Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/323830343a64343a3a2f33322d313238203d3e203238313338.roa
File: 323830343a64343a3a2f33322d313238203d3e203238313338.roa (raw, json)
Hash identifier: A3rOFmxhrKtCeQx4F94/iPZNZebsfBO1JpyHySsjLDs=
Subject key identifier: 73:C5:70:84:5C:9A:D0:E9:2B:14:A4:50:69:8E:05:70:F1:AB:20:34
Certificate issuer: /CN=3B5FFE4EFF6120F9AF6411651E451BC850DA97E3
Certificate serial: 70EC601C21E623B878F6F4B1F9B143900CEDABB9
Authority key identifier: 3B:5F:FE:4E:FF:61:20:F9:AF:64:11:65:1E:45:1B:C8:50:DA:97:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/323830343a64343a3a2f33322d313238203d3e203238313338.roa
Signing time: Mon 17 Mar 2025 15:03:41 +0000
ROA not before: Mon 17 Mar 2025 14:58:41 +0000
ROA not after: Mon 16 Mar 2026 15:03:41 +0000
asID: 28138
IP address blocks: 2804:d4::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:ec:60:1c:21:e6:23:b8:78:f6:f4:b1:f9:b1:43:90:0c:ed:ab:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B5FFE4EFF6120F9AF6411651E451BC850DA97E3
Validity
Not Before: Mar 17 14:58:41 2025 GMT
Not After : Mar 16 15:03:41 2026 GMT
Subject: CN=73C570845C9AD0E92B14A450698E0570F1AB2034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3b:c4:60:37:71:a7:6e:a9:fe:12:9c:1c:93:
4f:f4:01:5a:02:42:1c:d9:85:66:c2:ed:a8:df:2d:
6d:92:43:4b:b9:76:b0:7e:a9:f8:f3:8a:db:bd:63:
96:c8:52:00:0b:5d:54:f4:f9:b2:84:a4:15:37:31:
c6:0f:be:01:63:8b:a0:42:7d:5f:2a:47:b2:05:51:
0f:88:60:66:b6:d6:bf:e4:87:77:44:25:de:ee:4f:
3b:11:a6:50:33:42:30:00:af:86:df:11:44:3a:f5:
9c:bf:68:bc:99:8c:37:ae:27:85:75:3a:a7:fb:16:
70:b7:9a:40:8c:27:5f:cb:a3:04:fa:28:b0:8a:0f:
a4:4e:d6:b5:e3:6a:6c:d6:a5:16:3f:55:8b:24:e4:
ab:6a:0e:86:b9:ab:d8:4b:19:30:dd:8c:0c:74:52:
09:9f:b3:eb:bc:76:16:38:0b:bf:58:29:5f:b4:1b:
51:d8:b8:b7:2d:49:d8:5e:e1:e4:50:89:bc:b0:02:
0f:04:11:bc:ce:d1:17:0c:b0:f2:7f:dd:cb:bc:1e:
3e:f2:11:1f:1e:d9:e1:91:06:bd:fc:e8:c4:18:b2:
ab:6f:e6:2a:1d:09:d0:ff:b4:aa:f0:de:e3:ba:6b:
38:ce:4c:5c:06:9a:b7:8a:4e:74:5b:f6:04:29:e6:
33:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C5:70:84:5C:9A:D0:E9:2B:14:A4:50:69:8E:05:70:F1:AB:20:34
X509v3 Authority Key Identifier:
keyid:3B:5F:FE:4E:FF:61:20:F9:AF:64:11:65:1E:45:1B:C8:50:DA:97:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/323830343a64343a3a2f33322d313238203d3e203238313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:d4::/32
Signature Algorithm: sha256WithRSAEncryption
51:52:1c:44:0c:dd:8c:8b:8d:cc:89:85:c6:7d:46:46:94:5c:
3b:95:d2:ad:e6:3c:30:a1:f2:e1:23:0d:4e:e7:70:30:12:a0:
29:d2:bf:51:c3:7e:f2:aa:1c:4a:9c:eb:78:00:fe:6d:45:d3:
dd:3e:c0:bb:80:5e:68:ff:3e:46:a1:8b:1b:c0:c5:33:1b:00:
c8:53:ab:0c:63:36:47:e8:b1:9e:13:ad:35:24:9e:e6:42:fd:
63:b8:93:66:d3:dd:1b:73:b5:d9:96:78:75:27:86:9e:4d:8f:
5c:c4:e9:ff:6e:76:f1:4a:a0:6b:e5:66:d7:b0:ad:4e:00:36:
8b:5a:01:c3:89:6d:18:d4:fb:ea:a6:51:1c:dd:ce:be:40:9c:
f7:f1:fe:50:d4:56:ae:43:14:84:cb:39:ab:6f:6c:09:a9:2f:
e8:b0:3f:8a:9b:77:bc:84:dc:7e:70:5f:71:3d:2f:b7:0b:69:
1a:de:bc:83:1a:a3:db:b6:33:c9:b2:41:4c:d6:97:0d:33:c0:
1d:12:6a:5b:b4:99:01:05:83:c8:5c:d6:c3:fb:78:7b:4f:8e:
dd:dd:4a:d5:3a:45:3a:1b:45:92:7e:ab:da:3a:ca:fd:0d:15:
60:21:cb:48:6c:87:b0:d3:72:af:9a:fe:c6:74:06:5b:46:f2:
d1:d5:06:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:40:13 2025 by rpki-client