Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/323830343a373464383a3a2f33322d313238203d3e20323731303037.roa
File: 323830343a373464383a3a2f33322d313238203d3e20323731303037.roa (raw, json)
Hash identifier: Hej1nGIkIiPWQU4JgubikiLSOxcICfSdNrwVNoattP8=
Subject key identifier: 5D:89:A6:E6:4E:0B:87:76:17:D7:9E:70:3B:E5:0E:CC:03:2E:22:AB
Certificate issuer: /CN=26C3F59037D2310A5185C2544D1A4363ADC6451D
Certificate serial: 18F3C59F7BE4303B5AD2613EF98D154CF8FA3338
Authority key identifier: 26:C3:F5:90:37:D2:31:0A:51:85:C2:54:4D:1A:43:63:AD:C6:45:1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26C3F59037D2310A5185C2544D1A4363ADC6451D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/323830343a373464383a3a2f33322d313238203d3e20323731303037.roa
Signing time: Tue 14 Jan 2025 18:29:40 +0000
ROA not before: Tue 14 Jan 2025 18:24:40 +0000
ROA not after: Tue 13 Jan 2026 18:29:40 +0000
asID: 271007
IP address blocks: 2804:74d8::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:f3:c5:9f:7b:e4:30:3b:5a:d2:61:3e:f9:8d:15:4c:f8:fa:33:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26C3F59037D2310A5185C2544D1A4363ADC6451D
Validity
Not Before: Jan 14 18:24:40 2025 GMT
Not After : Jan 13 18:29:40 2026 GMT
Subject: CN=5D89A6E64E0B877617D79E703BE50ECC032E22AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0d:81:9b:82:21:a7:eb:a2:b4:0d:49:af:12:
88:8d:06:ae:8f:c7:89:fd:7f:e4:55:e3:d5:33:f5:
c8:b9:f3:e1:65:34:c3:2b:08:c4:41:1e:9f:4a:22:
5f:5e:8a:26:a0:1c:27:ba:04:db:1b:e7:23:45:9c:
44:8f:9b:8d:75:f6:32:6b:db:86:b0:d7:98:24:c9:
00:20:8f:e4:c1:26:58:c7:03:69:b2:c9:9c:b1:72:
72:1e:3b:24:db:4e:4b:ae:0d:02:98:94:3d:ac:69:
32:a8:5c:a4:44:9b:d9:44:ea:79:a0:de:ff:32:d5:
5c:a2:ed:8d:88:9f:ca:61:88:62:b3:91:b4:83:7d:
31:64:df:3e:5d:cb:18:0c:d1:65:89:94:b0:34:d2:
37:03:bd:d2:b8:72:85:e6:2a:6f:78:75:65:3e:b9:
b5:7a:d1:12:7a:c9:30:02:73:ea:2c:8b:23:20:90:
66:60:07:82:af:0a:49:ea:2c:18:29:c9:75:ca:45:
50:e9:38:4e:82:af:a0:83:80:2d:4c:57:b0:22:5c:
90:95:fb:c5:5a:33:e7:63:e5:dc:64:7c:47:32:e8:
40:d7:f5:39:df:b0:81:1b:6e:ae:7d:7a:fd:e6:ca:
e0:b8:04:45:39:8d:4d:f5:93:00:3d:cf:23:95:d8:
c0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:89:A6:E6:4E:0B:87:76:17:D7:9E:70:3B:E5:0E:CC:03:2E:22:AB
X509v3 Authority Key Identifier:
keyid:26:C3:F5:90:37:D2:31:0A:51:85:C2:54:4D:1A:43:63:AD:C6:45:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/26C3F59037D2310A5185C2544D1A4363ADC6451D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26C3F59037D2310A5185C2544D1A4363ADC6451D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/323830343a373464383a3a2f33322d313238203d3e20323731303037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:74d8::/32
