Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/323830343a333564633a3a2f33322d3334203d3e20323636333131.roa
File: 323830343a333564633a3a2f33322d3334203d3e20323636333131.roa (raw, json)
Hash identifier: wcI0ieNyQdQrVcqiR6SjIzVgQugca+WqF9vNkOhZw68=
Subject key identifier: 27:C0:6B:89:D7:C4:43:07:21:22:B4:A5:A7:1F:E0:23:AD:57:4F:A1
Certificate issuer: /CN=37E90523C827A57C11E0B97A03E6AD0AF350D7BB
Certificate serial: 6202F5B3FC20746A2373A20A13A717E3BC7508AC
Authority key identifier: 37:E9:05:23:C8:27:A5:7C:11:E0:B9:7A:03:E6:AD:0A:F3:50:D7:BB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/323830343a333564633a3a2f33322d3334203d3e20323636333131.roa
Signing time: Thu 06 Mar 2025 22:26:25 +0000
ROA not before: Thu 06 Mar 2025 22:21:25 +0000
ROA not after: Thu 05 Mar 2026 22:26:25 +0000
asID: 266311
IP address blocks: 2804:35dc::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:02:f5:b3:fc:20:74:6a:23:73:a2:0a:13:a7:17:e3:bc:75:08:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37E90523C827A57C11E0B97A03E6AD0AF350D7BB
Validity
Not Before: Mar 6 22:21:25 2025 GMT
Not After : Mar 5 22:26:25 2026 GMT
Subject: CN=27C06B89D7C443072122B4A5A71FE023AD574FA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fd:4b:db:2b:0d:0e:e2:45:17:8d:0e:36:3b:
12:c4:b9:13:ab:0b:16:c9:e9:7b:bd:17:57:3d:5d:
59:94:10:33:e2:1b:e8:27:0c:a6:4d:11:c8:ec:a6:
c1:49:59:93:ff:f2:dd:9b:e8:89:46:ed:96:b0:25:
aa:97:ae:9c:e4:86:d6:4f:cf:81:99:9c:bf:c6:29:
3f:9c:01:4e:36:cd:75:0e:28:45:93:e5:92:31:f3:
09:f0:1c:8f:13:1b:64:3b:fb:5d:2c:dd:52:37:e8:
ec:bb:ab:05:82:36:e7:dd:e9:29:a5:fd:0f:39:e7:
ec:2a:a9:96:25:f0:1b:49:ac:11:db:f0:83:fd:ce:
c9:c8:59:3d:d1:a9:d2:98:24:4b:c3:07:81:8d:dd:
1c:f5:c3:dd:67:73:ef:3e:ce:61:5e:b5:ac:ce:ff:
1a:00:0b:45:d0:6c:a2:68:20:ba:57:43:12:d1:df:
c7:5c:d0:aa:c9:55:4f:7c:83:84:ae:cc:44:e6:28:
6e:a7:ff:f4:32:5d:9f:d2:eb:9c:91:79:6c:fc:8c:
89:68:47:ba:9f:80:f7:32:39:44:63:9a:48:d5:3a:
50:a8:4e:54:f5:a8:df:0e:e7:04:53:cd:29:99:bd:
65:a9:2b:e6:a1:15:cc:1f:04:31:f6:40:ab:59:3c:
d8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C0:6B:89:D7:C4:43:07:21:22:B4:A5:A7:1F:E0:23:AD:57:4F:A1
X509v3 Authority Key Identifier:
keyid:37:E9:05:23:C8:27:A5:7C:11:E0:B9:7A:03:E6:AD:0A:F3:50:D7:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/323830343a333564633a3a2f33322d3334203d3e20323636333131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:35dc::/32
Signature Algorithm: sha256WithRSAEncryption
5b:c3:69:e8:a4:cb:67:9a:e9:4a:2d:00:2e:e4:b4:19:77:ee:
6e:06:4f:9f:cd:ea:6e:81:f5:c6:98:1a:c6:97:a3:04:12:f3:
a9:e4:db:66:a6:95:df:94:6b:7f:5d:80:70:19:94:d9:da:55:
32:4d:7b:ea:79:2c:86:de:4b:12:56:0b:70:f3:92:00:7a:de:
81:5e:27:2d:db:59:5e:9e:b1:ee:6c:bb:eb:52:54:61:6c:97:
8e:6c:cb:41:e2:4f:31:0d:67:90:5b:f3:f5:22:1f:0d:fe:18:
c3:1f:ea:c0:2b:7f:c4:a4:70:04:16:2e:ae:9c:57:d6:81:42:
23:37:4f:13:ae:2d:e3:10:75:15:99:24:f6:7f:98:dd:5f:1b:
6d:94:c6:92:bc:d6:12:46:1b:33:4f:93:34:97:57:6b:ea:0f:
e3:f4:c4:8f:b9:3a:1f:23:14:f3:c5:e8:8b:c2:2a:26:8a:f1:
e5:38:79:55:64:d3:a2:8c:e9:28:19:9d:26:88:99:46:9c:ab:
24:00:ba:7e:0c:93:54:05:8b:76:68:44:cb:8e:26:7d:46:ac:
14:8d:23:7f:5b:dc:8e:3e:d9:4d:e0:e4:11:e5:75:43:1a:d4:
a8:23:f9:69:d3:91:e6:68:87:ac:44:b1:43:c3:79:97:a5:6b:
c9:fd:55:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:40:43 2025 by rpki-client