Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/323830343a376532633a3a2f33322d3332203d3e20323731363037.roa
File: 323830343a376532633a3a2f33322d3332203d3e20323731363037.roa (raw, json)
Hash identifier: iOYyO2C1e9u69gfJ9XxFj3ua/3PCauvHSVjH/O2Wr14=
Subject key identifier: 2F:E6:44:B8:52:63:78:1D:40:FD:04:01:7E:B3:AE:AB:59:5C:03:03
Certificate issuer: /CN=DE1BAD7F162F23137492FDE80491DD14E69C31FA
Certificate serial: 7998BFD1A02E1CF40C67C603E3F9ACED4327DB39
Authority key identifier: DE:1B:AD:7F:16:2F:23:13:74:92:FD:E8:04:91:DD:14:E6:9C:31:FA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1BAD7F162F23137492FDE80491DD14E69C31FA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/323830343a376532633a3a2f33322d3332203d3e20323731363037.roa
Signing time: Mon 05 May 2025 21:42:39 +0000
ROA not before: Mon 05 May 2025 21:37:39 +0000
ROA not after: Mon 04 May 2026 21:42:39 +0000
asID: 271607
IP address blocks: 2804:7e2c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:98:bf:d1:a0:2e:1c:f4:0c:67:c6:03:e3:f9:ac:ed:43:27:db:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE1BAD7F162F23137492FDE80491DD14E69C31FA
Validity
Not Before: May 5 21:37:39 2025 GMT
Not After : May 4 21:42:39 2026 GMT
Subject: CN=2FE644B85263781D40FD04017EB3AEAB595C0303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:36:69:f8:59:39:7d:2d:0d:c6:0a:01:bd:dd:
f9:03:b5:7e:b1:55:4b:95:11:bd:fe:37:69:9f:d3:
52:b2:60:76:b2:3b:ac:d5:cb:ad:c0:0a:6c:35:39:
fd:2c:0b:e7:6e:92:a7:2c:36:53:96:83:7f:59:34:
10:45:8e:05:48:38:f6:f5:b3:09:98:37:12:3e:d3:
66:bb:e1:14:d7:98:a6:09:42:68:02:40:48:a4:d0:
47:3e:80:89:a6:02:9f:9d:e1:aa:43:b4:56:14:a2:
73:35:14:63:16:10:23:3f:fa:66:27:11:7b:f6:22:
0f:e1:d6:8f:57:0a:96:9f:83:57:df:6b:89:0b:a4:
fc:f3:f0:3a:25:cd:f9:ea:27:4b:08:50:71:bf:44:
74:bb:06:44:54:86:4e:6f:bc:03:8e:ea:9c:81:5e:
f1:e5:c1:75:3a:ff:15:6c:8e:a7:1c:65:32:0b:63:
b2:3e:5c:18:71:7b:60:f8:a2:72:cc:d7:0f:96:08:
14:49:82:f7:42:66:4b:c2:f7:f1:e0:1c:06:ca:85:
a6:8a:1f:e9:3b:c2:2d:0c:cc:c4:53:69:37:dd:f5:
3c:cd:48:2e:a1:ec:36:be:b5:db:a1:2f:87:3f:72:
2f:f6:cb:bd:4f:c6:39:c9:8d:d6:68:d2:3a:3c:63:
44:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E6:44:B8:52:63:78:1D:40:FD:04:01:7E:B3:AE:AB:59:5C:03:03
X509v3 Authority Key Identifier:
keyid:DE:1B:AD:7F:16:2F:23:13:74:92:FD:E8:04:91:DD:14:E6:9C:31:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/DE1BAD7F162F23137492FDE80491DD14E69C31FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1BAD7F162F23137492FDE80491DD14E69C31FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/323830343a376532633a3a2f33322d3332203d3e20323731363037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7e2c::/32
