Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/323830343a356236383a3a2f33322d313238203d3e20323638383431.roa
File: 323830343a356236383a3a2f33322d313238203d3e20323638383431.roa (raw, json)
Hash identifier: Cs+uq9vFhdRNy+GtyRE6p9XYdlv8fxOVSmG9xn+y5Uw=
Subject key identifier: 9D:6B:76:97:90:CF:1A:33:32:B1:4A:B7:CE:90:61:BE:FF:BA:9F:4B
Certificate issuer: /CN=5F52636F24AE680A3F696ED6FDCFB30574D5A7FC
Certificate serial: 435196F83443819BF62135FA7FB22E5BDD3D78E9
Authority key identifier: 5F:52:63:6F:24:AE:68:0A:3F:69:6E:D6:FD:CF:B3:05:74:D5:A7:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F52636F24AE680A3F696ED6FDCFB30574D5A7FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/323830343a356236383a3a2f33322d313238203d3e20323638383431.roa
Signing time: Wed 12 Feb 2025 11:29:38 +0000
ROA not before: Wed 12 Feb 2025 11:24:38 +0000
ROA not after: Wed 11 Feb 2026 11:29:38 +0000
asID: 268841
IP address blocks: 2804:5b68::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:51:96:f8:34:43:81:9b:f6:21:35:fa:7f:b2:2e:5b:dd:3d:78:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F52636F24AE680A3F696ED6FDCFB30574D5A7FC
Validity
Not Before: Feb 12 11:24:38 2025 GMT
Not After : Feb 11 11:29:38 2026 GMT
Subject: CN=9D6B769790CF1A3332B14AB7CE9061BEFFBA9F4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:41:8d:b8:70:dc:a2:50:ae:47:ac:fe:16:65:
d7:43:a0:c4:a1:8f:62:34:a8:89:6b:54:e8:4a:93:
05:04:2f:09:67:04:b5:38:4f:86:31:43:a7:2d:6a:
81:a0:1a:42:2b:db:84:3b:d4:e3:ce:47:b3:6b:80:
2b:6e:7f:fc:f3:dd:33:78:18:a7:9f:86:65:30:89:
c1:8f:9d:07:50:26:07:cd:5a:4a:d4:02:b3:d3:39:
80:d8:ac:ca:af:18:d1:06:d8:0a:6e:fd:c4:6a:d6:
cc:e7:96:0f:20:1c:94:a7:28:ef:ab:c7:fa:5e:0f:
ee:63:a3:7e:cc:7a:37:0e:37:7c:25:a7:d4:a5:5b:
32:52:74:e5:a3:20:7f:64:b8:63:57:1a:cf:86:6e:
60:81:78:1f:d0:5e:5e:a4:bb:3e:2e:07:8f:06:d6:
0c:d1:bc:92:cf:a5:1d:28:af:87:0f:d3:4f:cd:e8:
48:44:d3:3b:b9:0f:8b:12:19:75:6f:dd:43:c0:de:
46:f1:7b:e0:cb:55:f8:03:e1:47:fa:9d:58:04:96:
9e:8c:5b:6e:68:16:48:90:07:bf:22:37:08:f6:78:
6a:92:a6:3f:76:fc:2d:c3:10:93:79:83:ae:1e:e9:
9d:19:7e:3a:4a:ae:f9:84:38:3f:2e:fa:5d:40:55:
c2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:6B:76:97:90:CF:1A:33:32:B1:4A:B7:CE:90:61:BE:FF:BA:9F:4B
X509v3 Authority Key Identifier:
keyid:5F:52:63:6F:24:AE:68:0A:3F:69:6E:D6:FD:CF:B3:05:74:D5:A7:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/5F52636F24AE680A3F696ED6FDCFB30574D5A7FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F52636F24AE680A3F696ED6FDCFB30574D5A7FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/323830343a356236383a3a2f33322d313238203d3e20323638383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5b68::/32
