Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/323830343a363638633a3a2f33322d3332203d3e20323639353637.roa
File: 323830343a363638633a3a2f33322d3332203d3e20323639353637.roa (raw, json)
Hash identifier: obG0JrKNz1ptDmGRJt9bLpmbkqNlX5CUe+Oq0CVdIRo=
Subject key identifier: 72:CE:11:02:2E:76:40:35:4B:EB:77:2D:3A:85:2A:4A:5C:D7:8D:B3
Certificate issuer: /CN=9D5B3059BB98435A876805A73F362F594F73CE08
Certificate serial: 52FF1053A5FE48FB1FF43C78B3C994E2E95EDDB9
Authority key identifier: 9D:5B:30:59:BB:98:43:5A:87:68:05:A7:3F:36:2F:59:4F:73:CE:08
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D5B3059BB98435A876805A73F362F594F73CE08.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/323830343a363638633a3a2f33322d3332203d3e20323639353637.roa
Signing time: Wed 18 Jun 2025 20:20:52 +0000
ROA not before: Wed 18 Jun 2025 20:15:52 +0000
ROA not after: Wed 17 Jun 2026 20:20:52 +0000
asID: 269567
IP address blocks: 2804:668c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:ff:10:53:a5:fe:48:fb:1f:f4:3c:78:b3:c9:94:e2:e9:5e:dd:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D5B3059BB98435A876805A73F362F594F73CE08
Validity
Not Before: Jun 18 20:15:52 2025 GMT
Not After : Jun 17 20:20:52 2026 GMT
Subject: CN=72CE11022E7640354BEB772D3A852A4A5CD78DB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:10:a8:35:78:59:be:79:f4:08:61:e2:70:ca:
63:16:bd:22:6b:a6:08:c0:01:3a:83:58:07:fb:f6:
c7:15:53:df:25:e7:82:0c:37:53:52:39:85:23:6a:
f7:f5:fa:b5:65:74:15:57:4c:4f:e2:17:ed:86:8d:
4e:04:6c:4f:07:d0:18:d0:a6:19:e3:81:17:51:39:
ba:e2:f7:bd:3a:f7:c2:e4:c8:55:e4:0b:57:ed:92:
44:75:67:67:24:dc:6c:4d:73:d3:e0:c0:a1:db:07:
e4:18:c2:dd:d9:9c:3c:db:f3:df:64:23:38:0c:f4:
34:1a:19:64:9c:39:74:79:40:5f:e6:1d:66:15:0f:
ee:68:d6:91:c5:8c:43:14:15:ae:17:51:19:0f:f7:
34:68:a2:4e:a9:99:67:af:af:5a:81:3f:ff:ed:07:
14:57:65:56:b6:23:a5:a6:89:9f:d7:07:c8:91:7d:
77:12:6a:03:68:a7:f4:ad:28:32:d3:bf:66:04:c2:
89:49:ac:80:0a:ba:f8:18:e3:8e:0f:da:70:a3:c9:
4a:42:37:bf:92:ac:51:68:a2:b6:97:6a:07:d9:b2:
b6:59:44:15:e3:a0:aa:5f:70:08:a9:d6:32:3d:ab:
78:f3:82:74:bd:19:34:05:6f:26:da:19:80:2b:9d:
9f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CE:11:02:2E:76:40:35:4B:EB:77:2D:3A:85:2A:4A:5C:D7:8D:B3
X509v3 Authority Key Identifier:
keyid:9D:5B:30:59:BB:98:43:5A:87:68:05:A7:3F:36:2F:59:4F:73:CE:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/9D5B3059BB98435A876805A73F362F594F73CE08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D5B3059BB98435A876805A73F362F594F73CE08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/323830343a363638633a3a2f33322d3332203d3e20323639353637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:668c::/32
