Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a323030303a3a2f33362d3336203d3e20323633393730.roa
File: 323830343a323839633a323030303a3a2f33362d3336203d3e20323633393730.roa (raw, json)
Hash identifier: QNCo2RyqlrHDpN+13cgK8+7pOarWaZpGUEWcajKxgok=
Subject key identifier: 53:DE:4A:0D:A5:22:3B:4E:3F:E3:EF:2F:7D:F5:80:4E:5E:64:71:B4
Certificate issuer: /CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Certificate serial: 1404192A240F677C59588905CE55D201ED8C7CDB
Authority key identifier: 44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a323030303a3a2f33362d3336203d3e20323633393730.roa
Signing time: Mon 20 Jan 2025 11:47:58 +0000
ROA not before: Mon 20 Jan 2025 11:42:58 +0000
ROA not after: Mon 19 Jan 2026 11:47:58 +0000
asID: 263970
IP address blocks: 2804:289c:2000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:04:19:2a:24:0f:67:7c:59:58:89:05:ce:55:d2:01:ed:8c:7c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Validity
Not Before: Jan 20 11:42:58 2025 GMT
Not After : Jan 19 11:47:58 2026 GMT
Subject: CN=53DE4A0DA5223B4E3FE3EF2F7DF5804E5E6471B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fb:ba:a0:5c:2b:6c:fe:91:8e:8c:5a:7a:a4:
5c:ed:9e:07:1d:4d:d3:56:30:a8:c3:79:f0:dc:01:
ce:7e:73:e8:15:43:87:4a:27:59:83:e7:69:1a:5c:
d8:fb:89:33:78:f9:03:c4:c0:d5:9e:d4:16:79:1d:
7d:ae:a7:cb:2b:96:e7:f9:14:5b:74:95:28:52:91:
fe:01:ad:77:62:44:a8:ea:7f:fc:af:a2:28:15:27:
d7:d5:8a:6a:9e:86:4d:dc:62:2a:2b:02:14:f4:a6:
3f:15:80:2b:c1:3c:0a:e2:d8:76:a2:40:ea:8e:38:
20:1d:71:18:d5:70:2e:54:e4:b7:52:97:df:67:97:
2a:9c:eb:74:c6:d0:9a:06:e1:63:09:b6:78:fa:d5:
07:0c:fa:94:7e:13:02:f2:1c:98:8d:4e:0b:ed:51:
c5:09:f7:81:e0:74:2e:46:c3:53:fe:39:b2:45:71:
4b:61:b7:a3:1b:40:82:a6:68:81:82:da:98:97:8b:
c8:60:9e:bb:09:4f:cb:48:ec:6e:86:53:9c:cf:bd:
42:75:4c:35:c1:9c:36:80:4a:e4:3f:6f:0f:1e:4a:
66:b9:f5:41:df:ef:01:4b:12:14:13:7a:a1:75:20:
74:60:26:e1:c3:e7:03:20:f3:b5:ac:f9:a6:ca:b9:
2f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DE:4A:0D:A5:22:3B:4E:3F:E3:EF:2F:7D:F5:80:4E:5E:64:71:B4
X509v3 Authority Key Identifier:
keyid:44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/44D7F23D5E330CBCE5452DA8159460000FACF7DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a323030303a3a2f33362d3336203d3e20323633393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:289c:2000::/36
Signature Algorithm: sha256WithRSAEncryption
2d:2d:1f:89:70:dc:b6:0f:dd:08:cf:b1:93:85:09:de:4d:d4:
29:07:9c:41:4d:f4:53:e4:d2:35:d2:b0:d2:f2:51:c5:6f:dd:
7b:26:46:b4:ee:cc:e6:83:60:9b:47:87:1d:84:8b:59:91:07:
15:6a:bd:c9:4d:72:87:8d:74:4f:31:a4:f0:4a:98:3f:94:17:
66:2a:a5:18:59:cf:3d:ee:e2:f8:26:cf:07:2e:9e:16:85:0d:
fa:ab:3b:1f:6b:b7:56:5d:ac:40:4d:9a:c0:d9:ad:40:76:11:
e2:6d:e6:74:b4:3f:14:4e:8b:37:e6:44:fd:e1:62:89:3a:ba:
9c:c5:3a:ba:8b:ed:06:3f:58:0c:1b:a3:13:f4:04:57:d9:01:
36:6a:9e:65:31:e5:ee:95:ed:93:54:fd:86:55:e5:c4:0d:58:
04:4a:6b:3a:13:b9:9b:f0:ae:33:21:45:3c:d7:9a:a2:4b:03:
76:c9:ea:65:60:4b:22:2b:f8:65:43:f6:a9:60:55:35:36:72:
cb:08:bd:dc:23:30:c8:e0:d3:6d:29:c4:57:f8:ab:98:52:94:
28:3f:35:48:a2:d5:12:b1:91:11:dd:7e:08:f6:aa:58:bd:80:
f7:e1:73:08:1c:55:35:36:c7:c2:ce:e4:91:58:1c:b2:40:d7:
8a:08:9d:e3
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUFAQZKiQPZ3xZWIkFzlXSAe2MfNswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDREN0YyM0Q1RTMzMENCQ0U1NDUyREE4MTU5NDYwMDAw
RkFDRjdERjAeFw0yNTAxMjAxMTQyNThaFw0yNjAxMTkxMTQ3NThaMDMxMTAvBgNV
BAMTKDUzREU0QTBEQTUyMjNCNEUzRkUzRUYyRjdERjU4MDRFNUU2NDcxQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg+7qgXCts/pGOjFp6pFztngcd
TdNWMKjDefDcAc5+c+gVQ4dKJ1mD52kaXNj7iTN4+QPEwNWe1BZ5HX2up8srluf5
FFt0lShSkf4BrXdiRKjqf/yvoigVJ9fVimqehk3cYiorAhT0pj8VgCvBPAri2Hai
QOqOOCAdcRjVcC5U5LdSl99nlyqc63TG0JoG4WMJtnj61QcM+pR+EwLyHJiNTgvt
UcUJ94HgdC5Gw1P+ObJFcUtht6MbQIKmaIGC2piXi8hgnrsJT8tI7G6GU5zPvUJ1
TDXBnDaASuQ/bw8eSma59UHf7wFLEhQTeqF1IHRgJuHD5wMg87Ws+abKuS9rAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUU95KDaUiO04/4+8vffWATl5kcbQwHwYDVR0j
BBgwFoAURNfyPV4zDLzlRS2oFZRgAA+s998wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWZMcVYyWURyMnJTazEyOHVOaEJLejh2MlJiMUFYbnZKY0VLM2pyVTNn
bWUvMC80NEQ3RjIzRDVFMzMwQ0JDRTU0NTJEQTgxNTk0NjAwMDBGQUNGN0RGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ0RDdGMjNENUUzMzBDQkNF
NTQ1MkRBODE1OTQ2MDAwMEZBQ0Y3REYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlmTHFWMllEcjJyU2sxMjh1TmhCS3o4djJSYjFBWG52SmNFSzNqclUzZ21lLzAv
MzIzODMwMzQzYTMyMzgzOTYzM2EzMjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzMzM5MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEKJwgMA0GCSqGSIb3DQEBCwUA
A4IBAQAtLR+JcNy2D90Iz7GThQneTdQpB5xBTfRT5NI10rDS8lHFb917Jka07szm
g2CbR4cdhItZkQcVar3JTXKHjXRPMaTwSpg/lBdmKqUYWc897uL4Js8HLp4WhQ36
qzsfa7dWXaxATZrA2a1AdhHibeZ0tD8UTos35kT94WKJOrqcxTq6i+0GP1gMG6MT
9ARX2QE2ap5lMeXule2TVP2GVeXEDVgESms6E7mb8K4zIUU815qiSwN2yeplYEsi
K/hlQ/apYFU1NnLLCL3cIzDI4NNtKcRX+KuYUpQoPzVIotUSsZER3X4I9qpYvYD3
4XMIHFU1NsfCzuSRWByyQNeKCJ3j
-----END CERTIFICATE-----
Generated at Sat Feb 22 04:40:36 2025 by rpki-client