Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a363030303a3a2f33392d3438203d3e20323635393139.roa
File: 323830343a336664383a363030303a3a2f33392d3438203d3e20323635393139.roa (raw, json)
Hash identifier: GdksONbkKChlr2NXUQYCavBv9agidn46NYvicsQh+fo=
Subject key identifier: 2D:13:28:21:8E:56:B9:A5:2F:8E:19:93:94:BA:BA:E7:D4:40:9E:C3
Certificate issuer: /CN=1D4739886A145524D2F84E7F6704B0D6AFFC2AE9
Certificate serial: 4FFE3595532B04ACFB6B3FAD217315D99815BF2D
Authority key identifier: 1D:47:39:88:6A:14:55:24:D2:F8:4E:7F:67:04:B0:D6:AF:FC:2A:E9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a363030303a3a2f33392d3438203d3e20323635393139.roa
Signing time: Fri 28 Feb 2025 14:54:14 +0000
ROA not before: Fri 28 Feb 2025 14:49:14 +0000
ROA not after: Fri 27 Feb 2026 14:54:14 +0000
asID: 265919
IP address blocks: 2804:3fd8:6000::/39 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:fe:35:95:53:2b:04:ac:fb:6b:3f:ad:21:73:15:d9:98:15:bf:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D4739886A145524D2F84E7F6704B0D6AFFC2AE9
Validity
Not Before: Feb 28 14:49:14 2025 GMT
Not After : Feb 27 14:54:14 2026 GMT
Subject: CN=2D1328218E56B9A52F8E199394BABAE7D4409EC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fd:bf:75:dc:d3:0a:04:77:82:d8:a6:b3:00:
53:69:d7:f7:24:39:81:de:2f:0b:95:3f:f2:1c:db:
2f:7d:1e:a2:a3:53:9b:34:b2:3b:1f:ae:c1:2c:e8:
c2:ef:a1:52:20:5f:04:90:20:0d:da:5d:d2:87:00:
90:16:97:40:d5:9e:34:1d:60:dc:bf:c5:98:64:c5:
1a:dc:d7:db:d6:61:c7:2c:3c:a8:d0:5e:8e:65:9c:
71:5e:96:55:4d:f1:53:c4:d9:ae:c4:24:c0:41:31:
61:55:e4:94:c2:0f:a9:a0:bf:c3:33:e3:23:e0:25:
f6:d6:1b:dc:06:3e:a5:8b:af:69:93:5e:25:50:dc:
29:26:34:45:92:6b:ef:3f:4f:0c:d0:91:cf:7b:a5:
a6:23:40:3a:46:34:eb:57:ca:87:94:f1:70:10:0d:
b0:b5:5b:88:b3:e2:87:ad:a4:85:f0:b4:ae:20:c9:
da:a8:40:60:fe:71:fb:a3:9f:68:14:08:2b:c3:82:
ff:4e:f8:cf:96:fd:91:3d:97:b4:28:11:76:a5:26:
14:85:e4:d5:25:6a:61:b4:b6:b2:bf:d9:0b:5f:6f:
9a:49:9a:00:39:4e:2e:4d:58:03:d8:df:38:66:bc:
d5:5d:e2:f8:04:78:97:9e:1f:a3:31:7b:26:53:d1:
3a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:13:28:21:8E:56:B9:A5:2F:8E:19:93:94:BA:BA:E7:D4:40:9E:C3
X509v3 Authority Key Identifier:
keyid:1D:47:39:88:6A:14:55:24:D2:F8:4E:7F:67:04:B0:D6:AF:FC:2A:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a363030303a3a2f33392d3438203d3e20323635393139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3fd8:6000::/39
Signature Algorithm: sha256WithRSAEncryption
a5:06:96:bc:1b:49:d5:1a:5c:5e:5e:ef:a9:30:aa:3d:31:18:
cf:8e:1c:f0:4f:2d:54:80:c9:d3:ef:9c:2f:a9:25:02:d5:5d:
