Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a343030303a3a2f33352d3335203d3e20323633393730.roa
File: 323830343a323839633a343030303a3a2f33352d3335203d3e20323633393730.roa (raw, json)
Hash identifier: obmAHupJ/tbGYTyjUcE54AC2ZiAreF/4Gb6htx1mwzQ=
Subject key identifier: 7D:2A:A7:9C:87:EB:D2:D8:B3:C4:76:23:98:1C:44:EF:62:CC:2A:CA
Certificate issuer: /CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Certificate serial: 0637D8EB96785C1DEFF8501EEDC32797E2DF3CDC
Authority key identifier: 44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a343030303a3a2f33352d3335203d3e20323633393730.roa
Signing time: Mon 20 Jan 2025 11:47:58 +0000
ROA not before: Mon 20 Jan 2025 11:42:58 +0000
ROA not after: Mon 19 Jan 2026 11:47:58 +0000
asID: 263970
IP address blocks: 2804:289c:4000::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:37:d8:eb:96:78:5c:1d:ef:f8:50:1e:ed:c3:27:97:e2:df:3c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Validity
Not Before: Jan 20 11:42:58 2025 GMT
Not After : Jan 19 11:47:58 2026 GMT
Subject: CN=7D2AA79C87EBD2D8B3C47623981C44EF62CC2ACA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d0:f4:83:ab:c8:5f:2e:fa:3c:52:30:36:0f:
ee:62:7e:00:9e:f9:4a:b4:78:b5:eb:44:7f:e5:63:
7d:f0:2b:4f:49:88:67:8e:c0:bd:a5:7c:fd:c8:3b:
11:0a:7e:e5:75:ba:65:71:22:9f:ea:60:11:45:77:
ec:f4:1d:13:7b:84:e9:7d:ba:25:1b:49:8f:1d:fa:
76:b0:17:5b:95:c7:b7:fc:05:86:d2:5a:e3:51:e0:
91:68:92:63:9f:45:f3:dc:f3:b9:3b:53:98:cc:68:
31:39:a7:43:19:52:53:9a:e2:81:49:46:5c:d1:99:
21:c3:c4:c1:4d:64:a9:96:f1:26:a4:2d:8a:6a:42:
23:b4:82:1f:6f:f7:c1:5e:a9:c1:f4:eb:18:e8:3d:
31:43:c9:2e:87:28:86:52:52:33:aa:8b:ee:c7:a3:
5c:00:8e:c6:7b:4f:d3:8f:0e:19:4d:ca:5d:88:bc:
c3:d7:dc:fe:34:dd:4b:b2:50:8a:16:9f:7b:f2:61:
59:5d:b6:c3:e5:16:2a:63:35:5b:be:c4:ae:09:5d:
e9:50:07:a8:eb:4d:51:a2:19:9e:db:97:b6:da:58:
e4:0f:e3:68:2f:de:5b:72:00:0d:a2:eb:5a:98:f7:
c3:08:7c:24:97:a8:a4:53:b6:4d:a7:87:60:5b:29:
16:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:2A:A7:9C:87:EB:D2:D8:B3:C4:76:23:98:1C:44:EF:62:CC:2A:CA
X509v3 Authority Key Identifier:
keyid:44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/44D7F23D5E330CBCE5452DA8159460000FACF7DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a343030303a3a2f33352d3335203d3e20323633393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:289c:4000::/35
Signature Algorithm: sha256WithRSAEncryption
0b:4b:34:f4:29:3c:80:54:8a:af:b7:ea:09:22:9d:0b:f0:c3:
f1:7c:73:29:db:eb:ab:b4:67:f9:c1:2c:b8:d0:f8:49:55:4e:
bb:5c:47:b8:94:ab:75:65:22:1f:e9:f0:03:3e:24:73:29:5b:
88:6c:52:7c:3f:54:ac:9b:52:01:2b:c0:40:61:01:34:16:b9:
61:16:b9:95:6b:7c:a7:d6:54:d3:8f:8b:ca:75:e0:89:2a:77:
bf:0a:e9:d7:73:71:fd:3a:2a:82:c3:69:54:63:01:36:d6:ae:
e7:14:45:09:ee:43:fa:68:c6:b9:05:b2:03:2b:ee:37:8c:51:
11:44:e0:3f:e8:9c:3f:84:25:8d:89:8c:f5:be:d6:f9:a5:ac:
b0:a0:1e:84:2b:38:3e:a1:b9:bd:f6:5d:c2:c0:df:63:61:1a:
73:17:77:28:f0:c5:56:7f:f8:21:80:94:ea:94:5e:a2:a7:78:
15:e4:92:68:2d:3b:f8:b0:3d:90:df:85:67:61:40:58:9f:64:
90:72:64:67:7d:38:a2:ec:39:f2:d7:55:fd:81:13:d8:6a:49:
b5:4a:34:99:47:5c:57:e8:a0:85:c5:05:a5:e9:74:b8:c5:10:
4b:a6:96:c3:d7:d1:0a:1b:be:40:7b:f4:b5:b4:25:35:f7:38:
ce:5f:78:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:41:54 2025 by rpki-client