Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a323030303a3a2f33352d3335203d3e20323633393730.roa
File: 323830343a323839633a323030303a3a2f33352d3335203d3e20323633393730.roa (raw, json)
Hash identifier: 8/FmvM5ZA7tE/aeVvFOuPVSvgMihasIjCJmHaSnhpTA=
Subject key identifier: D1:A6:C2:BD:94:EB:B4:99:99:AE:1A:42:52:6B:76:A2:B1:34:9C:DA
Certificate issuer: /CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Certificate serial: 0A610583ABD93F0234177023DFAB8C1C78DB3121
Authority key identifier: 44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a323030303a3a2f33352d3335203d3e20323633393730.roa
Signing time: Mon 20 Jan 2025 11:48:00 +0000
ROA not before: Mon 20 Jan 2025 11:43:00 +0000
ROA not after: Mon 19 Jan 2026 11:48:00 +0000
asID: 263970
IP address blocks: 2804:289c:2000::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:61:05:83:ab:d9:3f:02:34:17:70:23:df:ab:8c:1c:78:db:31:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Validity
Not Before: Jan 20 11:43:00 2025 GMT
Not After : Jan 19 11:48:00 2026 GMT
Subject: CN=D1A6C2BD94EBB49999AE1A42526B76A2B1349CDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:20:c2:1b:a8:2c:97:70:d8:b3:de:e1:53:ce:
0d:42:1a:10:97:aa:92:4b:75:92:4e:38:a4:cd:be:
30:be:a0:7c:01:47:e9:5a:66:34:8c:63:86:73:ce:
35:82:4d:f8:d3:55:b5:fb:b8:bc:b7:4a:d9:70:01:
7f:23:d4:cd:7f:0f:07:e9:92:f3:04:59:16:07:ad:
f8:f8:04:9b:97:ec:41:49:08:36:0c:95:92:14:ce:
06:91:fe:4a:46:6a:cf:ac:8b:80:7f:21:64:61:8d:
e0:91:cd:a9:39:06:91:47:3d:ca:9b:f7:c7:1b:3e:
f6:7a:af:2f:a6:2e:ca:d0:90:29:02:34:17:d4:23:
e2:56:d2:31:21:5c:45:d6:c2:5f:89:81:b2:01:11:
04:95:95:bd:13:22:fb:1d:f1:8c:c6:8d:c7:51:9f:
fd:24:6a:e3:1c:99:02:76:36:a9:27:12:81:0b:6c:
6e:2f:b1:da:09:92:ba:c1:70:f0:5a:57:da:24:80:
d7:d4:0f:61:4d:45:4d:4e:51:12:95:ce:ea:2e:27:
3d:7f:d1:8a:e9:34:52:7a:de:c1:fc:eb:57:e7:1a:
33:2f:54:53:5f:d7:e3:75:e6:b0:09:82:5d:6c:47:
f3:3a:9a:0c:ce:52:42:30:9e:09:47:c5:73:6d:dd:
e0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A6:C2:BD:94:EB:B4:99:99:AE:1A:42:52:6B:76:A2:B1:34:9C:DA
X509v3 Authority Key Identifier:
keyid:44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/44D7F23D5E330CBCE5452DA8159460000FACF7DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a323030303a3a2f33352d3335203d3e20323633393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:289c:2000::/35
Signature Algorithm: sha256WithRSAEncryption
80:4a:68:54:87:05:c4:71:1a:8b:4a:72:d2:c2:e5:6c:46:5c:
40:3e:68:33:36:20:78:c4:83:4b:83:a4:d9:8a:07:b7:66:0a:
53:11:08:c5:94:6c:c2:7d:77:f1:b3:fd:aa:00:04:a8:6f:be:
40:fb:9e:72:47:80:a1:9a:30:9a:6a:30:9c:e9:73:e3:e3:e1:
e7:5f:a3:f9:35:9a:d4:36:09:dc:a5:ac:dd:b7:72:62:e8:be:
aa:0e:df:e4:eb:23:45:83:a9:fa:8c:7f:02:48:aa:93:5f:d9:
fd:b1:26:cb:92:27:44:a7:4d:82:1b:48:23:bb:dc:88:f8:da:
6b:30:64:2f:27:07:a6:7f:e5:b3:3b:90:e2:a1:80:cd:22:ed:
c4:2a:2e:95:8d:a3:91:e9:0b:04:b9:31:4c:fb:3d:a0:78:b7:
18:60:67:d9:c0:8d:8f:78:8f:65:f6:94:63:2d:d7:21:6d:9f:
ba:f5:3c:1e:d0:a8:51:4e:5f:dd:1f:b2:e6:42:c8:ba:52:02:
02:81:9c:d6:b3:54:f2:96:e3:2e:00:6e:93:8f:9d:41:03:e6:
09:8e:18:f4:22:29:f0:25:42:5a:1c:f4:06:ff:36:2e:61:4e:
ba:0c:8e:e1:c1:15:7d:b4:af:c2:93:4b:01:fb:92:62:e7:cb:
38:e7:c4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:50:31 2025 by rpki-client