Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3jywLoMEKaHRibXvWvEMXk95bn3GMkFG78D48Qx8UoBG/0/323830343a3733303a3a2f33322d3332203d3e20323632363232.roa
File: 323830343a3733303a3a2f33322d3332203d3e20323632363232.roa (raw, json)
Hash identifier: XENJEeuT8ZmdXwsCH6cQnmmHTVTT8Ft2+Q+L4em7FYw=
Subject key identifier: 1B:AF:2C:DB:10:B1:16:37:C6:AC:BA:EF:65:F4:E5:CA:44:29:93:CA
Certificate issuer: /CN=2EF0CF727D2573B3CCB71103C2E44D1F67817E6D
Certificate serial: 5EF7DDEC2FCA234064AFA6C9A1FC334BCF402CB1
Authority key identifier: 2E:F0:CF:72:7D:25:73:B3:CC:B7:11:03:C2:E4:4D:1F:67:81:7E:6D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF0CF727D2573B3CCB71103C2E44D1F67817E6D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3jywLoMEKaHRibXvWvEMXk95bn3GMkFG78D48Qx8UoBG/0/323830343a3733303a3a2f33322d3332203d3e20323632363232.roa
Signing time: Mon 28 Apr 2025 17:25:54 +0000
ROA not before: Mon 28 Apr 2025 17:20:54 +0000
ROA not after: Mon 27 Apr 2026 17:25:54 +0000
asID: 262622
IP address blocks: 2804:730::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:f7:dd:ec:2f:ca:23:40:64:af:a6:c9:a1:fc:33:4b:cf:40:2c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2EF0CF727D2573B3CCB71103C2E44D1F67817E6D
Validity
Not Before: Apr 28 17:20:54 2025 GMT
Not After : Apr 27 17:25:54 2026 GMT
Subject: CN=1BAF2CDB10B11637C6ACBAEF65F4E5CA442993CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fb:b3:35:13:c0:5f:a6:b0:f7:ea:72:66:e0:
fd:c7:67:64:fb:0b:9a:c5:28:c9:10:47:e4:4b:25:
29:01:9d:bd:e4:3c:7e:7f:51:46:5c:4d:9c:63:88:
1f:04:e1:4b:d0:bb:f8:06:c9:e6:b3:1a:58:2b:9f:
0e:f4:3b:59:6f:3a:c3:1c:c5:6a:3e:01:a4:e6:a8:
d1:bd:fe:ad:79:da:77:0a:e2:43:9b:27:e3:bb:51:
e0:b4:69:b9:d1:1e:41:f3:58:14:a8:83:d9:15:5c:
69:3a:ce:b4:4c:bd:cc:13:ce:4d:16:ba:88:c1:bc:
04:33:a1:6d:75:db:62:03:37:ac:f5:ab:8f:09:9f:
ca:bd:4c:3a:74:c1:cd:a3:f2:c7:81:82:35:f4:7a:
a7:be:a5:6a:0d:f3:bc:83:32:1d:60:18:ea:11:8c:
0b:a9:d5:f4:7d:27:8f:2b:42:99:34:83:9d:ad:d2:
fa:bd:e9:61:bc:7b:9d:32:19:c4:17:6c:c7:63:77:
87:fb:75:a4:98:cf:55:ce:f7:1b:29:e0:e5:93:7e:
84:b9:dc:f6:f8:2d:3f:7c:24:d5:98:6e:63:a3:a7:
3d:fe:50:17:2d:61:cd:2b:d3:c3:88:b2:34:0e:cc:
5e:e3:e8:cb:19:9c:13:0b:64:ab:9f:20:fe:9d:86:
37:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AF:2C:DB:10:B1:16:37:C6:AC:BA:EF:65:F4:E5:CA:44:29:93:CA
X509v3 Authority Key Identifier:
keyid:2E:F0:CF:72:7D:25:73:B3:CC:B7:11:03:C2:E4:4D:1F:67:81:7E:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3jywLoMEKaHRibXvWvEMXk95bn3GMkFG78D48Qx8UoBG/0/2EF0CF727D2573B3CCB71103C2E44D1F67817E6D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF0CF727D2573B3CCB71103C2E44D1F67817E6D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3jywLoMEKaHRibXvWvEMXk95bn3GMkFG78D48Qx8UoBG/0/323830343a3733303a3a2f33322d3332203d3e20323632363232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:730::/32
Signature Algorithm: sha256WithRSAEncryption
11:23:9b:f1:15:45:5d:cb:c8:52:c6:18:a2:4c:d3:97:81:17:
20:43:a3:07:6f:60:98:47:9b:c1:f4:bd:6b:25:d5:34:8f:23:
97:1a:28:f7:b2:9f:52:c0:18:51:75:c5:e6:1c:30:88:7b:b5:
fe:a6:92:3a:aa:86:e5:ed:ff:76:94:94:8e:33:56:bb:8d:b3:
55:82:d5:bd:1d:ab:8a:02:fa:c0:d5:ee:33:d7:cf:ec:45:16:
34:c8:ea:32:e8:d3:66:05:f7:ef:76:8a:30:97:00:97:37:95:
63:34:ab:4e:d4:09:96:77:50:09:81:99:2e:61:e7:54:5e:ac:
54:7d:1a:db:e3:d9:c9:b8:f2:83:6d:79:67:d7:b4:63:86:ed:
d0:2c:60:ce:02:10:a3:fc:86:0f:30:51:20:75:f7:3e:cd:44:
70:b3:7e:cb:93:65:08:51:b5:8d:0a:54:69:10:27:47:a7:44:
69:1e:25:83:d8:03:fe:72:e7:3d:88:57:de:0f:90:b5:33:60:
62:af:f9:06:b3:7f:5e:83:4f:d3:b5:5c:39:c9:12:f2:d4:c0:
c1:cc:2a:b4:1f:97:b2:1c:10:55:c3:dc:c7:ac:91:25:bb:34:
ab:24:b8:ca:d8:37:fe:89:d2:64:ad:51:f3:84:55:dc:4f:52:
f1:0a:a8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 12:06:56 2025 by rpki-client