Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a363030303a3a2f33352d3335203d3e20323633393730.roa
File: 323830343a323839633a363030303a3a2f33352d3335203d3e20323633393730.roa (raw, json)
Hash identifier: 2oSNynogG+YvIjApp5Zu0noiN5OdhEwZS1wKxgGJj70=
Subject key identifier: A3:9C:3B:2F:6D:91:AC:59:68:BF:1B:58:BD:67:4D:9F:E1:91:9E:EC
Certificate issuer: /CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Certificate serial: 3120ADB09CF17264946652845C7BF36F5C084612
Authority key identifier: 44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a363030303a3a2f33352d3335203d3e20323633393730.roa
Signing time: Mon 20 Jan 2025 11:48:02 +0000
ROA not before: Mon 20 Jan 2025 11:43:02 +0000
ROA not after: Mon 19 Jan 2026 11:48:02 +0000
asID: 263970
IP address blocks: 2804:289c:6000::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:20:ad:b0:9c:f1:72:64:94:66:52:84:5c:7b:f3:6f:5c:08:46:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Validity
Not Before: Jan 20 11:43:02 2025 GMT
Not After : Jan 19 11:48:02 2026 GMT
Subject: CN=A39C3B2F6D91AC5968BF1B58BD674D9FE1919EEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b7:c0:3e:f0:a5:93:fb:3b:0b:8e:20:8b:e6:
5f:e2:8d:81:71:86:4a:eb:dd:16:ee:2a:c0:a2:d2:
9e:93:43:5f:b9:7a:69:59:a0:18:47:96:06:7e:94:
e9:01:b3:74:8b:aa:5d:09:ed:7a:ae:61:a0:9b:3c:
d5:b4:83:77:a6:5e:14:6b:71:bc:4f:01:5a:3b:ee:
01:1d:5b:88:03:f9:f9:f0:81:57:1e:07:1f:72:9c:
fc:18:62:fe:4c:cb:1c:ca:2a:8a:0d:33:3b:8c:db:
30:ad:51:94:83:0c:63:66:7d:de:6f:f4:02:4a:6d:
24:c2:1a:1b:ab:7b:be:1a:ed:dc:15:81:ea:74:57:
c2:19:77:3c:19:39:75:14:b6:bd:2f:c6:d8:08:65:
cd:c0:56:e6:db:97:91:37:cb:dc:d5:de:90:b6:b8:
a3:58:2d:2e:a2:48:4f:b7:fe:87:2a:96:93:87:72:
93:69:2d:60:c6:39:20:f0:ac:b5:a7:65:33:fe:10:
3d:8d:e5:2f:1f:f9:74:7b:d9:46:66:86:f8:40:5d:
09:c9:ee:5e:0b:19:5b:c7:d1:6e:15:1a:0a:e6:82:
f8:ab:6a:23:92:91:f6:1a:32:0c:79:3d:30:3e:51:
ef:c7:a0:40:f7:9f:59:39:60:de:34:0c:78:c9:cb:
e3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9C:3B:2F:6D:91:AC:59:68:BF:1B:58:BD:67:4D:9F:E1:91:9E:EC
X509v3 Authority Key Identifier:
keyid:44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/44D7F23D5E330CBCE5452DA8159460000FACF7DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a363030303a3a2f33352d3335203d3e20323633393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:289c:6000::/35
Signature Algorithm: sha256WithRSAEncryption
1f:e9:0f:d8:82:a4:1e:e7:32:22:e6:65:d4:ff:fd:d4:60:bf:
0c:10:c2:be:02:3b:87:d5:70:e5:e4:87:99:2a:c8:a2:b0:e0:
a2:fc:34:4c:23:31:9c:e2:5a:37:c2:96:5c:16:21:25:8e:d8:
1f:3c:ea:2c:36:a9:65:4d:7a:57:16:d3:63:20:1f:39:a3:d5:
12:9a:5d:40:73:df:8e:8e:df:3d:ac:14:65:bf:cc:32:76:f9:
e9:0d:32:0e:60:7f:93:6c:0a:f1:44:f0:54:87:17:8b:64:aa:
d7:fe:e7:6d:28:3f:2e:cb:c1:0e:04:a3:96:95:d1:d7:13:1e:
52:59:fd:5f:52:14:ff:29:21:85:f1:26:a0:d7:f5:f0:56:5b:
07:b4:da:42:b6:36:7c:25:69:c7:da:cd:71:df:1e:13:88:aa:
ce:1b:98:f7:36:d1:88:68:7a:3a:4c:07:5b:3c:a4:62:30:89:
36:6e:ea:c0:1e:f1:0a:40:86:01:5a:d7:f7:f1:7b:13:b8:58:
80:dd:b5:d6:dd:34:73:55:77:88:31:82:07:14:d6:c6:70:f9:
bb:13:89:1e:98:9d:e2:87:b3:c1:20:44:02:87:ae:60:e0:00:
a3:56:dc:e3:66:39:c6:5f:5d:bd:07:ed:8f:b3:8d:7c:92:af:
14:d0:e2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:34:54 2025 by rpki-client