Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a383030303a3a2f33332d3333203d3e20323633323536.roa
File: 323830343a313765303a383030303a3a2f33332d3333203d3e20323633323536.roa (raw, json)
Hash identifier: AB1sKxkW7n9sWukNz2LNwxIkedVdU+XeF2CAkzZaMPk=
Subject key identifier: 2C:B3:47:18:EB:93:7C:E3:E7:66:1D:B2:EF:3B:3F:3C:4F:23:24:0F
Certificate issuer: /CN=0156B956215AE4C7F951D9FABA7689B0C1830680
Certificate serial: 64B54DCD26DEB5D9FC757BDBE371EEDBDE5FF655
Authority key identifier: 01:56:B9:56:21:5A:E4:C7:F9:51:D9:FA:BA:76:89:B0:C1:83:06:80
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0156B956215AE4C7F951D9FABA7689B0C1830680.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a383030303a3a2f33332d3333203d3e20323633323536.roa
Signing time: Fri 23 May 2025 16:53:05 +0000
ROA not before: Fri 23 May 2025 16:48:05 +0000
ROA not after: Fri 22 May 2026 16:53:05 +0000
asID: 263256
IP address blocks: 2804:17e0:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:b5:4d:cd:26:de:b5:d9:fc:75:7b:db:e3:71:ee:db:de:5f:f6:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0156B956215AE4C7F951D9FABA7689B0C1830680
Validity
Not Before: May 23 16:48:05 2025 GMT
Not After : May 22 16:53:05 2026 GMT
Subject: CN=2CB34718EB937CE3E7661DB2EF3B3F3C4F23240F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:da:4a:36:3c:ed:f9:23:d1:ba:ca:42:74:1f:
18:97:17:38:84:d6:ba:80:79:51:d6:5b:38:b8:7d:
c2:ec:4e:39:3e:ab:87:dd:a7:98:e5:10:b1:a6:c7:
73:df:d0:79:2d:29:dc:72:46:57:06:d9:94:61:59:
00:0f:93:00:e2:8b:a7:03:92:43:46:b4:85:ff:99:
65:d2:16:a0:5c:e6:99:61:27:bf:54:ce:f6:5a:2c:
03:29:21:b1:d1:c6:1c:eb:99:8a:d1:2c:35:a1:38:
ce:66:e6:53:4d:88:0a:3f:bb:e1:ca:e6:8f:76:bc:
40:f2:25:ff:7d:47:2f:5c:b4:a5:92:a8:60:63:bf:
2a:f1:96:e2:bb:e9:0d:d3:0c:7c:2d:2d:8b:7c:a2:
e8:0b:d8:c8:2a:55:95:0f:31:af:51:88:eb:01:70:
d5:09:19:e2:7a:c9:3a:6b:46:bc:d3:2f:20:f7:1c:
1d:40:ed:ee:4f:14:33:39:0a:5d:a2:93:94:66:47:
1e:8b:ce:17:44:4c:a5:d1:15:4e:a4:ae:1b:f1:ae:
b9:c3:8d:32:2f:b9:80:28:b2:48:a9:03:75:52:71:
49:67:3f:18:c5:7d:9f:dd:39:87:9b:a8:8e:fb:bf:
cd:55:47:41:84:78:dd:46:ed:e7:fd:cb:77:de:95:
bd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B3:47:18:EB:93:7C:E3:E7:66:1D:B2:EF:3B:3F:3C:4F:23:24:0F
X509v3 Authority Key Identifier:
keyid:01:56:B9:56:21:5A:E4:C7:F9:51:D9:FA:BA:76:89:B0:C1:83:06:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/0156B956215AE4C7F951D9FABA7689B0C1830680.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0156B956215AE4C7F951D9FABA7689B0C1830680.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a383030303a3a2f33332d3333203d3e20323633323536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:17e0:8000::/33
Signature Algorithm: sha256WithRSAEncryption
4e:98:75:67:10:9d:f1:de:fd:74:92:d4:98:25:59:94:77:2c:
c5:08:97:6f:81:7a:75:66:4e:ae:8a:e5:9c:5e:c2:8f:c6:d0:
f4:00:7a:21:2c:9b:34:40:1f:a2:1a:64:c1:4d:d1:9d:b6:a7:
b8:9c:a4:76:c9:3d:f2:66:ac:80:cb:2a:1e:af:7c:87:7a:f1:
d9:6e:c1:a7:88:aa:02:37:df:e5:f1:1f:7d:b5:ae:2a:7b:ce:
73:73:dd:06:d0:12:de:65:38:a0:ac:aa:45:15:d3:17:72:97:
b0:0f:3b:c5:a5:e3:68:37:1e:57:19:d1:02:e1:93:ec:6c:82:
88:a3:2a:55:91:c8:64:92:55:fe:b0:76:81:60:26:19:af:70:
3c:c3:bf:2a:a5:7f:00:46:1c:25:9b:2d:6d:9d:48:e9:65:d4:
4a:b6:01:06:b8:06:e2:85:52:b1:85:38:5e:64:41:44:b5:42:
5b:1d:9f:a1:8f:11:82:eb:fe:17:f2:f6:0a:a6:74:3c:c0:ec:
5c:d4:fd:93:00:51:cc:7f:69:83:ec:15:92:56:d8:33:8c:b7:
23:09:8b:c5:3c:63:99:41:7c:91:29:02:8d:6b:8e:07:72:07:
ce:43:89:8f:4a:11:20:8e:d3:f8:6b:af:49:d6:5d:5f:1f:9f:
bf:9e:44:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:56:07 2025 by rpki-client