Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a353030303a3a2f33362d3336203d3e20323633393730.roa
File: 323830343a323839633a353030303a3a2f33362d3336203d3e20323633393730.roa (raw, json)
Hash identifier: CLb4t2SSUq0AdTpcgDbKqy9B7zl9qt9eF3+QV/el4bE=
Subject key identifier: 65:5A:13:44:55:FB:22:AF:03:CE:50:43:E4:60:CB:80:91:B2:23:96
Certificate issuer: /CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Certificate serial: 64E263F56B48CF7232B908A5D25DABB855108BBD
Authority key identifier: 44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a353030303a3a2f33362d3336203d3e20323633393730.roa
Signing time: Mon 20 Jan 2025 11:48:00 +0000
ROA not before: Mon 20 Jan 2025 11:43:00 +0000
ROA not after: Mon 19 Jan 2026 11:48:00 +0000
asID: 263970
IP address blocks: 2804:289c:5000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:e2:63:f5:6b:48:cf:72:32:b9:08:a5:d2:5d:ab:b8:55:10:8b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Validity
Not Before: Jan 20 11:43:00 2025 GMT
Not After : Jan 19 11:48:00 2026 GMT
Subject: CN=655A134455FB22AF03CE5043E460CB8091B22396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ed:cd:1f:e0:c3:2a:f1:57:67:f0:c3:74:e1:
0f:c0:91:ab:1f:1a:8e:a5:20:b2:14:49:e5:d9:82:
06:03:38:39:62:ec:3a:8f:87:b2:14:1d:74:f3:d7:
e2:9b:9f:79:67:c7:56:69:e1:4f:74:84:0f:31:06:
31:21:e9:18:0d:03:b3:91:8b:18:65:f0:02:01:c6:
c0:0b:76:0f:09:fb:a5:52:a5:41:41:24:89:10:ae:
e5:75:a5:3a:9f:dc:1b:a8:c6:16:f9:d9:37:18:19:
73:dc:85:cc:16:32:f9:b2:75:2e:ec:05:e7:d1:21:
df:99:ae:5f:79:af:cf:6f:29:b5:d1:d6:d0:79:00:
21:02:c7:20:40:d2:2b:d0:0c:a6:1a:4b:a8:39:cf:
27:cf:94:dd:83:74:98:ba:7d:de:dd:4b:eb:c5:1e:
31:b0:4d:ec:b0:59:ff:29:9a:8f:a9:a1:5f:64:19:
f1:ff:bd:f5:6f:54:f7:c2:aa:26:4d:b3:7f:59:91:
9d:0c:ac:13:08:50:13:1a:79:24:44:fc:e3:d2:e5:
c0:70:d5:60:75:36:86:72:ec:f7:22:9a:8b:13:16:
e4:44:98:1d:b4:b4:e8:57:41:8c:24:6c:96:46:9a:
d2:ab:f1:a3:93:4d:74:2f:26:2d:83:aa:e6:cb:13:
3f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5A:13:44:55:FB:22:AF:03:CE:50:43:E4:60:CB:80:91:B2:23:96
X509v3 Authority Key Identifier:
keyid:44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/44D7F23D5E330CBCE5452DA8159460000FACF7DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a353030303a3a2f33362d3336203d3e20323633393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:289c:5000::/36
Signature Algorithm: sha256WithRSAEncryption
30:56:1b:13:b8:6d:8a:ef:09:9d:7f:00:9f:4f:45:c1:33:a1:
22:4a:47:97:90:42:ff:c7:0c:8a:cf:46:34:c3:65:ef:2e:58:
4c:82:c1:ca:b3:16:9c:11:1e:a3:bf:89:9f:99:22:2d:fb:7b:
84:0c:80:5e:19:30:1e:e7:48:23:9e:74:19:cd:e6:60:98:17:
67:96:18:75:22:1c:b6:05:82:7e:6a:9b:f6:74:a6:2e:a7:0a:
c0:36:7a:29:5f:a4:a3:3b:50:25:84:97:72:31:15:11:17:c6:
8f:f8:37:5b:4a:2c:50:46:7d:9a:e2:6d:ca:d6:c4:73:1b:d9:
d1:46:2f:78:9d:4b:1d:0d:67:71:34:67:cb:e0:fe:88:f0:b0:
47:64:b8:e7:c0:0d:ee:f2:91:24:b5:72:23:23:7f:0d:1e:8d:
9d:25:aa:0a:a3:3e:0b:0e:45:97:4b:44:3c:0f:83:05:55:02:
ce:ec:4a:ac:6d:a8:39:d0:b7:2b:12:3c:82:42:65:3a:df:64:
ab:16:6f:b2:b8:ec:fa:13:05:59:38:e5:85:80:c7:f7:37:88:
a3:67:af:c5:63:4f:62:b3:dc:6e:5c:31:6e:15:fc:24:28:eb:
ea:f5:b9:64:b3:25:c8:dd:7f:7b:51:4c:7d:b0:d2:91:40:28:
3c:4b:95:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:47:57 2025 by rpki-client