Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a313030303a3a2f33362d3336203d3e20323633393730.roa
File: 323830343a323839633a313030303a3a2f33362d3336203d3e20323633393730.roa (raw, json)
Hash identifier: JdOh6enEmKlK3J4KPkCi9IgGYRURDONUnt0jHI1O36g=
Subject key identifier: 32:5D:48:85:43:BD:1F:03:04:AA:B1:DF:98:1A:7F:77:04:32:55:C1
Certificate issuer: /CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Certificate serial: 0690D23C29D9FED6D0A8CC6FF885ABF9789EE701
Authority key identifier: 44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a313030303a3a2f33362d3336203d3e20323633393730.roa
Signing time: Mon 20 Jan 2025 11:48:01 +0000
ROA not before: Mon 20 Jan 2025 11:43:01 +0000
ROA not after: Mon 19 Jan 2026 11:48:01 +0000
asID: 263970
IP address blocks: 2804:289c:1000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:90:d2:3c:29:d9:fe:d6:d0:a8:cc:6f:f8:85:ab:f9:78:9e:e7:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Validity
Not Before: Jan 20 11:43:01 2025 GMT
Not After : Jan 19 11:48:01 2026 GMT
Subject: CN=325D488543BD1F0304AAB1DF981A7F77043255C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:36:35:95:8e:59:e4:ca:a6:e1:25:6b:99:7a:
3d:8b:11:bc:aa:cb:a7:82:b2:27:ad:26:42:12:d4:
7d:e6:f6:36:25:45:e4:1f:d0:3d:58:b5:58:17:6e:
55:97:47:b8:cc:71:dc:d1:cd:6f:f3:73:41:b8:4f:
a2:80:eb:e3:9f:52:c3:86:48:6d:b0:0a:3d:84:fb:
b0:52:6a:af:84:c6:84:bc:82:55:a8:c8:c1:d1:48:
b2:cb:28:e9:57:59:ec:a1:c9:b8:3c:bd:a5:3f:d5:
8d:20:2f:71:a0:c2:9a:93:7d:2f:25:65:b4:d1:6b:
ed:37:c9:0e:bd:2b:66:f4:10:8e:ac:e2:05:68:40:
07:bc:c0:ee:c5:5c:87:10:26:1e:aa:59:e9:7c:ad:
6c:de:3a:5b:78:3c:3e:2e:60:0f:fe:c4:02:50:8a:
3f:af:2d:03:d7:82:34:d1:c9:84:f2:df:e7:d0:39:
7d:dc:bd:22:8d:04:78:21:23:af:cf:d1:5d:5e:a5:
87:2e:bf:1b:3f:c4:20:56:be:3e:a7:79:a5:f4:b2:
53:62:1b:58:a0:4c:57:e3:1e:38:cd:90:e6:15:88:
33:07:d7:c3:a5:6a:30:50:ab:05:65:7c:84:be:13:
73:34:82:0d:f6:a8:ce:aa:15:2a:4e:89:0a:db:07:
2d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5D:48:85:43:BD:1F:03:04:AA:B1:DF:98:1A:7F:77:04:32:55:C1
X509v3 Authority Key Identifier:
keyid:44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/44D7F23D5E330CBCE5452DA8159460000FACF7DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a313030303a3a2f33362d3336203d3e20323633393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:289c:1000::/36
Signature Algorithm: sha256WithRSAEncryption
4c:d7:8e:8d:05:30:9e:28:01:a1:5a:fa:cf:7c:7f:77:f4:85:
41:aa:2b:e4:cf:dc:d6:51:32:5d:5d:69:b1:75:24:7c:27:a2:
26:47:26:fb:1e:6a:5d:55:bd:9d:15:6d:36:75:c4:bb:bd:49:
ae:75:80:12:d5:6f:35:16:67:89:31:7d:65:33:8b:c4:be:53:
55:de:fe:cb:ee:7f:ab:1d:fa:dc:93:4f:6e:9c:39:14:27:e1:
87:58:6e:0d:5a:62:e2:83:d2:32:63:dc:7c:dc:66:dc:12:8c:
b6:f1:25:ac:f3:14:5f:44:e0:1a:da:d3:32:e6:33:27:3c:12:
b9:0f:df:ee:a8:ee:d1:af:61:d2:f1:26:a3:79:3f:a0:f0:9f:
f1:db:1a:2a:79:b4:c6:d0:6e:ec:f1:ab:2f:bf:e3:dc:4c:b2:
58:d8:cd:71:1e:35:5e:4b:d7:f5:fb:e7:0e:b1:67:2d:33:a3:
47:0c:3b:be:9e:4d:20:04:c3:ab:ed:2c:64:00:0d:fe:68:73:
f0:62:65:16:c9:41:03:db:96:42:21:1c:11:9e:2f:ed:f8:65:
07:4c:ca:25:eb:b7:17:c0:3e:40:eb:d1:dd:e1:58:5c:d0:e2:
09:d3:0a:c5:ff:03:d0:8a:d3:95:fe:2c:51:37:40:90:be:7d:
5e:7d:e2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:24:59 2025 by rpki-client