Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/323830343a3338383a3a2f33302d3438203d3e203232303835.roa
File: 323830343a3338383a3a2f33302d3438203d3e203232303835.roa (raw, json)
Hash identifier: 21PacDvvQIpv9xYW6EO4wI77IVvBOlq6BePnRCA1UGg=
Subject key identifier: 29:72:0A:27:6D:40:13:E2:5F:4B:B6:60:01:B4:0B:06:F1:2B:78:EF
Certificate issuer: /CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
Certificate serial: 590F30BBFBFDB61A49968ADC4F51B24B81D7F4E7
Authority key identifier: D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/323830343a3338383a3a2f33302d3438203d3e203232303835.roa
Signing time: Wed 05 Mar 2025 19:00:15 +0000
ROA not before: Wed 05 Mar 2025 18:55:15 +0000
ROA not after: Wed 04 Mar 2026 19:00:15 +0000
asID: 22085
IP address blocks: 2804:388::/30 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:0f:30:bb:fb:fd:b6:1a:49:96:8a:dc:4f:51:b2:4b:81:d7:f4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
Validity
Not Before: Mar 5 18:55:15 2025 GMT
Not After : Mar 4 19:00:15 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f0:bb:af:c4:19:94:ae:51:49:cd:88:f6:da:
ea:09:49:d2:31:95:ef:90:e8:26:78:99:a5:06:22:
d2:86:8e:32:0f:a7:ec:44:15:1a:b2:44:d8:2a:74:
f5:1f:76:73:72:5e:00:83:46:89:c4:3c:0c:ab:cc:
33:dd:a5:1c:87:f6:66:77:9c:d1:8a:ff:7e:b8:e3:
18:52:d0:5b:9a:f6:44:c2:c7:a8:9e:29:5f:cc:e7:
77:d0:34:15:27:19:df:a8:61:02:77:ce:0b:2b:22:
b3:67:3c:16:be:44:86:2c:25:51:23:31:b8:f3:d1:
7d:54:23:ba:cc:94:e4:74:de:85:bb:95:0b:92:45:
af:98:88:be:1d:e4:f9:a6:9a:50:74:c4:40:a3:98:
a4:6e:72:b9:9a:2f:86:0c:27:41:b5:33:ef:69:5f:
02:39:f1:38:19:63:30:a7:58:ad:37:3d:02:fe:bb:
be:5f:7d:e1:1f:89:68:ca:0d:94:8e:74:4c:54:9b:
a8:10:81:ee:4f:26:75:14:01:33:20:a3:0e:87:ed:
3e:64:aa:24:8b:e6:c8:3a:93:55:48:9a:90:6f:16:
99:58:1f:64:2d:2c:52:9f:4b:ac:fd:69:d7:98:77:
7a:d0:9d:6f:01:e8:c3:c3:c4:44:af:80:b4:81:5f:
54:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:72:0A:27:6D:40:13:E2:5F:4B:B6:60:01:B4:0B:06:F1:2B:78:EF
X509v3 Authority Key Identifier:
keyid:D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/323830343a3338383a3a2f33302d3438203d3e203232303835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:388::/30
Signature Algorithm: sha256WithRSAEncryption
c5:54:34:84:e0:9f:aa:79:1e:d2:f4:90:98:76:c8:25:c0:60:
a5:58:1e:20:d2:00:73:41:d2:3a:2c:95:e9:8e:68:d8:d0:3f:
a1:b3:13:0c:92:a7:1b:0a:b2:32:a2:7b:d7:cb:3e:ad:4e:e7:
46:73:cc:b7:5d:60:37:04:40:ea:72:4f:89:11:9a:46:17:c2:
e9:93:71:59:6b:97:ae:01:71:12:14:27:ff:7c:5b:24:66:8e:
c0:a0:80:5d:a1:a1:18:bf:db:6c:d6:d2:00:f7:74:35:04:19:
f9:20:a7:39:99:76:79:56:b4:32:13:a9:c4:66:d1:f4:f7:32:
98:e8:d7:c7:63:67:a9:16:e8:d2:3e:2a:5c:25:7b:c2:9e:8c:
8a:09:61:a2:0b:70:76:d1:5d:36:ea:8e:82:05:83:2e:e5:9f:
8e:ba:c1:69:1c:29:1c:d6:e2:05:78:4b:65:ff:c6:5c:6b:ac:
4b:a3:14:4a:63:70:62:e7:f8:d7:ba:55:a2:61:15:ca:6f:cf:
26:26:25:18:51:50:fb:8d:45:92:f8:c4:24:89:94:02:2a:a3:
fc:8f:49:df:d5:64:19:df:d3:c3:3a:62:83:ba:53:45:fa:2c:
50:00:5c:42:90:2d:c9:06:69:f3:c8:62:eb:98:ac:66:fa:d3:
c4:e9:3e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:24:34 2025 by rpki-client