Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/323830343a373463303a3a2f33332d3333203d3e20323731303031.roa
File: 323830343a373463303a3a2f33332d3333203d3e20323731303031.roa (raw, json)
Hash identifier: pONh1qNdDmk7uKvoHYw5wTpTmWoKVsX62LlZ4FBGznw=
Subject key identifier: 3B:5B:0A:68:93:31:FF:03:A1:8A:98:1C:35:FA:5A:8E:D7:48:52:12
Certificate issuer: /CN=B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81
Certificate serial: 51E50DA3E87A734349FAA55658DD6832CB911B23
Authority key identifier: B6:C5:FB:85:7E:69:A9:04:49:73:FA:30:62:AA:1D:6F:BF:5C:4A:81
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/323830343a373463303a3a2f33332d3333203d3e20323731303031.roa
Signing time: Thu 04 Apr 2024 01:51:15 +0000
ROA not before: Thu 04 Apr 2024 01:46:15 +0000
ROA not after: Thu 03 Apr 2025 01:51:15 +0000
asID: 271001
IP address blocks: 2804:74c0::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:e5:0d:a3:e8:7a:73:43:49:fa:a5:56:58:dd:68:32:cb:91:1b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81
Validity
Not Before: Apr 4 01:46:15 2024 GMT
Not After : Apr 3 01:51:15 2025 GMT
Subject: CN=3B5B0A689331FF03A18A981C35FA5A8ED7485212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:64:45:6b:37:07:00:d9:8f:24:61:8e:92:82:
fa:67:26:8a:d0:84:01:12:04:bf:3b:2a:48:5b:19:
c4:ba:0a:5c:df:3d:a4:3c:88:89:df:0e:8b:52:0b:
a4:62:df:32:80:7c:7d:3d:9f:c7:d0:9a:4f:e3:1d:
79:55:a2:f6:35:5a:ce:64:63:73:9c:55:a2:6a:23:
c6:35:35:24:f5:c8:be:cc:d1:1b:8f:87:d1:db:e9:
d3:fe:e9:1c:64:51:26:5c:95:75:60:59:0d:09:9f:
37:25:7b:cc:d9:b7:71:54:16:bb:79:8e:ba:bc:e9:
6a:5c:3c:b2:83:ad:de:10:77:b7:3a:6b:75:fd:ff:
ad:ed:23:80:73:87:fb:d9:a8:58:75:b2:6b:7f:24:
fe:ca:9a:39:4e:29:93:7b:ca:61:9d:d7:87:d1:6b:
9b:2e:45:7d:fb:b4:55:59:46:95:e9:dd:20:59:74:
e7:00:91:b8:9a:45:72:1a:d9:8f:2a:13:5a:09:8f:
b0:79:0b:80:0f:80:18:a7:d8:77:42:be:ad:ac:a7:
3d:0e:75:c1:ba:a2:b0:9a:7e:24:ab:47:9d:e8:2c:
48:7e:24:8b:a5:fd:0f:21:79:ce:40:8d:3a:ad:38:
b1:2a:07:11:43:ee:f7:af:50:2a:56:be:c8:fc:3e:
79:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5B:0A:68:93:31:FF:03:A1:8A:98:1C:35:FA:5A:8E:D7:48:52:12
X509v3 Authority Key Identifier:
keyid:B6:C5:FB:85:7E:69:A9:04:49:73:FA:30:62:AA:1D:6F:BF:5C:4A:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/323830343a373463303a3a2f33332d3333203d3e20323731303031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:74c0::/33
Signature Algorithm: sha256WithRSAEncryption
a7:d7:fa:db:51:cd:cc:77:0f:b7:4b:2a:92:23:81:fd:da:a2:
63:e2:70:f3:5a:5d:94:d4:28:0a:62:6e:1b:fc:89:22:01:3d:
