Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/323830343a333635343a3a2f33322d3333203d3e20323636333432.roa
File: 323830343a333635343a3a2f33322d3333203d3e20323636333432.roa (raw, json)
Hash identifier: JJ0Sg9SmLX27zo7FPwuKrXwOFLQEAegXrph7MM77OAY=
Subject key identifier: 0C:52:CC:61:A5:50:9B:C3:1C:BE:E8:79:52:29:4C:F5:9C:47:31:B0
Certificate issuer: /CN=76B785D1904E3CB89DFB1604F9827B970C9528F3
Certificate serial: 09A9AA0F26531E89D7AE7FB8FFF8100C69122170
Authority key identifier: 76:B7:85:D1:90:4E:3C:B8:9D:FB:16:04:F9:82:7B:97:0C:95:28:F3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76B785D1904E3CB89DFB1604F9827B970C9528F3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/323830343a333635343a3a2f33322d3333203d3e20323636333432.roa
Signing time: Sun 22 Jun 2025 12:19:05 +0000
ROA not before: Sun 22 Jun 2025 12:14:05 +0000
ROA not after: Sun 21 Jun 2026 12:19:05 +0000
asID: 266342
IP address blocks: 2804:3654::/32 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:a9:aa:0f:26:53:1e:89:d7:ae:7f:b8:ff:f8:10:0c:69:12:21:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76B785D1904E3CB89DFB1604F9827B970C9528F3
Validity
Not Before: Jun 22 12:14:05 2025 GMT
Not After : Jun 21 12:19:05 2026 GMT
Subject: CN=0C52CC61A5509BC31CBEE87952294CF59C4731B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:46:8a:d8:70:be:c5:79:c4:7d:6e:51:3e:dd:
0d:a9:53:8e:11:8d:d4:63:64:a7:5c:57:43:9d:21:
c3:15:e9:0e:e3:7c:92:91:bc:3a:34:0d:c1:5b:79:
c9:74:7d:c7:37:26:65:10:f6:0d:67:3f:38:44:97:
9d:12:67:ac:9c:ad:07:8a:c2:69:41:0b:82:39:62:
d1:82:61:8f:02:32:21:1e:ad:67:69:01:db:22:94:
4e:a3:82:90:be:4b:51:32:35:2e:dd:b4:0d:32:8e:
02:f9:be:36:f6:3d:77:cf:40:07:e2:4a:42:99:3e:
81:01:65:2d:c4:9d:ba:f4:9b:0c:ab:02:15:ac:65:
61:1e:c0:46:2f:74:fb:c2:ef:14:96:6d:04:d7:b0:
27:7a:8f:5e:d3:74:3d:8e:84:c9:2c:05:07:0d:d3:
e5:91:d5:df:91:37:a3:d7:92:67:81:de:bc:5f:1a:
0b:c0:f6:a8:3e:a1:e3:f7:b3:ee:5a:66:25:87:fe:
b2:43:44:d9:00:72:da:cd:09:fe:ae:1a:d0:70:10:
e6:21:88:45:93:7b:65:f0:ff:06:3b:d9:e9:0e:89:
70:44:65:f6:5e:f4:60:98:42:7b:28:cf:b8:f6:4d:
4a:6e:94:8b:65:c9:a6:30:66:57:01:43:fe:3c:82:
cc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:52:CC:61:A5:50:9B:C3:1C:BE:E8:79:52:29:4C:F5:9C:47:31:B0
X509v3 Authority Key Identifier:
keyid:76:B7:85:D1:90:4E:3C:B8:9D:FB:16:04:F9:82:7B:97:0C:95:28:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/76B785D1904E3CB89DFB1604F9827B970C9528F3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76B785D1904E3CB89DFB1604F9827B970C9528F3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/323830343a333635343a3a2f33322d3333203d3e20323636333432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3654::/32
Signature Algorithm: sha256WithRSAEncryption
3c:ac:70:2e:63:f3:e1:67:0a:cc:11:d1:39:22:0e:e5:49:af:
97:b2:82:d8:b2:8c:fb:10:07:47:4a:3e:bb:da:77:fb:d2:94:
de:67:cc:32:f0:10:15:52:c5:68:1b:d9:aa:2c:2a:6b:67:db:
69:dd:d2:53:ce:70:e5:96:43:18:32:4a:f2:af:51:07:11:9f:
2c:79:46:58:db:c9:43:b5:e6:bf:34:3d:46:8e:0b:42:14:82:
8b:f2:59:1f:7c:09:87:aa:89:35:a7:52:9d:ac:86:38:c8:bc:
70:fd:ab:bb:d8:e1:3c:48:fa:32:4c:36:72:4f:16:8a:7d:31:
60:1e:ef:48:bb:18:0b:3c:ec:43:e3:04:10:ca:6a:24:58:56:
7c:58:2c:fa:ed:25:68:2a:c6:1a:cc:36:a9:81:9a:0e:c2:a5:
81:98:1b:dc:82:18:6e:fc:dd:ba:7a:49:77:e3:34:56:2d:35:
d8:2a:f2:c4:08:68:eb:7a:b5:75:7e:b9:53:09:72:07:15:0b:
b7:e7:0c:59:3f:b9:f3:dc:27:9a:71:7a:92:cf:a0:5b:72:bb:
41:0f:4b:24:18:01:1b:36:6c:0d:8f:61:9b:3d:3b:8a:66:90:
65:7e:4c:84:48:56:75:58:d0:7d:e4:43:01:31:e7:81:85:0f:
1c:99:c2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 13 11:27:21 2025 by rpki-client