Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a383030303a3a2f33362d3336203d3e20323633393730.roa
File: 323830343a323839633a383030303a3a2f33362d3336203d3e20323633393730.roa (raw, json)
Hash identifier: N1w/h3UE3pnW9s2tnLgr8/pFlYVOsXHUX38ox/z46iM=
Subject key identifier: F5:C1:02:84:EB:64:84:9B:3A:55:AC:1B:AE:30:5D:CF:7F:33:FA:0C
Certificate issuer: /CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Certificate serial: 0C8BEB72E82064BB858CF98E853DAD568F993E67
Authority key identifier: 44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a383030303a3a2f33362d3336203d3e20323633393730.roa
Signing time: Mon 20 Jan 2025 11:47:57 +0000
ROA not before: Mon 20 Jan 2025 11:42:57 +0000
ROA not after: Mon 19 Jan 2026 11:47:57 +0000
asID: 263970
IP address blocks: 2804:289c:8000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:8b:eb:72:e8:20:64:bb:85:8c:f9:8e:85:3d:ad:56:8f:99:3e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Validity
Not Before: Jan 20 11:42:57 2025 GMT
Not After : Jan 19 11:47:57 2026 GMT
Subject: CN=F5C10284EB64849B3A55AC1BAE305DCF7F33FA0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7d:66:d4:8d:4a:be:9a:37:60:c1:a1:82:dc:
69:12:47:32:09:38:9f:d0:99:7e:02:55:50:55:85:
a5:08:ea:65:4e:7a:42:01:e8:96:83:c8:40:81:78:
80:14:b8:57:e3:65:06:4a:8f:2b:48:cf:fe:2c:b4:
cb:43:67:c2:76:aa:3f:4a:4a:7e:b7:a9:02:fc:24:
ac:fe:a1:2d:48:d2:43:b0:93:42:b9:1a:fb:9e:6b:
81:1d:11:d5:1e:a3:b7:74:90:e1:c7:3a:c8:0a:ff:
98:4b:24:00:28:4b:e3:e7:b9:1f:3a:28:5f:c3:c6:
02:7b:7f:05:32:8f:41:5b:97:65:6a:73:f9:ea:f5:
dd:61:4a:16:14:fb:ca:e4:f3:ef:1f:b2:8f:65:ff:
81:52:c4:9f:bf:31:4b:8b:f1:ec:4a:6e:50:4a:b6:
32:89:01:13:06:17:97:ba:25:2e:39:e9:6e:f8:df:
9b:09:35:11:2a:a7:70:53:73:38:73:06:b7:bb:54:
60:3c:6b:60:77:e5:4b:11:0c:b7:85:01:11:f4:0b:
dc:bc:c5:94:3c:c3:f3:98:1e:35:01:4b:28:80:9d:
39:4e:44:c0:23:5b:62:74:3f:09:32:c6:bf:5c:37:
e6:a0:e4:00:6b:33:af:21:81:75:cd:7b:36:d8:7e:
3f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C1:02:84:EB:64:84:9B:3A:55:AC:1B:AE:30:5D:CF:7F:33:FA:0C
X509v3 Authority Key Identifier:
keyid:44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/44D7F23D5E330CBCE5452DA8159460000FACF7DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a383030303a3a2f33362d3336203d3e20323633393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:289c:8000::/36
Signature Algorithm: sha256WithRSAEncryption
79:a8:2e:0a:64:29:62:ac:9f:60:c3:2f:e5:6e:e2:c8:ad:ce:
c1:18:4c:7c:3a:7b:57:52:57:74:c6:ff:77:25:6e:a3:7e:e8:
23:68:af:48:da:d7:97:52:af:c6:a8:3d:bc:33:d5:86:ea:2d:
f3:33:a7:63:56:6d:b4:57:33:75:0e:77:39:30:57:8d:ea:09:
69:15:84:7b:60:86:96:37:a3:81:5b:eb:ae:1a:30:62:ba:ea:
22:dd:41:78:d4:58:fb:98:e6:38:18:0a:6a:c5:ff:d5:86:35:
5c:09:c6:7e:8c:84:94:74:51:f7:8b:8e:92:9e:32:57:0c:76:
a1:76:ed:a3:61:aa:a7:7a:2f:6b:ad:ab:c2:5d:8e:e3:21:7e:
c4:1c:d0:13:88:a6:1b:3f:04:17:82:d4:b3:8f:b7:74:c7:27:
ba:87:8f:3a:01:20:d4:37:97:2b:c3:6e:ab:56:36:5a:b7:29:
be:cd:90:5f:f3:77:9f:c1:89:cb:68:d1:9f:27:91:7b:02:f2:
f7:9b:19:33:e6:e0:b0:39:e6:66:6f:8f:59:dd:b3:4d:2e:2a:
ff:5c:2e:67:57:2f:22:35:6d:e1:47:1e:ef:8f:09:20:44:29:
f9:24:ac:67:8c:95:6f:3e:43:e1:80:ab:fc:43:77:2f:73:79:
9c:62:dc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:21:22 2025 by rpki-client