Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a383030303a3a2f33342d3334203d3e20323633393730.roa
File: 323830343a323839633a383030303a3a2f33342d3334203d3e20323633393730.roa (raw, json)
Hash identifier: fNnULpsA5jA2/OZGX3cvsae80bj677a0plj/rOhtIxA=
Subject key identifier: 32:0B:FC:66:3E:00:7F:78:C2:D8:84:8B:54:DC:7E:95:B8:C1:FD:6B
Certificate issuer: /CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Certificate serial: 2452DE633C369066EB59FA827A517A9AED2C1ECF
Authority key identifier: 44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a383030303a3a2f33342d3334203d3e20323633393730.roa
Signing time: Mon 20 Jan 2025 11:48:03 +0000
ROA not before: Mon 20 Jan 2025 11:43:03 +0000
ROA not after: Mon 19 Jan 2026 11:48:03 +0000
asID: 263970
IP address blocks: 2804:289c:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:52:de:63:3c:36:90:66:eb:59:fa:82:7a:51:7a:9a:ed:2c:1e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Validity
Not Before: Jan 20 11:43:03 2025 GMT
Not After : Jan 19 11:48:03 2026 GMT
Subject: CN=320BFC663E007F78C2D8848B54DC7E95B8C1FD6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a9:a3:d8:bf:64:73:87:13:7b:45:53:9a:53:
1b:40:ea:63:8a:05:72:84:4f:02:a6:37:b3:de:21:
a1:68:6c:3e:d6:a9:ef:ef:6b:36:56:a8:22:3b:f1:
93:5e:49:94:80:4a:41:59:4e:79:b1:e9:a2:d9:2f:
b2:ba:cc:7a:90:af:1b:d5:30:d5:8c:a4:0d:99:1d:
02:ac:11:7a:a3:c3:12:cd:c6:41:b8:6a:0e:79:27:
fc:ab:28:7c:9c:04:fa:ce:a1:7c:2d:5f:b6:67:81:
72:25:4b:40:20:db:ee:57:9f:67:fe:0a:8e:44:43:
78:b9:2e:c4:0d:35:b7:27:92:c2:0b:3e:47:9e:40:
12:48:e3:99:25:2a:b0:cd:39:90:a9:05:f9:4e:d0:
9b:dc:35:4f:f2:a2:7b:70:80:31:a0:97:f9:57:cf:
68:15:4f:ad:c9:91:82:00:9d:b1:f0:f6:b9:8b:33:
a9:c0:1e:44:05:fc:ba:49:c6:f7:0a:51:3c:bf:31:
54:0d:fc:36:e6:19:56:b8:26:57:d7:1e:24:7a:18:
ef:06:13:89:08:3a:0a:eb:97:0d:66:c8:31:9e:68:
54:ff:04:d6:75:48:23:78:2a:23:34:8b:cc:45:27:
cd:0f:08:38:a0:17:e2:5a:6b:d4:02:bc:e6:de:4e:
3d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0B:FC:66:3E:00:7F:78:C2:D8:84:8B:54:DC:7E:95:B8:C1:FD:6B
X509v3 Authority Key Identifier:
keyid:44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/44D7F23D5E330CBCE5452DA8159460000FACF7DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a383030303a3a2f33342d3334203d3e20323633393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:289c:8000::/34
Signature Algorithm: sha256WithRSAEncryption
2b:c4:76:b2:9b:84:c5:95:7f:b9:6d:a0:c4:0a:53:93:61:bc:
c9:25:f0:6c:8c:1d:da:88:25:6e:5d:19:e5:e3:72:25:73:9a:
0e:9e:59:85:47:c7:1e:2a:b8:eb:26:ac:22:38:9f:50:12:f9:
28:74:29:5e:2d:88:2e:c1:92:3a:0c:d1:90:dd:1e:d8:e7:93:
42:df:b7:e3:68:28:3f:9f:74:b2:16:6a:04:32:cd:93:59:2d:
0c:f2:e6:dd:39:32:e6:6f:56:c3:98:61:5c:56:f8:6e:21:78:
94:f1:1b:d0:54:cb:49:3e:28:8d:e5:9a:e7:e6:af:92:83:76:
2d:f1:06:26:da:6b:36:40:73:13:fe:f0:9b:63:a5:03:ef:27:
3c:2c:30:49:64:91:ce:00:a5:04:f1:8c:bf:a4:f4:32:6a:5a:
af:e0:82:bd:2d:ca:41:d6:73:1e:e8:0b:6c:62:41:b9:3d:3f:
76:cf:d2:03:51:ea:d6:44:75:0b:d6:11:ce:31:b9:7a:96:10:
24:d6:93:50:5f:aa:7a:b3:73:0e:f2:b3:ae:f1:30:a3:de:16:
ea:9d:e0:e8:5f:f8:1d:e7:48:35:83:01:5b:5a:27:68:c7:3b:
26:b7:a6:11:81:f7:e8:1a:31:10:88:97:70:54:ed:12:a6:4f:
33:1f:42:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:46:32 2025 by rpki-client