Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/323830343a373462303a383030303a3a2f33332d3333203d3e20323730393937.roa
File: 323830343a373462303a383030303a3a2f33332d3333203d3e20323730393937.roa (raw, json)
Hash identifier: iSOCo3aB5eAYkz9AaMoIIPlEhAyp/jCaqlJEwV+U2Bg=
Subject key identifier: E8:77:B0:B3:18:FB:7C:BD:01:24:71:CE:CF:EB:3E:C5:4D:E9:B7:45
Certificate issuer: /CN=7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2
Certificate serial: 01ED2CCF428A6F5E7B47C52CC0F6C31D79573F6E
Authority key identifier: 7F:6F:AE:9C:A3:3E:D0:1F:7D:11:7F:D3:50:91:BA:8A:F4:4F:F0:A2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/323830343a373462303a383030303a3a2f33332d3333203d3e20323730393937.roa
Signing time: Tue 14 Jan 2025 14:01:04 +0000
ROA not before: Tue 14 Jan 2025 13:56:04 +0000
ROA not after: Tue 13 Jan 2026 14:01:04 +0000
asID: 270997
IP address blocks: 2804:74b0:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:ed:2c:cf:42:8a:6f:5e:7b:47:c5:2c:c0:f6:c3:1d:79:57:3f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2
Validity
Not Before: Jan 14 13:56:04 2025 GMT
Not After : Jan 13 14:01:04 2026 GMT
Subject: CN=E877B0B318FB7CBD012471CECFEB3EC54DE9B745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:71:38:53:73:08:70:41:5e:1e:f0:76:14:05:
1b:f1:9b:15:9c:94:e8:2f:2d:d8:9f:e1:04:54:64:
30:69:00:a2:e5:99:a3:f7:75:82:b0:9b:6b:e6:16:
da:7a:27:99:a6:01:8b:0a:62:b1:74:f6:6e:0b:2d:
c9:b8:87:15:15:26:8e:0a:34:f9:37:6e:87:84:7f:
1c:2d:74:d4:5b:8d:a3:bc:17:13:79:02:60:c5:9f:
95:95:0c:5e:fa:21:2f:19:69:1d:ad:45:dd:d3:cb:
a3:6a:4b:83:38:82:b0:d0:4a:f9:a8:1c:51:29:e0:
3c:c6:c0:00:8e:ef:39:76:68:82:be:3b:fb:68:2a:
1c:b6:74:93:9c:8f:e2:96:d2:46:72:48:ad:91:2d:
04:74:d6:e8:e4:02:32:62:5f:c9:f3:9d:bd:78:c3:
06:0a:7e:ac:79:90:93:b3:05:d3:9b:4c:07:e9:ae:
db:80:75:40:a0:d2:9b:61:03:2e:51:a6:69:cf:a0:
22:e2:19:e1:2c:06:eb:5f:6c:d1:49:e6:cc:37:24:
68:21:ce:ce:c7:09:5a:a6:45:f8:e0:97:db:76:fe:
77:10:c4:84:15:c0:3a:89:5b:bb:52:23:2d:fa:1b:
9e:51:f9:4e:f5:ee:e6:8f:33:96:74:1b:ce:25:25:
b3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:77:B0:B3:18:FB:7C:BD:01:24:71:CE:CF:EB:3E:C5:4D:E9:B7:45
X509v3 Authority Key Identifier:
keyid:7F:6F:AE:9C:A3:3E:D0:1F:7D:11:7F:D3:50:91:BA:8A:F4:4F:F0:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/323830343a373462303a383030303a3a2f33332d3333203d3e20323730393937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:74b0:8000::/33
Signature Algorithm: sha256WithRSAEncryption
67:98:c6:51:9a:01:ef:54:3a:08:8f:c5:52:fc:65:0f:d4:cd:
61:58:72:11:f1:04:1f:5d:76:03:86:dd:30:61:2f:ea:ec:48:
23:dd:b5:f2:e2:f4:00:63:55:cb:6e:aa:b4:ba:c6:3a:8b:5f:
04:49:8f:c5:55:e3:e8:1b:3e:ef:c3:f7:b5:3d:31:cf:01:aa:
cc:a0:0e:a0:9c:41:4f:d4:0e:f2:5d:2e:8e:7d:26:be:79:ff:
7f:6a:85:8a:13:7a:d4:a4:5b:05:23:52:d7:68:c0:d4:b4:33:
a9:94:7c:e7:4d:4d:82:d6:5a:98:b0:5e:8f:17:2f:de:80:46:
c6:0a:40:9e:b6:b6:88:29:76:a0:fe:81:b5:f4:0e:4e:6d:51:
48:8a:93:a6:12:48:36:e7:31:bd:fa:6f:f7:bb:85:a1:ce:56:
53:07:a7:c3:ee:08:6f:75:b1:48:1e:ea:53:3c:e4:1b:65:35:
db:aa:7c:46:91:f2:20:a6:f2:71:8b:4d:cd:d9:71:85:e9:0a:
2a:58:41:43:ed:c7:dd:60:90:cc:d2:d9:33:a8:7e:bd:11:bf:
c6:cb:21:c2:3d:18:b1:cc:1c:1f:fb:34:ce:97:f8:37:d7:ac:
3f:f1:ad:09:ed:8e:89:e8:f4:ff:be:5d:db:de:8f:7f:2f:42:
25:d6:26:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:23:02 2025 by rpki-client