Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/323830343a356164633a3a2f33322d3332203d3e20323638383031.roa
File: 323830343a356164633a3a2f33322d3332203d3e20323638383031.roa (raw, json)
Hash identifier: QKAZwZQYoiu3sGggm74efmmbtCFTazDYgbOgZ4E+qXg=
Subject key identifier: 38:38:84:8F:F9:3E:C8:02:A5:FF:B9:D9:C9:98:E3:FE:1A:AC:E4:C4
Certificate issuer: /CN=314CC58029D80C55F7FCC7D6D34604096BE000E9
Certificate serial: 2EF960957CB41D116DD90C3AEB4BDF9D046CE014
Authority key identifier: 31:4C:C5:80:29:D8:0C:55:F7:FC:C7:D6:D3:46:04:09:6B:E0:00:E9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/314CC58029D80C55F7FCC7D6D34604096BE000E9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/323830343a356164633a3a2f33322d3332203d3e20323638383031.roa
Signing time: Fri 27 Oct 2023 13:08:47 +0000
ROA not before: Fri 27 Oct 2023 13:03:47 +0000
ROA not after: Fri 25 Oct 2024 13:08:47 +0000
asID: 268801
IP address blocks: 2804:5adc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:f9:60:95:7c:b4:1d:11:6d:d9:0c:3a:eb:4b:df:9d:04:6c:e0:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=314CC58029D80C55F7FCC7D6D34604096BE000E9
Validity
Not Before: Oct 27 13:03:47 2023 GMT
Not After : Oct 25 13:08:47 2024 GMT
Subject: CN=3838848FF93EC802A5FFB9D9C998E3FE1AACE4C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6c:ff:ce:2b:06:c4:7e:50:52:dd:f1:f1:0d:
34:b8:fc:81:e3:b8:b3:b1:ea:1a:b2:81:e6:e6:3a:
5d:31:f8:72:7f:15:ec:2f:ad:b6:f9:b3:b2:7b:bc:
52:f6:a9:ea:a8:c0:e1:18:c4:2d:22:60:67:7b:5b:
9e:21:23:12:d5:95:2e:93:9b:2a:02:61:20:c5:71:
09:d9:5e:20:9b:f8:88:db:ba:13:3f:b5:83:ea:5f:
e2:86:23:13:0e:79:eb:aa:14:4e:35:53:b3:97:d1:
11:40:d5:60:87:a7:c9:a9:3d:f9:da:2d:25:3d:31:
31:86:10:a3:50:ec:c9:c9:f2:eb:40:37:30:1f:fe:
dc:81:76:30:25:76:8c:54:39:75:f3:9c:57:c2:76:
4e:00:e9:2d:98:71:c9:a1:81:72:e1:f4:c2:83:81:
1d:f5:7c:2b:ac:2a:39:79:58:5a:a6:20:fb:eb:dd:
ff:df:bc:4f:b5:15:21:6c:29:5e:1b:f5:f7:57:0c:
89:e3:38:eb:ad:60:15:2c:b7:39:d0:ca:60:4a:98:
72:8e:05:67:2b:58:15:87:cc:21:77:cf:b3:42:ff:
86:88:19:bf:e2:3d:f0:7b:36:ea:1f:73:c3:9d:fa:
b7:bd:57:1c:de:cf:33:dc:ad:8c:55:99:e9:c4:a8:
56:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:38:84:8F:F9:3E:C8:02:A5:FF:B9:D9:C9:98:E3:FE:1A:AC:E4:C4
X509v3 Authority Key Identifier:
keyid:31:4C:C5:80:29:D8:0C:55:F7:FC:C7:D6:D3:46:04:09:6B:E0:00:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/314CC58029D80C55F7FCC7D6D34604096BE000E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/314CC58029D80C55F7FCC7D6D34604096BE000E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/323830343a356164633a3a2f33322d3332203d3e20323638383031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5adc::/32
Signature Algorithm: sha256WithRSAEncryption
61:71:ef:91:36:af:9f:f2:af:c4:85:bb:44:bf:68:de:52:1f:
5f:da:31:2e:d9:2b:87:ca:77:e0:36:22:9e:4b:d1:15:e0:17:
9a:77:06:ba:5f:db:58:c8:55:1c:f1:39:86:f9:9b:f7:9d:ff:
ca:f9:72:59:18:75:69:76:29:cc:ee:e7:de:6f:41:da:04:53:
c5:a2:75:75:3b:32:19:dc:4f:e5:b6:0f:69:83:e2:11:ce:08:
bb:89:78:d6:7a:60:57:b5:5b:13:d4:a1:2e:f0:ab:3c:70:fc:
d5:f4:b2:15:42:3e:f4:1a:5b:fb:87:67:1f:85:95:2c:dd:1f:
4a:a2:92:b4:a2:46:3e:8a:61:76:bd:18:29:f8:1a:c5:ad:32:
0d:ae:4e:58:18:34:1c:40:ec:8b:f6:1a:cf:fe:47:3f:d2:df:
c1:e0:47:5f:17:5d:f4:34:1c:c8:51:fe:0a:0e:ef:48:da:6a:
74:f7:39:fc:72:02:4f:07:02:d0:64:85:42:5d:b5:ab:46:37:
f7:73:ed:1f:4b:5c:80:50:db:f7:f1:f0:29:56:bb:fa:9c:08:
5d:e5:7c:49:cb:5b:be:7c:97:50:b8:4f:4f:69:56:0e:d9:cd:
39:c5:96:fd:a2:b8:34:09:91:0b:e5:d2:94:b2:65:44:7c:4c:
56:d6:58:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:41:56 2025 by rpki-client