88:41:e4:ac:b7:20:fd:cf:98:01:69:05:47:ad:f4:6c:c8:d8:
30:e2:74:d5:0b:46:ce:bd:96:fe:fe:eb:b2:53:8f:b2:70:52:
bc:e7:ba:88:f4:93:3a:eb:ad:27:45:e8:1e:30:15:b5:6d:00:
2e:5d:22:92:43:e7:3f:09:3d:d8:be:05:02:56:5f:fa:af:ea:
be:c4:9e:1b:ea:be:16:2f:0d:60:02:78:90:d1:85:ff:1b:b5:
77:80:99:73:9d:7b:27:69:9d:cc:40:a5:c6:c1:70:a8:4a:6a:
23:8b:1b:cc:4b:da:d0:15:9b:48:61:de:4e:3e:54:74:e0:b1:
89:3b:44:5c:82:99:05:06:b5:25:0e:60:77:4a:8e:08:2d:ba:
f6:6f:db:92:98:79:df:b6:08:02:99:09:61:97:06:b3:ff:e5:
7c:a3:fe:84:2b:86:6b:3d:49:b2:d3:54:f5:a6:fb:65:cf:e4:
bd:f3:0a:60:a2:e1:65:3f:ba:c9:52:de:61:db:4f:23:9e:7e:
71:bc:6a:5a:0a:3c:09:c1:59:7a:36:f7:a9:0a:e9:02:14:19:
84:b1:e5:94
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUeUNo+h6c0NJ+qVWWN1oMsuRGyMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZDNUZCODU3RTY5QTkwNDQ5NzNGQTMwNjJBQTFENkZC
RjVDNEE4MTAeFw0yNDA0MDQwMTQ2MTVaFw0yNTA0MDMwMTUxMTVaMDMxMTAvBgNV
BAMTKDNCNUIwQTY4OTMzMUZGMDNBMThBOTgxQzM1RkE1QThFRDc0ODUyMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvZEVrNwcA2Y8kYY6SgvpnJorQ
hAESBL87KkhbGcS6ClzfPaQ8iInfDotSC6Ri3zKAfH09n8fQmk/jHXlVovY1Ws5k
Y3OcVaJqI8Y1NST1yL7M0RuPh9Hb6dP+6RxkUSZclXVgWQ0Jnzcle8zZt3FUFrt5
jrq86WpcPLKDrd4Qd7c6a3X9/63tI4Bzh/vZqFh1smt/JP7KmjlOKZN7ymGd14fR
a5suRX37tFVZRpXp3SBZdOcAkbiaRXIa2Y8qE1oJj7B5C4APgBin2HdCvq2spz0O
dcG6orCafiSrR53oLEh+JIul/Q8hec5AjTqtOLEqBxFD7vevUCpWvsj8Pnk5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUO1sKaJMx/wOhipgcNfpajtdIUhIwHwYDVR0j
BBgwFoAUtsX7hX5pqQRJc/owYqodb79cSoEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1o1dWN2NzIxZDRmRGJxQXVFMVVtOFpuUWo4cGFwYUo1MUhTUnBIeGlX
RFUvMS9CNkM1RkI4NTdFNjlBOTA0NDk3M0ZBMzA2MkFBMUQ2RkJGNUM0QTgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I2QzVGQjg1N0U2OUE5MDQ0
OTczRkEzMDYyQUExRDZGQkY1QzRBODEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NaNXVjdjcyMWQ0ZkRicUF1RTFVbThablFqOHBhcGFKNTFIU1JwSHhpV0RVLzEv
MzIzODMwMzQzYTM3MzQ2MzMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzMx
MzAzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAR0wAAwDQYJKoZIhvcNAQELBQADggEBAKfX+ttR
zcx3D7dLKpIjgf3aomPicPNaXZTUKApibhv8iSIBPYhB5Ky3IP3PmAFpBUet9GzI
2DDidNULRs69lv7+67JTj7JwUrznuoj0kzrrrSdF6B4wFbVtAC5dIpJD5z8JPdi+
BQJWX/qv6r7EnhvqvhYvDWACeJDRhf8btXeAmXOdeydpncxApcbBcKhKaiOLG8xL
2tAVm0hh3k4+VHTgsYk7RFyCmQUGtSUOYHdKjggtuvZv25KYed+2CAKZCWGXBrP/
5Xyj/oQrhms9SbLTVPWm+2XP5L3zCmCi4WU/uslS3mHbTyOefnG8aloKPAnBWXo2
96kK6QIUGYSx5ZQ=
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:51:42 2025 by rpki-client