Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/1/323830343a313638383a613030303a3a2f33352d3335203d3e20323633323930.roa
File: 323830343a313638383a613030303a3a2f33352d3335203d3e20323633323930.roa (raw, json)
Hash identifier: oo+7foDn5t9YekzSZ+zqGvr/Ns0CpHsCewNISUYmilI=
Subject key identifier: 47:80:12:72:AF:E5:52:4D:5C:88:DA:CE:31:CA:FB:86:20:3A:D0:F4
Certificate issuer: /CN=A27C713EEC3E4E5F319E67684ECFC96BEB54F973
Certificate serial: 24E13AB10158A0406CCCF2BD28F932C1C3C7D24B
Authority key identifier: A2:7C:71:3E:EC:3E:4E:5F:31:9E:67:68:4E:CF:C9:6B:EB:54:F9:73
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A27C713EEC3E4E5F319E67684ECFC96BEB54F973.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/1/323830343a313638383a613030303a3a2f33352d3335203d3e20323633323930.roa
Signing time: Mon 02 Jun 2025 20:52:40 +0000
ROA not before: Mon 02 Jun 2025 20:47:40 +0000
ROA not after: Mon 01 Jun 2026 20:52:40 +0000
asID: 263290
IP address blocks: 2804:1688:a000::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:e1:3a:b1:01:58:a0:40:6c:cc:f2:bd:28:f9:32:c1:c3:c7:d2:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A27C713EEC3E4E5F319E67684ECFC96BEB54F973
Validity
Not Before: Jun 2 20:47:40 2025 GMT
Not After : Jun 1 20:52:40 2026 GMT
Subject: CN=47801272AFE5524D5C88DACE31CAFB86203AD0F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d0:ad:60:0a:51:08:49:f0:85:1d:fe:eb:22:
df:cf:84:77:7a:eb:5f:6d:05:93:08:35:c2:f2:f8:
4b:a9:b8:31:bc:90:26:f7:13:fd:9f:88:f2:f5:d4:
3c:10:3b:4f:a4:57:10:0f:bb:1e:17:da:21:42:f9:
ae:d4:f5:f2:59:a5:8e:92:9f:16:09:e9:da:6d:c1:
19:51:b7:b2:03:3b:4f:a3:67:19:d8:59:34:f4:d1:
c0:c0:bd:af:85:dc:1d:79:c1:d3:14:04:81:08:f0:
c0:8c:69:5b:c9:1b:a0:c1:c0:64:56:46:ab:d5:2e:
d5:39:3d:5b:94:97:5d:b8:85:a9:4e:ae:cf:bc:10:
75:4e:0d:a6:53:dc:32:1d:f1:ae:d8:f3:4b:55:e7:
1e:f8:49:2f:2f:95:f1:9a:20:b6:7c:f7:ce:8b:e5:
b2:1c:a8:16:3b:f3:3d:76:6b:d8:57:8f:65:2b:e8:
04:7c:93:e9:85:b7:5c:78:a8:3b:8f:50:c9:7b:6d:
12:99:5a:c3:91:c6:41:ee:5a:b5:1e:96:f9:2d:a4:
77:b3:17:84:bf:74:64:d4:3e:68:6d:bc:d9:c4:be:
22:e1:88:7c:c5:86:72:84:9d:cd:f6:80:d1:5d:0c:
ba:b7:be:1c:8e:dd:ff:5e:01:37:6a:a3:85:92:a0:
d2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:80:12:72:AF:E5:52:4D:5C:88:DA:CE:31:CA:FB:86:20:3A:D0:F4
X509v3 Authority Key Identifier:
keyid:A2:7C:71:3E:EC:3E:4E:5F:31:9E:67:68:4E:CF:C9:6B:EB:54:F9:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/1/A27C713EEC3E4E5F319E67684ECFC96BEB54F973.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A27C713EEC3E4E5F319E67684ECFC96BEB54F973.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/1/323830343a313638383a613030303a3a2f33352d3335203d3e20323633323930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1688:a000::/35
