Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a333030303a3a2f33362d3336203d3e20323633393730.roa
File: 323830343a323839633a333030303a3a2f33362d3336203d3e20323633393730.roa (raw, json)
Hash identifier: rONv6lfuIi1rC7wKdgo9L9RFV5mpTecTn0dSggcFI7o=
Subject key identifier: 40:C9:E2:29:FC:97:EB:55:2F:DC:74:EA:1F:82:EE:73:5E:81:27:53
Certificate issuer: /CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Certificate serial: 0345B033FB1881C2BC0E4FAE7206960271572CBB
Authority key identifier: 44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a333030303a3a2f33362d3336203d3e20323633393730.roa
Signing time: Mon 20 Jan 2025 11:47:59 +0000
ROA not before: Mon 20 Jan 2025 11:42:59 +0000
ROA not after: Mon 19 Jan 2026 11:47:59 +0000
asID: 263970
IP address blocks: 2804:289c:3000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:45:b0:33:fb:18:81:c2:bc:0e:4f:ae:72:06:96:02:71:57:2c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Validity
Not Before: Jan 20 11:42:59 2025 GMT
Not After : Jan 19 11:47:59 2026 GMT
Subject: CN=40C9E229FC97EB552FDC74EA1F82EE735E812753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:af:58:f2:10:bd:51:ad:65:ea:a8:0f:76:21:
d4:04:53:58:b4:97:d8:d1:82:39:29:06:4e:21:2a:
f5:25:3a:4d:fb:a3:45:e8:8d:35:52:7a:4a:0c:44:
c9:04:c7:5e:62:eb:62:28:fd:52:85:eb:25:49:94:
df:28:73:b1:64:7a:53:af:09:17:82:18:03:5c:1f:
10:c6:ad:bc:7a:1b:be:a3:84:89:33:f6:fa:46:29:
96:d8:f1:1f:eb:b7:d7:c2:53:1b:0b:d3:85:ac:95:
bc:4b:11:db:65:16:f4:37:b3:51:cd:df:32:04:63:
d9:d0:e2:f6:28:70:16:80:94:4d:22:12:31:9e:5d:
7c:e3:75:c1:96:9a:d7:50:0a:c0:53:83:f8:db:1b:
db:3b:dd:12:50:6f:6c:11:4e:e9:10:92:70:7f:08:
51:67:4e:2d:f9:d2:ff:e0:ab:fd:c5:1c:7d:73:96:
ab:eb:31:29:77:9b:0f:73:fc:c2:2d:69:4c:b3:c3:
da:b2:f8:e0:23:ec:f7:93:4b:96:4e:0b:67:3d:d1:
01:a8:9d:23:77:c0:99:70:9e:3a:38:3d:2d:ed:28:
81:4c:07:99:0b:c9:62:cd:48:07:3c:1c:00:32:51:
43:ec:a1:88:9a:c6:09:5e:31:06:71:0d:8b:db:a7:
70:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C9:E2:29:FC:97:EB:55:2F:DC:74:EA:1F:82:EE:73:5E:81:27:53
X509v3 Authority Key Identifier:
keyid:44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/44D7F23D5E330CBCE5452DA8159460000FACF7DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a333030303a3a2f33362d3336203d3e20323633393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:289c:3000::/36
Signature Algorithm: sha256WithRSAEncryption
29:16:3e:c6:1c:01:1b:23:f3:7f:d8:2b:c9:94:6c:4b:03:f0:
6d:5e:f6:68:39:3f:d1:29:f0:cf:ff:4e:8f:94:ce:f8:78:50:
be:0f:da:66:31:e3:ca:d9:90:2a:72:db:97:c2:9c:4e:8e:ff:
c4:6c:11:ab:39:8e:a4:6e:fc:2b:b8:3f:2a:2f:b9:0f:07:ef:
33:e2:dd:da:18:09:68:86:86:1a:f9:3a:05:6b:6d:3c:c9:e1:
35:b9:c0:ec:4b:a2:a6:4f:81:62:ad:93:00:b1:34:76:87:4b:
86:79:42:22:45:34:d5:48:a1:64:8e:63:20:f8:35:4e:5a:9a:
12:75:d4:5e:fc:67:0e:bb:d1:d6:ea:66:f1:ec:b1:af:c6:7f:
b3:04:4e:c4:04:f6:92:cd:91:10:a4:6f:97:16:ce:d4:c0:2b:
a1:3c:35:9e:6c:8c:60:57:44:5d:24:9d:66:5a:0d:b4:0c:5c:
29:b4:a3:ac:3a:4b:bc:87:99:0c:0a:3d:76:78:d2:35:40:22:
05:75:e9:50:10:4f:0d:fd:35:f8:fc:68:50:d4:2b:6b:0d:17:
4c:43:db:9e:34:de:32:a4:fe:9c:e5:4e:44:f9:ed:2b:1e:08:
19:1c:c8:36:3d:34:a9:3e:66:9a:57:1a:70:8c:de:5f:8f:8b:
64:15:e2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:32:56 2025 by rpki-client