Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/323830343a6566303a3a2f33322d313238203d3e20323633353538.roa
File: 323830343a6566303a3a2f33322d313238203d3e20323633353538.roa (raw, json)
Hash identifier: vnGyHnP1vADvHkg5AnUniHI5nPpVnePRmquRFZ1T/Rw=
Subject key identifier: 7E:13:E3:8B:90:2E:A8:AF:E5:9C:A8:54:80:D5:15:0D:D3:67:9A:5B
Certificate issuer: /CN=5668EE81C8705A595C00BF220C5BB48B38682B81
Certificate serial: 4AED43219DB7BBBA5791D59A3E15DA9773BD3F3A
Authority key identifier: 56:68:EE:81:C8:70:5A:59:5C:00:BF:22:0C:5B:B4:8B:38:68:2B:81
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5668EE81C8705A595C00BF220C5BB48B38682B81.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/323830343a6566303a3a2f33322d313238203d3e20323633353538.roa
Signing time: Sat 22 Mar 2025 23:14:06 +0000
ROA not before: Sat 22 Mar 2025 23:09:06 +0000
ROA not after: Sat 21 Mar 2026 23:14:06 +0000
asID: 263558
IP address blocks: 2804:ef0::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:ed:43:21:9d:b7:bb:ba:57:91:d5:9a:3e:15:da:97:73:bd:3f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5668EE81C8705A595C00BF220C5BB48B38682B81
Validity
Not Before: Mar 22 23:09:06 2025 GMT
Not After : Mar 21 23:14:06 2026 GMT
Subject: CN=7E13E38B902EA8AFE59CA85480D5150DD3679A5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:32:e2:85:50:c7:87:82:91:52:65:aa:8c:91:
eb:f1:50:4b:70:77:8a:21:07:32:73:66:79:25:b8:
d4:40:b8:d6:71:fc:49:9e:4f:6a:a6:86:c3:38:ee:
84:60:7d:67:7d:fb:a6:42:71:45:dc:28:67:9a:04:
11:2f:5e:fd:e3:81:4e:8e:a8:81:b3:2e:be:14:25:
06:c8:80:f7:19:85:62:d3:6d:ef:97:34:08:ad:82:
75:58:a3:10:fe:97:61:6d:5d:50:0a:44:5c:16:50:
6b:af:53:2a:7b:6e:9c:f9:79:4f:11:5c:13:6e:bf:
30:8d:10:bd:12:7a:b7:d2:51:c6:79:98:89:d0:6c:
be:d0:7b:18:eb:fa:63:f1:00:7e:62:97:7e:ce:8b:
64:10:ef:8c:da:c9:6e:1d:06:3b:77:39:8e:79:d7:
1e:1c:17:ab:67:81:fb:d5:fb:e4:17:16:02:db:8a:
48:0c:0c:81:04:14:2b:1d:2a:47:9f:a8:11:ac:67:
14:94:2f:cd:e3:67:07:71:14:8b:1e:7a:8d:62:a2:
9f:bd:b0:59:5d:c8:aa:86:4d:63:79:32:43:a7:58:
d5:89:b7:da:8c:d3:22:77:3f:18:43:cc:61:89:cb:
68:40:63:2a:83:0b:81:15:f4:48:c4:97:a1:1c:fb:
20:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:13:E3:8B:90:2E:A8:AF:E5:9C:A8:54:80:D5:15:0D:D3:67:9A:5B
X509v3 Authority Key Identifier:
keyid:56:68:EE:81:C8:70:5A:59:5C:00:BF:22:0C:5B:B4:8B:38:68:2B:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/5668EE81C8705A595C00BF220C5BB48B38682B81.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5668EE81C8705A595C00BF220C5BB48B38682B81.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/323830343a6566303a3a2f33322d313238203d3e20323633353538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:ef0::/32
