Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/323830343a333635633a3a2f33332d3438203d3e20323636333433.roa
File: 323830343a333635633a3a2f33332d3438203d3e20323636333433.roa (raw, json)
Hash identifier: +6tbD5bAaebF3t9bVINWT+D+2UKJvUg3c3dyTxk9fXc=
Subject key identifier: 55:FB:49:44:2D:7C:C1:01:30:AF:FA:18:87:10:7D:EF:20:24:E0:3D
Certificate issuer: /CN=68230C14403321CC6C2237C576CF7E50D2BAC9B4
Certificate serial: 774863FCFB7972E76BE3D51A194E0CE5671E60CF
Authority key identifier: 68:23:0C:14:40:33:21:CC:6C:22:37:C5:76:CF:7E:50:D2:BA:C9:B4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68230C14403321CC6C2237C576CF7E50D2BAC9B4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/323830343a333635633a3a2f33332d3438203d3e20323636333433.roa
Signing time: Thu 23 Jan 2025 12:49:04 +0000
ROA not before: Thu 23 Jan 2025 12:44:04 +0000
ROA not after: Thu 22 Jan 2026 12:49:04 +0000
asID: 266343
IP address blocks: 2804:365c::/33 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:48:63:fc:fb:79:72:e7:6b:e3:d5:1a:19:4e:0c:e5:67:1e:60:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68230C14403321CC6C2237C576CF7E50D2BAC9B4
Validity
Not Before: Jan 23 12:44:04 2025 GMT
Not After : Jan 22 12:49:04 2026 GMT
Subject: CN=55FB49442D7CC10130AFFA1887107DEF2024E03D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fd:8a:da:61:df:1e:c6:92:39:12:54:3f:c3:
39:00:06:e9:f8:46:73:a7:2f:29:f3:e4:7b:f7:24:
81:4f:74:0a:92:6c:9a:e3:be:1a:88:41:8d:90:01:
cc:f1:98:a6:0c:10:3c:a5:27:1a:0c:a2:75:e7:47:
9d:c7:6e:30:71:40:ff:5b:ad:5e:a6:b0:42:4f:66:
69:22:09:8f:6b:8c:6b:36:f8:73:be:b2:9a:bf:c4:
0d:38:9b:ad:f3:e2:4d:08:59:a1:cf:29:91:af:6f:
06:fb:f4:ea:4d:12:46:4b:76:df:b0:60:3f:ea:ae:
0e:28:77:40:6a:cd:84:ea:dd:04:00:61:5f:a4:33:
1e:1f:89:d5:8e:15:ae:bc:b5:df:ef:60:03:3f:2b:
02:6b:5b:54:72:43:10:90:39:e7:62:24:19:71:3b:
a5:13:81:1e:e3:ee:6e:5a:1b:8b:a4:16:3d:ec:65:
b5:29:87:c2:d0:f8:1c:4d:7f:72:a3:10:89:b2:06:
10:2c:4e:d5:60:b1:cc:c0:e2:1b:03:4f:7b:72:b1:
b7:a1:11:be:ca:81:8c:8a:ee:be:43:b0:dd:34:f3:
37:88:04:66:02:41:14:52:1e:ef:08:49:5d:c2:1c:
cd:d5:ea:bd:73:f6:0f:b6:30:98:2f:8d:c1:85:01:
1a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FB:49:44:2D:7C:C1:01:30:AF:FA:18:87:10:7D:EF:20:24:E0:3D
X509v3 Authority Key Identifier:
keyid:68:23:0C:14:40:33:21:CC:6C:22:37:C5:76:CF:7E:50:D2:BA:C9:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/68230C14403321CC6C2237C576CF7E50D2BAC9B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68230C14403321CC6C2237C576CF7E50D2BAC9B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/323830343a333635633a3a2f33332d3438203d3e20323636333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:365c::/33
Signature Algorithm: sha256WithRSAEncryption
65:00:f2:f1:5a:da:34:58:ee:f9:68:5e:97:e6:2e:65:3e:47:
3d:85:4a:b0:85:cc:da:0d:df:0a:01:0d:b8:9a:db:1d:15:aa:
fa:65:49:43:6f:ff:66:fa:b2:58:cf:22:8b:b8:0a:1c:6b:11:
76:88:09:f1:ce:7a:4f:09:1b:44:59:47:84:66:ce:9b:85:49:
9e:09:17:d4:9f:f1:6d:ee:55:83:e8:dc:67:b3:a8:b3:e6:61:
1e:f8:53:67:37:e4:e2:96:db:0f:02:0a:a1:a7:3f:05:ff:17:
16:fe:ac:10:9e:e1:a0:d5:f3:50:94:f9:01:11:6a:67:99:3d:
ab:60:55:0b:5c:d5:b4:7d:80:ac:3d:5b:17:34:f2:29:ad:9f:
a1:c0:50:1b:c0:48:64:3d:22:03:ef:a8:2b:b0:1a:da:02:85:
f3:16:02:14:b2:f1:40:0e:9c:cc:26:00:7c:e0:a5:5c:8c:93:
d2:06:9f:79:19:cd:4f:07:01:29:d9:82:08:2a:8c:cd:e6:f5:
12:39:97:9f:57:bb:7f:f6:b8:b6:ad:44:59:a5:7a:3e:4c:b4:
4f:43:02:02:a2:5d:c1:bc:bc:ed:4e:42:27:e9:b3:89:93:5e:
db:3c:7e:78:7a:5e:04:61:5a:ef:ce:94:d1:15:5e:06:41:10:
39:00:c1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:53:00 2025 by rpki-client