Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6HowpC7DeQe2zh5HqVSvgbXLZUr5nUYYXeP6cZeB9Hji/0/323830313a38303a333935303a3a2f34382d3438203d3e20323730363831.roa
File: 323830313a38303a333935303a3a2f34382d3438203d3e20323730363831.roa (raw, json)
Hash identifier: UvZHHoy7GmKZaGoSObQnIu6kMzj0Y53pZvXJbblm+9w=
Subject key identifier: 11:AF:FE:CB:1A:EB:C9:CB:8E:C0:00:35:57:E5:25:D9:15:91:6C:5F
Certificate issuer: /CN=2550ED64AF65D73E0365088A76683FC98DC1F509
Certificate serial: 3ECC4215DE394606A2348DF298FF5CC289029F61
Authority key identifier: 25:50:ED:64:AF:65:D7:3E:03:65:08:8A:76:68:3F:C9:8D:C1:F5:09
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2550ED64AF65D73E0365088A76683FC98DC1F509.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6HowpC7DeQe2zh5HqVSvgbXLZUr5nUYYXeP6cZeB9Hji/0/323830313a38303a333935303a3a2f34382d3438203d3e20323730363831.roa
Signing time: Wed 26 Feb 2025 12:52:40 +0000
ROA not before: Wed 26 Feb 2025 12:47:40 +0000
ROA not after: Wed 25 Feb 2026 12:52:40 +0000
asID: 270681
IP address blocks: 2801:80:3950::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:cc:42:15:de:39:46:06:a2:34:8d:f2:98:ff:5c:c2:89:02:9f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2550ED64AF65D73E0365088A76683FC98DC1F509
Validity
Not Before: Feb 26 12:47:40 2025 GMT
Not After : Feb 25 12:52:40 2026 GMT
Subject: CN=11AFFECB1AEBC9CB8EC0003557E525D915916C5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bb:02:ee:d6:34:c1:7e:1e:fc:71:70:6c:bb:
fa:c4:ad:fe:96:6f:26:62:05:eb:e2:77:7c:8e:09:
22:44:90:e9:58:58:a1:15:70:76:36:8d:52:af:9b:
3f:4b:2b:e5:89:d4:9a:14:34:5c:31:54:f2:d6:dd:
b0:1b:bc:f4:da:66:fa:62:0a:75:1e:16:e5:86:e1:
82:36:5f:8d:5e:44:36:a0:73:5a:dd:d8:08:68:07:
e2:ef:ff:b1:06:2d:7f:4d:8b:c6:aa:24:fd:33:50:
37:56:3c:a8:d7:ab:28:61:87:79:94:23:6f:da:14:
49:2a:5a:37:bf:5f:df:3a:95:a6:0d:7d:b9:a6:94:
11:e9:da:cc:1a:c9:8a:87:92:d7:6e:44:11:83:11:
70:5e:7f:49:a9:41:86:33:e5:11:46:5f:7d:5f:3d:
42:80:41:0c:13:03:a3:14:11:a9:04:4c:ae:0b:ce:
e6:de:46:9b:1c:a4:fc:6d:95:d4:da:39:cb:e0:41:
04:d4:ef:ac:4d:23:7f:1f:5b:52:b1:6f:b1:eb:c2:
22:e2:6d:85:af:94:14:4e:27:75:22:34:54:67:02:
de:6e:db:9e:58:82:33:6c:24:2c:0b:74:28:ea:8b:
a6:7b:ca:ad:fd:dd:ce:55:bf:93:d8:e2:fa:f7:df:
0c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AF:FE:CB:1A:EB:C9:CB:8E:C0:00:35:57:E5:25:D9:15:91:6C:5F
X509v3 Authority Key Identifier:
keyid:25:50:ED:64:AF:65:D7:3E:03:65:08:8A:76:68:3F:C9:8D:C1:F5:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6HowpC7DeQe2zh5HqVSvgbXLZUr5nUYYXeP6cZeB9Hji/0/2550ED64AF65D73E0365088A76683FC98DC1F509.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2550ED64AF65D73E0365088A76683FC98DC1F509.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HowpC7DeQe2zh5HqVSvgbXLZUr5nUYYXeP6cZeB9Hji/0/323830313a38303a333935303a3a2f34382d3438203d3e20323730363831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:80:3950::/48
Signature Algorithm: sha256WithRSAEncryption
13:cf:ba:be:5f:dc:9b:12:06:70:04:13:8b:2f:7f:21:35:0e:
4e:5c:6b:fd:5e:d6:d0:f7:cb:4e:fd:ba:aa:b1:53:0f:c0:ae:
c8:a4:e9:aa:d7:bf:40:47:7d:72:3b:bc:1a:13:b5:da:b6:1a:
0d:64:c0:2c:64:80:b9:64:e8:f8:a9:59:3c:ef:f1:68:73:d2:
2f:a5:ec:93:4b:b8:8c:39:83:51:36:39:13:da:ae:ae:45:95:
71:ac:18:1d:7c:d2:ce:fc:c1:bd:af:ee:b7:dc:38:b4:5c:22:
35:64:ea:ba:e8:d1:23:0d:9b:50:c1:35:c4:09:e2:b9:13:58:
b6:20:24:ce:c0:f5:42:dd:f1:38:3c:41:5e:6d:7e:0f:9b:40:
c8:1f:8f:5e:22:f4:47:c9:c6:5d:cb:4b:65:c6:8e:02:f8:86:
35:0c:5d:9e:01:ae:4c:a0:7f:ff:ac:e8:10:64:45:66:d5:69:
c5:38:c2:8f:29:5d:fd:11:9a:2d:ad:21:9f:58:3a:a7:e2:32:
fd:94:6d:07:49:4a:07:0c:b5:f9:21:6b:9f:e0:71:8b:7a:7c:
7d:51:cd:a4:7c:0b:50:bb:4c:04:cd:c9:91:fd:c7:2c:fc:37:
77:b8:76:4b:a6:d5:16:33:aa:3a:19:3d:bd:0f:1c:a7:00:60:
55:92:84:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:35:29 2025 by rpki-client