Signature Algorithm: sha256WithRSAEncryption
89:5b:87:23:2b:4c:61:d1:27:13:47:51:b9:83:94:1f:ad:c2:
ce:c0:f9:3c:ed:d6:1a:7f:5d:da:4e:42:c6:50:17:ae:95:99:
83:58:5b:95:27:c7:5b:7f:d7:93:53:0d:d4:d0:57:f6:c4:75:
e9:8b:4d:00:ad:d7:4e:8c:ed:78:86:a0:44:6e:9f:2d:6d:75:
f0:80:8f:9c:12:03:8f:58:77:ee:3d:4c:08:e9:85:81:c1:a6:
50:63:f3:28:36:b9:4f:e8:6d:48:f5:77:67:2b:c5:15:3a:d5:
3c:7b:39:4e:b7:b2:b0:9f:60:30:73:32:83:61:7b:2f:72:0b:
37:05:37:e7:72:9b:0f:31:e8:e4:c4:49:4a:8d:5f:e7:67:02:
75:51:f5:4b:79:71:72:e8:80:ab:87:02:77:2b:b4:a9:0f:16:
af:b9:b8:5c:27:37:1e:6f:07:fb:23:33:92:10:d1:8e:69:ef:
73:2b:6e:4f:b2:d6:cf:e9:22:d4:7f:9d:3b:3e:37:58:9a:bc:
bb:06:ad:07:f5:87:85:d7:79:af:0f:61:5f:c9:2e:d2:52:eb:
dd:28:d4:84:ca:dc:49:76:10:5f:83:29:1d:a7:22:9f:3e:e3:
91:ba:ac:2b:a5:bb:52:f7:58:05:1b:ff:83:2d:bf:5b:a4:28:
66:2d:e5:11
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUSu1DIZ23u7pXkdWaPhXal3O9PzowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTY2OEVFODFDODcwNUE1OTVDMDBCRjIyMEM1QkI0OEIz
ODY4MkI4MTAeFw0yNTAzMjIyMzA5MDZaFw0yNjAzMjEyMzE0MDZaMDMxMTAvBgNV
BAMTKDdFMTNFMzhCOTAyRUE4QUZFNTlDQTg1NDgwRDUxNTBERDM2NzlBNUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAMuKFUMeHgpFSZaqMkevxUEtw
d4ohBzJzZnkluNRAuNZx/EmeT2qmhsM47oRgfWd9+6ZCcUXcKGeaBBEvXv3jgU6O
qIGzLr4UJQbIgPcZhWLTbe+XNAitgnVYoxD+l2FtXVAKRFwWUGuvUyp7bpz5eU8R
XBNuvzCNEL0SerfSUcZ5mInQbL7Qexjr+mPxAH5il37Oi2QQ74zayW4dBjt3OY55
1x4cF6tngfvV++QXFgLbikgMDIEEFCsdKkefqBGsZxSUL83jZwdxFIseeo1iop+9
sFldyKqGTWN5MkOnWNWJt9qM0yJ3PxhDzGGJy2hAYyqDC4EV9EjEl6Ec+yCZAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUfhPji5AuqK/lnKhUgNUVDdNnmlswHwYDVR0j
BBgwFoAUVmjugchwWllcAL8iDFu0izhoK4EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREFEWHFRbXB4RXNoQ2ZTNTZoWUNYNVR1R2ZGWmhjN1J6VzhDNlk5enVt
YWcvMC81NjY4RUU4MUM4NzA1QTU5NUMwMEJGMjIwQzVCQjQ4QjM4NjgyQjgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU2NjhFRTgxQzg3MDVBNTk1
QzAwQkYyMjBDNUJCNDhCMzg2ODJCODEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RBRFhxUW1weEVzaENmUzU2aFlDWDVUdUdmRlpoYzdSelc4QzZZOXp1bWFnLzAv
MzIzODMwMzQzYTY1NjYzMDNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzIzNjMz
MzUzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQO8DANBgkqhkiG9w0BAQsFAAOCAQEAiVuHIytM
YdEnE0dRuYOUH63CzsD5PO3WGn9d2k5CxlAXrpWZg1hblSfHW3/Xk1MN1NBX9sR1
6YtNAK3XTozteIagRG6fLW118ICPnBIDj1h37j1MCOmFgcGmUGPzKDa5T+htSPV3
ZyvFFTrVPHs5TreysJ9gMHMyg2F7L3ILNwU353KbDzHo5MRJSo1f52cCdVH1S3lx
cuiAq4cCdyu0qQ8Wr7m4XCc3Hm8H+yMzkhDRjmnvcytuT7LWz+ki1H+dOz43WJq8
uwatB/WHhdd5rw9hX8ku0lLr3SjUhMrcSXYQX4MpHacinz7jkbqsK6W7UvdYBRv/
gy2/W6QoZi3lEQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 01:12:37 2025 by rpki-client