Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a3a2f33332d3333203d3e20323633393730.roa
File: 323830343a323839633a3a2f33332d3333203d3e20323633393730.roa (raw, json)
Hash identifier: 4KK8m8f863pZPCZaivMaP26GE77uf/O7uVHkQaCe+WU=
Subject key identifier: BC:7D:59:7C:33:C3:E3:3C:FB:97:F6:9F:DA:11:55:99:BB:E7:1B:4F
Certificate issuer: /CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Certificate serial: 09EC80FAA77ABA2F47681C5694F573D0531DA068
Authority key identifier: 44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a3a2f33332d3333203d3e20323633393730.roa
Signing time: Mon 20 Jan 2025 11:48:00 +0000
ROA not before: Mon 20 Jan 2025 11:43:00 +0000
ROA not after: Mon 19 Jan 2026 11:48:00 +0000
asID: 263970
IP address blocks: 2804:289c::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:ec:80:fa:a7:7a:ba:2f:47:68:1c:56:94:f5:73:d0:53:1d:a0:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Validity
Not Before: Jan 20 11:43:00 2025 GMT
Not After : Jan 19 11:48:00 2026 GMT
Subject: CN=BC7D597C33C3E33CFB97F69FDA115599BBE71B4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:1d:a8:5c:12:06:03:0b:6c:36:9e:da:01:fe:
43:73:d6:52:40:af:35:5d:cc:47:f6:2e:2b:1d:ba:
c0:b6:d8:4f:ed:4c:b9:71:4a:ef:5a:ed:d3:52:f8:
90:48:b3:c9:54:2b:b1:c4:f1:4b:9d:7a:e8:cc:85:
9f:9f:68:d4:9e:45:27:6a:83:9a:c1:11:eb:ea:b0:
e4:06:4f:d6:f1:03:95:f0:1f:26:fc:7c:db:0b:87:
2c:14:78:19:f9:de:9b:d4:15:85:ff:63:1c:e2:52:
e4:7e:fa:8b:cd:eb:1a:a8:e8:f2:4e:33:0d:e2:0f:
24:6d:c1:3d:fb:06:ca:67:96:8c:11:e2:dc:b1:63:
12:fb:87:76:63:99:1a:42:03:83:41:ef:4a:12:78:
12:7c:10:92:49:1b:3b:2f:6a:e9:bb:05:a1:7b:8e:
f9:3c:b1:24:bf:1e:6c:18:21:fe:72:f1:69:9d:22:
2e:64:6c:43:17:bf:c7:01:db:54:16:a1:9c:9c:95:
87:c4:46:ad:82:e5:01:a1:06:6a:62:65:bc:04:6a:
1f:56:3a:d9:dd:ef:97:11:af:19:37:58:72:bd:8d:
69:29:44:8b:28:c7:54:fc:a5:4a:ad:6f:9f:cf:56:
b5:8e:ca:7d:0c:b6:11:f6:ec:31:29:08:f0:77:8e:
6d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7D:59:7C:33:C3:E3:3C:FB:97:F6:9F:DA:11:55:99:BB:E7:1B:4F
X509v3 Authority Key Identifier:
keyid:44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/44D7F23D5E330CBCE5452DA8159460000FACF7DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a3a2f33332d3333203d3e20323633393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:289c::/33
Signature Algorithm: sha256WithRSAEncryption
b6:cb:9c:cf:61:af:50:9b:27:5f:ae:5d:5b:0f:d4:8b:3d:b0:
5f:8f:73:49:7e:3e:09:7c:d6:47:88:6f:1c:ad:0f:8a:6c:1a:
15:85:60:31:23:d9:2d:59:81:85:d7:5e:39:9b:20:cf:a5:63:
08:51:c0:74:82:ac:b4:59:0f:62:18:2b:50:de:90:ef:a4:74:
36:78:9a:48:f3:ec:ec:2e:4a:da:05:90:b2:07:4e:be:81:2a:
ff:76:80:d4:14:ad:f1:4f:29:00:fb:7f:5d:eb:cd:9e:1a:f3:
da:9d:9e:c5:97:13:6a:44:8c:e3:40:45:c1:00:43:39:b7:42:
c6:95:eb:c6:29:90:34:8b:79:d6:55:4a:5c:1d:35:8f:71:1b:
22:61:e4:2c:9e:bf:0f:b3:c0:dd:12:b4:65:f8:52:bf:98:44:
4a:1a:d9:5b:67:93:a4:7d:02:7d:15:9c:b4:f0:de:e5:86:88:
d8:8d:f9:a8:db:27:eb:c9:66:7b:3c:47:52:96:70:69:c7:fc:
bb:37:62:06:fb:f1:4e:ca:6f:74:75:c6:5d:a5:a8:12:6a:e6:
e6:02:5d:aa:b1:fb:9d:2a:14:02:62:86:82:5f:07:b4:78:c0:
f1:5c:37:b8:bf:1e:6d:46:74:e8:0f:77:1e:9d:e4:55:09:77:
e8:9c:1f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:38:22 2025 by rpki-client