Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/323830343a346638343a633030303a3a2f33342d3334203d3e20323638333331.roa
File: 323830343a346638343a633030303a3a2f33342d3334203d3e20323638333331.roa (raw, json)
Hash identifier: +p5dZR+fKl1vEMxh8z1gwMiaEzpkSu/v+s5QA8NAlyQ=
Subject key identifier: D5:DE:58:A4:CD:79:F3:5B:FB:1C:7A:AD:27:A5:55:E6:50:C3:8B:C0
Certificate issuer: /CN=BF9D09185198062395625CCDCA55DA0C823BC527
Certificate serial: 7000BD5F8CEEA422C766C76F5E9F4D2EF22A7D51
Authority key identifier: BF:9D:09:18:51:98:06:23:95:62:5C:CD:CA:55:DA:0C:82:3B:C5:27
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF9D09185198062395625CCDCA55DA0C823BC527.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/323830343a346638343a633030303a3a2f33342d3334203d3e20323638333331.roa
Signing time: Fri 07 Mar 2025 00:00:56 +0000
ROA not before: Thu 06 Mar 2025 23:55:56 +0000
ROA not after: Fri 06 Mar 2026 00:00:56 +0000
asID: 268331
IP address blocks: 2804:4f84:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:00:bd:5f:8c:ee:a4:22:c7:66:c7:6f:5e:9f:4d:2e:f2:2a:7d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF9D09185198062395625CCDCA55DA0C823BC527
Validity
Not Before: Mar 6 23:55:56 2025 GMT
Not After : Mar 6 00:00:56 2026 GMT
Subject: CN=D5DE58A4CD79F35BFB1C7AAD27A555E650C38BC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:50:72:e0:6b:57:4b:de:7f:d7:f1:59:4a:da:
52:70:7b:eb:77:e7:98:94:77:b8:5f:39:8a:4a:c2:
27:f9:1a:5c:a1:55:2a:34:80:7e:a8:51:44:5a:44:
8f:e0:cb:8c:e7:af:ab:0d:92:67:cd:ec:6e:52:4b:
cb:73:33:aa:2d:3c:d4:4a:20:1e:e8:e4:db:83:2b:
b2:11:06:4a:87:a0:4c:1c:56:87:3e:af:d8:03:1c:
3f:dd:58:27:c0:04:de:01:ee:19:b5:c0:34:e8:69:
a8:4b:c2:e4:ec:d0:e0:5c:7b:0f:87:ff:45:00:8c:
cd:c4:0f:00:2a:09:c3:38:36:8d:a1:6f:2d:f2:aa:
7f:64:09:22:c8:6a:e7:c5:be:67:9c:57:99:d0:53:
f4:b8:10:c9:7d:d2:36:89:35:b3:1e:78:77:47:f1:
67:86:04:5e:b7:7d:9a:2b:09:9d:da:e3:1b:ae:ff:
27:8e:85:cb:fa:c0:4b:e4:2f:8b:d0:61:52:5d:cf:
f5:01:6a:d8:f6:84:d4:bf:c9:2f:8e:82:cd:47:50:
50:44:bb:fc:15:54:57:d1:02:dc:62:8f:25:af:ba:
d6:c3:45:d2:97:11:2b:6c:f3:d3:58:7b:fd:37:c0:
ac:c3:47:b1:6b:76:8d:58:49:9b:38:69:81:03:4d:
2f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DE:58:A4:CD:79:F3:5B:FB:1C:7A:AD:27:A5:55:E6:50:C3:8B:C0
X509v3 Authority Key Identifier:
keyid:BF:9D:09:18:51:98:06:23:95:62:5C:CD:CA:55:DA:0C:82:3B:C5:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/BF9D09185198062395625CCDCA55DA0C823BC527.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF9D09185198062395625CCDCA55DA0C823BC527.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/323830343a346638343a633030303a3a2f33342d3334203d3e20323638333331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4f84:c000::/34
Signature Algorithm: sha256WithRSAEncryption
44:eb:a1:e9:c8:cc:8b:48:7c:f3:6f:1f:4c:72:ca:41:3f:99:
c3:c6:3a:44:f8:77:e3:dd:70:8a:eb:b9:e1:80:e9:18:4b:c4:
90:32:42:5e:9f:81:25:84:2a:31:82:94:b9:8b:0a:42:d3:0e:
8a:b6:2f:14:8e:7f:33:12:50:59:fb:c3:b7:ac:ee:43:09:69:
e7:f4:ae:0b:1c:a7:12:70:43:99:27:2f:fb:6b:4d:7c:7e:32:
5c:4f:57:6a:3d:04:a5:78:d2:23:d7:97:34:94:37:c8:5f:aa:
b0:90:4c:af:cb:71:19:87:c6:e0:1b:74:97:e0:e4:ae:c0:f7:
ee:b6:b4:08:06:dc:3d:fa:13:14:50:ab:f7:b4:9e:5b:d2:c8:
2d:f7:af:e5:3a:0a:da:29:52:6d:29:d7:3f:98:66:33:42:ea:
30:f0:44:5c:e0:e4:e3:00:f4:f1:aa:df:30:21:1c:7e:af:43:
d5:dc:b5:70:01:db:d4:83:b6:bf:8b:23:55:c8:b6:44:7e:3b:
1d:1e:38:c8:7f:1f:d7:87:08:24:ea:a3:ca:ce:79:29:10:10:
2d:b3:56:3d:93:79:30:79:69:92:39:ec:47:7d:11:fc:77:16:
90:eb:2f:e5:44:12:62:94:0b:35:8b:58:21:1d:02:d5:08:05:
3d:4b:63:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:47:47 2025 by rpki-client