Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a3a2f33322d3332203d3e203631363038.roa
File: 323830343a383237303a3a2f33322d3332203d3e203631363038.roa (raw, json)
Hash identifier: ywWFGv4FrHR7EOcQP1+8fMFn8twSkZPAcE0qpm2Fb38=
Subject key identifier: 36:DC:00:91:90:FC:87:1A:7B:9D:5A:07:4B:61:72:E0:32:58:66:2A
Certificate issuer: /CN=AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01
Certificate serial: 46BDBB6D561455FFEDA6E307B575129C61BC5D60
Authority key identifier: AD:72:AB:44:A3:53:1C:FD:69:32:D3:C0:A8:DA:40:F1:37:CA:AC:01
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a3a2f33322d3332203d3e203631363038.roa
Signing time: Thu 30 Jan 2025 18:28:29 +0000
ROA not before: Thu 30 Jan 2025 18:23:29 +0000
ROA not after: Thu 29 Jan 2026 18:28:29 +0000
asID: 61608
IP address blocks: 2804:8270::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:bd:bb:6d:56:14:55:ff:ed:a6:e3:07:b5:75:12:9c:61:bc:5d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01
Validity
Not Before: Jan 30 18:23:29 2025 GMT
Not After : Jan 29 18:28:29 2026 GMT
Subject: CN=36DC009190FC871A7B9D5A074B6172E03258662A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3b:6b:f3:1a:1f:0e:2c:da:de:87:f2:72:aa:
41:35:05:79:17:6d:ac:3a:bd:fe:e6:ae:98:9b:24:
74:a4:11:62:7e:e1:db:c5:66:11:b7:6c:37:12:f3:
bb:b5:a9:fd:d0:54:2d:de:57:94:ed:25:23:90:cc:
e9:b7:5a:bb:75:87:84:8d:2b:00:5c:5a:ed:65:04:
f8:93:b5:64:17:09:3a:cd:be:1d:f7:bb:b4:31:31:
8b:d8:27:ca:71:15:17:0e:61:3f:7c:f8:fb:bf:9e:
f2:69:b8:5d:8c:24:27:cb:be:aa:df:a9:96:37:2c:
26:a6:8d:48:73:c5:97:e7:59:a2:2e:be:cb:db:f0:
7e:a9:7e:c1:95:30:b5:91:49:cc:1e:f9:a2:b3:0f:
14:f7:b2:97:38:a3:09:a2:ef:c0:a6:35:7e:3c:6e:
2a:8f:89:ec:b9:9b:a8:1d:c9:bd:c2:57:67:08:5a:
54:f0:22:d8:3f:ed:60:8d:49:7f:4d:f8:9e:2f:12:
b4:e7:a1:5f:e6:f1:78:fb:3b:fc:9a:13:0e:1d:16:
0f:f7:32:07:a1:05:f3:50:bf:18:ec:66:d3:33:ae:
be:de:2a:3e:fa:55:92:4c:9d:7f:ad:0d:d1:4c:4a:
d7:19:9b:ae:e0:c3:4e:30:ec:e5:34:0c:9f:3d:f4:
3f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DC:00:91:90:FC:87:1A:7B:9D:5A:07:4B:61:72:E0:32:58:66:2A
X509v3 Authority Key Identifier:
keyid:AD:72:AB:44:A3:53:1C:FD:69:32:D3:C0:A8:DA:40:F1:37:CA:AC:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a3a2f33322d3332203d3e203631363038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8270::/32
Signature Algorithm: sha256WithRSAEncryption
85:b3:28:22:23:6a:52:48:b0:73:aa:6b:7e:e5:58:9b:f4:18:
1a:2c:5e:c2:f9:e0:29:c5:b9:db:20:0c:c4:c9:af:89:8d:11:
