Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/323830343a333133303a3a2f33322d3334203d3e20323634393939.roa
File: 323830343a333133303a3a2f33322d3334203d3e20323634393939.roa (raw, json)
Hash identifier: GzKsqu3NZ+5o+2f95ynihxvFA7Ua8hJmNwFZUKznrnA=
Subject key identifier: A4:D2:E4:BC:E2:4A:A4:C9:61:D0:2B:93:B1:DD:9F:CB:4C:10:93:CA
Certificate issuer: /CN=C017887352A2924D60F38A3D4763E5B9C86D1BB5
Certificate serial: 63BEA19CE5D2E4E900A02B595035F2B9B27CFD82
Authority key identifier: C0:17:88:73:52:A2:92:4D:60:F3:8A:3D:47:63:E5:B9:C8:6D:1B:B5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C017887352A2924D60F38A3D4763E5B9C86D1BB5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/323830343a333133303a3a2f33322d3334203d3e20323634393939.roa
Signing time: Mon 27 Jan 2025 17:03:37 +0000
ROA not before: Mon 27 Jan 2025 16:58:37 +0000
ROA not after: Mon 26 Jan 2026 17:03:37 +0000
asID: 264999
IP address blocks: 2804:3130::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:be:a1:9c:e5:d2:e4:e9:00:a0:2b:59:50:35:f2:b9:b2:7c:fd:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C017887352A2924D60F38A3D4763E5B9C86D1BB5
Validity
Not Before: Jan 27 16:58:37 2025 GMT
Not After : Jan 26 17:03:37 2026 GMT
Subject: CN=A4D2E4BCE24AA4C961D02B93B1DD9FCB4C1093CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ba:e4:60:cc:bf:69:d2:3f:7a:11:58:06:ea:
76:5e:f5:ee:0f:1a:c1:5b:28:fb:06:cb:5d:f2:f1:
16:d2:cb:ba:72:ff:8b:aa:fa:f9:c9:0e:3c:6f:f3:
5b:c8:9a:74:36:7f:e2:ff:f7:cb:fd:e4:cc:26:3e:
95:2b:ae:cf:c9:f5:df:38:7d:f2:26:84:69:50:c4:
c6:e2:86:d9:95:8a:1c:84:33:89:0a:2f:35:55:11:
a0:ff:6c:d7:ac:cb:97:f8:77:55:2b:8f:23:02:c9:
cd:fa:fe:96:60:19:3d:bd:e3:56:c4:8d:01:a9:1a:
6e:f8:16:da:88:4c:26:25:eb:fc:04:f3:d6:36:77:
d6:8f:59:19:47:96:3d:42:eb:d7:68:56:51:42:8d:
3d:86:5a:b0:53:b2:de:55:4f:81:fa:4a:96:1e:14:
45:c0:0a:83:d6:2d:d6:f6:6f:d1:98:9b:73:81:d4:
47:0e:31:e2:d9:eb:27:78:bc:11:9f:e2:2b:09:48:
e0:fc:79:95:87:20:a8:86:22:81:16:cb:12:e9:0a:
05:82:66:c5:a3:de:a2:7d:9f:b3:6c:a9:4a:15:92:
3e:10:41:7f:21:66:62:bd:92:0c:e2:b3:97:49:43:
05:ca:1a:36:0e:aa:c6:8b:49:21:90:04:3a:6e:d9:
9e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D2:E4:BC:E2:4A:A4:C9:61:D0:2B:93:B1:DD:9F:CB:4C:10:93:CA
X509v3 Authority Key Identifier:
keyid:C0:17:88:73:52:A2:92:4D:60:F3:8A:3D:47:63:E5:B9:C8:6D:1B:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/C017887352A2924D60F38A3D4763E5B9C86D1BB5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C017887352A2924D60F38A3D4763E5B9C86D1BB5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/323830343a333133303a3a2f33322d3334203d3e20323634393939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3130::/32