Signature Algorithm: sha256WithRSAEncryption
19:50:84:3f:97:dd:92:b1:c5:bc:e7:2c:ba:ed:29:23:8c:cc:
bf:09:cb:79:fe:47:45:ae:cc:cc:94:0d:f8:1c:ca:f2:e6:0e:
b9:5f:a3:92:8e:77:23:39:3c:59:f9:f4:e7:91:3b:2c:10:04:
22:b7:6d:d5:1a:26:8a:29:43:bd:5d:b8:d4:af:fe:5e:e8:81:
19:15:17:60:68:e2:fa:5b:46:1f:99:51:7e:94:9e:4d:53:ad:
94:ed:64:24:2d:5b:e9:54:f2:68:e3:a1:d1:b0:ff:a3:40:dd:
53:b4:5b:1c:66:fa:b1:bc:fc:66:a8:60:e2:7d:3b:3c:df:3a:
20:d3:f0:69:d4:72:56:1b:5c:1d:b2:db:47:4a:87:24:50:71:
41:9a:d0:e7:e6:42:53:6a:d4:5f:fd:fd:09:26:b7:31:31:ce:
fe:5a:77:ab:75:69:17:ae:2b:18:63:dc:ab:6c:37:3d:66:63:
ec:60:18:ff:81:52:41:b8:2d:19:8b:62:ab:cb:52:df:1d:98:
9b:d2:77:b6:88:8a:3e:41:ff:d7:17:79:45:8b:ec:39:9c:ae:
c5:f1:50:b2:31:73:d2:d4:7a:a1:af:a2:7a:e2:1f:f6:e1:29:
a8:b0:57:50:1d:18:63:a0:f5:0e:d5:a2:e1:6c:e6:ca:cf:eb:
4a:61:95:04
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUJOE6sQFYoEBszPK9KPkywcPH0kswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTI3QzcxM0VFQzNFNEU1RjMxOUU2NzY4NEVDRkM5NkJF
QjU0Rjk3MzAeFw0yNTA2MDIyMDQ3NDBaFw0yNjA2MDEyMDUyNDBaMDMxMTAvBgNV
BAMTKDQ3ODAxMjcyQUZFNTUyNEQ1Qzg4REFDRTMxQ0FGQjg2MjAzQUQwRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm0K1gClEISfCFHf7rIt/PhHd6
619tBZMINcLy+EupuDG8kCb3E/2fiPL11DwQO0+kVxAPux4X2iFC+a7U9fJZpY6S
nxYJ6dptwRlRt7IDO0+jZxnYWTT00cDAva+F3B15wdMUBIEI8MCMaVvJG6DBwGRW
RqvVLtU5PVuUl124halOrs+8EHVODaZT3DId8a7Y80tV5x74SS8vlfGaILZ8986L
5bIcqBY78z12a9hXj2Ur6AR8k+mFt1x4qDuPUMl7bRKZWsORxkHuWrUelvktpHez
F4S/dGTUPmhtvNnEviLhiHzFhnKEnc32gNFdDLq3vhyO3f9eATdqo4WSoNLxAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUR4AScq/lUk1ciNrOMcr7hiA60PQwHwYDVR0j
BBgwFoAUonxxPuw+Tl8xnmdoTs/Ja+tU+XMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGc0QkI5Q2paZ1lEeVJ6WkZWc1hqWXhjOENpbnpVQTZRamd0UHk0TDdm
ckEvMS9BMjdDNzEzRUVDM0U0RTVGMzE5RTY3Njg0RUNGQzk2QkVCNTRGOTczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyN0M3MTNFRUMzRTRFNUYz
MTlFNjc2ODRFQ0ZDOTZCRUI1NEY5NzMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RnNEJCOUNqWmdZRHlSelpGVnNYall4YzhDaW56VUE2UWpndFB5NEw3ZnJBLzEv
MzIzODMwMzQzYTMxMzYzODM4M2E2MTMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDMyMzYzMzMyMzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEFoigMA0GCSqGSIb3DQEBCwUA
A4IBAQAZUIQ/l92SscW85yy67SkjjMy/Cct5/kdFrszMlA34HMry5g65X6OSjncj
OTxZ+fTnkTssEAQit23VGiaKKUO9XbjUr/5e6IEZFRdgaOL6W0YfmVF+lJ5NU62U
7WQkLVvpVPJo46HRsP+jQN1TtFscZvqxvPxmqGDifTs83zog0/Bp1HJWG1wdsttH
SockUHFBmtDn5kJTatRf/f0JJrcxMc7+WnerdWkXrisYY9yrbDc9ZmPsYBj/gVJB
uC0Zi2Kry1LfHZib0ne2iIo+Qf/XF3lFi+w5nK7F8VCyMXPS1Hqhr6J64h/24Smo
sFdQHRhjoPUO1aLhbObKz+tKYZUE
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:20:07 2025 by rpki-client