Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/323830343a356136343a363030303a3a2f33362d3336203d3e20323638373730.roa
File: 323830343a356136343a363030303a3a2f33362d3336203d3e20323638373730.roa (raw, json)
Hash identifier: PTXEHscD+GXazvFIZMDMBIlPbkEVw4xTp89677tM2Ss=
Subject key identifier: 4C:B5:BE:D8:AF:51:3A:99:C5:95:78:D6:01:F8:5C:0C:3C:39:F7:2E
Certificate issuer: /CN=7FA00725B865657CC24A17AD7A99947906B51243
Certificate serial: 04380B7210C9E6A17E546770668013ED6E91B1F8
Authority key identifier: 7F:A0:07:25:B8:65:65:7C:C2:4A:17:AD:7A:99:94:79:06:B5:12:43
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA00725B865657CC24A17AD7A99947906B51243.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/323830343a356136343a363030303a3a2f33362d3336203d3e20323638373730.roa
Signing time: Thu 20 Mar 2025 19:36:49 +0000
ROA not before: Thu 20 Mar 2025 19:31:49 +0000
ROA not after: Thu 19 Mar 2026 19:36:49 +0000
asID: 268770
IP address blocks: 2804:5a64:6000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:38:0b:72:10:c9:e6:a1:7e:54:67:70:66:80:13:ed:6e:91:b1:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7FA00725B865657CC24A17AD7A99947906B51243
Validity
Not Before: Mar 20 19:31:49 2025 GMT
Not After : Mar 19 19:36:49 2026 GMT
Subject: CN=4CB5BED8AF513A99C59578D601F85C0C3C39F72E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:32:78:46:7e:9b:6d:73:c4:c7:80:88:e8:1e:
af:0f:b0:2e:a1:cc:97:fe:e3:93:87:a3:e7:03:3e:
3d:67:d1:44:f7:e5:f6:1c:1d:d9:7c:df:97:15:1b:
90:db:0d:c8:3c:c2:b3:32:d9:c1:0d:b5:6c:e6:9f:
9a:a7:80:81:31:68:52:57:dc:eb:8c:f8:37:6f:c5:
a8:28:52:87:63:96:20:63:12:ea:a5:12:71:79:f2:
e7:03:66:60:85:ff:d8:53:29:e3:e0:2e:43:35:ce:
8e:cb:21:ea:25:75:e9:3c:29:34:6f:3a:20:fd:be:
9f:f9:90:21:8b:f3:89:5c:20:a3:a6:f2:06:8d:fd:
cb:9d:a1:fc:0b:b0:c7:bd:ec:ac:38:e6:7b:6d:7d:
d6:7f:3a:c0:1b:e3:11:cc:16:23:3f:74:4e:1f:57:
66:f8:b7:eb:f6:31:94:8b:92:c5:a2:b4:a8:36:6b:
9e:8c:79:86:bb:7a:59:74:a8:a2:fc:5c:bf:56:0a:
83:1c:40:60:d6:a8:3e:e9:78:1b:b1:cb:b8:dc:7c:
4b:0d:a3:26:eb:5c:e5:0c:f2:35:96:f1:07:ad:93:
55:f4:db:eb:66:0d:5a:ad:6d:11:0e:62:ce:b3:b3:
ac:81:6c:9b:8a:2c:d3:ca:5b:43:a5:54:30:06:17:
0f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B5:BE:D8:AF:51:3A:99:C5:95:78:D6:01:F8:5C:0C:3C:39:F7:2E
X509v3 Authority Key Identifier:
keyid:7F:A0:07:25:B8:65:65:7C:C2:4A:17:AD:7A:99:94:79:06:B5:12:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/7FA00725B865657CC24A17AD7A99947906B51243.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA00725B865657CC24A17AD7A99947906B51243.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/323830343a356136343a363030303a3a2f33362d3336203d3e20323638373730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5a64:6000::/36
Signature Algorithm: sha256WithRSAEncryption
7f:08:f0:5c:02:b4:dd:2a:df:22:cf:50:f4:3b:5c:69:54:39:
13:88:4f:24:2d:fe:19:8d:e9:3e:41:54:f9:9e:86:6f:da:ce:
ac:79:4f:7b:d9:09:53:88:54:e7:28:87:0e:22:59:a5:1b:a6:
17:3c:fd:8e:b1:b4:be:76:b1:2a:38:e9:76:91:13:26:b3:a7:
82:cc:c5:5e:dc:0c:ef:60:37:4a:9b:de:90:9e:31:b3:5d:75:
02:a6:8a:38:e2:b2:a5:60:26:24:51:1b:02:8c:37:f1:cb:4f:
4b:ed:d4:09:a6:86:e3:c1:c6:f0:cf:df:8a:ab:f9:19:70:00:
5b:39:95:eb:d7:99:9d:67:54:84:aa:64:cb:eb:ab:1b:2f:cd:
c7:cc:79:6d:62:2f:c7:3a:f1:96:95:40:aa:14:93:4c:3e:84:
f1:68:a8:92:d4:e4:9f:a1:07:d6:4e:43:a4:0f:58:5e:60:e7:
04:bb:fe:32:9f:86:99:d9:45:fa:e3:bf:ad:63:42:b0:97:9d:
08:f4:b1:02:fd:cb:bb:c7:75:ff:d5:7f:c5:71:dd:ca:a5:f8:
c0:dd:a2:48:7b:54:47:63:a8:c8:5b:ca:f5:50:dd:bf:38:f7:
97:6d:3b:14:fe:14:fc:bb:1d:88:70:28:e4:01:a8:2f:66:7b:
90:e4:9f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:50:26 2025 by rpki-client