7:b8:81:9e:0f:
ec:ed:fe:d1:38:e5:65:f2:03:08:b1:4b:1a:a8:23:b6:84:7a:
a2:13:4c:11:a3:77:2f:ab:1b:dd:5d:cd:7f:55:3f:19:d0:f4:
0e:79:82:9a:9c:a7:f3:ba:ab:e4:0c:b4:f2:6e:c8:5a:26:e5:
b4:00:05:07:c1:7a:5d:8d:b5:ac:7b:65:1c:5a:09:64:f6:76:
fc:0f:58:0a:ce:36:2c:44:8f:80:c6:a3:14:a6:e8:03:9d:c2:
d4:14:49:d7
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIULM0r0oZa8fWgU9y1izZZ/2lofZcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0EwNTUzRUYyNEZDODRDNzQwRkM4REU5MjU3ODAxQTJD
N0EwQURBMTAeFw0yNTAxMTkwMDM2MjVaFw0yNjAxMTgwMDQxMjVaMDMxMTAvBgNV
BAMTKDFBQkYxRTI2NjIxQzkyMDlDRTI2QUQyOEI4M0ZEMTMzRDM1MTc4QzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+FNQLstlxfii6oAIuOCUx4H/L
gBDzRztmSKbjAjMJ7RcYtZKEzKUZCTfDZtHlzcrkl/k2rk8t9FZuqF5dhrxgT+z8
qJd9713mfu9G05wT55ovB6Wo+9Qny0iEcW1XsXkjdch7mhIN7u0TE19gs170l2eW
r8EXDHs2I1jxgmHwDHEECUIhlqbXtz80tOmGb8ZBvCGRGkET3DjVGtX3JwqubD4V
D/E9/r3N3xQ2xlolmXjE0303IQBQ9jjaJ2X8WBdCrOqv579U7pO8mNi4DKT7BviF
+1N6bdU/VKs3RJ5ajlaBtv+ZsOs4Gvv5gUSd3wEc8ejC1IyYadX5BBIzSM4lAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUGr8eJmIckgnOJq0ouD/RM9NReMkwHwYDVR0j
BBgwFoAUOgVT7yT8hMdA/I3pJXgBosegraEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXFFRHF1NVJOaDhGdE1qZXlHbmtXaFBDVmdMUzJ1cWY0eW1SaFVLN3I5
RVYvMC8zQTA1NTNFRjI0RkM4NEM3NDBGQzhERTkyNTc4MDFBMkM3QTBBREExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBMDU1M0VGMjRGQzg0Qzc0
MEZDOERFOTI1NzgwMUEyQzdBMEFEQTEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FxRURxdTVSTmg4RnRNamV5R25rV2hQQ1ZnTFMydXFmNHltUmhVSzdyOUVWLzAv
MzIzODMwMzQzYTM1MzkzODM0M2E2MjM0MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNk
M2UyMDMyMzczMDM5MzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEWYS0MA0GCSqGSIb3DQEBCwUA
A4IBAQBgn81VWNC7nc+o0PRIExpQYiws2rplqfmUcIfsmyZDl4gcTwIfsAuKQqEx
0blV946ZEbjvn+hvg7SmTY/Lz89+yLPsDRcNCfVDNUygbvO4257cHF2tZi72aCX1
beDuuU5VE2YycRGkJvZCA39AwgCAQ116xtGJe5WpJaXWBGYmPOCb1064VqdU5LYy
JV4WX1UBXt2lAURCIp10pBYup7iBng/s7f7ROOVl8gMIsUsaqCO2hHqiE0wRo3cv
qxvdXc1/VT8Z0PQOeYKanKfzuqvkDLTybshaJuW0AAUHwXpdjbWse2UcWglk9nb8
D1gKzjYsRI+AxqMUpugDncLUFEnX
-----END CERTIFICATE-----
Generated at Tue Apr 8 22:29:30 2025 by rpki-client