Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a3a2f33342d3334203d3e203631363038.roa
File: 323830343a383237303a3a2f33342d3334203d3e203631363038.roa (raw, json)
Hash identifier: WFBp1V/bkcQBnfHePovHA34gex/+Mw4hMniC46k5NXs=
Subject key identifier: A1:8B:6E:37:62:16:F5:82:CD:A6:C9:DE:CC:9D:3D:12:7F:7E:D3:67
Certificate issuer: /CN=AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01
Certificate serial: 4163E239F3D281F10473A84F999BC219BFF0E071
Authority key identifier: AD:72:AB:44:A3:53:1C:FD:69:32:D3:C0:A8:DA:40:F1:37:CA:AC:01
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a3a2f33342d3334203d3e203631363038.roa
Signing time: Thu 30 Jan 2025 18:28:29 +0000
ROA not before: Thu 30 Jan 2025 18:23:29 +0000
ROA not after: Thu 29 Jan 2026 18:28:29 +0000
asID: 61608
IP address blocks: 2804:8270::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:63:e2:39:f3:d2:81:f1:04:73:a8:4f:99:9b:c2:19:bf:f0:e0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01
Validity
Not Before: Jan 30 18:23:29 2025 GMT
Not After : Jan 29 18:28:29 2026 GMT
Subject: CN=A18B6E376216F582CDA6C9DECC9D3D127F7ED367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2e:74:dc:2b:6c:06:0c:24:0e:9c:27:d9:8c:
cb:ee:83:7a:39:e2:59:32:dd:13:f9:53:9c:b6:ce:
f3:1f:2f:91:59:e8:3b:24:a8:64:1d:14:98:9d:9c:
ee:e4:8a:72:41:93:23:2e:fa:aa:0c:e9:4f:99:23:
de:37:f6:b0:db:6e:bd:6e:dd:07:5b:10:d7:cb:20:
a6:a0:0f:3e:61:06:12:ee:eb:01:42:7d:24:9c:84:
4c:26:fa:ac:b9:fe:6a:4f:50:c1:57:f7:9f:ca:bd:
ba:14:64:b0:60:3b:fb:64:14:17:46:e2:0a:16:d3:
c9:c1:2d:f3:bd:c4:fd:74:ed:f9:db:7c:01:61:14:
23:91:c9:f8:c1:7a:b2:d7:a9:d9:d7:b7:d6:d1:91:
5c:d8:a4:fc:36:36:4f:1c:cf:d9:f4:00:2f:3d:ba:
be:e5:5b:35:37:25:1a:ca:e8:f2:17:f6:65:05:26:
e7:e9:78:1e:d4:a9:7f:44:59:a1:13:99:49:20:2d:
9d:15:5d:5d:42:94:f5:62:bc:75:23:54:d8:1a:35:
4b:81:a0:5f:a9:b1:c2:ae:66:14:c8:e2:6d:6c:4e:
9d:e2:09:d8:fb:10:db:b4:77:5c:84:97:d3:f3:79:
c7:e8:b1:77:c7:2c:51:eb:97:8d:ee:6c:e1:5c:18:
8b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8B:6E:37:62:16:F5:82:CD:A6:C9:DE:CC:9D:3D:12:7F:7E:D3:67
X509v3 Authority Key Identifier:
keyid:AD:72:AB:44:A3:53:1C:FD:69:32:D3:C0:A8:DA:40:F1:37:CA:AC:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a3a2f33342d3334203d3e203631363038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8270::/34
Signature Algorithm: sha256WithRSAEncryption
2c:b9:c8:7a:bd:f8:6c:ca:02:34:72:40:e5:fb:85:25:22:e7:
7f:64:f4:90:ed:fa:79:20:ee:f7:4d:c6:6e:50:fc:f8:d5:c4:
