Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/323830343a376537303a633030303a3a2f33342d3334203d3e20323731363234.roa
File: 323830343a376537303a633030303a3a2f33342d3334203d3e20323731363234.roa (raw, json)
Hash identifier: JzWgBOTX3k1VDp+MFZp2XjN4+lqmopnqypAZ4DoGS8w=
Subject key identifier: 58:EC:99:37:BF:DF:3F:6E:1D:E6:2B:D6:28:C9:A2:FC:EC:0C:F2:CF
Certificate issuer: /CN=6BD10BD7311C36E4427262C587B0519198C93849
Certificate serial: 6E6D91BF4F88237F0ABBE69EA0599509601349A6
Authority key identifier: 6B:D1:0B:D7:31:1C:36:E4:42:72:62:C5:87:B0:51:91:98:C9:38:49
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BD10BD7311C36E4427262C587B0519198C93849.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/323830343a376537303a633030303a3a2f33342d3334203d3e20323731363234.roa
Signing time: Tue 11 Feb 2025 17:58:16 +0000
ROA not before: Tue 11 Feb 2025 17:53:16 +0000
ROA not after: Tue 10 Feb 2026 17:58:16 +0000
asID: 271624
IP address blocks: 2804:7e70:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:6d:91:bf:4f:88:23:7f:0a:bb:e6:9e:a0:59:95:09:60:13:49:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6BD10BD7311C36E4427262C587B0519198C93849
Validity
Not Before: Feb 11 17:53:16 2025 GMT
Not After : Feb 10 17:58:16 2026 GMT
Subject: CN=58EC9937BFDF3F6E1DE62BD628C9A2FCEC0CF2CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:eb:90:5d:c1:38:a2:8d:c0:a4:be:ad:25:98:
7e:8b:b7:25:71:66:30:1b:ee:43:ec:7e:3a:fe:16:
1a:a7:b7:a7:83:59:2c:e3:22:38:fd:a3:7e:91:c4:
7e:c8:d7:f3:49:0d:42:f5:da:95:ca:0b:22:5d:71:
40:85:b1:33:66:02:6e:d9:0a:1b:e9:df:07:a4:b4:
11:ce:03:84:80:b4:72:95:ab:19:b8:1b:c0:ac:e9:
a6:d0:81:a3:2a:64:bf:72:cf:b2:bd:65:be:f5:0a:
29:ea:1a:f7:e4:f0:46:ad:9d:35:07:e5:fa:e1:6c:
58:4e:dd:93:bd:e5:a4:c4:b1:fb:9c:74:02:aa:ea:
ca:bd:40:26:6f:3b:99:79:0d:54:21:ac:1d:7c:d9:
4e:e9:d6:07:75:d5:e7:9a:fd:f3:ca:94:37:e6:8b:
6e:36:94:b9:bf:24:49:c8:08:3c:6a:fc:bc:d4:e5:
08:d5:c4:52:c5:72:5a:bf:3c:63:28:1f:06:23:f4:
83:c1:20:dd:a3:67:06:e1:2b:77:b1:e0:8a:d4:c3:
57:a8:6d:ae:48:80:dc:66:30:dd:20:3e:df:25:ca:
c3:e5:a4:47:ae:5b:40:17:32:7e:75:ae:38:83:52:
fa:c1:6d:e3:5e:32:e4:5a:5e:cd:74:90:04:36:ba:
17:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EC:99:37:BF:DF:3F:6E:1D:E6:2B:D6:28:C9:A2:FC:EC:0C:F2:CF
X509v3 Authority Key Identifier:
keyid:6B:D1:0B:D7:31:1C:36:E4:42:72:62:C5:87:B0:51:91:98:C9:38:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/6BD10BD7311C36E4427262C587B0519198C93849.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BD10BD7311C36E4427262C587B0519198C93849.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/323830343a376537303a633030303a3a2f33342d3334203d3e20323731363234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7e70:c000::/34
Signature Algorithm: sha256WithRSAEncryption
28:25:61:d4:f5:29:5a:6b:d2:76:84:32:59:3e:2a:2d:81:ef:
bb:a9:ec:ce:f6:3e:02:38:09:58:f1:7d:db:cd:bc:76:95:ba:
93:36:b6:fc:97:db:28:c5:92:81:6c:40:64:d4:ae:a5:ae:35:
ae:9f:38:24:7f:ab:a1:c1:84:9f:5d:73:a6:1e:ca:33:f1:a6:
c8:b4:63:53:92:46:eb:24:d3:a7:80:4a:fe:b7:88:01:70:e4:
14:2a:57:6f:da:67:95:6a:d8:a1:e1:67:b3:d0:88:49:55:d0:
30:f8:29:99:13:2a:3a:5e:e3:7c:bf:c3:9f:44:0b:93:fc:b3:
bf:3f:30:23:7b:c9:c9:83:46:ba:ba:24:17:a1:a7:10:8a:e0:
6c:ef:42:9a:6e:cd:a6:29:e4:58:f0:77:8b:34:3c:fa:70:8b:
a0:81:8b:ac:e1:30:ab:b4:0d:cd:27:cd:83:17:63:a0:56:3a:
84:ae:0b:cd:c4:40:d8:97:e1:4c:27:db:69:96:92:0d:9e:50:
04:1b:68:aa:4b:36:49:e5:8a:14:37:22:78:48:73:55:02:c0:
75:a2:84:4f:45:bb:49:23:8f:bc:85:fe:06:df:9e:09:a7:f6:
d5:ef:af:6e:87:cc:9b:c5:d4:d8:c6:5b:d8:58:82:ba:f3:33:
a3:6c:e3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:58:53 2025 by rpki-client