Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/323830343a343832633a3a2f33322d3438203d3e20323637313032.roa
File: 323830343a343832633a3a2f33322d3438203d3e20323637313032.roa (raw, json)
Hash identifier: 01pAW4QCHBpNqYLYxhHBFF+Hirycj7LT0087UnT0sog=
Subject key identifier: B1:C5:56:CF:1A:30:8B:3F:4B:BF:2B:29:5B:0C:3B:B1:A6:75:19:27
Certificate issuer: /CN=D539CF929B6A6A2B9596B922F417FAD917799ED7
Certificate serial: 1600C573840EA4E86FE75C73BA57EA9C46BE5A00
Authority key identifier: D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/323830343a343832633a3a2f33322d3438203d3e20323637313032.roa
Signing time: Thu 06 Mar 2025 04:00:17 +0000
ROA not before: Thu 06 Mar 2025 03:55:17 +0000
ROA not after: Thu 05 Mar 2026 04:00:17 +0000
asID: 267102
IP address blocks: 2804:482c::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:00:c5:73:84:0e:a4:e8:6f:e7:5c:73:ba:57:ea:9c:46:be:5a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D539CF929B6A6A2B9596B922F417FAD917799ED7
Validity
Not Before: Mar 6 03:55:17 2025 GMT
Not After : Mar 5 04:00:17 2026 GMT
Subject: CN=B1C556CF1A308B3F4BBF2B295B0C3BB1A6751927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9c:75:e7:75:bd:bd:c0:f0:64:4e:6e:fc:d4:
3f:13:82:e9:e3:48:1f:bc:1a:40:20:61:5b:f9:3e:
66:93:14:1b:35:3d:3c:eb:8d:aa:16:aa:6b:df:65:
b3:9d:ee:b5:33:39:89:23:c0:00:ca:0f:32:73:90:
f4:70:fc:fd:b7:13:e3:3f:35:e1:fc:57:d6:87:7c:
2c:a3:81:76:e9:92:e9:cd:6e:68:73:e6:0d:dd:7f:
df:ca:39:ee:fb:18:55:25:4d:12:57:31:41:4d:a0:
c0:88:fb:fe:94:d8:19:53:54:92:75:74:58:16:b2:
cc:f5:84:aa:f2:b1:ce:04:9c:fa:df:40:4d:35:1c:
e0:9c:4b:f8:d7:57:ff:0c:a3:72:4e:02:aa:a4:4b:
b7:ae:d6:39:e8:46:72:c8:88:36:88:d8:88:ce:1a:
1c:62:76:49:e9:15:4a:ba:3f:0f:49:d5:9d:96:20:
de:c4:7d:b1:e9:21:a4:00:27:1f:11:a5:84:02:6b:
40:b5:81:4d:c8:91:fc:65:71:4f:5d:f7:c7:79:af:
7b:4d:e2:ea:a7:bd:58:2d:09:cc:e4:de:10:a7:53:
d2:69:9b:12:99:e2:48:5d:73:4d:df:8c:56:eb:98:
34:49:6d:e2:17:74:42:c9:70:55:3b:32:e2:27:b7:
9f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C5:56:CF:1A:30:8B:3F:4B:BF:2B:29:5B:0C:3B:B1:A6:75:19:27
X509v3 Authority Key Identifier:
keyid:D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/323830343a343832633a3a2f33322d3438203d3e20323637313032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:482c::/32
Signature Algorithm: sha256WithRSAEncryption
19:67:47:b3:a1:66:1a:64:0a:90:73:00:52:70:4f:34:5e:c7:
34:cf:56:e4:bb:7e:c6:84:39:22:a3:3b:f7:a2:c8:70:22:8d:
92:38:39:ca:24:51:2c:b9:ee:d4:0c:e0:60:7e:c9:12:01:e3:
dd:71:c6:6d:82:0b:62:a6:97:a6:10:e3:26:9b:8c:d2:f6:e2:
b1:4a:8f:56:d9:4a:ce:a6:66:de:82:fa:96:f5:a0:1e:1b:7f:
ab:18:0d:21:d0:19:10:ce:79:d3:c4:24:60:23:a7:45:17:83:
2c:e1:5b:89:d2:f8:13:3a:d6:92:7b:b8:eb:cf:51:4c:ad:14:
85:0a:80:e1:4c:0a:3e:b8:76:21:1f:aa:ea:bd:40:eb:6b:f8:
84:02:64:22:4f:f2:b5:c1:c0:2d:09:a2:a7:50:b7:10:e8:cb:
d0:4b:cd:57:28:72:01:f1:33:e6:9e:b9:4d:ce:ba:56:f7:f4:
19:4e:48:c5:8c:b7:e9:57:e6:91:40:3a:8f:11:5d:57:ad:e0:
2b:65:f8:58:cb:f2:68:75:72:22:f8:9b:57:ae:ee:45:0d:73:
5e:cb:55:1c:6e:91:31:8a:6b:4b:f8:3b:c8:4c:cf:62:7a:0d:
27:1c:e6:8b:05:76:fa:95:fe:33:6b:eb:e2:3f:b9:66:94:c9:
30:36:70:37
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUFgDFc4QOpOhv51xzulfqnEa+WgAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDUzOUNGOTI5QjZBNkEyQjk1OTZCOTIyRjQxN0ZBRDkx
Nzc5OUVENzAeFw0yNTAzMDYwMzU1MTdaFw0yNjAzMDUwNDAwMTdaMDMxMTAvBgNV
BAMTKEIxQzU1NkNGMUEzMDhCM0Y0QkJGMkIyOTVCMEMzQkIxQTY3NTE5MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtnHXndb29wPBkTm781D8Tgunj
SB+8GkAgYVv5PmaTFBs1PTzrjaoWqmvfZbOd7rUzOYkjwADKDzJzkPRw/P23E+M/
NeH8V9aHfCyjgXbpkunNbmhz5g3df9/KOe77GFUlTRJXMUFNoMCI+/6U2BlTVJJ1
dFgWssz1hKrysc4EnPrfQE01HOCcS/jXV/8Mo3JOAqqkS7eu1jnoRnLIiDaI2IjO
GhxidknpFUq6Pw9J1Z2WIN7EfbHpIaQAJx8RpYQCa0C1gU3IkfxlcU9d98d5r3tN
4uqnvVgtCczk3hCnU9JpmxKZ4khdc03fjFbrmDRJbeIXdELJcFU7MuInt587AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUscVWzxowiz9LvyspWww7saZ1GScwHwYDVR0j
BBgwFoAU1TnPkptqaiuVlrki9Bf62Rd5ntcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHRhM1dIWDVjd3E4OGdmTEVjclBlYWp0Ulh2QVB1UFhYTHoxc3NONzNT
M1QvMS9ENTM5Q0Y5MjlCNkE2QTJCOTU5NkI5MjJGNDE3RkFEOTE3Nzk5RUQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1MzlDRjkyOUI2QTZBMkI5
NTk2QjkyMkY0MTdGQUQ5MTc3OTlFRDcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R0YTNXSFg1Y3dxODhnZkxFY3JQZWFqdFJYdkFQdVBYWEx6MXNzTjczUzNULzEv
MzIzODMwMzQzYTM0MzgzMjYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3
MzEzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARILDANBgkqhkiG9w0BAQsFAAOCAQEAGWdHs6Fm
GmQKkHMAUnBPNF7HNM9W5Lt+xoQ5IqM796LIcCKNkjg5yiRRLLnu1AzgYH7JEgHj
3XHGbYILYqaXphDjJpuM0vbisUqPVtlKzqZm3oL6lvWgHht/qxgNIdAZEM5508Qk
YCOnRReDLOFbidL4EzrWknu4689RTK0UhQqA4UwKPrh2IR+q6r1A62v4hAJkIk/y
tcHALQmip1C3EOjL0EvNVyhyAfEz5p65Tc66Vvf0GU5IxYy36VfmkUA6jxFdV63g
K2X4WMvyaHVyIvibV67uRQ1zXstVHG6RMYprS/g7yEzPYnoNJxzmiwV2+pX+M2vr
4j+5ZpTJMDZwNw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:13:07 2025 by rpki-client