Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/323830343a326430303a3a2f33322d313238203d3e20323635323536.roa
File: 323830343a326430303a3a2f33322d313238203d3e20323635323536.roa (raw, json)
Hash identifier: AJF0/ck7a9si+uQ7lNugOWnw2v+K84ECm1cp9t9ER6Q=
Subject key identifier: 1E:3B:BD:95:46:48:4D:6E:55:7F:74:1D:18:77:BD:37:1A:D1:77:3E
Certificate issuer: /CN=DABCDC54DCEDC335855AF5AC9FC04C9AE3DB0E7C
Certificate serial: 68557AFA19353534AE5A34DC059EB1F9EF97BAD0
Authority key identifier: DA:BC:DC:54:DC:ED:C3:35:85:5A:F5:AC:9F:C0:4C:9A:E3:DB:0E:7C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DABCDC54DCEDC335855AF5AC9FC04C9AE3DB0E7C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/323830343a326430303a3a2f33322d313238203d3e20323635323536.roa
Signing time: Mon 21 Jul 2025 18:43:31 +0000
ROA not before: Mon 21 Jul 2025 18:38:31 +0000
ROA not after: Mon 20 Jul 2026 18:43:31 +0000
asID: 265256
IP address blocks: 2804:2d00::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:55:7a:fa:19:35:35:34:ae:5a:34:dc:05:9e:b1:f9:ef:97:ba:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DABCDC54DCEDC335855AF5AC9FC04C9AE3DB0E7C
Validity
Not Before: Jul 21 18:38:31 2025 GMT
Not After : Jul 20 18:43:31 2026 GMT
Subject: CN=1E3BBD9546484D6E557F741D1877BD371AD1773E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:00:10:18:c3:a4:12:a6:6d:55:25:72:55:19:
5f:f2:f1:66:14:c1:cd:f3:0b:d5:28:92:ab:81:19:
3b:d3:9b:e9:88:86:81:98:a6:d3:6a:c6:89:fc:12:
8e:68:82:d7:99:b7:07:e8:42:bf:cf:5e:38:83:3b:
c3:bc:58:27:7f:91:3f:78:49:1e:77:de:6e:0a:e3:
16:47:e3:8c:34:08:91:4a:8b:03:6e:d9:7e:4d:13:
07:d1:37:18:8e:4e:39:45:a5:55:47:e2:5c:57:a3:
1c:49:5a:7a:a1:3b:2d:bd:66:0a:fb:00:e8:80:aa:
a5:d7:81:75:97:01:08:fb:a8:1f:f2:bf:cf:ff:00:
a9:c9:1f:40:71:07:f4:85:e7:df:bd:94:7b:98:78:
fb:8f:74:76:38:9b:2e:cd:2d:9a:c9:67:28:4b:9b:
e3:64:0b:e7:ca:70:88:fd:4a:fd:ce:fa:b6:14:4b:
1f:57:dd:dd:84:16:88:22:25:45:aa:ab:9a:a5:95:
d8:d2:a7:ec:8f:7f:99:19:1a:1a:5f:46:a2:83:94:
89:17:7a:fa:a1:95:ab:f5:b5:11:b7:a5:d8:3d:a5:
09:06:7d:9a:54:ae:bc:fe:6a:27:02:55:8f:7e:1b:
a5:f7:66:9e:d1:7e:5d:71:78:2e:2b:f6:f0:4b:ef:
d8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3B:BD:95:46:48:4D:6E:55:7F:74:1D:18:77:BD:37:1A:D1:77:3E
X509v3 Authority Key Identifier:
keyid:DA:BC:DC:54:DC:ED:C3:35:85:5A:F5:AC:9F:C0:4C:9A:E3:DB:0E:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/DABCDC54DCEDC335855AF5AC9FC04C9AE3DB0E7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DABCDC54DCEDC335855AF5AC9FC04C9AE3DB0E7C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/323830343a326430303a3a2f33322d313238203d3e20323635323536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2d00::/32
Signature Algorithm: sha256WithRSAEncryption
3a:d2:d5:78:8d:4c:35:20:27:e0:6a:b5:6e:be:18:a4:18:9e:
f2:17:77:61:80:b2:f9:5d:dd:00:d2:4f:6c:75:e7:f5:60:65:
5e:93:3d:f8:04:82:0a:be:65:d4:ac:ea:d7:0b:dc:43:80:56:
1b:30:c3:1f:bc:97:ca:e9:c7:b9:f8:ad:a2:6b:7b:e5:02:4d:
f1:9f:60:04:a5:d6:b7:43:56:82:f1:5d:0d:b9:4a:34:a6:2b:
3b:6e:3f:49:98:27:9d:1e:2c:fd:86:c5:dd:f1:16:54:a4:1b:
98:7d:11:53:ce:98:9e:ae:57:54:49:2d:3c:e5:7a:90:6f:7e:
c6:60:17:f4:d1:fa:bd:a6:39:df:60:8d:e4:de:25:ca:09:b1:
08:52:c0:94:cc:ca:32:3f:6d:53:78:fe:6e:d8:66:3b:6d:ce:
cc:b4:fd:a3:4b:e8:fb:c3:b6:9e:c0:07:c2:a0:50:74:00:34:
93:0b:a7:d7:44:06:85:fa:2c:18:a4:5f:2a:70:23:e7:80:b0:
af:6c:ee:fd:92:3c:24:7a:59:f9:52:8f:ee:de:62:bf:7f:27:
0a:3e:74:28:56:66:52:e3:60:87:57:e0:83:de:38:63:8a:de:
bf:f6:07:26:d3:13:2c:5b:cf:4e:af:81:68:46:bf:88:56:8a:
bb:a9:18:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:19:32 2025 by rpki-client