Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a383030303a3a2f33332d3333203d3e20323633393730.roa
File: 323830343a323839633a383030303a3a2f33332d3333203d3e20323633393730.roa (raw, json)
Hash identifier: aNPN8EnzKLyWrjvzPOUoHEMRdv8/myOM/iiZC2pNKmE=
Subject key identifier: 26:CA:1F:8E:5B:92:15:8B:96:40:7A:B3:F4:47:00:DD:24:49:6B:6F
Certificate issuer: /CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Certificate serial: 18BD3135527EF7C869FD1F991A544921A2C48296
Authority key identifier: 44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a383030303a3a2f33332d3333203d3e20323633393730.roa
Signing time: Mon 20 Jan 2025 11:47:56 +0000
ROA not before: Mon 20 Jan 2025 11:42:56 +0000
ROA not after: Mon 19 Jan 2026 11:47:56 +0000
asID: 263970
IP address blocks: 2804:289c:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:bd:31:35:52:7e:f7:c8:69:fd:1f:99:1a:54:49:21:a2:c4:82:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Validity
Not Before: Jan 20 11:42:56 2025 GMT
Not After : Jan 19 11:47:56 2026 GMT
Subject: CN=26CA1F8E5B92158B96407AB3F44700DD24496B6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:71:1a:9c:0f:b1:2d:a9:4f:f9:c2:72:35:ca:
b1:9c:62:6d:94:67:74:61:77:4f:dc:ea:29:d8:10:
84:e3:81:31:34:4b:6d:43:e1:cf:bf:1d:4d:51:94:
5b:ab:db:b0:f3:cd:9b:6e:86:47:6a:08:c6:b8:4c:
d5:e0:1c:57:54:30:64:6e:1a:0d:8c:4e:21:36:5c:
10:08:69:2d:ff:ec:a9:c6:b1:b7:9c:79:1c:7c:85:
1a:ae:f0:ec:8a:2d:af:2a:ca:d3:30:c1:fa:79:77:
41:0d:b7:94:55:3f:ab:2b:e0:af:e1:c0:28:39:0d:
88:b0:af:0c:44:10:ca:3a:5a:8e:d5:63:bb:80:44:
33:a6:17:40:fb:42:4a:37:e3:55:8b:c6:af:3d:40:
8b:19:8f:e6:66:54:8d:e9:cd:29:ee:4f:19:a2:86:
aa:a8:0a:5a:c0:54:63:2c:28:22:a4:38:01:e5:c8:
21:6d:58:66:38:92:27:30:22:bd:97:9e:d2:e6:5d:
71:20:0e:49:6e:c5:f0:88:60:01:ee:71:23:7a:c7:
5f:78:0b:06:2d:83:9e:5d:a1:4c:6e:34:36:c5:49:
07:34:30:85:04:ab:bc:12:70:b6:9a:8a:00:e5:84:
99:d1:ac:8c:72:d9:f2:9d:71:0f:b9:84:c0:7c:bf:
52:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:CA:1F:8E:5B:92:15:8B:96:40:7A:B3:F4:47:00:DD:24:49:6B:6F
X509v3 Authority Key Identifier:
keyid:44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/44D7F23D5E330CBCE5452DA8159460000FACF7DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a383030303a3a2f33332d3333203d3e20323633393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:289c:8000::/33
Signature Algorithm: sha256WithRSAEncryption
3a:61:03:20:fa:d4:e9:67:05:12:e4:28:da:b7:30:a9:7b:03:
b7:37:f4:ef:2b:fb:dc:f3:2d:51:31:9f:a2:64:b8:85:c6:66:
18:87:a2:9b:9c:98:63:6c:1d:24:36:c8:78:db:67:25:9f:46:
57:d2:4c:78:8f:05:ef:98:ee:fb:af:dd:01:7b:ec:4e:83:16:
4d:47:d9:0e:9a:a5:11:41:dc:7a:87:66:78:3b:22:39:8c:46:
81:71:70:00:4d:82:c0:83:93:0d:fb:e7:10:4d:b8:2f:63:fc:
68:57:48:cd:50:92:ba:e8:e6:fc:86:07:19:52:8a:a9:6a:ff:
aa:2c:23:66:c3:9b:a0:bb:0a:e2:5a:24:94:c6:6f:cd:0a:45:
9c:a9:12:bf:4d:3e:83:c7:56:be:72:46:f0:a3:cf:8b:cf:e2:
03:ed:a8:47:47:ad:1c:e7:96:c2:41:e5:28:fd:5c:f2:9d:df:
3c:7d:9d:43:9c:94:a9:54:b4:aa:b6:10:a4:3d:ec:6c:9f:2c:
7e:04:ff:3c:50:95:8c:85:9b:6b:63:50:2a:14:e1:75:48:28:
79:0f:48:f6:4a:7d:19:23:c7:12:39:50:9a:1f:0f:d0:bc:6f:
e5:7a:f4:f0:a7:59:79:1d:d3:bc:96:5a:c0:c6:3c:7d:df:08:
31:de:e2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:42:02 2025 by rpki-client