Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/323830343a316131343a3a2f33322d3336203d3e203238313533.roa
File: 323830343a316131343a3a2f33322d3336203d3e203238313533.roa (raw, json)
Hash identifier: 9g/TkKe486fNxiGWhn2zhE0Md1a7tExOY38KqpOsusA=
Subject key identifier: DF:47:79:84:FA:1E:12:9B:54:D0:9D:86:4B:7D:45:C0:60:4D:E9:4F
Certificate issuer: /CN=ABEB253CBEAE69A8BBDE83E43794F65CE99C7280
Certificate serial: 211CB6818B41973BDF990A9DD3592026ABFBFCB8
Authority key identifier: AB:EB:25:3C:BE:AE:69:A8:BB:DE:83:E4:37:94:F6:5C:E9:9C:72:80
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEB253CBEAE69A8BBDE83E43794F65CE99C7280.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/323830343a316131343a3a2f33322d3336203d3e203238313533.roa
Signing time: Thu 13 Mar 2025 14:04:05 +0000
ROA not before: Thu 13 Mar 2025 13:59:05 +0000
ROA not after: Thu 12 Mar 2026 14:04:05 +0000
asID: 28153
IP address blocks: 2804:1a14::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:1c:b6:81:8b:41:97:3b:df:99:0a:9d:d3:59:20:26:ab:fb:fc:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABEB253CBEAE69A8BBDE83E43794F65CE99C7280
Validity
Not Before: Mar 13 13:59:05 2025 GMT
Not After : Mar 12 14:04:05 2026 GMT
Subject: CN=DF477984FA1E129B54D09D864B7D45C0604DE94F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a0:e4:ff:26:8a:af:08:c2:1a:88:30:0f:71:
04:a6:fc:6f:5c:9f:2e:2f:2b:2a:41:4a:02:e7:8b:
b8:b6:bb:36:86:bc:03:11:51:aa:b1:7c:86:ac:43:
ca:aa:e0:d4:aa:a4:80:74:d3:0e:c0:db:b2:a8:f9:
a0:eb:20:5e:bb:a6:fb:f8:3a:f3:3b:c9:c3:6a:73:
65:52:06:89:6f:31:52:7a:56:1e:35:17:5a:80:46:
24:cb:8d:20:fe:fe:54:4b:82:aa:24:2c:11:af:31:
8d:12:0a:e3:03:23:a4:14:ed:43:d0:c5:d0:60:e4:
02:51:4e:92:d1:8b:a5:0e:60:0a:5b:c2:31:e8:60:
d4:48:63:7f:71:21:de:24:10:4d:cd:1a:8e:ff:bf:
35:4e:87:79:cf:a9:8f:2b:d1:c8:a1:be:ff:e9:0e:
58:aa:6c:9e:f3:14:d3:a7:f2:6f:08:70:99:73:99:
d3:6c:e8:e6:77:e3:c7:14:fa:7c:1c:00:5c:7b:15:
ba:aa:8c:f9:23:74:18:95:19:3d:fe:de:15:f1:b4:
db:25:3f:09:3a:fc:f6:03:b1:c3:81:1b:99:ad:0c:
74:08:14:c7:41:35:5a:bf:42:ba:1e:02:db:30:cb:
b5:ef:c1:10:19:49:a4:6b:db:3c:d9:d5:0f:6e:2f:
a8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:47:79:84:FA:1E:12:9B:54:D0:9D:86:4B:7D:45:C0:60:4D:E9:4F
X509v3 Authority Key Identifier:
keyid:AB:EB:25:3C:BE:AE:69:A8:BB:DE:83:E4:37:94:F6:5C:E9:9C:72:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/ABEB253CBEAE69A8BBDE83E43794F65CE99C7280.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEB253CBEAE69A8BBDE83E43794F65CE99C7280.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/323830343a316131343a3a2f33322d3336203d3e203238313533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1a14::/32
