Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/323830343a336461343a313030303a3a2f34302d3430203d3e20323636353434.roa
File: 323830343a336461343a313030303a3a2f34302d3430203d3e20323636353434.roa (raw, json)
Hash identifier: BbuenudiyWGENFodzqxp5i84Uc1XshzCoZalKr9GLgI=
Subject key identifier: 7D:FE:96:01:74:0D:88:40:8C:91:34:3C:12:9D:CB:F8:58:E8:51:FE
Certificate issuer: /CN=5B576F953ECC3D33A93B2E18D6DB2673DA95B987
Certificate serial: 425ADE3D4299846A54969966EFC9D960A00114A1
Authority key identifier: 5B:57:6F:95:3E:CC:3D:33:A9:3B:2E:18:D6:DB:26:73:DA:95:B9:87
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B576F953ECC3D33A93B2E18D6DB2673DA95B987.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/323830343a336461343a313030303a3a2f34302d3430203d3e20323636353434.roa
Signing time: Fri 31 Jan 2025 15:14:08 +0000
ROA not before: Fri 31 Jan 2025 15:09:08 +0000
ROA not after: Fri 30 Jan 2026 15:14:08 +0000
asID: 266544
IP address blocks: 2804:3da4:1000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:5a:de:3d:42:99:84:6a:54:96:99:66:ef:c9:d9:60:a0:01:14:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B576F953ECC3D33A93B2E18D6DB2673DA95B987
Validity
Not Before: Jan 31 15:09:08 2025 GMT
Not After : Jan 30 15:14:08 2026 GMT
Subject: CN=7DFE9601740D88408C91343C129DCBF858E851FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c1:86:79:6c:3d:6c:44:8d:72:d9:11:b2:27:
23:73:a0:16:f0:a0:db:e0:96:42:56:ae:df:f6:56:
b2:8e:d8:8b:4e:c7:d0:ec:ea:d9:71:34:1e:fc:60:
02:49:88:3a:59:a5:6d:d5:62:69:ee:a1:7a:25:9d:
4b:12:7b:47:09:6e:53:7e:90:df:69:61:af:30:6c:
4d:01:a6:68:ba:53:9a:39:29:92:75:dc:f9:99:ed:
e0:8c:6d:59:09:68:4e:fb:64:13:48:0b:e4:16:27:
29:97:38:cc:1d:95:26:c3:55:df:df:97:1d:8a:50:
93:10:2c:c0:2b:56:7b:2a:cf:c8:53:35:f2:8f:45:
fa:33:db:f7:75:2c:92:bf:df:df:09:5b:02:5f:c7:
f8:5a:d8:f2:06:94:52:ec:7f:cd:a4:c4:93:6f:1b:
97:28:88:09:8a:b4:5f:db:ed:b0:e6:a9:ee:bf:be:
d6:1b:87:54:a0:d3:c4:bf:e7:6d:99:39:b2:48:36:
17:01:1d:81:07:68:ce:1a:9e:0c:bc:9d:2b:f8:35:
77:08:21:ba:5f:a7:8e:bf:77:be:98:ab:20:37:ec:
10:08:3a:fb:cc:48:93:a8:11:05:44:f3:bf:f1:f3:
70:c7:3a:56:b3:8a:5a:60:c7:45:66:58:0e:41:28:
d4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:FE:96:01:74:0D:88:40:8C:91:34:3C:12:9D:CB:F8:58:E8:51:FE
X509v3 Authority Key Identifier:
keyid:5B:57:6F:95:3E:CC:3D:33:A9:3B:2E:18:D6:DB:26:73:DA:95:B9:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/5B576F953ECC3D33A93B2E18D6DB2673DA95B987.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B576F953ECC3D33A93B2E18D6DB2673DA95B987.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/323830343a336461343a313030303a3a2f34302d3430203d3e20323636353434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3da4:1000::/40
