Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a363030303a3a2f33362d3336203d3e20323633393730.roa
File: 323830343a323839633a363030303a3a2f33362d3336203d3e20323633393730.roa (raw, json)
Hash identifier: MTl5BheGnLx2IRwsHp0o0N66x6YuXpi3htCHAF6uIVw=
Subject key identifier: 47:B7:A2:D8:CD:06:E3:D6:DC:48:64:53:1D:3C:DB:BB:81:8E:96:ED
Certificate issuer: /CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Certificate serial: 6FEBE7EAB05907653F9F325226BDD3E44BEEED51
Authority key identifier: 44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a363030303a3a2f33362d3336203d3e20323633393730.roa
Signing time: Mon 20 Jan 2025 11:48:02 +0000
ROA not before: Mon 20 Jan 2025 11:43:02 +0000
ROA not after: Mon 19 Jan 2026 11:48:02 +0000
asID: 263970
IP address blocks: 2804:289c:6000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:eb:e7:ea:b0:59:07:65:3f:9f:32:52:26:bd:d3:e4:4b:ee:ed:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Validity
Not Before: Jan 20 11:43:02 2025 GMT
Not After : Jan 19 11:48:02 2026 GMT
Subject: CN=47B7A2D8CD06E3D6DC4864531D3CDBBB818E96ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6d:de:fa:66:f2:b3:a1:e3:99:12:bb:57:94:
b3:31:0e:fc:14:2d:d4:8d:41:c6:64:19:50:93:23:
b2:7d:a3:49:8a:40:da:ed:87:05:d7:bc:77:8c:fb:
08:58:8b:14:89:b0:b3:69:4f:02:97:91:16:9c:92:
82:a5:7b:72:70:2c:b9:bc:43:06:e5:d2:eb:72:1d:
4c:a9:42:70:21:25:64:ea:3a:2a:74:89:e4:91:48:
98:55:d4:9e:ad:ce:9d:d8:d6:2d:66:5b:15:08:2e:
6a:48:80:ae:4d:52:1d:d5:6c:24:20:da:e0:7f:1b:
92:59:86:07:dd:58:57:b4:a0:e7:9d:c6:dd:64:76:
96:6e:b4:b8:cb:36:70:8e:f6:3f:33:7a:a5:b7:e2:
30:6f:1d:c8:b8:06:79:31:48:e0:b5:19:d5:ce:23:
03:a4:54:f4:df:0a:83:dd:43:f9:1e:67:d4:16:ce:
14:9d:d7:9a:c4:02:13:db:65:e9:3f:b9:b3:9c:04:
e8:1f:11:7e:2f:12:33:97:8a:62:ad:aa:dc:bb:a5:
17:5b:de:ca:ea:07:3f:28:d2:12:d7:3f:64:7d:ff:
3b:57:c8:00:b6:12:2e:27:7f:f0:3e:64:29:ab:33:
25:ea:73:62:82:68:1b:2e:9e:a7:47:fc:20:82:fa:
90:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B7:A2:D8:CD:06:E3:D6:DC:48:64:53:1D:3C:DB:BB:81:8E:96:ED
X509v3 Authority Key Identifier:
keyid:44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/44D7F23D5E330CBCE5452DA8159460000FACF7DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a363030303a3a2f33362d3336203d3e20323633393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:289c:6000::/36
Signature Algorithm: sha256WithRSAEncryption
b4:d5:58:be:a3:d7:20:32:7f:d4:2b:34:a1:7f:45:55:bf:74:
fa:55:b8:8a:ab:a7:f4:5e:47:c8:d1:fb:7f:06:05:4b:b7:58:
e4:21:d0:ad:a4:0b:62:b1:2a:de:80:f7:70:04:a1:07:6f:d9:
b1:47:80:9c:fc:f3:30:a6:73:cf:a2:1f:5f:9f:21:c1:99:d7:
db:54:18:fb:04:da:ba:32:e5:0e:ee:f7:d8:d3:1f:af:c3:ae:
49:9d:bb:12:49:90:81:82:2b:93:fe:38:31:11:16:89:ec:1e:
5a:ae:02:b4:df:17:d0:c6:c6:41:5c:9b:8b:fb:c9:4c:c8:76:
49:cb:35:b0:73:99:bf:bc:49:6c:86:7a:b5:35:8b:85:c2:e7:
15:a7:9c:3e:1c:20:8a:d9:41:a4:25:05:ea:5a:74:18:6e:1c:
0c:c6:2d:fb:b3:30:96:56:bc:30:2d:99:a3:28:88:b0:58:74:
f1:38:d1:6d:e8:4b:71:69:f2:08:94:b4:34:cf:f3:b1:3a:7b:
76:08:74:29:79:73:d7:20:a6:b0:71:ff:57:eb:18:4f:94:ea:
ab:b8:56:6f:66:72:f8:26:9a:03:6a:ae:94:b6:f9:c2:03:be:
43:a9:f1:d6:5e:84:ab:7b:1c:e7:c4:21:d5:47:81:42:8e:52:
1c:d0:58:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:28:59 2025 by rpki-client