Signature Algorithm: sha256WithRSAEncryption
0f:54:21:d9:1a:63:6c:33:74:c1:8c:f7:29:f5:83:00:36:f0:
25:67:ef:bb:6c:37:25:5f:57:89:e2:03:31:ad:c2:ae:e8:e0:
28:97:f2:f4:74:2f:25:e9:a7:c9:4e:62:6e:52:da:2b:a6:a3:
29:45:c7:84:b2:4e:4e:b4:86:00:fc:cf:ec:0a:d6:e3:65:34:
34:dd:63:9d:a8:4d:73:6c:c2:bf:ef:e8:cc:ff:53:21:f1:4e:
19:00:03:2c:55:2a:82:74:15:34:36:f0:99:96:d5:8c:df:57:
81:93:a3:39:22:3b:fe:94:b6:3b:c6:ea:97:87:47:18:b0:48:
e3:2b:57:0d:06:d8:8b:8b:32:76:53:aa:d9:36:91:55:5b:c9:
76:7d:35:4a:e9:f7:3f:56:f9:1e:e5:84:df:47:e5:35:30:61:
b1:6f:db:ef:a3:d7:fb:ab:5e:3d:3d:28:aa:5d:a7:56:39:90:
46:7e:a6:5d:e0:a2:67:6e:4d:2c:37:67:af:90:a1:49:d5:91:
f1:e0:da:e6:5e:e8:64:12:0a:4d:5c:0a:10:f1:a3:94:14:46:
62:a8:8e:6c:5d:ff:3f:c3:d2:76:fc:05:31:40:38:e2:ab:ed:
64:e6:16:ba:4c:b0:bf:64:5c:ec:c2:3a:98:4c:58:bb:0e:5e:
6a:84:0b:a9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQ1GW+DRDgZv2ITX6f7IuW909eOkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUY1MjYzNkYyNEFFNjgwQTNGNjk2RUQ2RkRDRkIzMDU3
NEQ1QTdGQzAeFw0yNTAyMTIxMTI0MzhaFw0yNjAyMTExMTI5MzhaMDMxMTAvBgNV
BAMTKDlENkI3Njk3OTBDRjFBMzMzMkIxNEFCN0NFOTA2MUJFRkZCQTlGNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWQY24cNyiUK5HrP4WZddDoMSh
j2I0qIlrVOhKkwUELwlnBLU4T4YxQ6ctaoGgGkIr24Q71OPOR7NrgCtuf/zz3TN4
GKefhmUwicGPnQdQJgfNWkrUArPTOYDYrMqvGNEG2Apu/cRq1sznlg8gHJSnKO+r
x/peD+5jo37MejcON3wlp9SlWzJSdOWjIH9kuGNXGs+GbmCBeB/QXl6kuz4uB48G
1gzRvJLPpR0or4cP00/N6EhE0zu5D4sSGXVv3UPA3kbxe+DLVfgD4Uf6nVgElp6M
W25oFkiQB78iNwj2eGqSpj92/C3DEJN5g64e6Z0ZfjpKrvmEOD8u+l1AVcK9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUnWt2l5DPGjMysUq3zpBhvv+6n0swHwYDVR0j
BBgwFoAUX1JjbySuaAo/aW7W/c+zBXTVp/wwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9NUTdhWGdva05DZ3N4VWo1U2RqaFZnQ1dobVY4R3M5ZkFtNjNMS0M4SkdG
LzAvNUY1MjYzNkYyNEFFNjgwQTNGNjk2RUQ2RkRDRkIzMDU3NEQ1QTdGQy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS81RjUyNjM2RjI0QUU2ODBBM0Y2
OTZFRDZGRENGQjMwNTc0RDVBN0ZDLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9N
UTdhWGdva05DZ3N4VWo1U2RqaFZnQ1dobVY4R3M5ZkFtNjNMS0M4SkdGLzAvMzIz
ODMwMzQzYTM1NjIzNjM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2Mzgz
ODM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB
Af8EETAPMA0EAgACMAcDBQAoBFtoMA0GCSqGSIb3DQEBCwUAA4IBAQAPVCHZGmNs
M3TBjPcp9YMANvAlZ++7bDclX1eJ4gMxrcKu6OAol/L0dC8l6afJTmJuUtorpqMp
RceEsk5OtIYA/M/sCtbjZTQ03WOdqE1zbMK/7+jM/1Mh8U4ZAAMsVSqCdBU0NvCZ
ltWM31eBk6M5Ijv+lLY7xuqXh0cYsEjjK1cNBtiLizJ2U6rZNpFVW8l2fTVK6fc/
Vvke5YTfR+U1MGGxb9vvo9f7q149PSiqXadWOZBGfqZd4KJnbk0sN2evkKFJ1ZHx
4NrmXuhkEgpNXAoQ8aOUFEZiqI5sXf8/w9J2/AUxQDjiq+1k5ha6TLC/ZFzswjqY
TFi7Dl5qhAup
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:47:05 2025 by rpki-client