0c:eb:c5:66:53:ff:41:ba:9d:12:f0:c8:d3:6a:f8:5a:69:f7:
a4:52:70:4a:bb:44:a3:49:7b:c8:f0:b7:ff:d5:ef:fa:0c:4f:
e5:23:68:9e:3e:4b:49:0a:be:10:6a:5e:27:06:fa:b6:c4:75:
6b:a3:c1:b7:7c:51:17:64:46:bf:18:6a:06:2d:2f:62:96:dc:
3b:e0:1a:54:7b:00:3e:49:b5:1f:d1:bc:10:a8:5a:9c:81:96:
81:de:30:cb:85:04:b3:5b:14:8f:ca:f2:94:7c:64:39:39:7d:
42:fb:b3:6a:f8:1d:ca:fa:c5:4a:d7:fc:59:0a:49:da:38:19:
16:7f:ac:eb:0c:4b:bd:53:a5:a6:e3:f9:90:c6:34:e1:be:eb:
da:09:01:45:84:23:05:1d:e7:95:09:84:1a:2a:aa:09:2b:b6:
47:7e:6b:9a:7f:03:7c:d2:96:52:1e:a9:ba:ef:f0:3c:c4:7d:
5c:40:31:36:36:37:86:8e:77:af:52:b3:d7:3d:94:54:0a:df:
e9:2a:2c:cc:d4:98:6d:e5:34:09:46:0b:73:09:32:44:0a:41:
a1:25:49:96
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQWPiOfPSgfEEc6hPmZvCGb/w4HEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQ3MkFCNDRBMzUzMUNGRDY5MzJEM0MwQThEQTQwRjEz
N0NBQUMwMTAeFw0yNTAxMzAxODIzMjlaFw0yNjAxMjkxODI4MjlaMDMxMTAvBgNV
BAMTKEExOEI2RTM3NjIxNkY1ODJDREE2QzlERUNDOUQzRDEyN0Y3RUQzNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDLnTcK2wGDCQOnCfZjMvug3o5
4lky3RP5U5y2zvMfL5FZ6DskqGQdFJidnO7kinJBkyMu+qoM6U+ZI9439rDbbr1u
3QdbENfLIKagDz5hBhLu6wFCfSSchEwm+qy5/mpPUMFX95/KvboUZLBgO/tkFBdG
4goW08nBLfO9xP107fnbfAFhFCORyfjBerLXqdnXt9bRkVzYpPw2Nk8cz9n0AC89
ur7lWzU3JRrK6PIX9mUFJufpeB7UqX9EWaETmUkgLZ0VXV1ClPVivHUjVNgaNUuB
oF+pscKuZhTI4m1sTp3iCdj7ENu0d1yEl9PzecfosXfHLFHrl43ubOFcGIuTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUoYtuN2IW9YLNpsnezJ09En9+02cwHwYDVR0j
BBgwFoAUrXKrRKNTHP1pMtPAqNpA8TfKrAEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ05wQmtpdXM3cjZONVdTMVhYYlVWTWR5QnhrVmNqYTFIejZuQmpNSm5H
Yk0vMC9BRDcyQUI0NEEzNTMxQ0ZENjkzMkQzQzBBOERBNDBGMTM3Q0FBQzAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FENzJBQjQ0QTM1MzFDRkQ2
OTMyRDNDMEE4REE0MEYxMzdDQUFDMDEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NOcEJraXVzN3I2TjVXUzFYWGJVVk1keUJ4a1ZjamExSHo2bkJqTUpuR2JNLzAv
MzIzODMwMzQzYTM4MzIzNzMwM2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzYzMTM2
MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGBigEgnAAMA0GCSqGSIb3DQEBCwUAA4IBAQAsuch6vfhs
ygI0ckDl+4UlIud/ZPSQ7fp5IO73TcZuUPz41cQM68VmU/9Bup0S8MjTavhaafek
UnBKu0SjSXvI8Lf/1e/6DE/lI2iePktJCr4Qal4nBvq2xHVro8G3fFEXZEa/GGoG
LS9iltw74BpUewA+SbUf0bwQqFqcgZaB3jDLhQSzWxSPyvKUfGQ5OX1C+7Nq+B3K
+sVK1/xZCknaOBkWf6zrDEu9U6Wm4/mQxjThvuvaCQFFhCMFHeeVCYQaKqoJK7ZH
fmuafwN80pZSHqm67/A8xH1cQDE2NjeGjnevUrPXPZRUCt/pKizM1Jht5TQJRgtz
CTJECkGhJUmW
-----END CERTIFICATE-----
Generated at Sat May 3 22:17:08 2025 by rpki-client