Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CDEmGUydzttovZj1sWpowz92stkCY5HcQxu2DGnZr2rx/0/323830343a376538383a3a2f33322d3338203d3e20323731363330.roa
File: 323830343a376538383a3a2f33322d3338203d3e20323731363330.roa (raw, json)
Hash identifier: srAtt6Ay8/PJVhfDTkkEmSnayJnrokjICgT1X0C1Tw4=
Subject key identifier: A5:B6:58:84:F7:2C:C2:14:A8:48:E4:01:C7:56:91:FB:66:E0:22:CA
Certificate issuer: /CN=3BB50D05BD75C9460B4134F1F7C08D374D2FA08B
Certificate serial: 5EF9A27C081ED4F6D4C9D19B941F1F80797B9196
Authority key identifier: 3B:B5:0D:05:BD:75:C9:46:0B:41:34:F1:F7:C0:8D:37:4D:2F:A0:8B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BB50D05BD75C9460B4134F1F7C08D374D2FA08B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CDEmGUydzttovZj1sWpowz92stkCY5HcQxu2DGnZr2rx/0/323830343a376538383a3a2f33322d3338203d3e20323731363330.roa
Signing time: Mon 27 Oct 2025 19:02:13 +0000
ROA not before: Mon 27 Oct 2025 18:57:13 +0000
ROA not after: Mon 26 Oct 2026 19:02:13 +0000
asID: 271630
IP address blocks: 2804:7e88::/32 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:f9:a2:7c:08:1e:d4:f6:d4:c9:d1:9b:94:1f:1f:80:79:7b:91:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BB50D05BD75C9460B4134F1F7C08D374D2FA08B
Validity
Not Before: Oct 27 18:57:13 2025 GMT
Not After : Oct 26 19:02:13 2026 GMT
Subject: CN=A5B65884F72CC214A848E401C75691FB66E022CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:03:31:59:2c:89:b7:26:f5:f4:86:d7:e9:db:
a2:31:1e:0f:74:db:7e:7b:bc:19:29:33:9b:f5:2b:
8b:2c:47:a3:c8:ca:dd:e3:ac:18:77:03:01:a6:0d:
ed:f4:52:d5:92:ea:08:09:1f:c5:97:57:42:a4:63:
97:67:95:d2:05:2e:70:14:08:64:ba:f9:ec:b2:a9:
7a:77:cb:49:43:cf:45:c9:3b:5e:f9:cf:31:34:75:
c3:32:98:e4:70:1d:bb:33:ea:00:f5:ad:ae:f1:f7:
94:f4:0f:6c:cb:52:84:c9:5f:99:6b:d7:de:d7:81:
10:98:6d:2b:65:2f:5e:ec:ab:2b:4e:03:e5:8f:94:
38:77:55:f2:57:d7:b1:fa:da:84:79:5f:fa:4c:0c:
9f:c3:62:2d:ec:e3:28:b0:e8:d5:c7:04:c6:74:1d:
0e:52:46:93:0f:74:93:58:b0:b0:e1:1b:f7:30:65:
91:80:a5:45:67:5a:c0:fd:bb:ac:f3:0e:b2:e7:e1:
84:c1:ba:3b:d7:2d:99:0a:d0:99:dd:3b:4a:0d:41:
5f:ca:23:ea:f1:3d:08:30:cf:b4:0b:a7:21:7a:f4:
be:99:57:8b:d2:9d:70:59:5b:e1:7b:5c:b0:6a:a0:
61:bf:e5:12:ea:4c:f9:89:bb:d3:fe:1f:7b:1a:df:
9a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B6:58:84:F7:2C:C2:14:A8:48:E4:01:C7:56:91:FB:66:E0:22:CA
X509v3 Authority Key Identifier:
keyid:3B:B5:0D:05:BD:75:C9:46:0B:41:34:F1:F7:C0:8D:37:4D:2F:A0:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CDEmGUydzttovZj1sWpowz92stkCY5HcQxu2DGnZr2rx/0/3BB50D05BD75C9460B4134F1F7C08D374D2FA08B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BB50D05BD75C9460B4134F1F7C08D374D2FA08B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CDEmGUydzttovZj1sWpowz92stkCY5HcQxu2DGnZr2rx/0/323830343a376538383a3a2f33322d3338203d3e20323731363330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7e88::/32
Signature Algorithm: sha256WithRSAEncryption
53:ca:ad:1f:46:59:a0:05:d1:13:63:b3:e2:51:59:5b:94:14:
97:c9:8a:3b:56:ea:f1:4a:e2:6d:92:95:e1:2b:a5:70:3a:94:
6a:b9:b0:3d:93:a4:d1:f9:a6:45:0c:f9:dc:7f:8c:42:b4:b2:
40:9a:55:11:2a:bc:44:a3:f8:08:7f:7d:71:ed:92:c0:94:18:
ca:cd:55:a3:3c:17:a1:a5:30:30:4b:82:02:b8:7d:c8:7d:cc:
f0:ec:3d:b6:a2:ca:d5:8c:84:a7:45:4b:67:c3:e2:fa:9d:27:
23:12:a0:75:d9:a3:14:36:17:5c:50:b6:71:ef:a0:9e:c8:e5:
95:7d:db:e3:f7:35:40:6d:5a:e6:7d:55:a6:6f:8c:63:6f:e8:
40:25:eb:b4:0c:68:70:11:4f:5f:d1:f5:5d:f4:50:6c:16:0f:
3a:d5:c6:4f:c2:bf:22:fc:35:96:fc:b7:ed:3a:55:2f:21:57:
cb:00:f3:c5:27:9d:4c:81:e1:f2:eb:58:d2:9a:c1:71:71:69:
9c:0d:e3:ad:d3:c8:d3:ad:a2:eb:10:bf:04:c6:70:0d:55:30:
f3:3b:e5:76:13:d9:2c:a9:36:51:8c:65:f7:ad:b7:eb:e6:1a:
b7:d3:d9:5f:4b:a0:0d:1f:7a:3f:bc:f8:14:e2:22:08:a0:b6:
df:13:6d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 06:25:20 2025 by rpki-client