Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/323830343a366532383a3a2f33322d3332203d3e20323730353739.roa
File: 323830343a366532383a3a2f33322d3332203d3e20323730353739.roa (raw, json)
Hash identifier: vovJpAV8//VlmFLbN0olli8wpcncCpWYx8oiP3DpzwQ=
Subject key identifier: C0:2C:6C:B1:3A:DE:B0:F9:9E:B8:3E:6C:F5:BC:E1:59:FD:5E:DF:07
Certificate issuer: /CN=BF3B3B3C1A369FD0DDF2CE2059CBE4C98CB46092
Certificate serial: 774C89AC065A7D086B7CD8C5DCFC3A62C6D83213
Authority key identifier: BF:3B:3B:3C:1A:36:9F:D0:DD:F2:CE:20:59:CB:E4:C9:8C:B4:60:92
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF3B3B3C1A369FD0DDF2CE2059CBE4C98CB46092.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/323830343a366532383a3a2f33322d3332203d3e20323730353739.roa
Signing time: Wed 01 Oct 2025 22:53:53 +0000
ROA not before: Wed 01 Oct 2025 22:48:53 +0000
ROA not after: Wed 30 Sep 2026 22:53:53 +0000
asID: 270579
IP address blocks: 2804:6e28::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:4c:89:ac:06:5a:7d:08:6b:7c:d8:c5:dc:fc:3a:62:c6:d8:32:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF3B3B3C1A369FD0DDF2CE2059CBE4C98CB46092
Validity
Not Before: Oct 1 22:48:53 2025 GMT
Not After : Sep 30 22:53:53 2026 GMT
Subject: CN=C02C6CB13ADEB0F99EB83E6CF5BCE159FD5EDF07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0a:8f:d6:c5:0a:92:62:21:a5:df:14:80:9e:
b3:58:02:6f:74:d3:59:e1:0d:25:c9:31:62:96:b2:
dc:f8:05:51:4d:11:38:af:87:df:21:3a:9c:d3:ba:
7d:81:56:24:cc:47:05:fe:90:d0:c1:33:90:c8:a0:
89:10:85:30:52:56:a9:0d:24:d8:d5:73:60:7f:25:
1f:01:5b:dc:9c:4c:3d:79:0c:8e:3a:60:67:ae:eb:
68:34:3d:36:ed:95:f0:68:94:07:cf:da:46:7e:12:
54:2f:d1:ed:b4:00:0a:0b:23:eb:14:64:83:f3:69:
a3:e2:54:86:e8:84:6d:27:f7:54:3d:28:8a:0c:cc:
fc:ad:d4:ef:7d:e4:15:66:11:3b:48:88:fe:27:4c:
77:d6:9c:e7:eb:81:b2:e2:da:95:7b:78:1a:59:30:
56:59:6f:01:5a:66:7d:4c:55:02:f5:6b:08:d3:d6:
1e:70:ca:4e:08:44:55:2c:bd:10:98:33:59:db:c7:
a4:c5:4d:be:41:39:2f:ee:86:99:eb:dd:df:11:23:
80:a0:af:81:fa:53:18:c1:8b:ea:81:9b:5f:c6:45:
cf:20:26:10:fb:14:c4:8f:0f:3d:4d:d8:c3:ec:a9:
94:8b:e7:25:7c:b4:31:e8:88:31:cd:24:f6:ee:71:
8c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:2C:6C:B1:3A:DE:B0:F9:9E:B8:3E:6C:F5:BC:E1:59:FD:5E:DF:07
X509v3 Authority Key Identifier:
keyid:BF:3B:3B:3C:1A:36:9F:D0:DD:F2:CE:20:59:CB:E4:C9:8C:B4:60:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/BF3B3B3C1A369FD0DDF2CE2059CBE4C98CB46092.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF3B3B3C1A369FD0DDF2CE2059CBE4C98CB46092.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/323830343a366532383a3a2f33322d3332203d3e20323730353739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6e28::/32
Signature Algorithm: sha256WithRSAEncryption
48:76:a8:25:d6:2f:45:25:14:cc:03:21:0e:f7:4d:a9:e8:24:
97:94:1b:65:36:6c:fc:95:84:07:e7:91:18:d4:50:4a:6f:c2:
bf:39:5c:f8:7a:63:fb:27:29:d2:0b:62:26:f3:27:10:ec:29:
a2:d2:23:74:20:94:73:68:92:4c:c1:1f:7a:5b:24:b9:71:ae:
5f:05:29:a0:30:79:1b:69:9b:b6:9a:7a:22:7f:c5:95:67:25:
3b:7b:2e:0c:d3:dc:89:44:b1:37:c5:fd:d7:55:90:93:f3:75:
a3:15:07:a5:17:37:46:13:9e:29:b6:64:35:2a:31:ad:15:1e:
65:a4:c2:22:7d:b0:e4:5b:a7:0c:bd:c3:ac:e5:80:f8:32:70:
4b:0c:1f:78:fe:33:fe:89:36:b9:b0:e5:c7:be:49:1b:15:45:
fd:24:ff:ed:bb:8b:a8:cd:6a:43:76:2b:93:41:cf:ca:28:31:
6c:52:4e:83:c0:73:fa:ed:9e:9a:e2:8e:fc:f8:52:f6:5d:0f:
20:ff:ae:f5:00:4a:df:37:e0:98:93:2b:94:2c:c1:d9:57:f7:
15:66:71:67:98:a8:1d:9b:f8:31:69:16:9c:b1:ab:0c:10:af:
48:97:6d:cb:e8:d3:16:8b:a9:e7:4f:16:4f:dd:41:6d:b1:71:
4b:b7:13:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:10:03 2025 by rpki-client