Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a343030303a3a2f33362d3336203d3e20323633393730.roa
File: 323830343a323839633a343030303a3a2f33362d3336203d3e20323633393730.roa (raw, json)
Hash identifier: TX+95j+6VD5+Lp/Ss19E3VDWCf6U48fqz055fPCvJFw=
Subject key identifier: 9C:3C:F6:09:BE:95:AC:D2:4F:EB:D0:09:A5:05:6D:4B:56:81:D9:10
Certificate issuer: /CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Certificate serial: 6E7DD1018E892AF4368B5623A849774A8B7EDB0C
Authority key identifier: 44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a343030303a3a2f33362d3336203d3e20323633393730.roa
Signing time: Mon 20 Jan 2025 11:48:03 +0000
ROA not before: Mon 20 Jan 2025 11:43:03 +0000
ROA not after: Mon 19 Jan 2026 11:48:03 +0000
asID: 263970
IP address blocks: 2804:289c:4000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:7d:d1:01:8e:89:2a:f4:36:8b:56:23:a8:49:77:4a:8b:7e:db:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Validity
Not Before: Jan 20 11:43:03 2025 GMT
Not After : Jan 19 11:48:03 2026 GMT
Subject: CN=9C3CF609BE95ACD24FEBD009A5056D4B5681D910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:86:34:86:cc:e7:e1:63:b9:a0:c5:7f:ad:7e:
60:28:b0:05:81:f5:25:d9:ab:38:22:d7:c0:92:a3:
1c:bf:fa:15:f1:0d:c3:8c:e9:11:ff:21:c1:17:bb:
5a:bb:16:b4:64:f8:88:c0:b5:67:90:03:ec:a8:c7:
4c:3c:b7:48:04:d3:32:bc:3f:14:af:af:08:c0:5d:
1c:6c:23:d8:05:be:87:e7:2a:f2:5c:9d:74:ab:8f:
38:ab:2b:8a:41:77:4b:78:9c:80:ca:8a:c1:f5:97:
45:45:b2:ea:de:d6:15:24:8f:b1:fe:46:a9:c0:4f:
35:bd:08:93:28:a2:f2:39:89:79:fb:64:1b:31:7c:
1c:6b:e4:e7:00:36:9b:5c:4f:67:fb:78:c2:39:63:
7a:9a:c9:db:9d:bb:c9:3a:28:67:f4:59:fa:a9:58:
17:26:ee:6a:90:96:2c:e5:eb:19:d1:43:33:10:51:
6f:bf:13:f1:99:5d:fc:23:9b:e4:f4:99:ff:5b:a2:
28:ce:05:d5:fc:1f:e2:90:6a:ed:a8:ce:e5:6e:50:
d2:62:90:89:77:7a:cd:b3:f3:d8:9e:62:22:1a:2d:
66:ee:25:7f:49:e8:ce:17:fc:47:04:35:2b:82:41:
82:fb:3d:86:1e:38:0c:e7:4d:93:ef:44:61:5a:a3:
cf:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3C:F6:09:BE:95:AC:D2:4F:EB:D0:09:A5:05:6D:4B:56:81:D9:10
X509v3 Authority Key Identifier:
keyid:44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/44D7F23D5E330CBCE5452DA8159460000FACF7DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a343030303a3a2f33362d3336203d3e20323633393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:289c:4000::/36
Signature Algorithm: sha256WithRSAEncryption
16:15:23:7a:7b:a9:94:76:4c:74:63:2d:4b:12:57:c9:4e:ec:
0d:90:0b:d4:ff:60:80:12:23:d3:32:71:0c:a0:cc:cc:e8:08:
