Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a383030303a3a2f33332d3333203d3e20323636313635.roa
File: 323830343a336262303a383030303a3a2f33332d3333203d3e20323636313635.roa (raw, json)
Hash identifier: 6JqX0l0S4/KiDJii85tf2NF/GJ2/x9dKO/wr32AAe4s=
Subject key identifier: 5B:54:2D:3F:9A:B4:8C:A6:93:91:C5:08:73:A7:4A:6A:14:AD:92:F7
Certificate issuer: /CN=DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C
Certificate serial: 080EAD938CAD2EBB842C21EA6DAFD984B7780E3F
Authority key identifier: DF:B1:65:A5:5B:30:AA:C4:E3:2C:EC:8F:E9:B4:38:6E:F0:EA:8D:3C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a383030303a3a2f33332d3333203d3e20323636313635.roa
Signing time: Mon 03 Mar 2025 23:56:11 +0000
ROA not before: Mon 03 Mar 2025 23:51:11 +0000
ROA not after: Mon 02 Mar 2026 23:56:11 +0000
asID: 266165
IP address blocks: 2804:3bb0:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:0e:ad:93:8c:ad:2e:bb:84:2c:21:ea:6d:af:d9:84:b7:78:0e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C
Validity
Not Before: Mar 3 23:51:11 2025 GMT
Not After : Mar 2 23:56:11 2026 GMT
Subject: CN=5B542D3F9AB48CA69391C50873A74A6A14AD92F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:72:b4:a8:76:3c:cd:6e:58:b0:7f:39:14:91:
46:f7:93:00:49:57:7c:c2:b1:88:a1:a4:61:a0:ab:
9e:35:01:0f:ac:85:99:0f:40:86:9b:04:8f:7f:72:
c6:a8:86:cd:72:46:92:dc:4d:24:37:34:1a:b3:94:
73:93:43:12:b1:8b:b9:34:83:23:ca:d1:aa:ca:ca:
8c:7a:94:ec:de:a6:c3:31:99:b1:1c:06:68:8f:58:
0c:d0:c9:ac:32:4d:f3:de:b4:ca:b9:cd:3f:88:20:
51:8c:0b:b5:81:8d:cd:be:89:19:05:24:72:7c:83:
9c:fc:cd:3c:94:ea:cc:8b:c3:33:70:20:97:64:8f:
5a:9c:e2:16:c0:2e:e2:85:e1:31:af:e0:38:10:1a:
ed:20:4e:f3:0a:02:f8:d1:09:c3:a8:24:56:d7:5e:
96:49:27:a4:63:27:51:cc:1e:a6:ed:ee:ac:1d:4a:
ee:79:61:f8:0a:3b:d3:79:1a:f4:ca:65:7a:ee:fe:
a3:88:a0:1d:53:b1:ed:68:fc:01:38:05:86:72:c2:
6c:d3:dd:ee:a3:95:64:08:17:0c:10:16:8c:85:21:
33:3d:7f:2c:08:9c:bf:dd:8e:2b:d4:5d:27:fc:d7:
66:c0:a1:bb:b7:a9:a2:34:af:62:3b:89:6d:9d:cb:
d4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:54:2D:3F:9A:B4:8C:A6:93:91:C5:08:73:A7:4A:6A:14:AD:92:F7
X509v3 Authority Key Identifier:
keyid:DF:B1:65:A5:5B:30:AA:C4:E3:2C:EC:8F:E9:B4:38:6E:F0:EA:8D:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a383030303a3a2f33332d3333203d3e20323636313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3bb0:8000::/33
Signature Algorithm: sha256WithRSAEncryption
48:88:16:bd:b0:67:4d:9b:c7:41:94:fc:a6:b8:d1:8b:be:9f:
34:f5:3e:8b:5a:bd:98:a2:76:1f:fb:d8:94:c0:88:aa:3b:b6:
16:ab:f5:43:da:f8:f2:00:d4:66:3d:ce:a2:ce:0e:eb:1c:2f:
4e:f1:c0:d4:94:4e:ae:82:fa:2d:50:a5:86:78:ac:a2:4e:21:
4f:dd:2d:f1:b9:ef:9a:41:0a:b0:49:ad:94:3c:29:97:84:e9:
79:cf:04:fa:d0:0f:e7:21:59:09:cb:8f:4a:c3:5b:eb:7f:ff:
eb:b8:a4:5e:03:48:3c:f8:fe:17:b7:96:e2:93:7f:ac:5c:01:
0d:a1:82:72:ef:72:ec:a5:7e:8c:c3:76:1c:d1:68:f7:c1:7a:
85:d2:f2:4c:af:bc:c3:1d:fa:d2:77:50:c5:66:11:05:a0:50:
8f:34:a2:bf:c0:33:76:f1:bd:a6:ee:26:f3:5d:9d:c7:b6:33:
b4:a9:9e:39:20:b4:2b:3a:20:44:fc:08:9e:23:8b:1f:4f:a8:
c9:62:e4:e1:57:2d:8a:7c:bf:e3:a4:6c:91:ae:3a:59:07:0c:
25:b8:df:cc:fc:44:66:dd:36:73:01:a3:ef:78:05:1d:4d:c2:
f7:a0:26:41:ba:87:22:d4:c4:46:2d:e0:0e:28:38:4a:87:cd:
41:59:a0:cb
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUCA6tk4ytLruELCHqba/ZhLd4Dj8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREZCMTY1QTU1QjMwQUFDNEUzMkNFQzhGRTlCNDM4NkVG
MEVBOEQzQzAeFw0yNTAzMDMyMzUxMTFaFw0yNjAzMDIyMzU2MTFaMDMxMTAvBgNV
BAMTKDVCNTQyRDNGOUFCNDhDQTY5MzkxQzUwODczQTc0QTZBMTRBRDkyRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTcrSodjzNbliwfzkUkUb3kwBJ
V3zCsYihpGGgq541AQ+shZkPQIabBI9/csaohs1yRpLcTSQ3NBqzlHOTQxKxi7k0
gyPK0arKyox6lOzepsMxmbEcBmiPWAzQyawyTfPetMq5zT+IIFGMC7WBjc2+iRkF
JHJ8g5z8zTyU6syLwzNwIJdkj1qc4hbALuKF4TGv4DgQGu0gTvMKAvjRCcOoJFbX
XpZJJ6RjJ1HMHqbt7qwdSu55YfgKO9N5GvTKZXru/qOIoB1Tse1o/AE4BYZywmzT
3e6jlWQIFwwQFoyFITM9fywInL/djivUXSf812bAobu3qaI0r2I7iW2dy9QlAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUW1QtP5q0jKaTkcUIc6dKahStkvcwHwYDVR0j
BBgwFoAU37FlpVswqsTjLOyP6bQ4bvDqjTwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjRoc1VnUkg4bW9jWERBNUJ3U0gyVFRwRHZzQmR3cVNUNDNCRUJKZ0Vx
ajIvMC9ERkIxNjVBNTVCMzBBQUM0RTMyQ0VDOEZFOUI0Mzg2RUYwRUE4RDNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGQjE2NUE1NUIzMEFBQzRF
MzJDRUM4RkU5QjQzODZFRjBFQThEM0MuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o0aHNVZ1JIOG1vY1hEQTVCd1NIMlRUcER2c0Jkd3FTVDQzQkVCSmdFcWoyLzAv
MzIzODMwMzQzYTMzNjI2MjMwM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzNjMxMzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEO7CAMA0GCSqGSIb3DQEBCwUA
A4IBAQBIiBa9sGdNm8dBlPymuNGLvp809T6LWr2YonYf+9iUwIiqO7YWq/VD2vjy
ANRmPc6izg7rHC9O8cDUlE6ugvotUKWGeKyiTiFP3S3xue+aQQqwSa2UPCmXhOl5
zwT60A/nIVkJy49Kw1vrf//ruKReA0g8+P4Xt5bik3+sXAENoYJy73LspX6Mw3Yc
0Wj3wXqF0vJMr7zDHfrSd1DFZhEFoFCPNKK/wDN28b2m7ibzXZ3HtjO0qZ45ILQr
OiBE/AieI4sfT6jJYuThVy2KfL/jpGyRrjpZBwwluN/M/ERm3TZzAaPveAUdTcL3
oCZBuoci1MRGLeAOKDhKh81BWaDL
-----END CERTIFICATE-----
Generated at Wed Jun 11 11:51:18 2025 by rpki-client