Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a6130303a3a2f34302d3430203d3e203631353733.roa
File: 323830343a323565343a6130303a3a2f34302d3430203d3e203631353733.roa (raw, json)
Hash identifier: jVxIkvjgKL09qjbSCD7aUAKdIzox6YOytqyjqNHzFG4=
Subject key identifier: C6:15:65:EF:96:8E:C7:19:A0:C9:B6:E5:13:C9:87:94:B4:B2:AE:2A
Certificate issuer: /CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Certificate serial: 6A48BB959D95EBCC9294353D581E3A99E2FD3A77
Authority key identifier: DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a6130303a3a2f34302d3430203d3e203631353733.roa
Signing time: Sat 22 Mar 2025 11:36:12 +0000
ROA not before: Sat 22 Mar 2025 11:31:12 +0000
ROA not after: Sat 21 Mar 2026 11:36:12 +0000
asID: 61573
IP address blocks: 2804:25e4:a00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:48:bb:95:9d:95:eb:cc:92:94:35:3d:58:1e:3a:99:e2:fd:3a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Validity
Not Before: Mar 22 11:31:12 2025 GMT
Not After : Mar 21 11:36:12 2026 GMT
Subject: CN=C61565EF968EC719A0C9B6E513C98794B4B2AE2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4c:6c:65:e6:3a:d8:61:9f:ba:7d:6d:d6:f4:
64:4e:c9:77:64:0e:76:ea:71:85:5f:98:b3:fd:f0:
39:ca:b7:60:cb:67:40:f4:1a:39:77:d5:7f:75:42:
94:c6:a6:52:ee:8a:86:49:e0:5c:b9:42:de:6f:1c:
2f:c5:0c:c4:01:0f:e0:7e:40:09:66:a3:c0:48:c2:
70:ea:cf:1d:3c:b7:94:17:a6:62:bd:60:03:df:55:
11:98:e1:68:a1:cd:e0:c2:79:90:56:a6:78:51:4c:
dd:e1:90:9d:aa:a9:88:e9:73:0f:17:41:f8:89:c2:
45:47:c8:05:a4:80:2f:df:0d:b7:dd:86:23:82:eb:
a0:b0:08:0e:2e:ca:c6:8c:dc:e7:ae:a5:78:99:00:
fa:66:7f:18:ec:af:15:1b:37:2b:3a:74:4a:32:a7:
98:17:c1:fb:9d:a8:fd:3f:ab:25:78:be:38:85:0d:
81:9e:49:2d:07:1b:b3:66:87:2c:91:5f:95:57:fe:
59:4e:1e:eb:9a:65:b0:66:61:75:de:f7:bd:b4:51:
e1:93:74:6c:53:d0:c9:8a:3d:62:d5:29:93:5f:05:
0d:ba:c8:27:4b:ee:d8:df:66:45:7d:50:89:5c:4d:
00:6c:71:85:61:db:0a:8f:00:85:4c:1b:78:2a:dc:
7b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:15:65:EF:96:8E:C7:19:A0:C9:B6:E5:13:C9:87:94:B4:B2:AE:2A
X509v3 Authority Key Identifier:
keyid:DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a6130303a3a2f34302d3430203d3e203631353733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:25e4:a00::/40
Signature Algorithm: sha256WithRSAEncryption
1c:d4:32:32:e1:2a:b8:ef:31:5c:ae:94:fd:8d:77:7e:59:08:
a8:8a:66:5e:f9:64:69:ca:a3:8a:f6:0c:e6:ae:88:b7:30:c9:
39:5d:2f:57:2e:fd:a5:7d:8d:11:50:6e:62:71:1b:aa:94:b7:
22:5b:c7:4e:13:47:eb:7e:c5:07:70:2c:2c:8f:7a:0e:d9:d0:
d0:d5:90:c0:6f:2c:f3:25:40:e8:a0:c8:e5:ed:60:be:ba:39:
89:a3:2a:3a:b4:d9:e5:23:11:bb:89:88:a7:70:e1:29:7c:80:
72:40:2f:fa:34:9b:de:3a:fb:4e:d7:10:da:78:09:29:2f:c2:
e8:8b:c7:5b:53:23:78:d8:a5:32:45:03:73:79:30:2a:5e:f0:
bb:a9:b9:60:64:08:1b:df:f6:20:a8:a6:0b:33:11:4c:ea:90:
fe:b6:64:c5:69:8b:1d:f0:5d:e7:ce:ab:4e:fd:91:bf:f0:84:
e9:66:74:f8:6f:9e:89:85:93:f1:44:09:a5:f0:7e:92:23:dc:
45:0f:a7:92:bf:17:19:f8:26:5e:93:7e:83:c3:35:35:e2:24:
65:a6:84:2a:f7:28:16:ac:b0:4b:a6:a4:50:8d:1b:db:d1:47:
e6:18:66:3f:d7:29:d9:ac:78:60:2e:5e:63:4d:32:62:d8:24:
18:5f:fe:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:08:57 2025 by rpki-client