Signature Algorithm: sha256WithRSAEncryption
45:df:e3:8e:6c:2f:d9:48:65:63:ad:2b:44:46:5c:29:be:08:
bb:91:a4:8f:a6:ca:2c:96:83:1f:75:b9:55:4f:82:5b:92:ee:
d0:6e:41:5b:4a:2a:1e:b6:ca:49:3b:ce:c3:af:6d:7f:d7:bb:
e5:2d:51:8b:04:f7:c7:18:d4:04:1f:b4:b7:bc:92:3a:77:b5:
52:5e:cd:d5:e9:4d:1a:f9:e7:32:d3:e0:03:c9:e6:e8:2d:81:
2e:3d:f9:13:5b:b9:df:d8:7d:e3:d1:99:e3:49:30:de:5f:9e:
98:7d:7e:09:a2:6d:f9:e8:97:fa:e4:f4:9c:6c:55:77:ef:4d:
06:75:42:2f:a6:fe:52:d8:1c:ba:ab:f8:3d:2c:50:e0:84:e8:
29:e3:81:57:9f:da:d7:46:66:72:9c:f4:75:86:c2:98:94:3c:
3e:7c:24:83:8b:5a:14:52:1d:22:9d:22:f6:84:b4:36:90:13:
2a:b2:a3:1b:9a:ec:5f:3b:16:7d:d0:de:c0:91:b6:5b:50:2f:
3e:89:4c:90:ae:37:d5:dc:be:e1:93:28:c0:81:0e:23:2a:bf:
7b:65:76:c6:d2:50:28:33:a1:84:e0:b7:b2:af:b3:ef:b2:05:
4b:d8:41:5c:d3:f1:c1:ed:08:68:97:58:d1:74:17:e4:e2:d7:
9d:c0:39:de
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUIRy2gYtBlzvfmQqd01kgJqv7/LgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUJFQjI1M0NCRUFFNjlBOEJCREU4M0U0Mzc5NEY2NUNF
OTlDNzI4MDAeFw0yNTAzMTMxMzU5MDVaFw0yNjAzMTIxNDA0MDVaMDMxMTAvBgNV
BAMTKERGNDc3OTg0RkExRTEyOUI1NEQwOUQ4NjRCN0Q0NUMwNjA0REU5NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGoOT/JoqvCMIaiDAPcQSm/G9c
ny4vKypBSgLni7i2uzaGvAMRUaqxfIasQ8qq4NSqpIB00w7A27Ko+aDrIF67pvv4
OvM7ycNqc2VSBolvMVJ6Vh41F1qARiTLjSD+/lRLgqokLBGvMY0SCuMDI6QU7UPQ
xdBg5AJRTpLRi6UOYApbwjHoYNRIY39xId4kEE3NGo7/vzVOh3nPqY8r0cihvv/p
DliqbJ7zFNOn8m8IcJlzmdNs6OZ348cU+nwcAFx7FbqqjPkjdBiVGT3+3hXxtNsl
Pwk6/PYDscOBG5mtDHQIFMdBNVq/QroeAtswy7XvwRAZSaRr2zzZ1Q9uL6irAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU30d5hPoeEptU0J2GS31FwGBN6U8wHwYDVR0j
BBgwFoAUq+slPL6uaai73oPkN5T2XOmccoAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXp5cmJadEgydEFnWG03dm9kTndoRFM3NTJLckZjVkVzQkxVa0hBb0xk
aUcvMC9BQkVCMjUzQ0JFQUU2OUE4QkJERTgzRTQzNzk0RjY1Q0U5OUM3MjgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FCRUIyNTNDQkVBRTY5QThC
QkRFODNFNDM3OTRGNjVDRTk5QzcyODAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F6eXJiWnRIMnRBZ1htN3ZvZE53aERTNzUyS3JGY1ZFc0JMVWtIQW9MZGlHLzAv
MzIzODMwMzQzYTMxNjEzMTM0M2EzYTJmMzMzMjJkMzMzNjIwM2QzZTIwMzIzODMx
MzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEGhQwDQYJKoZIhvcNAQELBQADggEBAEXf445sL9lI
ZWOtK0RGXCm+CLuRpI+myiyWgx91uVVPgluS7tBuQVtKKh62ykk7zsOvbX/Xu+Ut
UYsE98cY1AQftLe8kjp3tVJezdXpTRr55zLT4APJ5ugtgS49+RNbud/YfePRmeNJ
MN5fnph9fgmibfnol/rk9JxsVXfvTQZ1Qi+m/lLYHLqr+D0sUOCE6CnjgVef2tdG
ZnKc9HWGwpiUPD58JIOLWhRSHSKdIvaEtDaQEyqyoxua7F87Fn3Q3sCRtltQLz6J
TJCuN9XcvuGTKMCBDiMqv3tldsbSUCgzoYTgt7Kvs++yBUvYQVzT8cHtCGiXWNF0
F+Ti153AOd4=
-----END CERTIFICATE-----
Generated at Thu Apr 17 16:06:00 2025 by rpki-client