Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a343030303a3a2f33342d3334203d3e20323633393730.roa
File: 323830343a323839633a343030303a3a2f33342d3334203d3e20323633393730.roa (raw, json)
Hash identifier: gX3MSgaCcXJ8FoDXQpEry6hU5H1bvBOOgLWphYPPeZk=
Subject key identifier: A1:A2:EB:45:4E:6B:E4:8C:3F:F9:77:8E:D8:B2:FE:4C:F3:B0:AF:16
Certificate issuer: /CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Certificate serial: 33082BEA96FACD7BEA42484E3DED2AE2E6FFC8CE
Authority key identifier: 44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a343030303a3a2f33342d3334203d3e20323633393730.roa
Signing time: Mon 20 Jan 2025 11:47:58 +0000
ROA not before: Mon 20 Jan 2025 11:42:58 +0000
ROA not after: Mon 19 Jan 2026 11:47:58 +0000
asID: 263970
IP address blocks: 2804:289c:4000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:08:2b:ea:96:fa:cd:7b:ea:42:48:4e:3d:ed:2a:e2:e6:ff:c8:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Validity
Not Before: Jan 20 11:42:58 2025 GMT
Not After : Jan 19 11:47:58 2026 GMT
Subject: CN=A1A2EB454E6BE48C3FF9778ED8B2FE4CF3B0AF16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f1:31:fb:83:21:cf:61:5c:55:3e:f8:37:d8:
e3:52:55:f2:46:41:e3:61:22:fb:25:fa:2f:79:74:
a9:5a:56:96:97:8d:c6:0f:79:fb:c2:ef:47:3b:86:
0d:c1:1c:03:f1:a7:79:f4:c2:b9:cd:ce:b5:dc:0d:
8d:46:39:8c:52:af:ae:38:92:f3:70:c5:0a:e7:af:
79:e0:9e:5a:07:9f:5b:69:bb:e3:c4:7c:a8:f1:bf:
f4:85:8f:c5:e3:90:6d:19:ec:d2:d9:45:84:8f:e9:
ab:3d:f9:eb:c6:ae:20:45:82:65:89:17:30:6d:c1:
9b:e1:e6:65:e1:1b:d8:22:89:dd:d6:85:1d:97:27:
93:41:37:84:94:20:62:e5:ff:f5:6e:15:50:d4:60:
e4:fb:52:c0:bd:88:eb:df:ae:9d:10:38:0f:c6:ce:
a5:82:32:65:08:de:f7:53:3a:6e:0e:77:f3:f8:a0:
ed:06:a2:71:e6:b0:34:80:10:47:c5:89:c2:0e:37:
61:ae:6c:a9:33:b3:8c:8e:1b:e2:a6:1b:b9:98:54:
76:12:15:5c:ab:5d:ad:b9:6e:03:ef:1e:10:4c:d0:
f1:ce:55:a6:fa:64:52:76:70:66:30:ee:5c:10:26:
8a:a6:75:95:f9:d4:af:d0:ec:5a:51:6b:a9:1f:a7:
4c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A2:EB:45:4E:6B:E4:8C:3F:F9:77:8E:D8:B2:FE:4C:F3:B0:AF:16
X509v3 Authority Key Identifier:
keyid:44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/44D7F23D5E330CBCE5452DA8159460000FACF7DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a343030303a3a2f33342d3334203d3e20323633393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:289c:4000::/34
Signature Algorithm: sha256WithRSAEncryption
72:e9:c6:8e:6f:4c:61:86:37:77:21:f2:e4:78:1a:6a:ae:7a:
e9:22:8d:2d:76:a5:f3:93:47:55:b4:f4:64:e7:d7:66:bb:49:
bc:dd:b5:67:d8:37:bb:04:b5:79:41:9d:58:eb:bf:9a:df:a6:
15:15:5c:c9:8d:c3:6a:f3:6f:0c:19:13:6e:42:b7:af:9e:f8:
ab:a9:19:bc:2f:6a:4e:2f:4f:0a:6d:ac:df:5e:f0:76:cb:aa:
13:94:94:f8:78:a2:cc:d4:1e:52:d2:33:f1:9c:27:d9:7b:c9:
1d:a5:63:b1:54:b0:69:f6:a6:65:c6:25:d4:1d:43:a0:8c:6e:
28:0f:c8:87:19:28:70:ec:68:05:be:ef:f7:d1:dd:8e:47:35:
82:9e:d8:bf:82:4d:0a:02:f7:84:c1:13:46:3a:cb:b4:50:22:
4d:87:04:bd:2e:9a:f2:37:a8:63:7c:c8:0d:21:4f:8e:84:1e:
fd:db:28:d2:dc:5f:6e:56:99:5a:db:dc:78:49:69:f4:49:07:
83:0e:32:65:54:4a:71:61:21:69:a9:cb:60:23:6c:7d:a8:df:
e4:5f:1a:42:fd:9c:64:ca:66:75:c6:75:65:0e:02:8f:40:f3:
50:ec:91:a7:08:e5:69:55:3e:1c:ab:41:77:d2:30:40:4c:5f:
1c:9d:bb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:22:47 2025 by rpki-client