
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a3a2f33342d3334203d3e20323633393730.roa
File: 323830343a323839633a3a2f33342d3334203d3e20323633393730.roa (raw, json)
Hash identifier: a6e+D/Wc5TceypMLViUGTd6Tr68fYuGk1welBTJM6Cs=
Subject key identifier: 7E:7D:A0:45:C2:0D:58:21:5E:0B:FB:B1:8C:57:92:74:D9:D0:8F:93
Certificate issuer: /CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Certificate serial: 4A2762ADB2372CD69D520943643B1FD3C981499E
Authority key identifier: 44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a3a2f33342d3334203d3e20323633393730.roa
Signing time: Mon 20 Jan 2025 11:48:01 +0000
ROA not before: Mon 20 Jan 2025 11:43:01 +0000
ROA not after: Mon 19 Jan 2026 11:48:01 +0000
asID: 263970
IP address blocks: 2804:289c::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:27:62:ad:b2:37:2c:d6:9d:52:09:43:64:3b:1f:d3:c9:81:49:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Validity
Not Before: Jan 20 11:43:01 2025 GMT
Not After : Jan 19 11:48:01 2026 GMT
Subject: CN=7E7DA045C20D58215E0BFBB18C579274D9D08F93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3f:1e:aa:e6:24:18:1e:14:87:3b:65:2e:24:
5d:2b:70:cf:e1:0d:e2:bc:61:c5:3a:e2:7a:4d:03:
65:be:47:d6:47:63:20:55:63:cb:ed:eb:b3:b7:eb:
9b:35:0d:8f:f9:5d:81:dc:93:9e:e3:68:14:04:6a:
e8:b9:96:36:be:c5:fa:41:16:eb:30:bb:f1:f8:a8:
c9:16:31:85:0e:59:ba:77:03:20:d6:20:ab:ee:ec:
0b:0f:1c:72:07:5a:e2:02:86:91:df:c2:77:bf:0e:
db:ae:b1:77:c9:08:20:aa:92:56:ec:92:7d:ea:46:
1d:fd:00:92:4c:af:6a:c2:44:14:ed:a4:74:84:8c:
13:72:8d:54:92:91:73:02:86:00:96:4a:16:77:58:
a0:87:ed:6d:db:87:6f:6f:5d:18:14:f3:01:eb:4b:
34:a8:69:5f:39:63:a3:81:cf:a0:20:b5:31:dc:e5:
4e:44:ce:5b:3c:5e:7f:95:4c:e2:87:8e:07:76:ac:
ea:d2:62:ea:72:c3:84:31:e4:42:c9:7f:4f:fb:17:
12:07:a0:14:18:53:14:da:8b:35:63:03:ca:85:7d:
44:49:af:39:8b:86:66:d0:81:e1:23:5b:d2:6f:15:
d1:05:6c:53:0d:d3:fc:82:aa:ca:fd:fe:47:3b:30:
ab:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7D:A0:45:C2:0D:58:21:5E:0B:FB:B1:8C:57:92:74:D9:D0:8F:93
X509v3 Authority Key Identifier:
keyid:44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/44D7F23D5E330CBCE5452DA8159460000FACF7DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a3a2f33342d3334203d3e20323633393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:289c::/34
Signature Algorithm: sha256WithRSAEncryption
29:d9:f6:1c:5b:8d:52:30:f3:da:64:3e:5f:b8:93:be:b3:85:
25:94:b7:a5:79:7d:ed:b5:08:68:52:17:7e:b6:04:de:6e:d3:
96:f6:fd:a6:41:da:e9:09:10:cb:48:a8:8b:63:33:1a:46:bb:
af:eb:3a:1e:46:e3:f1:e8:97:e2:fa:56:8b:1a:7a:5a:d4:76:
fb:aa:86:56:69:3d:ce:7c:a2:f5:6b:37:b3:c2:6e:ca:60:9b:
1e:8d:bc:c0:dc:40:10:95:1e:25:91:42:19:21:4b:13:2d:5e:
07:c6:08:f3:11:cc:c9:aa:69:07:93:f0:18:4c:d8:26:b0:77:
cd:cd:50:b3:e2:5b:54:9f:37:36:38:8e:05:4e:a9:f1:ac:bd:
5e:68:ee:7e:f0:1e:00:ed:e5:1d:6b:3a:05:c0:c8:22:8e:6a:
27:68:c6:f3:e6:26:d5:7f:ad:6a:99:6b:8b:85:7e:a7:cd:67:
6a:41:4f:54:25:f0:25:01:7a:6a:d7:15:5f:d4:6f:08:e4:a4:
bd:50:8f:6f:18:92:e3:ce:53:7f:9f:f6:f7:c4:0f:a0:6e:9d:
ea:4d:2f:e3:02:b0:5e:9d:bc:1c:60:b4:66:5d:82:84:c0:ab:
76:0a:48:f1:d4:6e:0e:01:10:a0:4a:12:c0:1e:e8:0b:e8:02:
cd:12:81:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:46:26 2025 by rpki-client