Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/323830343a31303a3a2f33322d3438203d3e203238323939.roa
File: 323830343a31303a3a2f33322d3438203d3e203238323939.roa (raw, json)
Hash identifier: c3NCrZbLJrg1iT8b3Lsqx5cxvRqJreMacKmkhowKFXg=
Subject key identifier: A5:34:5B:E3:DC:D7:26:CD:FB:6A:DA:8D:C4:E3:21:3F:89:F8:01:69
Certificate issuer: /CN=2980DBB4CE53A385512CBB87747D8CA1ADD09AEC
Certificate serial: 5FE9E21E08AE921E011B8E0333BB3E347FA93684
Authority key identifier: 29:80:DB:B4:CE:53:A3:85:51:2C:BB:87:74:7D:8C:A1:AD:D0:9A:EC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2980DBB4CE53A385512CBB87747D8CA1ADD09AEC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/323830343a31303a3a2f33322d3438203d3e203238323939.roa
Signing time: Mon 23 Jun 2025 13:18:35 +0000
ROA not before: Mon 23 Jun 2025 13:13:35 +0000
ROA not after: Mon 22 Jun 2026 13:18:35 +0000
asID: 28299
IP address blocks: 2804:10::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:e9:e2:1e:08:ae:92:1e:01:1b:8e:03:33:bb:3e:34:7f:a9:36:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2980DBB4CE53A385512CBB87747D8CA1ADD09AEC
Validity
Not Before: Jun 23 13:13:35 2025 GMT
Not After : Jun 22 13:18:35 2026 GMT
Subject: CN=A5345BE3DCD726CDFB6ADA8DC4E3213F89F80169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8c:86:c7:2e:da:6a:9d:dc:e4:bb:63:ad:1e:
12:e0:ee:52:ca:81:71:55:c7:16:81:9b:b4:16:d5:
43:e0:a3:dc:c3:0e:94:cb:f0:13:e1:55:6e:3b:06:
88:f4:14:ca:0a:df:10:63:b9:ca:28:6f:ec:2a:63:
d8:92:fe:64:0b:9d:33:20:47:3d:0d:49:b9:83:98:
7e:07:23:d8:4c:8a:07:2d:02:30:9b:53:49:5e:c7:
9f:8a:68:e8:df:89:ad:d5:bb:3c:79:9a:ac:4e:85:
a5:bf:34:32:6b:fa:db:07:32:1e:a2:9d:fb:f6:24:
1c:41:6b:53:5d:eb:85:5d:d6:68:3d:a1:63:b4:e1:
ac:d8:a0:eb:f7:86:48:c6:86:81:d5:8d:8d:c1:8d:
9f:85:ab:1c:65:bc:4c:b6:cc:74:59:1d:dd:67:0a:
6a:e7:0c:c5:f6:35:b2:3a:72:13:3a:06:ee:ae:1a:
7b:28:44:a5:53:16:16:4c:b1:c1:14:f3:06:ca:31:
cc:78:72:c4:ec:dc:e6:42:a2:9e:54:c8:5c:fa:04:
9f:f1:17:36:0b:c4:4c:31:b0:21:22:22:3b:ba:64:
a5:18:bb:5c:2e:ee:08:19:11:7b:e0:d1:f2:7e:1e:
a0:2f:03:19:cc:33:80:39:e5:e9:26:b2:cb:dc:9e:
b9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:34:5B:E3:DC:D7:26:CD:FB:6A:DA:8D:C4:E3:21:3F:89:F8:01:69
X509v3 Authority Key Identifier:
keyid:29:80:DB:B4:CE:53:A3:85:51:2C:BB:87:74:7D:8C:A1:AD:D0:9A:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/2980DBB4CE53A385512CBB87747D8CA1ADD09AEC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2980DBB4CE53A385512CBB87747D8CA1ADD09AEC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/323830343a31303a3a2f33322d3438203d3e203238323939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:10::/32
Signature Algorithm: sha256WithRSAEncryption
7d:1f:a6:ca:eb:7e:77:ac:82:51:32:97:35:1e:e3:2d:e9:a2:
0a:0d:ee:d5:e5:4b:22:b5:3c:87:6c:97:a7:be:f7:c3:02:45:
68:b2:a7:e5:13:dd:f3:28:c5:62:16:21:46:11:ad:b7:2a:3d:
ee:d4:38:e8:4d:74:62:79:0d:1e:62:e4:52:95:d5:25:12:6f:
7b:a7:f2:a6:a8:4f:d4:b1:3d:b4:79:3b:98:11:50:d1:a8:26:
be:0d:41:1f:a4:c0:e9:0e:35:ad:86:4a:2a:ac:5a:42:3d:26:
6f:90:95:fd:51:fd:5a:5a:62:aa:de:9c:b4:cd:ee:21:63:c9:
bc:d1:3f:31:31:a5:64:c2:b4:0e:ab:3d:07:78:4c:e9:20:20:
3e:10:55:0b:e3:ee:64:42:55:85:63:8c:26:43:0a:ea:1d:45:
9c:9a:53:d4:81:c2:31:78:b9:48:16:0c:84:94:fe:72:40:c4:
69:16:c5:33:87:ef:cc:eb:3e:c8:ec:03:c7:67:70:41:30:56:
8a:6d:e9:6c:64:4e:c3:44:b8:25:2d:51:21:e3:5c:7f:b2:06:
83:09:28:4b:44:74:5b:ff:06:b5:2d:f2:ad:6b:9d:c5:66:7b:
21:b8:ab:f7:2f:9e:17:34:84:e3:99:0a:e5:be:98:a0:53:45:
44:69:84:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 10:44:28 2025 by rpki-client