Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a383030303a3a2f33352d3335203d3e20323633393730.roa
File: 323830343a323839633a383030303a3a2f33352d3335203d3e20323633393730.roa (raw, json)
Hash identifier: BRQR/aksXKwD2pX1YWFrTJFf3uY6DwFc9KWLQksNVEI=
Subject key identifier: 57:7A:85:1A:ED:F6:1A:C6:F2:CD:C1:31:F9:0A:19:61:6C:73:89:98
Certificate issuer: /CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Certificate serial: 50D409CC5F63CCC1C5E94D67A14C2A1696EBCEE1
Authority key identifier: 44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a383030303a3a2f33352d3335203d3e20323633393730.roa
Signing time: Mon 20 Jan 2025 11:47:59 +0000
ROA not before: Mon 20 Jan 2025 11:42:59 +0000
ROA not after: Mon 19 Jan 2026 11:47:59 +0000
asID: 263970
IP address blocks: 2804:289c:8000::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:d4:09:cc:5f:63:cc:c1:c5:e9:4d:67:a1:4c:2a:16:96:eb:ce:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Validity
Not Before: Jan 20 11:42:59 2025 GMT
Not After : Jan 19 11:47:59 2026 GMT
Subject: CN=577A851AEDF61AC6F2CDC131F90A19616C738998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:43:3c:3d:de:0c:14:26:ea:4a:6b:99:3f:3b:
f0:07:a4:83:99:14:4d:75:fe:29:86:ba:b6:57:62:
b3:75:bf:92:32:27:82:bd:cf:8b:bb:29:1d:18:8f:
59:fa:d3:d1:b8:de:9e:aa:da:ff:8e:c6:2a:0b:f2:
de:8c:c1:ac:96:64:de:84:6e:56:2d:86:93:4e:7f:
f9:f0:86:3c:4d:ee:bb:d1:6e:3b:c3:d9:b3:b3:20:
81:23:1d:38:57:70:76:39:0b:91:ad:3f:58:f0:8a:
e0:8a:f8:14:6f:c5:5c:94:73:18:22:3e:42:f9:42:
8b:5b:d9:fa:2c:4c:ac:47:93:96:f8:88:33:64:1c:
c4:a3:08:0d:b7:1a:ca:45:3c:d1:37:cc:cc:56:ab:
e8:3e:d3:4b:b5:79:59:4d:0b:fd:a2:5e:56:77:af:
b2:e2:b3:58:56:e2:44:36:bf:9a:37:ae:db:2d:a7:
3d:75:83:a8:fa:f7:b8:26:9c:1a:de:61:50:64:8a:
be:ea:c8:b6:e1:89:78:05:dc:15:07:13:7a:25:1b:
e4:6e:f7:c4:2d:82:0b:08:9d:3a:a4:93:0d:9b:ea:
ad:a3:4a:53:73:89:58:f8:30:ab:f7:d8:e1:d8:72:
52:ac:58:dc:f0:76:03:89:b7:5e:e4:5b:c0:6f:ea:
fb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7A:85:1A:ED:F6:1A:C6:F2:CD:C1:31:F9:0A:19:61:6C:73:89:98
X509v3 Authority Key Identifier:
keyid:44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/44D7F23D5E330CBCE5452DA8159460000FACF7DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a383030303a3a2f33352d3335203d3e20323633393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:289c:8000::/35
Signature Algorithm: sha256WithRSAEncryption
7a:67:9e:98:b8:2f:04:74:3a:a4:4f:b1:93:fb:5a:5f:a5:de:
e7:ed:8f:36:b8:d6:23:e0:2e:4b:c6:87:d8:c8:2c:09:08:66:
78:bb:14:31:fa:db:fc:6a:f4:3b:a4:30:74:4b:bb:74:73:40:
35:68:76:6f:10:ff:d6:76:d0:0f:2d:6c:b0:c7:65:a1:c1:ff:
e4:9e:f1:83:6d:72:d8:91:e3:1d:80:11:62:59:4b:f7:0a:1b:
ea:50:4c:46:1e:23:30:be:dc:39:aa:eb:a4:ff:94:ee:36:a6:
07:ce:4d:e3:aa:49:04:80:16:42:c2:3d:25:3c:f9:68:03:5f:
cf:9a:6b:57:3c:78:1b:2b:6a:ff:d3:1a:52:3c:89:bc:10:5c:
55:76:cf:33:0c:e5:ba:42:29:a8:d8:f6:5e:e2:2b:c4:05:cd:
b5:04:89:11:59:52:9c:b4:9f:f1:2d:1f:96:76:15:69:e0:cd:
40:86:03:21:84:51:a9:3c:62:b1:a9:b8:fd:2b:04:4c:9a:3b:
dd:2c:25:60:ca:f6:73:8f:8c:8a:16:c3:b3:74:ce:8c:d8:0d:
0f:92:31:13:44:fc:58:00:6e:7f:10:8a:1c:4f:7c:22:f8:b1:
f3:c3:1b:70:0e:82:3c:39:6b:47:61:4c:6a:95:44:94:95:87:
cd:d3:08:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:47:58 2025 by rpki-client