Signature Algorithm: sha256WithRSAEncryption
45:3c:44:96:0b:67:bf:5a:7c:09:fb:31:07:8a:33:5b:e2:65:
f2:d5:85:fb:4f:5a:0d:2e:ab:9b:29:d8:4a:16:57:36:0a:f6:
c8:d3:a8:3e:8f:60:fd:3a:c1:65:22:a8:0c:dd:67:d1:25:52:
55:40:bd:82:79:bd:87:1f:e6:d8:e7:22:5b:d1:45:0b:ed:b0:
fe:3b:df:01:e0:b8:50:fb:f2:b8:a0:5f:fb:77:06:98:74:ad:
6b:78:5f:b9:68:84:96:ef:35:e5:1f:f1:f0:3b:54:88:f9:c4:
af:05:f0:ad:97:68:62:ee:a2:18:d7:91:74:95:6b:c5:a2:e9:
79:c5:8c:9a:fb:5a:49:b8:b0:2a:2e:ce:6c:df:4e:7a:0a:26:
e0:35:9b:92:6f:dc:f6:c2:aa:af:ea:2f:1c:f1:1f:94:88:81:
9b:65:e6:b7:02:dd:13:5f:89:0e:a0:2e:bf:54:86:94:23:31:
f4:21:0f:8d:11:b1:1a:ee:30:6c:5c:d6:9e:45:54:28:96:1f:
2c:32:61:f9:4a:d3:b8:5f:72:f6:35:18:e8:b5:d1:e9:48:4e:
81:c3:c8:40:a0:aa:b5:d7:93:a8:83:13:53:dc:56:1d:c6:b9:
77:f3:7c:15:14:ca:5f:5d:3e:dd:69:31:20:82:a1:c5:16:7e:
10:b5:ad:67
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUeZi/0aAuHPQMZ8YD4/ms7UMn2zkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREUxQkFEN0YxNjJGMjMxMzc0OTJGREU4MDQ5MUREMTRF
NjlDMzFGQTAeFw0yNTA1MDUyMTM3MzlaFw0yNjA1MDQyMTQyMzlaMDMxMTAvBgNV
BAMTKDJGRTY0NEI4NTI2Mzc4MUQ0MEZEMDQwMTdFQjNBRUFCNTk1QzAzMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKNmn4WTl9LQ3GCgG93fkDtX6x
VUuVEb3+N2mf01KyYHayO6zVy63ACmw1Of0sC+dukqcsNlOWg39ZNBBFjgVIOPb1
swmYNxI+02a74RTXmKYJQmgCQEik0Ec+gImmAp+d4apDtFYUonM1FGMWECM/+mYn
EXv2Ig/h1o9XCpafg1ffa4kLpPzz8DolzfnqJ0sIUHG/RHS7BkRUhk5vvAOO6pyB
XvHlwXU6/xVsjqccZTILY7I+XBhxe2D4onLM1w+WCBRJgvdCZkvC9/HgHAbKhaaK
H+k7wi0MzMRTaTfd9TzNSC6h7Da+tduhL4c/ci/2y71PxjnJjdZo0jo8Y0QvAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUL+ZEuFJjeB1A/QQBfrOuq1lcAwMwHwYDVR0j
BBgwFoAU3hutfxYvIxN0kv3oBJHdFOacMfowDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9DaTJhc1A5MmVxTGN3cmRMRUJudGJlRmVwY21KVlR4N2pVc1pKZGNjWlNH
LzAvREUxQkFEN0YxNjJGMjMxMzc0OTJGREU4MDQ5MUREMTRFNjlDMzFGQS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9ERTFCQUQ3RjE2MkYyMzEzNzQ5
MkZERTgwNDkxREQxNEU2OUMzMUZBLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9D
aTJhc1A5MmVxTGN3cmRMRUJudGJlRmVwY21KVlR4N2pVc1pKZGNjWlNHLzAvMzIz
ODMwMzQzYTM3NjUzMjYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMxMzYz
MDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKAR+LDANBgkqhkiG9w0BAQsFAAOCAQEARTxElgtnv1p8
CfsxB4ozW+Jl8tWF+09aDS6rmynYShZXNgr2yNOoPo9g/TrBZSKoDN1n0SVSVUC9
gnm9hx/m2OciW9FFC+2w/jvfAeC4UPvyuKBf+3cGmHSta3hfuWiElu815R/x8DtU
iPnErwXwrZdoYu6iGNeRdJVrxaLpecWMmvtaSbiwKi7ObN9Oegom4DWbkm/c9sKq
r+ovHPEflIiBm2XmtwLdE1+JDqAuv1SGlCMx9CEPjRGxGu4wbFzWnkVUKJYfLDJh
+UrTuF9y9jUY6LXR6UhOgcPIQKCqtdeTqIMTU9xWHca5d/N8FRTKX10+3WkxIIKh
xRZ+ELWtZw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 20:29:46 2025 by rpki-client