Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/323830343a346632383a383030303a3a2f33332d3333203d3e20323638333038.roa
File: 323830343a346632383a383030303a3a2f33332d3333203d3e20323638333038.roa (raw, json)
Hash identifier: qFnJmMLI+myoJE2WtlbMAvjni6fLBrEWQXVjcdBPoLk=
Subject key identifier: 07:A8:56:3B:97:7C:91:9C:1F:ED:7D:F6:A4:83:27:BD:7E:63:35:F9
Certificate issuer: /CN=7104176188EE68612EE3A6C683A28A3254AFD500
Certificate serial: 691829411BD6ED1DCEFC4EA02E13274F3C5046C5
Authority key identifier: 71:04:17:61:88:EE:68:61:2E:E3:A6:C6:83:A2:8A:32:54:AF:D5:00
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7104176188EE68612EE3A6C683A28A3254AFD500.cer
Subject info access: rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/323830343a346632383a383030303a3a2f33332d3333203d3e20323638333038.roa
Signing time: Tue 11 Feb 2025 21:05:16 +0000
ROA not before: Tue 11 Feb 2025 21:00:16 +0000
ROA not after: Tue 10 Feb 2026 21:05:16 +0000
asID: 268308
IP address blocks: 2804:4f28:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:18:29:41:1b:d6:ed:1d:ce:fc:4e:a0:2e:13:27:4f:3c:50:46:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7104176188EE68612EE3A6C683A28A3254AFD500
Validity
Not Before: Feb 11 21:00:16 2025 GMT
Not After : Feb 10 21:05:16 2026 GMT
Subject: CN=07A8563B977C919C1FED7DF6A48327BD7E6335F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f3:0d:87:93:88:d5:7e:b7:ce:be:7c:8a:0c:
a3:b0:ae:0c:5f:84:6d:09:d1:cd:c4:6a:e7:ae:10:
e6:b6:a9:74:c1:26:be:63:5b:25:d2:92:b2:36:f1:
68:87:b8:4a:d3:af:1a:b0:d9:eb:5c:45:94:a0:89:
c4:b6:68:75:47:31:ed:22:82:b9:f0:ad:4c:30:2f:
e7:0e:18:88:61:7b:c3:d1:ba:58:4e:c0:99:3b:fd:
cf:e5:6e:03:b5:e5:a7:8a:6a:a3:6e:0b:94:db:97:
fc:ee:a9:80:ea:78:88:64:6a:80:4e:c4:99:fc:a0:
db:95:ac:5e:b1:cf:4b:0a:0e:12:13:0c:df:1c:48:
7b:c4:87:84:34:f9:ec:9d:70:f1:b8:55:c5:f3:22:
f8:bc:29:a7:84:cf:1e:aa:d8:07:f5:3e:54:dc:7f:
b7:20:43:b8:d1:bf:b7:65:da:70:79:1f:d2:dc:74:
69:95:12:8a:ce:a6:c5:81:e2:ce:7c:02:8c:c4:21:
40:88:0e:b5:43:38:7b:82:62:ef:86:fd:84:07:8b:
91:a7:f3:41:d4:73:dc:b1:0e:40:76:3e:cb:31:94:
9d:da:c5:19:f5:af:cf:db:d9:06:28:ca:67:5d:ff:
d5:d4:66:a3:9a:27:55:90:b4:29:08:53:62:70:5f:
b5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A8:56:3B:97:7C:91:9C:1F:ED:7D:F6:A4:83:27:BD:7E:63:35:F9
X509v3 Authority Key Identifier:
keyid:71:04:17:61:88:EE:68:61:2E:E3:A6:C6:83:A2:8A:32:54:AF:D5:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/7104176188EE68612EE3A6C683A28A3254AFD500.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7104176188EE68612EE3A6C683A28A3254AFD500.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/323830343a346632383a383030303a3a2f33332d3333203d3e20323638333038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4f28:8000::/33
Signature Algorithm: sha256WithRSAEncryption
66:9e:38:dd:43:d8:1e:6a:97:ce:92:89:54:3d:6a:60:7f:2c:
5f:62:f6:09:f1:24:9c:42:4d:bc:3a:3a:b0:5b:85:ce:49:11:
28:00:4f:00:87:5c:05:ba:65:ea:d4:40:53:1d:d3:6b:e8:91:
34:f5:fb:eb:eb:66:74:01:6a:df:01:d0:40:f0:d9:dd:82:3f:
34:e8:2c:04:21:98:8c:eb:84:2c:6b:f6:16:2b:ea:b3:5c:7e:
44:2b:c5:ec:19:56:49:ca:64:9b:bb:58:3d:c2:e7:2a:03:75:
80:4b:48:cd:71:53:00:13:7c:7b:d2:01:31:5b:c4:ff:dd:46:
ad:25:65:b1:3a:f8:70:b9:b9:d9:03:75:73:28:bf:a6:57:98:
bd:53:06:06:71:95:5f:ff:84:1a:9c:b4:5e:26:f8:ff:60:44:
62:01:50:fc:b0:50:8a:50:d7:73:2c:66:1d:23:fe:33:01:ff:
ba:52:0f:a0:af:f9:73:9d:0a:0c:e9:86:b8:cf:cf:fd:8e:7f:
f8:69:25:a8:d7:41:c6:59:d9:7b:2b:eb:0a:af:d7:13:0a:90:
6c:04:39:80:b8:01:1b:19:36:fa:1e:44:45:56:62:7a:e4:56:
d0:77:40:78:75:53:a4:64:b9:ad:ea:f4:54:f1:b3:b8:2a:12:
fa:5b:24:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:04:22 2025 by rpki-client