Signature Algorithm: sha256WithRSAEncryption
18:54:2e:8c:2c:2e:c4:58:eb:7a:57:cf:b9:25:55:05:cd:8b:
4c:fa:37:ad:12:89:a8:76:92:d4:34:ea:bd:f6:d8:c8:2b:40:
fe:86:bb:41:0b:f6:85:0d:ac:9a:8d:19:f0:11:3d:56:f4:59:
93:a6:76:61:c5:4e:1a:d4:2b:d4:4a:c4:10:47:1d:3d:54:12:
47:c5:af:58:c4:54:21:8f:86:32:fe:61:3b:3f:a4:47:00:e4:
19:fa:2b:26:c8:45:b6:55:20:a6:a6:97:96:e7:49:c7:35:6a:
5e:28:eb:d4:ce:56:db:4e:0a:ae:d5:66:2e:16:2f:f6:a2:0c:
94:f0:0c:2d:34:71:98:fe:2f:58:e8:00:7b:b6:25:db:78:6d:
28:c8:fd:45:b1:13:5f:84:14:79:48:8a:43:47:3f:95:5b:0c:
d1:b0:83:ca:f0:65:26:b0:7a:77:10:de:6a:ed:8e:98:28:f2:
7d:d4:8d:20:71:40:f6:b4:97:67:dd:2b:7d:9d:80:e7:e1:b9:
ab:58:64:c2:1f:a9:72:99:47:5f:0b:e6:5f:60:17:2f:b6:1f:
f2:d8:14:9c:60:79:b2:d5:29:58:b8:64:4b:09:f3:ab:26:47:
a6:bf:1f:f3:36:3c:8a:8d:ee:bb:48:41:f3:4c:b5:b4:92:25:
fc:35:78:d9
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUUv8QU6X+SPsf9Dx4s8mU4ule3bkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQ1QjMwNTlCQjk4NDM1QTg3NjgwNUE3M0YzNjJGNTk0
RjczQ0UwODAeFw0yNTA2MTgyMDE1NTJaFw0yNjA2MTcyMDIwNTJaMDMxMTAvBgNV
BAMTKDcyQ0UxMTAyMkU3NjQwMzU0QkVCNzcyRDNBODUyQTRBNUNENzhEQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJEKg1eFm+efQIYeJwymMWvSJr
pgjAATqDWAf79scVU98l54IMN1NSOYUjavf1+rVldBVXTE/iF+2GjU4EbE8H0BjQ
phnjgRdRObri970698LkyFXkC1ftkkR1Z2ck3GxNc9PgwKHbB+QYwt3ZnDzb899k
IzgM9DQaGWScOXR5QF/mHWYVD+5o1pHFjEMUFa4XURkP9zRook6pmWevr1qBP//t
BxRXZVa2I6WmiZ/XB8iRfXcSagNop/StKDLTv2YEwolJrIAKuvgY444P2nCjyUpC
N7+SrFFooraXagfZsrZZRBXjoKpfcAip1jI9q3jzgnS9GTQFbybaGYArnZ/pAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUcs4RAi52QDVL63ctOoUqSlzXjbMwHwYDVR0j
BBgwFoAUnVswWbuYQ1qHaAWnPzYvWU9zzggwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVVDMXNIdDNycXpiWWdDRURZaXdWWW5SVmhpaUtadFJZbjlXN2RQTnBp
bkovMC85RDVCMzA1OUJCOTg0MzVBODc2ODA1QTczRjM2MkY1OTRGNzNDRTA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlENUIzMDU5QkI5ODQzNUE4
NzY4MDVBNzNGMzYyRjU5NEY3M0NFMDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVVQzFzSHQzcnF6YllnQ0VEWWl3VlluUlZoaWlLWnRSWW45VzdkUE5waW5KLzAv
MzIzODMwMzQzYTM2MzYzODYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM5
MzUzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARmjDANBgkqhkiG9w0BAQsFAAOCAQEAGFQujCwu
xFjrelfPuSVVBc2LTPo3rRKJqHaS1DTqvfbYyCtA/oa7QQv2hQ2smo0Z8BE9VvRZ
k6Z2YcVOGtQr1ErEEEcdPVQSR8WvWMRUIY+GMv5hOz+kRwDkGforJshFtlUgpqaX
ludJxzVqXijr1M5W204KrtVmLhYv9qIMlPAMLTRxmP4vWOgAe7Yl23htKMj9RbET
X4QUeUiKQ0c/lVsM0bCDyvBlJrB6dxDeau2OmCjyfdSNIHFA9rSXZ90rfZ2A5+G5
q1hkwh+pcplHXwvmX2AXL7Yf8tgUnGB5stUpWLhkSwnzqyZHpr8f8zY8io3uu0hB
80y1tJIl/DV42Q==
-----END CERTIFICATE-----
Generated at Fri Jul 4 15:58:08 2025 by rpki-client