9c:4e:88:fb:e4:2b:0f:66:e0:ea:9a:87:7b:7a:6c:65:2a:c3:
cb:e6:60:5a:4e:1e:3f:76:f8:f2:4a:aa:c3:81:1c:0a:20:25:
08:36:d0:b7:8d:9c:e3:3a:33:ff:f6:82:9f:ec:3e:5c:87:21:
74:fe:de:c1:0d:21:4a:ea:12:8b:5b:5d:ab:c0:64:e8:01:3e:
69:98:3b:f1:8f:01:4e:e3:6b:8f:33:96:7d:3d:33:ba:19:5a:
4e:b5:9a:03:1b:ed:34:b0:58:20:da:a2:d2:71:5a:03:6d:e6:
a7:de:c7:e6:7a:71:d8:9b:0d:88:f3:fb:52:57:72:e7:8d:53:
bd:b3:ee:0c:a9:b3:99:27:f4:c3:c9:2d:fa:55:49:13:d4:df:
f4:da:f9:5e:29:3d:ac:4e:3b:bf:30:8a:1a:c6:a7:91:d5:fc:
76:ce:b4:bb:1c:c4:7c:1d:90:fe:9a:9a:d9:be:b3:03:74:a6:
f4:fa:9c:17:dc:73:d2:99:a5:b7:60:a3:ef:91:7f:ab:b0:83:
1f:20:f4:a4:4b:a0:cb:2a:60:91:1c:ec:f6:78:6e:cd:e4:d2:
c0:89:a7:49
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUT/41lVMrBKz7az+tIXMV2ZgVvy0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQ0NzM5ODg2QTE0NTUyNEQyRjg0RTdGNjcwNEIwRDZB
RkZDMkFFOTAeFw0yNTAyMjgxNDQ5MTRaFw0yNjAyMjcxNDU0MTRaMDMxMTAvBgNV
BAMTKDJEMTMyODIxOEU1NkI5QTUyRjhFMTk5Mzk0QkFCQUU3RDQ0MDlFQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ/b913NMKBHeC2KazAFNp1/ck
OYHeLwuVP/Ic2y99HqKjU5s0sjsfrsEs6MLvoVIgXwSQIA3aXdKHAJAWl0DVnjQd
YNy/xZhkxRrc19vWYccsPKjQXo5lnHFellVN8VPE2a7EJMBBMWFV5JTCD6mgv8Mz
4yPgJfbWG9wGPqWLr2mTXiVQ3CkmNEWSa+8/TwzQkc97paYjQDpGNOtXyoeU8XAQ
DbC1W4iz4oetpIXwtK4gydqoQGD+cfujn2gUCCvDgv9O+M+W/ZE9l7QoEXalJhSF
5NUlamG0trK/2Qtfb5pJmgA5Ti5NWAPY3zhmvNVd4vgEeJeeH6MxeyZT0Tp/AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQULRMoIY5WuaUvjhmTlLq659RAnsMwHwYDVR0j
BBgwFoAUHUc5iGoUVSTS+E5/ZwSw1q/8KukwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREZBcFFkcjNldWQySGpwM0hXRk52NkV1M3lBaXk3WE5vTjVpRlduWXFh
bzQvMC8xRDQ3Mzk4ODZBMTQ1NTI0RDJGODRFN0Y2NzA0QjBENkFGRkMyQUU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFENDczOTg4NkExNDU1MjRE
MkY4NEU3RjY3MDRCMEQ2QUZGQzJBRTkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RGQXBRZHIzZXVkMkhqcDNIV0ZOdjZFdTN5QWl5N1hOb041aUZXbllxYW80LzAv
MzIzODMwMzQzYTMzNjY2NDM4M2EzNjMwMzAzMDNhM2EyZjMzMzkyZDM0MzgyMDNk
M2UyMDMyMzYzNTM5MzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGASgEP9hgMA0GCSqGSIb3DQEBCwUA
A4IBAQClBpa8G0nVGlxeXu+pMKo9MRjPjhzwTy1UgMnT75wvqSUC1V2cToj75CsP
ZuDqmod7emxlKsPL5mBaTh4/dvjySqrDgRwKICUINtC3jZzjOjP/9oKf7D5chyF0
/t7BDSFK6hKLW12rwGToAT5pmDvxjwFO42uPM5Z9PTO6GVpOtZoDG+00sFgg2qLS
cVoDbean3sfmenHYmw2I8/tSV3LnjVO9s+4MqbOZJ/TDyS36VUkT1N/02vleKT2s
Tju/MIoaxqeR1fx2zrS7HMR8HZD+mprZvrMDdKb0+pwX3HPSmaW3YKPvkX+rsIMf
IPSkS6DLKmCRHOz2eG7N5NLAiadJ
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:32 2025 by rpki-client