Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a373030303a3a2f33362d3336203d3e20323633393730.roa
File: 323830343a323839633a373030303a3a2f33362d3336203d3e20323633393730.roa (raw, json)
Hash identifier: H6oarU4QUz6Eu9oCvd+g0SuNbMjRVaqfOeun4QISJkQ=
Subject key identifier: E5:7B:4E:D0:50:2D:86:9B:91:45:14:BB:AB:93:5C:CC:70:12:F2:6F
Certificate issuer: /CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Certificate serial: 59BE27EAB1AB96C90B1BE7410D993CECA036403F
Authority key identifier: 44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a373030303a3a2f33362d3336203d3e20323633393730.roa
Signing time: Mon 20 Jan 2025 11:48:01 +0000
ROA not before: Mon 20 Jan 2025 11:43:01 +0000
ROA not after: Mon 19 Jan 2026 11:48:01 +0000
asID: 263970
IP address blocks: 2804:289c:7000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:be:27:ea:b1:ab:96:c9:0b:1b:e7:41:0d:99:3c:ec:a0:36:40:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Validity
Not Before: Jan 20 11:43:01 2025 GMT
Not After : Jan 19 11:48:01 2026 GMT
Subject: CN=E57B4ED0502D869B914514BBAB935CCC7012F26F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e5:b0:35:31:af:94:15:b8:b3:3f:de:6f:ff:
b9:b8:8d:fc:30:68:1e:09:08:c9:cb:2e:1f:42:fa:
8c:a8:2f:61:75:8a:9f:3d:de:7e:d4:43:01:6a:c3:
b5:f0:ef:83:99:f5:43:b1:d8:59:b2:09:79:c2:34:
83:e8:96:a8:d4:6d:d9:06:ca:3d:7d:fd:e5:ac:4e:
7f:ed:a9:c5:c9:84:68:9f:68:8e:86:a6:cc:7c:7f:
7d:b1:85:85:5e:54:fb:75:fe:b0:55:71:b7:3e:5a:
e4:6f:df:f3:79:9d:63:47:39:b1:9d:ed:1f:4e:b3:
ac:ce:91:00:04:ed:3b:e9:b1:04:53:4d:ff:b2:88:
1b:a1:b2:a0:be:9d:e6:b0:f8:4c:d5:27:9c:9d:3d:
6d:9f:0f:ea:88:0e:9c:be:29:44:f4:d0:b8:ff:70:
e0:76:8c:2c:e8:e4:d1:6c:23:96:28:f4:f0:b6:4a:
f1:1f:33:1a:a6:f5:94:73:bb:b0:31:9f:f5:b7:72:
c5:a0:3c:5b:ea:fe:c7:10:4e:fb:c5:6d:c8:84:c2:
37:7f:2c:e8:4d:8c:9e:2e:90:48:ba:ec:07:61:56:
d4:8d:c6:c5:c2:06:a3:bc:57:e8:15:7a:98:5e:61:
be:a0:b5:a5:bc:a2:39:94:e0:0c:46:c3:36:27:f9:
26:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7B:4E:D0:50:2D:86:9B:91:45:14:BB:AB:93:5C:CC:70:12:F2:6F
X509v3 Authority Key Identifier:
keyid:44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/44D7F23D5E330CBCE5452DA8159460000FACF7DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a373030303a3a2f33362d3336203d3e20323633393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:289c:7000::/36
Signature Algorithm: sha256WithRSAEncryption
3d:48:56:29:8f:4d:f4:d0:1e:e8:42:7a:c3:4d:b4:df:cd:ad:
5f:17:39:14:8b:a8:56:1f:dd:0e:8c:62:e1:bb:87:c5:45:4e:
57:86:cf:45:9b:ed:bf:d9:86:71:80:34:5a:91:cd:3c:c1:e5:
a7:4c:6a:c0:6c:35:ad:ac:ea:80:d1:63:ae:2f:40:b0:9d:33:
df:3f:cd:54:49:93:65:63:71:15:5f:37:07:7f:b7:5e:48:17:
a0:23:9a:75:15:b0:48:ba:88:a9:d5:64:09:95:c6:fd:3f:3b:
09:43:4f:ea:38:97:2d:84:79:13:7d:8b:7e:fd:a9:b8:b1:05:
23:7a:55:b8:c0:02:b5:73:14:d7:ab:8d:9b:c1:8d:a3:9e:85:
46:89:c9:bf:e6:5d:17:c2:7a:43:a1:83:04:71:cb:44:53:ad:
5c:24:78:32:ce:41:27:9c:4c:33:71:8d:21:47:24:4e:d9:b7:
6b:b3:03:a8:59:6f:98:ea:e1:4c:23:c8:a1:39:2c:76:85:d8:
dd:b1:cf:4a:74:8e:21:d3:d8:0d:b7:ac:a9:6d:4f:e5:ed:07:
27:99:d1:86:1b:90:de:65:da:1c:fa:ec:c3:5d:b0:b9:cd:2f:
01:a0:a0:51:a8:ed:c0:e8:e6:22:54:05:ef:30:6d:bb:2c:21:
a3:bf:5a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:42:26 2025 by rpki-client