Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/323830343a356136343a3a2f33362d3336203d3e20323638373730.roa
File: 323830343a356136343a3a2f33362d3336203d3e20323638373730.roa (raw, json)
Hash identifier: g8rQ7d0h/a2eTX64yiyvfXLactR6DJTorbeogepJMjk=
Subject key identifier: B4:BF:38:62:3B:93:80:BB:4A:04:52:C2:CE:92:6B:A8:88:3F:4F:F2
Certificate issuer: /CN=7FA00725B865657CC24A17AD7A99947906B51243
Certificate serial: 0B224F16ECCAB1DA597D0F9BCC3F4B82167BF5AC
Authority key identifier: 7F:A0:07:25:B8:65:65:7C:C2:4A:17:AD:7A:99:94:79:06:B5:12:43
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA00725B865657CC24A17AD7A99947906B51243.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/323830343a356136343a3a2f33362d3336203d3e20323638373730.roa
Signing time: Thu 20 Mar 2025 19:36:17 +0000
ROA not before: Thu 20 Mar 2025 19:31:17 +0000
ROA not after: Thu 19 Mar 2026 19:36:17 +0000
asID: 268770
IP address blocks: 2804:5a64::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:22:4f:16:ec:ca:b1:da:59:7d:0f:9b:cc:3f:4b:82:16:7b:f5:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7FA00725B865657CC24A17AD7A99947906B51243
Validity
Not Before: Mar 20 19:31:17 2025 GMT
Not After : Mar 19 19:36:17 2026 GMT
Subject: CN=B4BF38623B9380BB4A0452C2CE926BA8883F4FF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4d:f9:8d:4f:1d:0d:20:ab:d7:88:0d:d0:b6:
0e:fa:cc:47:87:d4:ad:73:a0:1b:61:38:db:9f:d6:
c3:66:08:80:1a:b8:79:86:d7:3b:06:81:13:09:b9:
58:59:f7:ac:9e:69:10:75:74:79:d8:8e:cd:35:cd:
f6:12:66:db:0d:79:76:27:91:d4:7d:80:65:f0:5a:
81:95:4d:30:ee:6d:ef:ae:58:a5:af:33:d7:21:1d:
27:68:63:0f:07:fa:2b:9d:a8:20:43:5f:89:ea:d1:
d2:25:b5:e0:66:33:47:81:eb:27:cb:eb:d3:2c:9e:
f2:c2:ad:57:40:14:1d:59:1e:8a:ad:5f:4d:eb:e6:
ab:0c:13:f9:e9:65:ae:88:c6:59:39:2d:7d:e3:91:
9a:e5:d1:ed:e0:eb:5a:fb:25:c8:95:e0:b8:22:8b:
21:7e:3a:5b:b2:2e:00:4b:45:d7:9b:03:c2:df:65:
ca:7a:6f:58:54:7d:4b:0a:09:17:5d:3f:66:11:1b:
f5:53:f9:f5:a6:d5:64:83:39:c8:7f:7f:78:2a:bd:
00:2f:37:ea:1b:3c:81:7e:3f:1e:76:04:64:53:d5:
65:e9:14:69:ae:97:54:a2:e8:d0:d2:a6:8e:b2:7a:
6b:cc:89:65:9e:76:82:fc:a6:2d:42:d3:b2:55:d7:
46:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BF:38:62:3B:93:80:BB:4A:04:52:C2:CE:92:6B:A8:88:3F:4F:F2
X509v3 Authority Key Identifier:
keyid:7F:A0:07:25:B8:65:65:7C:C2:4A:17:AD:7A:99:94:79:06:B5:12:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/7FA00725B865657CC24A17AD7A99947906B51243.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA00725B865657CC24A17AD7A99947906B51243.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/323830343a356136343a3a2f33362d3336203d3e20323638373730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5a64::/36
Signature Algorithm: sha256WithRSAEncryption
ab:48:2f:6e:ae:7e:64:c1:34:b2:cc:da:24:b7:f4:ef:ff:78:
cb:13:77:98:15:72:9c:b8:a2:be:b2:4d:2a:23:d2:7b:a0:ed:
39:0d:64:7d:b3:a6:71:07:30:b3:fb:df:97:0e:2d:02:a7:a1:
a0:70:0f:01:a2:10:f5:b3:d8:3e:8b:17:ec:49:a9:35:4e:c0:
0e:95:9e:fb:a1:83:85:90:a1:0d:19:6a:cf:e7:1b:7c:d1:84:
c3:32:70:04:31:34:80:0b:36:91:dd:03:72:0b:da:b2:bb:a4:
39:8c:ca:11:39:6b:cd:91:f9:cb:66:e6:55:bb:78:bb:09:94:
58:49:76:02:77:21:48:3f:6b:a9:f6:d5:b8:c5:58:8d:fb:1f:
61:8f:b9:ee:59:bb:45:1c:1c:fe:b9:13:91:bc:8f:18:e1:99:
4b:14:fe:0a:c4:29:44:89:40:cd:ed:15:c0:f9:ac:95:f0:79:
83:c3:85:6d:73:4a:d7:e8:89:2a:19:97:78:01:3b:5f:9e:3f:
39:40:c4:ee:95:a9:ce:17:9c:96:bf:9a:2f:34:f7:aa:2b:79:
2a:95:9e:43:54:8b:11:36:a1:7b:02:d2:a2:3e:92:76:3c:18:
61:7f:84:49:47:ce:e8:b2:2a:c0:68:1c:9b:a6:8a:be:77:3c:
e8:f6:1a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:50:48 2025 by rpki-client