Signature Algorithm: sha256WithRSAEncryption
d5:5d:f4:fe:c8:69:e0:85:98:12:0d:c5:25:6f:fd:8b:75:ad:
5d:f3:ba:5d:77:c6:54:d9:33:6d:c4:ad:5a:38:22:b1:a2:9a:
5b:d7:6c:5a:77:0c:ee:6b:2d:97:54:f1:fe:9a:29:77:5e:9d:
1c:2d:17:ce:6b:1c:c9:6a:ee:a3:a9:53:bc:b0:d9:8b:1b:4a:
f2:16:9b:a4:5d:89:65:bc:3c:ee:7b:b5:6d:2c:d5:cc:75:14:
29:6e:29:f7:d6:3e:35:17:c5:0c:6f:bf:45:ec:50:9a:7f:65:
8c:5d:06:2e:20:15:39:23:9e:d7:58:43:5e:aa:ba:1f:70:f9:
f8:9e:18:6f:12:c6:18:5e:55:9b:82:5f:96:41:52:c0:54:92:
c8:c4:52:1e:dc:8d:bb:c7:49:e7:74:aa:37:bf:d0:4c:59:6e:
49:7f:12:92:c6:d8:54:8e:0a:bf:32:e7:e7:43:f3:95:31:73:
c2:c5:56:30:9f:04:ce:94:e9:9e:ac:7b:21:4a:98:e2:ad:73:
b0:f6:9a:3b:1c:e0:0b:74:24:8d:3c:c8:46:ea:f8:47:c9:43:
d5:b7:bc:66:f9:26:78:53:6e:a4:cf:62:3e:60:d6:ef:df:2f:
41:3b:c6:ea:1d:ce:13:40:de:79:4d:b9:0e:91:f3:54:dd:51:
ef:39:31:d3
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUQlrePUKZhGpUlplm78nZYKABFKEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUI1NzZGOTUzRUNDM0QzM0E5M0IyRTE4RDZEQjI2NzNE
QTk1Qjk4NzAeFw0yNTAxMzExNTA5MDhaFw0yNjAxMzAxNTE0MDhaMDMxMTAvBgNV
BAMTKDdERkU5NjAxNzQwRDg4NDA4QzkxMzQzQzEyOURDQkY4NThFODUxRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCywYZ5bD1sRI1y2RGyJyNzoBbw
oNvglkJWrt/2VrKO2ItOx9Ds6tlxNB78YAJJiDpZpW3VYmnuoXolnUsSe0cJblN+
kN9pYa8wbE0Bpmi6U5o5KZJ13PmZ7eCMbVkJaE77ZBNIC+QWJymXOMwdlSbDVd/f
lx2KUJMQLMArVnsqz8hTNfKPRfoz2/d1LJK/398JWwJfx/ha2PIGlFLsf82kxJNv
G5coiAmKtF/b7bDmqe6/vtYbh1Sg08S/522ZObJINhcBHYEHaM4angy8nSv4NXcI
Ibpfp46/d76YqyA37BAIOvvMSJOoEQVE87/x83DHOlazilpgx0VmWA5BKNSjAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUff6WAXQNiECMkTQ8Ep3L+FjoUf4wHwYDVR0j
BBgwFoAUW1dvlT7MPTOpOy4Y1tsmc9qVuYcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVg1TDdWZUhjSHROMTlwRVpyV3VMNkdpZjNEdk1SbzNBUVNKOWdMWTZ4
TG4vMC81QjU3NkY5NTNFQ0MzRDMzQTkzQjJFMThENkRCMjY3M0RBOTVCOTg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVCNTc2Rjk1M0VDQzNEMzNB
OTNCMkUxOEQ2REIyNjczREE5NUI5ODcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVYNUw3VmVIY0h0TjE5cEVacld1TDZHaWYzRHZNUm8zQVFTSjlnTFk2eExuLzAv
MzIzODMwMzQzYTMzNjQ2MTM0M2EzMTMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNjM1MzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEPaQQMA0GCSqGSIb3DQEBCwUA
A4IBAQDVXfT+yGnghZgSDcUlb/2Lda1d87pdd8ZU2TNtxK1aOCKxoppb12xadwzu
ay2XVPH+mil3Xp0cLRfOaxzJau6jqVO8sNmLG0ryFpukXYllvDzue7VtLNXMdRQp
bin31j41F8UMb79F7FCaf2WMXQYuIBU5I57XWENeqrofcPn4nhhvEsYYXlWbgl+W
QVLAVJLIxFIe3I27x0nndKo3v9BMWW5JfxKSxthUjgq/MufnQ/OVMXPCxVYwnwTO
lOmerHshSpjirXOw9po7HOALdCSNPMhG6vhHyUPVt7xm+SZ4U26kz2I+YNbv3y9B
O8bqHc4TQN55TbkOkfNU3VHvOTHT
-----END CERTIFICATE-----
Generated at Mon Apr 28 12:33:20 2025 by rpki-client