Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/323830343a353134303a3a2f33332d3333203d3e20323638343430.roa
File: 323830343a353134303a3a2f33332d3333203d3e20323638343430.roa (raw, json)
Hash identifier: s/AntO+2c5k/zKdsjk3TasxRwWhdM2eh1y2TxYbanK8=
Subject key identifier: 20:0E:3C:0F:DD:0B:B9:63:6C:10:A4:18:8A:BA:B5:BF:72:4A:7E:47
Certificate issuer: /CN=3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA
Certificate serial: 55BDB2708A8EFC4F4C5938C0DF8BDCA01C6C47B6
Authority key identifier: 3E:C1:D6:02:0A:56:64:8E:4D:80:57:9E:DE:6A:9A:E6:4E:D1:AD:CA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/323830343a353134303a3a2f33332d3333203d3e20323638343430.roa
Signing time: Mon 05 May 2025 20:58:38 +0000
ROA not before: Mon 05 May 2025 20:53:38 +0000
ROA not after: Mon 04 May 2026 20:58:38 +0000
asID: 268440
IP address blocks: 2804:5140::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:bd:b2:70:8a:8e:fc:4f:4c:59:38:c0:df:8b:dc:a0:1c:6c:47:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA
Validity
Not Before: May 5 20:53:38 2025 GMT
Not After : May 4 20:58:38 2026 GMT
Subject: CN=200E3C0FDD0BB9636C10A4188ABAB5BF724A7E47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bb:6b:0c:36:c6:05:63:7f:28:a2:52:59:31:
79:aa:38:8b:2f:72:a7:e3:69:3f:42:5f:fc:21:4f:
69:87:14:06:3d:c7:e1:18:9e:fc:df:e7:09:a9:b1:
ed:d9:cd:c1:ea:7c:66:32:4b:12:24:67:0f:7a:18:
b5:a9:3d:72:ae:b2:77:9a:2c:3f:0a:91:07:9c:ed:
ee:5e:b4:10:83:37:27:c6:86:48:cf:68:c8:55:88:
a3:b4:55:f1:e7:60:f8:aa:8d:70:72:5c:e9:f0:86:
9c:d8:2a:a1:f3:41:4e:1c:4e:40:e4:56:dd:37:29:
4a:29:b8:fe:4a:aa:2f:fd:07:d7:7f:5b:19:d1:66:
7b:3a:fd:ae:01:e9:23:e9:09:98:8b:fc:47:cf:a6:
89:d4:0e:bc:73:64:a0:51:a6:3a:dc:58:aa:f7:a8:
3d:92:2b:bb:38:e9:b8:53:f9:8d:c3:12:b4:d0:00:
0b:0a:58:b5:a4:a7:8a:0f:29:7c:18:15:a2:8a:75:
04:ca:56:34:6d:27:9d:3a:67:3c:dc:9a:e8:33:a4:
49:60:0f:c5:6e:46:98:44:64:19:ae:6b:74:2a:98:
46:b8:19:c2:01:4f:fd:0d:53:47:7b:ac:54:82:ee:
97:8e:41:ef:ea:2d:ec:7b:7e:38:4d:89:83:81:fd:
af:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0E:3C:0F:DD:0B:B9:63:6C:10:A4:18:8A:BA:B5:BF:72:4A:7E:47
X509v3 Authority Key Identifier:
keyid:3E:C1:D6:02:0A:56:64:8E:4D:80:57:9E:DE:6A:9A:E6:4E:D1:AD:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/323830343a353134303a3a2f33332d3333203d3e20323638343430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5140::/33
Signature Algorithm: sha256WithRSAEncryption
25:d1:ba:2f:5e:97:54:44:aa:b4:3f:5c:58:9a:d9:05:b0:8c:
f5:ba:14:dc:d1:de:98:c1:4c:41:96:91:2c:35:ee:1b:72:45:
81:f3:e7:68:e8:9a:64:f5:43:e8:dd:7f:e9:b6:5d:e1:df:4c:
73:e5:d3:31:9d:3a:dc:66:4e:9a:45:35:a1:5a:57:d3:ac:f3:
3b:f5:22:ac:f9:26:72:2e:28:a7:8d:97:45:e6:11:65:7c:6e:
3d:47:2a:6d:f4:4a:f6:26:29:ee:be:64:20:c7:aa:fa:f7:7c:
a8:99:43:e2:6f:a0:f7:53:86:6f:c5:d0:35:76:15:05:ea:c5:
96:8e:33:20:f1:92:63:c9:ce:1b:70:61:b4:24:29:fc:df:e6:
7e:74:cf:09:85:38:8c:8c:49:ce:04:90:99:35:58:e0:3a:8f:
66:63:26:6f:6b:fa:b3:54:9a:2c:5c:6f:03:78:a3:fc:ef:36:
c6:e3:a6:a7:b5:33:bf:ab:37:4c:94:0c:c0:47:08:0b:4f:78:
4b:6e:30:fc:0f:6d:a8:fe:98:47:a1:0c:be:10:8c:8e:27:43:
50:2d:2f:23:c1:e1:e0:10:a8:d3:9a:0e:75:a9:6f:ef:63:d5:
84:95:83:1a:13:c6:58:af:43:b4:8b:8c:bd:cc:46:34:e8:ba:
a4:c6:6f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:43:56 2025 by rpki-client