Signature Algorithm: sha256WithRSAEncryption
00:d1:2a:ec:47:84:5d:34:26:ed:0b:54:00:f3:21:a7:16:f8:
1a:c1:07:bc:8d:fe:ab:eb:73:d6:b2:9d:81:04:62:91:ec:88:
c6:f8:46:92:b7:04:bb:ca:9a:f6:4a:68:4e:d5:43:9b:4f:df:
e6:6f:87:55:02:bd:e7:6f:4c:48:95:2f:80:bf:62:e4:e5:07:
0f:2f:7d:8c:b6:3c:f2:b8:cd:bb:9e:41:6d:2c:a2:1c:b8:95:
fb:74:85:a8:0f:ac:c7:5b:06:d5:bb:38:00:89:99:d6:44:49:
f8:6a:ae:f9:b7:0d:ad:5f:75:ca:c2:e6:03:d6:c6:5d:aa:7e:
cc:f6:e6:d6:e0:f7:31:cf:8b:cc:ec:84:fa:97:ec:17:66:c9:
10:da:24:53:b0:ec:a7:23:72:5f:25:99:c9:2b:ac:ff:10:31:
ab:5c:1e:73:43:ba:4e:f1:ce:bf:c5:00:9f:3b:68:d0:ea:e1:
9b:3d:fa:4c:b5:2c:fa:88:4b:31:5a:4a:ae:83:c7:a9:6f:8b:
f0:3c:08:61:82:a3:47:cd:81:e0:f0:46:33:ef:42:31:c8:f9:
bc:03:49:ae:e1:3d:7c:a6:69:f4:96:d9:09:f7:ec:4d:16:65:
33:24:94:4e:39:29:37:45:b9:73:73:e4:b2:ac:04:76:6e:92:
e5:bb:20:73
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUGPPFn3vkMDta0mE++Y0VTPj6MzgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjZDM0Y1OTAzN0QyMzEwQTUxODVDMjU0NEQxQTQzNjNB
REM2NDUxRDAeFw0yNTAxMTQxODI0NDBaFw0yNjAxMTMxODI5NDBaMDMxMTAvBgNV
BAMTKDVEODlBNkU2NEUwQjg3NzYxN0Q3OUU3MDNCRTUwRUNDMDMyRTIyQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkDYGbgiGn66K0DUmvEoiNBq6P
x4n9f+RV49Uz9ci58+FlNMMrCMRBHp9KIl9eiiagHCe6BNsb5yNFnESPm4119jJr
24aw15gkyQAgj+TBJljHA2myyZyxcnIeOyTbTkuuDQKYlD2saTKoXKREm9lE6nmg
3v8y1Vyi7Y2In8phiGKzkbSDfTFk3z5dyxgM0WWJlLA00jcDvdK4coXmKm94dWU+
ubV60RJ6yTACc+osiyMgkGZgB4KvCknqLBgpyXXKRVDpOE6Cr6CDgC1MV7AiXJCV
+8VaM+dj5dxkfEcy6EDX9TnfsIEbbq59ev3myuC4BEU5jU31kwA9zyOV2MBvAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUXYmm5k4Lh3YX155wO+UOzAMuIqswHwYDVR0j
BBgwFoAUJsP1kDfSMQpRhcJUTRpDY63GRR0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWtRc1BaOXZkcDJBTldSb2Y3TmYya3dtcEpxcmhIWHZTQ3l1YkxSZTdG
dzMvMC8yNkMzRjU5MDM3RDIzMTBBNTE4NUMyNTQ0RDFBNDM2M0FEQzY0NTFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI2QzNGNTkwMzdEMjMxMEE1
MTg1QzI1NDREMUE0MzYzQURDNjQ1MUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FrUXNQWjl2ZHAyQU5XUm9mN05mMmt3bXBKcXJoSFh2U0N5dWJMUmU3RnczLzAv
MzIzODMwMzQzYTM3MzQ2NDM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzEzMDMwMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBHTYMA0GCSqGSIb3DQEBCwUAA4IBAQAA0Srs
R4RdNCbtC1QA8yGnFvgawQe8jf6r63PWsp2BBGKR7IjG+EaStwS7ypr2SmhO1UOb
T9/mb4dVAr3nb0xIlS+Av2Lk5QcPL32MtjzyuM27nkFtLKIcuJX7dIWoD6zHWwbV
uzgAiZnWREn4aq75tw2tX3XKwuYD1sZdqn7M9ubW4Pcxz4vM7IT6l+wXZskQ2iRT
sOynI3JfJZnJK6z/EDGrXB5zQ7pO8c6/xQCfO2jQ6uGbPfpMtSz6iEsxWkqug8ep
b4vwPAhhgqNHzYHg8EYz70IxyPm8A0mu4T18pmn0ltkJ9+xNFmUzJJROOSk3Rblz
c+SyrAR2bpLluyBz
-----END CERTIFICATE-----
Generated at Wed Apr 30 00:04:39 2025 by rpki-client