Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a333030303a3a2f33362d3336203d3e20323637393432.roa
File: 323830343a353539303a333030303a3a2f33362d3336203d3e20323637393432.roa (raw, json)
Hash identifier: sOiiQoOww7BkGSWNxpjVUnuqXRjgFW31BgR2ukRZ7F0=
Subject key identifier: 90:6F:ED:9D:67:F7:07:18:A6:9D:9C:31:27:C5:8E:78:95:B7:68:D7
Certificate issuer: /CN=0FD65004E7C4085F2D33DF17345261EDD9B3A811
Certificate serial: 12FE3B84BF9345C169196BA7A8E939E2AD4B5BA3
Authority key identifier: 0F:D6:50:04:E7:C4:08:5F:2D:33:DF:17:34:52:61:ED:D9:B3:A8:11
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FD65004E7C4085F2D33DF17345261EDD9B3A811.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a333030303a3a2f33362d3336203d3e20323637393432.roa
Signing time: Wed 26 Mar 2025 16:49:51 +0000
ROA not before: Wed 26 Mar 2025 16:44:51 +0000
ROA not after: Wed 25 Mar 2026 16:49:51 +0000
asID: 267942
IP address blocks: 2804:5590:3000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:fe:3b:84:bf:93:45:c1:69:19:6b:a7:a8:e9:39:e2:ad:4b:5b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FD65004E7C4085F2D33DF17345261EDD9B3A811
Validity
Not Before: Mar 26 16:44:51 2025 GMT
Not After : Mar 25 16:49:51 2026 GMT
Subject: CN=906FED9D67F70718A69D9C3127C58E7895B768D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cf:4c:eb:6f:61:b8:d4:d7:7f:40:6d:b8:7a:
dc:47:80:bd:e4:bb:eb:83:f1:42:6e:85:71:81:76:
df:6d:e6:3a:f6:11:b8:22:45:2d:dd:8b:63:82:65:
d8:16:40:b9:7e:aa:58:4b:a2:26:78:41:03:11:6c:
b8:7f:8a:fd:f4:50:bc:b5:26:03:82:94:ad:f9:f2:
69:14:fb:82:d6:4a:e4:e0:af:aa:70:d4:f5:f4:cc:
02:26:d8:55:bb:c9:ea:85:37:b7:33:55:1a:60:2f:
31:ca:7e:72:9f:46:c0:bd:c2:d4:f3:ad:17:9f:92:
39:e1:e8:d9:fe:fe:cf:5a:8c:1d:33:be:e5:cb:4d:
b7:91:a5:d2:aa:66:74:d4:4d:67:81:61:90:8e:39:
42:a8:2f:58:c5:94:cf:8b:ae:f5:21:63:69:ef:a2:
58:67:66:e0:56:ba:46:f3:50:6a:b3:3a:ad:bc:29:
a5:8b:8f:c0:2d:ad:7e:23:a5:1b:36:2e:b1:ec:6b:
ee:2a:79:75:f3:d6:b3:1a:23:92:cc:f2:5c:56:cc:
58:3e:91:92:f4:6b:a2:49:fc:8e:e7:b6:50:2a:ec:
b2:25:3e:7a:15:c2:1f:06:94:b6:3f:3b:65:76:7b:
2e:42:ad:af:b0:e2:ff:07:1b:bc:22:57:44:a7:ec:
b1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:6F:ED:9D:67:F7:07:18:A6:9D:9C:31:27:C5:8E:78:95:B7:68:D7
X509v3 Authority Key Identifier:
keyid:0F:D6:50:04:E7:C4:08:5F:2D:33:DF:17:34:52:61:ED:D9:B3:A8:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/0FD65004E7C4085F2D33DF17345261EDD9B3A811.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FD65004E7C4085F2D33DF17345261EDD9B3A811.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a333030303a3a2f33362d3336203d3e20323637393432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5590:3000::/36
Signature Algorithm: sha256WithRSAEncryption
14:e7:93:24:de:27:24:47:5a:00:c0:2f:44:39:22:16:34:5a:
c5:e9:ac:7a:4d:95:f9:71:c0:d0:3a:b4:93:15:43:79:8b:11:
6f:5f:34:29:b6:1d:31:92:43:9a:64:e8:6f:37:3a:14:bf:a5:
a7:eb:04:40:e2:28:cc:5e:99:c7:b0:10:06:ca:a5:1e:2e:01:
f4:ad:53:95:2d:9b:04:ff:f9:b9:38:2c:2b:43:17:db:95:d5:
f8:94:48:02:85:7e:51:a0:b1:cb:d2:1c:44:ca:19:7a:17:c0:
e6:dd:da:3e:70:c7:d7:9c:28:36:74:32:36:26:66:91:d3:9e:
d7:46:2f:e7:1b:ed:d1:06:bf:1c:41:70:28:fb:d3:f4:b0:e1:
da:3b:bb:40:bb:64:fe:ae:0a:da:1a:e2:8c:1e:e8:43:87:a7:
9b:47:11:32:ed:6d:49:6f:48:00:e7:86:b1:f8:79:eb:5c:9f:
53:bf:b9:3e:b8:9e:22:1c:2b:47:1d:9c:74:65:ee:be:cc:38:
b6:2d:04:8c:91:0f:f7:92:20:bd:67:56:d3:42:85:01:5d:bc:
12:58:ba:73:c6:4b:fb:78:6e:fb:ca:82:4a:10:fd:2e:33:1b:
5a:47:d6:c5:37:0f:20:01:1a:fa:6c:36:8c:d2:66:85:9e:9a:
aa:47:f7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:50:50 2025 by rpki-client