Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9rFM9wSTBQ95MHhNmD44sngqRUtz8DPfPd3UTDTUVTax/0/323830343a353338303a3a2f33322d3332203d3e20323638353838.roa
File: 323830343a353338303a3a2f33322d3332203d3e20323638353838.roa (raw, json)
Hash identifier: 8sEIpHgLX8RtYdwQe6RmxRKOLeZ/NA+qXvuy0z8ip00=
Subject key identifier: 69:5D:8A:F5:2E:7F:FA:4B:CE:E4:39:84:00:6E:CD:39:AC:72:3C:39
Certificate issuer: /CN=BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9
Certificate serial: 3B6E098B2ABF5ACFE7EBCBC357E08A3B1B1E70D0
Authority key identifier: BF:82:1D:40:A5:9C:57:C8:C0:2B:F4:E1:2D:D0:D4:94:05:C6:A9:B9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9rFM9wSTBQ95MHhNmD44sngqRUtz8DPfPd3UTDTUVTax/0/323830343a353338303a3a2f33322d3332203d3e20323638353838.roa
Signing time: Sun 27 Jul 2025 01:32:35 +0000
ROA not before: Sun 27 Jul 2025 01:27:35 +0000
ROA not after: Sun 26 Jul 2026 01:32:35 +0000
asID: 268588
IP address blocks: 2804:5380::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:6e:09:8b:2a:bf:5a:cf:e7:eb:cb:c3:57:e0:8a:3b:1b:1e:70:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9
Validity
Not Before: Jul 27 01:27:35 2025 GMT
Not After : Jul 26 01:32:35 2026 GMT
Subject: CN=695D8AF52E7FFA4BCEE43984006ECD39AC723C39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b1:af:e6:60:e2:27:e3:7b:03:3e:29:16:fd:
a7:5b:3c:46:6b:8a:36:54:37:25:2d:4f:12:2a:cc:
48:5e:e8:bd:dc:f1:95:b9:a9:da:78:ff:c0:05:24:
dd:d4:71:fe:a5:00:17:2f:68:51:59:3c:ac:4b:9a:
5c:1e:dc:f3:47:58:4e:2e:97:10:cd:dc:a0:df:31:
bc:66:ff:a5:ac:16:8c:71:ef:0d:e2:d6:0f:d5:db:
52:52:57:a3:08:7b:7c:ae:00:bd:70:b8:eb:56:08:
f4:b8:7b:90:fd:2d:65:3b:3c:83:d2:7b:d3:5c:71:
d9:99:d7:30:d3:e9:54:6d:b9:02:3c:80:0d:62:41:
e9:b7:24:fc:b5:25:b8:b3:82:96:49:60:6e:93:31:
b9:4a:7e:a5:40:0c:82:0d:9c:d2:22:2e:6a:b7:86:
18:2e:5c:6b:a9:b4:2b:1d:0a:19:04:15:3b:82:47:
e0:31:2a:a5:7e:9b:91:79:75:05:9c:4b:0a:d3:08:
4d:b9:c3:49:3a:1d:ab:1d:5a:3a:26:8d:4e:6c:bf:
28:81:49:cd:bc:aa:16:9e:6f:03:f0:15:16:33:cc:
86:b3:41:b5:40:f4:4e:42:f6:f1:06:4a:62:cb:1e:
6c:34:02:6e:59:99:d0:b7:0a:b2:5b:75:a3:5d:2f:
99:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:5D:8A:F5:2E:7F:FA:4B:CE:E4:39:84:00:6E:CD:39:AC:72:3C:39
X509v3 Authority Key Identifier:
keyid:BF:82:1D:40:A5:9C:57:C8:C0:2B:F4:E1:2D:D0:D4:94:05:C6:A9:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9rFM9wSTBQ95MHhNmD44sngqRUtz8DPfPd3UTDTUVTax/0/BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rFM9wSTBQ95MHhNmD44sngqRUtz8DPfPd3UTDTUVTax/0/323830343a353338303a3a2f33322d3332203d3e20323638353838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5380::/32
Signature Algorithm: sha256WithRSAEncryption
50:47:e5:c9:66:ed:9f:2e:3d:9a:b9:2e:d2:db:50:51:88:0b:
24:e3:9a:e0:8d:f0:67:28:6a:f6:a5:1b:cf:a9:66:cf:54:91:
53:19:94:18:13:6d:63:35:67:b4:0e:0f:b3:a4:bb:88:47:32:
66:e2:fc:4e:8d:89:57:32:15:77:74:98:d1:13:6d:62:85:89:
cf:8f:85:fb:32:22:f5:41:85:ab:6b:82:bb:bf:47:c1:ff:f2:
fd:f0:96:9f:43:d7:78:07:03:95:f3:f0:2c:d0:86:76:65:8a:
ce:16:e3:27:02:6d:4f:b2:79:66:56:cb:5d:61:e2:3c:0e:06:
d5:c4:e8:e9:5a:84:ad:cb:54:b1:9a:c5:c4:74:3a:73:f3:f4:
f1:cf:2e:f7:6e:19:77:73:3c:ca:89:36:18:ba:82:6d:fa:d0:
0b:2f:4d:2a:11:f4:44:67:e2:a8:dc:90:bf:a7:02:1f:94:9a:
91:1d:a0:ae:2c:8e:c7:c8:78:1d:b3:a9:f1:cb:09:c5:d1:82:
9b:bb:eb:44:da:57:1b:bc:37:e2:44:13:94:52:46:ce:c9:2c:
07:1f:fa:8a:62:ee:30:f1:d6:0c:ea:60:ed:0b:2f:c0:da:c8:
b6:83:f8:c7:32:88:94:5d:4c:f2:77:c3:70:5a:1a:2d:32:74:
fc:5f:1e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:47:13 2025 by rpki-client