Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a3a2f33362d3336203d3e203631373736.roa
File: 323830343a313932633a3a2f33362d3336203d3e203631373736.roa (raw, json)
Hash identifier: UM7LmNU1hPkUxgA3Iuu2ujjYldwcQAl46ErknayVSYw=
Subject key identifier: 71:99:21:AA:84:92:8C:1C:47:D1:E6:6B:21:D1:1E:0F:25:F3:E3:03
Certificate issuer: /CN=3E2C146C101877C56F4E2F4DDF6835E44001788A
Certificate serial: 0C0F917B5AB2A037733D894E1B8D16D1FD302748
Authority key identifier: 3E:2C:14:6C:10:18:77:C5:6F:4E:2F:4D:DF:68:35:E4:40:01:78:8A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E2C146C101877C56F4E2F4DDF6835E44001788A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a3a2f33362d3336203d3e203631373736.roa
Signing time: Mon 23 Jun 2025 22:15:23 +0000
ROA not before: Mon 23 Jun 2025 22:10:23 +0000
ROA not after: Mon 22 Jun 2026 22:15:23 +0000
asID: 61776
IP address blocks: 2804:192c::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:0f:91:7b:5a:b2:a0:37:73:3d:89:4e:1b:8d:16:d1:fd:30:27:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E2C146C101877C56F4E2F4DDF6835E44001788A
Validity
Not Before: Jun 23 22:10:23 2025 GMT
Not After : Jun 22 22:15:23 2026 GMT
Subject: CN=719921AA84928C1C47D1E66B21D11E0F25F3E303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:74:e6:7c:8a:8e:3f:82:5c:69:41:12:73:42:
ab:8f:75:e0:da:8f:6e:60:b6:c4:62:ec:bf:5d:97:
69:95:17:0e:89:b8:e5:14:96:12:45:56:e9:ea:b8:
e5:7d:80:37:a6:c4:e7:33:38:7d:d9:da:82:7e:fd:
45:ca:51:23:60:15:ce:0f:5d:ad:19:a8:3b:2c:c8:
34:72:58:99:45:c2:56:c9:c5:71:88:b8:ec:c3:c4:
3b:83:fc:1b:c7:f2:45:cf:ea:1a:27:df:b3:93:b8:
89:d9:cb:27:e8:39:23:c8:87:04:a1:6b:c6:51:26:
d0:78:d5:48:f8:0a:a5:f4:6c:23:61:97:a0:94:12:
90:0c:b4:54:e4:3e:29:46:c7:e0:9e:41:a6:f3:c2:
54:75:7e:a2:b4:02:f5:9c:82:b0:08:51:84:4a:18:
26:d6:d7:62:da:f8:d2:b9:e2:a2:09:87:b8:04:95:
0d:b9:f5:f8:7f:69:4d:2f:6e:90:fd:d0:f3:97:68:
b5:10:86:cd:59:ab:2c:4d:d9:c6:04:f0:f5:01:f0:
e4:97:62:fe:19:e1:49:aa:9c:4a:07:3c:bd:fb:40:
21:f4:5c:f2:bf:58:d8:86:1d:5f:fa:a5:60:f3:f1:
36:1c:a8:f0:dc:dc:5c:0f:cb:24:63:7b:aa:f3:b4:
03:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:99:21:AA:84:92:8C:1C:47:D1:E6:6B:21:D1:1E:0F:25:F3:E3:03
X509v3 Authority Key Identifier:
keyid:3E:2C:14:6C:10:18:77:C5:6F:4E:2F:4D:DF:68:35:E4:40:01:78:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3E2C146C101877C56F4E2F4DDF6835E44001788A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E2C146C101877C56F4E2F4DDF6835E44001788A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a3a2f33362d3336203d3e203631373736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:192c::/36
Signature Algorithm: sha256WithRSAEncryption
19:c8:80:18:e2:bd:b1:1b:10:23:b5:f5:12:e0:83:7e:a7:67:
f7:c7:fb:d3:99:98:3a:cf:63:b1:e2:c6:1a:da:91:b4:a0:fe:
12:4a:ac:5d:d5:3c:97:22:d5:27:c5:9f:b7:f3:77:62:61:65:
20:24:3e:f8:71:bd:3f:dd:e8:c6:d2:60:95:58:2d:2a:55:38:
d1:05:aa:02:4a:a2:67:5f:62:79:92:f0:10:68:04:8d:3b:a0:
d5:30:05:76:f5:25:dd:1d:51:3f:77:e4:83:36:81:cb:68:00:
ec:eb:bf:e1:5f:7d:fe:be:09:f7:39:06:63:8c:42:c4:63:f6:
42:9e:7f:27:69:f3:09:be:95:54:a1:14:0a:1a:9b:d8:be:8f:
55:d8:2d:2e:56:f1:e2:5c:a5:64:9c:7c:48:82:6c:3c:32:3c:
4b:e1:e5:7b:e1:a7:36:69:f5:35:33:61:e4:52:32:f9:03:19:
fc:7f:73:4a:47:19:27:02:72:2e:82:06:7c:67:82:ff:98:ad:
af:49:17:be:c8:cd:d7:f4:d6:1c:8d:98:44:f1:94:38:db:e7:
99:f6:98:a3:a7:01:63:c3:80:70:2b:72:15:dd:7a:c4:6a:0d:
55:4a:ca:a9:a6:84:c0:d4:0f:b3:fe:3f:95:1e:e7:28:69:ae:
62:46:19:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 11:28:20 2025 by rpki-client