57:bf:23:12:38:c6:60:3e:0d:1f:65:40:31:8c:ab:c0:2b:e0:
3e:ee:7a:ac:1e:e3:dc:1f:e8:e5:4c:16:5a:3e:1f:d9:b8:d6:
65:78:d6:22:8f:25:b3:41:66:45:df:44:3b:3f:71:87:74:6f:
95:09:8b:7b:17:d8:bb:85:e3:c4:3c:32:7e:80:18:e3:6e:6a:
6f:cb:3c:23:40:78:a4:c8:ec:d8:49:03:38:12:71:50:dc:41:
aa:de:bf:85:ba:b4:8e:f9:3e:65:eb:6b:b0:c5:4c:d7:6f:0e:
63:65:8b:71:6e:ad:76:33:fb:b4:01:e6:bb:f3:84:0b:79:c6:
2f:5c:ab:5b:16:8f:97:b8:f6:36:80:4e:c1:9a:a8:7e:03:f4:
ad:fc:9d:0f:7e:64:dc:c8:ac:a2:72:54:6e:2a:ae:95:fd:f4:
c7:99:80:20:8e:1d:a4:58:8a:2b:5c:8e:8e:f0:09:0b:0e:c0:
ee:dd:a2:1f:69:0d:18:b3:83:80:7c:ca:46:db:6c:72:f9:94:
22:d9:e8:45:a4:f4:f4:52:b1:0f:5d:8f:c6:e8:42:bd:b9:df:
20:24:ad:26
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIURr27bVYUVf/tpuMHtXUSnGG8XWAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQ3MkFCNDRBMzUzMUNGRDY5MzJEM0MwQThEQTQwRjEz
N0NBQUMwMTAeFw0yNTAxMzAxODIzMjlaFw0yNjAxMjkxODI4MjlaMDMxMTAvBgNV
BAMTKDM2REMwMDkxOTBGQzg3MUE3QjlENUEwNzRCNjE3MkUwMzI1ODY2MkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyO2vzGh8OLNreh/JyqkE1BXkX
baw6vf7mrpibJHSkEWJ+4dvFZhG3bDcS87u1qf3QVC3eV5TtJSOQzOm3Wrt1h4SN
KwBcWu1lBPiTtWQXCTrNvh33u7QxMYvYJ8pxFRcOYT98+Pu/nvJpuF2MJCfLvqrf
qZY3LCamjUhzxZfnWaIuvsvb8H6pfsGVMLWRScwe+aKzDxT3spc4owmi78CmNX48
biqPiey5m6gdyb3CV2cIWlTwItg/7WCNSX9N+J4vErTnoV/m8Xj7O/yaEw4dFg/3
MgehBfNQvxjsZtMzrr7eKj76VZJMnX+tDdFMStcZm67gw04w7OU0DJ899D+PAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUNtwAkZD8hxp7nVoHS2Fy4DJYZiowHwYDVR0j
BBgwFoAUrXKrRKNTHP1pMtPAqNpA8TfKrAEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ05wQmtpdXM3cjZONVdTMVhYYlVWTWR5QnhrVmNqYTFIejZuQmpNSm5H
Yk0vMC9BRDcyQUI0NEEzNTMxQ0ZENjkzMkQzQzBBOERBNDBGMTM3Q0FBQzAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FENzJBQjQ0QTM1MzFDRkQ2
OTMyRDNDMEE4REE0MEYxMzdDQUFDMDEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NOcEJraXVzN3I2TjVXUzFYWGJVVk1keUJ4a1ZjamExSHo2bkJqTUpuR2JNLzAv
MzIzODMwMzQzYTM4MzIzNzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzYzMTM2
MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEgnAwDQYJKoZIhvcNAQELBQADggEBAIWzKCIjalJI
sHOqa37lWJv0GBosXsL54CnFudsgDMTJr4mNEVe/IxI4xmA+DR9lQDGMq8Ar4D7u
eqwe49wf6OVMFlo+H9m41mV41iKPJbNBZkXfRDs/cYd0b5UJi3sX2LuF48Q8Mn6A
GONuam/LPCNAeKTI7NhJAzgScVDcQarev4W6tI75PmXra7DFTNdvDmNli3FurXYz
+7QB5rvzhAt5xi9cq1sWj5e49jaATsGaqH4D9K38nQ9+ZNzIrKJyVG4qrpX99MeZ
gCCOHaRYiitcjo7wCQsOwO7doh9pDRizg4B8ykbbbHL5lCLZ6EWk9PRSsQ9dj8bo
Qr253yAkrSY=
-----END CERTIFICATE-----
Generated at Sat May 3 22:20:17 2025 by rpki-client