9b:8c:a2:57:2c:48:dc:4d:c1:50:7a:01:9a:b1:ec:3f:08:1d:
c5:1f:2f:83:98:6f:fe:93:cd:7b:7d:f1:29:ba:81:ce:c9:b5:
32:e8:0f:37:d8:cc:2f:1e:3f:6c:e6:ed:f2:e2:27:9b:f6:6e:
8e:b2:c1:06:56:c4:fd:6d:75:dc:12:dd:14:fa:90:30:ac:e9:
55:ca:ab:ef:c1:8d:aa:9c:6f:ca:1b:6b:fb:71:5f:8c:f4:af:
c3:04:11:05:c8:90:7e:c3:7d:17:ff:9e:65:e6:e2:ec:dc:71:
c1:58:2f:6a:4c:70:5e:c1:ca:61:49:45:b0:7f:bf:1c:7c:a2:
3a:cb:1f:85:53:74:60:ee:5f:0e:23:02:c5:4e:aa:fd:ba:e5:
9e:06:9b:37:a2:8e:29:6f:cd:c8:f3:49:64:b5:da:92:e9:05:
14:36:c1:96:f3:2b:49:3c:bd:22:3f:7d:40:5b:22:41:08:80:
fd:35:9d:62:0c:77:e4:cd:43:95:5d:38:2f:3b:67:7c:35:4e:
2a:c0:d1:91:3b:72:2a:4b:86:f8:73:38:8c:e2:b7:4c:46:89:
f2:e8:ab:5c
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUbn3RAY6JKvQ2i1YjqEl3Sot+2wwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDREN0YyM0Q1RTMzMENCQ0U1NDUyREE4MTU5NDYwMDAw
RkFDRjdERjAeFw0yNTAxMjAxMTQzMDNaFw0yNjAxMTkxMTQ4MDNaMDMxMTAvBgNV
BAMTKDlDM0NGNjA5QkU5NUFDRDI0RkVCRDAwOUE1MDU2RDRCNTY4MUQ5MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7hjSGzOfhY7mgxX+tfmAosAWB
9SXZqzgi18CSoxy/+hXxDcOM6RH/IcEXu1q7FrRk+IjAtWeQA+yox0w8t0gE0zK8
PxSvrwjAXRxsI9gFvofnKvJcnXSrjzirK4pBd0t4nIDKisH1l0VFsure1hUkj7H+
RqnATzW9CJMoovI5iXn7ZBsxfBxr5OcANptcT2f7eMI5Y3qaydudu8k6KGf0Wfqp
WBcm7mqQlizl6xnRQzMQUW+/E/GZXfwjm+T0mf9boijOBdX8H+KQau2ozuVuUNJi
kIl3es2z89ieYiIaLWbuJX9J6M4X/EcENSuCQYL7PYYeOAznTZPvRGFao8/lAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUnDz2Cb6VrNJP69AJpQVtS1aB2RAwHwYDVR0j
BBgwFoAURNfyPV4zDLzlRS2oFZRgAA+s998wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWZMcVYyWURyMnJTazEyOHVOaEJLejh2MlJiMUFYbnZKY0VLM2pyVTNn
bWUvMC80NEQ3RjIzRDVFMzMwQ0JDRTU0NTJEQTgxNTk0NjAwMDBGQUNGN0RGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ0RDdGMjNENUUzMzBDQkNF
NTQ1MkRBODE1OTQ2MDAwMEZBQ0Y3REYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlmTHFWMllEcjJyU2sxMjh1TmhCS3o4djJSYjFBWG52SmNFSzNqclUzZ21lLzAv
MzIzODMwMzQzYTMyMzgzOTYzM2EzNDMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzMzM5MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEKJxAMA0GCSqGSIb3DQEBCwUA
A4IBAQAWFSN6e6mUdkx0Yy1LElfJTuwNkAvU/2CAEiPTMnEMoMzM6AibjKJXLEjc
TcFQegGasew/CB3FHy+DmG/+k817ffEpuoHOybUy6A832MwvHj9s5u3y4ieb9m6O
ssEGVsT9bXXcEt0U+pAwrOlVyqvvwY2qnG/KG2v7cV+M9K/DBBEFyJB+w30X/55l
5uLs3HHBWC9qTHBewcphSUWwf78cfKI6yx+FU3Rg7l8OIwLFTqr9uuWeBps3oo4p
b83I80lktdqS6QUUNsGW8ytJPL0iP31AWyJBCID9NZ1iDHfkzUOVXTgvO2d8NU4q
wNGRO3IqS4b4cziM4rdMRony6Ktc
-----END CERTIFICATE-----
Generated at Sat Feb 22 04:27:01 2025 by rpki-client