Signature Algorithm: sha256WithRSAEncryption
6d:a6:34:ae:ae:97:8d:60:18:db:9d:7c:16:c1:04:c9:70:8c:
a7:e2:77:fa:e1:76:fc:20:1f:96:70:6c:a1:8e:78:fd:e2:36:
da:b8:10:c9:ae:e4:a3:01:e8:07:3c:d3:a1:aa:c7:f6:ff:7f:
ba:fe:af:b2:2a:5c:c5:8d:a0:67:42:b6:d1:1c:1e:4c:80:d5:
be:5b:eb:22:e9:bb:b1:a3:30:0e:03:97:5d:bd:af:e8:35:0c:
e0:ee:06:66:3c:81:15:5c:15:d1:f3:34:9a:18:e4:bb:a0:e1:
fc:9f:e7:fc:6c:d0:e0:a0:11:89:62:8d:98:2a:59:de:83:3f:
d9:92:cd:47:63:bc:27:44:9c:72:52:23:76:98:63:73:74:af:
9e:e9:17:6b:2a:63:3b:68:63:28:0f:81:00:39:d2:69:18:df:
40:75:30:b3:b0:9c:cd:7c:8a:db:ee:c6:ee:31:72:63:e6:e5:
ea:35:f2:32:6f:c9:45:c2:a7:c3:18:1a:ce:ac:27:3c:e5:3a:
42:78:08:75:fa:f5:7a:b2:4c:ee:35:d5:14:66:a3:4f:00:c5:
cd:6e:5e:81:90:bd:11:81:af:3c:3e:d1:1c:1b:21:d9:70:d9:
84:6a:7b:47:34:4d:80:0c:92:7c:03:81:6a:52:e0:7d:42:c9:
7c:82:35:1e
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUY76hnOXS5OkAoCtZUDXyubJ8/YIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzAxNzg4NzM1MkEyOTI0RDYwRjM4QTNENDc2M0U1QjlD
ODZEMUJCNTAeFw0yNTAxMjcxNjU4MzdaFw0yNjAxMjYxNzAzMzdaMDMxMTAvBgNV
BAMTKEE0RDJFNEJDRTI0QUE0Qzk2MUQwMkI5M0IxREQ5RkNCNEMxMDkzQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCquuRgzL9p0j96EVgG6nZe9e4P
GsFbKPsGy13y8RbSy7py/4uq+vnJDjxv81vImnQ2f+L/98v95MwmPpUrrs/J9d84
ffImhGlQxMbihtmVihyEM4kKLzVVEaD/bNesy5f4d1UrjyMCyc36/pZgGT2941bE
jQGpGm74FtqITCYl6/wE89Y2d9aPWRlHlj1C69doVlFCjT2GWrBTst5VT4H6SpYe
FEXACoPWLdb2b9GYm3OB1EcOMeLZ6yd4vBGf4isJSOD8eZWHIKiGIoEWyxLpCgWC
ZsWj3qJ9n7NsqUoVkj4QQX8hZmK9kgzis5dJQwXKGjYOqsaLSSGQBDpu2Z7FAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUpNLkvOJKpMlh0CuTsd2fy0wQk8owHwYDVR0j
BBgwFoAUwBeIc1Kikk1g84o9R2PluchtG7UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWcxamdLMkVaNXp4b0dzRk1aRGttZVJlb2FhaVl3RW5xeDVyd1BBUXZN
eE4vMC9DMDE3ODg3MzUyQTI5MjRENjBGMzhBM0Q0NzYzRTVCOUM4NkQxQkI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MwMTc4ODczNTJBMjkyNEQ2
MEYzOEEzRDQ3NjNFNUI5Qzg2RDFCQjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VnMWpnSzJFWjV6eG9Hc0ZNWkRrbWVSZW9hYWlZd0VucXg1cndQQVF2TXhOLzAv
MzIzODMwMzQzYTMzMzEzMzMwM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM0
MzkzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQxMDANBgkqhkiG9w0BAQsFAAOCAQEAbaY0rq6X
jWAY2518FsEEyXCMp+J3+uF2/CAflnBsoY54/eI22rgQya7kowHoBzzToarH9v9/
uv6vsipcxY2gZ0K20RweTIDVvlvrIum7saMwDgOXXb2v6DUM4O4GZjyBFVwV0fM0
mhjku6Dh/J/n/GzQ4KARiWKNmCpZ3oM/2ZLNR2O8J0ScclIjdphjc3SvnukXaypj
O2hjKA+BADnSaRjfQHUws7CczXyK2+7G7jFyY+bl6jXyMm/JRcKnwxgazqwnPOU6
QngIdfr1erJM7jXVFGajTwDFzW5egZC9EYGvPD7RHBsh2XDZhGp7RzRNgAySfAOB
alLgfULJfII1Hg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:30:32 2025 by rpki-client