Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/323830343a313933343a3a2f33332d3333203d3e203631373738.roa
File: 323830343a313933343a3a2f33332d3333203d3e203631373738.roa (raw, json)
Hash identifier: Ow8leobZjfdcMGFzWv9NI1UuOUX0SHFDJOHVf/HGX6w=
Subject key identifier: 26:DD:93:EA:1B:D0:FF:55:1A:DD:62:3C:24:2F:B5:E8:6F:AA:EB:E4
Certificate issuer: /CN=3496860CED46E82860498DD946601D168147920B
Certificate serial: 248641B0E52428C1DFBFB415B0A31BD7AA1AC5DE
Authority key identifier: 34:96:86:0C:ED:46:E8:28:60:49:8D:D9:46:60:1D:16:81:47:92:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/323830343a313933343a3a2f33332d3333203d3e203631373738.roa
Signing time: Wed 11 Jun 2025 17:00:01 +0000
ROA not before: Wed 11 Jun 2025 16:55:01 +0000
ROA not after: Wed 10 Jun 2026 17:00:01 +0000
asID: 61778
IP address blocks: 2804:1934::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:86:41:b0:e5:24:28:c1:df:bf:b4:15:b0:a3:1b:d7:aa:1a:c5:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3496860CED46E82860498DD946601D168147920B
Validity
Not Before: Jun 11 16:55:01 2025 GMT
Not After : Jun 10 17:00:01 2026 GMT
Subject: CN=26DD93EA1BD0FF551ADD623C242FB5E86FAAEBE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:db:5f:f2:30:d2:6a:cf:c8:30:b7:8d:97:23:
c7:8e:69:32:52:7d:1f:be:cb:4a:a1:67:70:bd:6d:
1b:cf:8c:8e:40:cc:0a:8e:4d:bf:ec:5c:5e:53:7e:
d5:18:0f:47:c7:f0:11:22:db:92:a9:52:e2:72:dc:
d7:9c:01:9b:a5:fd:39:0c:2e:da:87:cc:02:cf:37:
de:c8:f7:84:ce:ce:a7:fc:68:db:cf:c5:79:d3:2e:
a0:ea:47:ef:ad:b2:ff:5c:7a:39:03:38:d7:ac:6d:
6a:52:bc:10:42:aa:df:45:0e:dd:b1:98:80:19:e5:
8e:12:d6:25:71:91:8a:89:07:cd:05:b0:4e:ea:dd:
60:c6:09:c5:ad:a4:a3:4d:46:79:0f:97:6b:2a:c4:
7b:32:37:63:62:ba:00:63:49:f9:a1:bd:f7:68:66:
b6:6d:df:9a:05:e1:c5:0e:51:d7:3e:56:87:31:e0:
54:77:00:7f:af:39:d7:4e:3a:f8:83:00:39:f6:b6:
26:dd:0e:ef:a1:6e:25:4b:b5:2b:80:57:d3:20:40:
4c:f6:c5:04:e0:6c:4b:d6:53:22:f8:51:57:22:40:
79:a8:31:af:ce:8f:57:2e:6e:82:eb:65:7b:81:30:
88:2f:55:35:cc:42:83:8e:2d:8c:e3:cf:a9:8d:09:
00:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DD:93:EA:1B:D0:FF:55:1A:DD:62:3C:24:2F:B5:E8:6F:AA:EB:E4
X509v3 Authority Key Identifier:
keyid:34:96:86:0C:ED:46:E8:28:60:49:8D:D9:46:60:1D:16:81:47:92:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3496860CED46E82860498DD946601D168147920B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/323830343a313933343a3a2f33332d3333203d3e203631373738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1934::/33
Signature Algorithm: sha256WithRSAEncryption
5f:23:99:e6:4b:4f:15:32:9a:fb:f4:05:d6:94:43:ac:e8:1d:
01:4d:ad:c4:a7:22:70:a0:52:5b:b4:8d:45:68:11:60:09:eb:
bf:e3:f7:d3:32:f0:25:80:1d:6f:08:b7:4e:2f:71:ba:0b:d3:
a7:fb:5f:71:31:b0:de:75:b7:bb:5c:2c:60:a4:c4:b2:d6:3a:
ff:d2:bd:cd:58:c6:17:95:78:da:b3:7f:df:48:24:f5:c3:ba:
5b:b3:30:c5:92:1f:7a:7f:68:3c:46:97:d4:dc:08:f1:fa:65:
cc:4b:3d:32:d5:18:10:51:4d:52:3a:89:85:4d:f7:08:91:91:
cc:ef:56:48:a0:2d:74:34:18:4f:c5:67:bb:9d:cc:56:21:3f:
3c:78:d2:aa:53:4c:cf:d7:54:fd:d0:0a:4d:2c:64:7e:9b:a7:
19:4f:be:bb:f7:fd:93:b6:65:a4:fb:88:b4:7a:2f:90:22:4b:
a1:ac:6a:a0:e9:47:05:a6:b3:64:d2:6a:e0:2c:5e:52:71:89:
cb:b1:4d:d0:fb:15:63:1e:42:e3:ac:a2:e4:a3:bd:62:1c:0b:
b8:f8:a2:40:df:e9:a1:70:38:0f:bf:b5:f2:0b:38:c7:c2:10:
2d:38:f6:60:39:05:61:93:1c:b4:f5:d7:c0:d0:9e:e5:f3:df:
2b:a9:97:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 18:04:01 2025 by rpki-client