Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a393030303a3a2f33362d3336203d3e20323633393730.roa
File: 323830343a323839633a393030303a3a2f33362d3336203d3e20323633393730.roa (raw, json)
Hash identifier: LZ8RpdM9a8S5Til2EN0ziVsUUKGN4q23LE918xkuLvc=
Subject key identifier: 2F:DD:0C:0B:7A:4A:13:85:79:58:52:37:01:C0:13:2A:43:1E:B1:1F
Certificate issuer: /CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Certificate serial: 2AB818F666DD0908ED0C9E23CCF29FEAFDF472E1
Authority key identifier: 44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a393030303a3a2f33362d3336203d3e20323633393730.roa
Signing time: Mon 20 Jan 2025 11:48:00 +0000
ROA not before: Mon 20 Jan 2025 11:43:00 +0000
ROA not after: Mon 19 Jan 2026 11:48:00 +0000
asID: 263970
IP address blocks: 2804:289c:9000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:b8:18:f6:66:dd:09:08:ed:0c:9e:23:cc:f2:9f:ea:fd:f4:72:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Validity
Not Before: Jan 20 11:43:00 2025 GMT
Not After : Jan 19 11:48:00 2026 GMT
Subject: CN=2FDD0C0B7A4A13857958523701C0132A431EB11F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e0:39:7c:4c:6b:e1:31:1d:cd:6a:11:1c:a0:
2b:7e:b2:36:4f:dd:90:1b:ee:f2:f8:fa:a3:e5:99:
5f:c8:93:6f:78:db:8d:73:7b:7e:35:d2:45:cb:a3:
0a:59:56:44:f1:70:86:3a:76:c5:6e:48:9a:55:fb:
57:2c:67:62:f1:36:97:bf:6b:01:1e:41:33:29:e8:
c2:e1:38:ac:7d:27:a3:75:6d:a5:88:69:3c:a9:39:
e6:69:fe:e2:26:37:f9:6f:8c:31:f4:43:30:67:51:
4f:39:b7:4f:d2:f2:00:88:a9:71:5d:2c:31:55:b0:
ec:0e:41:3c:da:65:ad:4d:a2:7f:a7:cc:c4:e2:0e:
41:73:43:39:4a:fc:90:74:4f:cd:f8:92:9b:92:01:
02:dd:34:e1:7f:b8:57:e9:a1:85:60:85:c3:33:c5:
bc:2d:52:2d:c0:5d:ea:14:a0:91:f3:c8:4b:52:90:
ed:c9:32:c3:d0:54:da:11:3c:49:3c:ad:65:d6:c3:
06:5a:ba:ac:96:3a:68:57:34:35:09:96:37:7b:0e:
a5:c7:8d:be:a6:ee:5a:6d:cf:1c:1d:40:b3:d5:61:
d9:20:e0:49:2c:79:b5:fd:ec:9a:cc:8e:01:f1:51:
d8:d1:bf:78:87:e2:d0:61:e2:81:31:ce:f4:5f:80:
66:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DD:0C:0B:7A:4A:13:85:79:58:52:37:01:C0:13:2A:43:1E:B1:1F
X509v3 Authority Key Identifier:
keyid:44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/44D7F23D5E330CBCE5452DA8159460000FACF7DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a393030303a3a2f33362d3336203d3e20323633393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:289c:9000::/36
Signature Algorithm: sha256WithRSAEncryption
26:88:9e:e2:6e:3c:05:88:aa:af:fa:9d:9d:f4:25:4d:c0:f2:
d8:5b:74:d9:a8:32:c5:1b:15:4a:b6:ec:de:06:f3:13:c6:3f:
c9:2e:50:d0:40:a0:1f:7e:5e:97:1f:3c:24:cf:8e:b1:69:4b:
c3:ed:95:a0:de:89:bd:a9:84:75:f0:ec:b0:9e:e5:cd:2b:73:
7d:16:a7:b0:ac:92:a6:21:17:e3:75:72:33:8d:99:b1:6f:d0:
6b:f7:0e:4e:68:09:ea:22:ea:ab:1a:22:4f:f7:74:ad:b4:1d:
2e:0a:22:ae:bb:76:e9:b1:4d:37:a6:cb:61:8e:0f:94:7b:92:
39:9a:79:fc:3e:dc:b4:45:dc:f1:7e:b8:c7:75:34:0a:2c:6b:
b9:1d:49:55:4a:42:9f:b3:4c:45:8c:d4:fa:36:aa:ba:9d:de:
63:bb:19:b8:fa:0b:12:36:2c:94:3a:20:23:e8:7f:fc:32:34:
dc:ab:5f:66:09:64:21:45:1e:e4:b9:7f:0e:80:7a:8d:ed:c4:
5d:b2:9a:da:3b:50:71:7f:d7:19:4a:05:e3:f7:f7:66:94:55:
fc:8f:c2:6a:63:a3:d1:58:f6:97:d2:39:5d:d0:f9:0f:82:63:
23:e6:98:49:08:1f:21:d5:bd:5e:2f:c3:40:e2:3a:1d:01:62:
8f:b7:4f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:19:55 2025 by rpki-client