Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a3a2f33352d3335203d3e20323633393730.roa
File: 323830343a323839633a3a2f33352d3335203d3e20323633393730.roa (raw, json)
Hash identifier: oeVT8wiH8KqvqsiIuWTF0mfcw7EylR+QZEdlmnpBKCk=
Subject key identifier: E0:FD:13:54:82:BE:43:DF:3A:25:48:0A:B9:3E:D0:DB:0F:F3:DF:53
Certificate issuer: /CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Certificate serial: 0DDDB950CFA7155E530A16D4DDA93716722EDAAA
Authority key identifier: 44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a3a2f33352d3335203d3e20323633393730.roa
Signing time: Mon 20 Jan 2025 11:47:58 +0000
ROA not before: Mon 20 Jan 2025 11:42:58 +0000
ROA not after: Mon 19 Jan 2026 11:47:58 +0000
asID: 263970
IP address blocks: 2804:289c::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:dd:b9:50:cf:a7:15:5e:53:0a:16:d4:dd:a9:37:16:72:2e:da:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Validity
Not Before: Jan 20 11:42:58 2025 GMT
Not After : Jan 19 11:47:58 2026 GMT
Subject: CN=E0FD135482BE43DF3A25480AB93ED0DB0FF3DF53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c8:1e:9e:b0:26:b8:80:9a:ed:e3:35:de:bf:
7d:7b:1b:46:3b:15:02:0d:c7:f5:67:00:24:11:ab:
df:e3:c4:65:60:b6:b6:b6:7e:dc:e1:53:c2:de:a3:
93:dd:f4:34:54:b5:a2:47:66:01:ff:99:fc:b3:0f:
71:7f:2b:cd:01:52:d9:03:9a:1d:3c:72:4a:fd:ca:
4f:e6:d8:1d:6c:c5:c9:5a:5a:62:0e:7a:8d:d1:48:
a3:a9:53:d1:b8:0d:b5:12:f1:dd:da:61:ba:e3:7a:
3b:89:75:16:48:69:b5:77:30:7f:8c:e8:3a:c7:75:
b2:09:89:ee:bd:30:df:ca:c8:06:d5:20:78:28:6e:
7d:4c:a9:ec:60:8b:89:56:f2:ed:15:35:51:dd:5b:
3b:f7:2d:5f:93:b9:8e:cc:b2:88:cf:a3:0f:75:9c:
ea:92:47:aa:53:89:a3:08:dd:25:bf:48:58:de:e5:
35:92:a8:69:23:a5:82:30:7f:22:5b:f3:ab:cd:99:
ff:50:aa:2c:a2:0c:e2:02:75:6e:30:60:de:b8:bc:
70:b6:21:7e:36:fb:ae:2a:9a:2a:58:7f:b6:28:95:
37:67:ea:12:74:56:90:7d:77:39:6f:8d:47:5f:13:
6e:50:1d:85:b4:85:71:8f:44:ed:0d:28:2e:4b:c3:
00:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:FD:13:54:82:BE:43:DF:3A:25:48:0A:B9:3E:D0:DB:0F:F3:DF:53
X509v3 Authority Key Identifier:
keyid:44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/44D7F23D5E330CBCE5452DA8159460000FACF7DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a3a2f33352d3335203d3e20323633393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:289c::/35
Signature Algorithm: sha256WithRSAEncryption
9a:33:6f:ee:41:04:e8:14:71:f1:e4:aa:cf:42:cb:b2:bc:13:
e5:ed:6a:35:72:71:3c:8c:ff:d0:cb:bd:3e:4f:19:67:69:44:
d0:3b:36:ac:66:4e:7b:71:f6:5c:e8:c3:7d:5f:9d:50:36:1e:
9f:51:d2:15:3c:08:b5:6b:13:a2:7e:66:d8:6f:d5:8a:54:2d:
94:8e:ab:d4:53:70:25:79:b7:14:34:7f:04:68:8b:1d:b3:46:
06:f2:15:91:bc:34:a7:bf:c5:c3:33:c3:09:c1:23:9d:d0:7d:
ff:23:87:a9:48:c9:04:ef:a0:d6:9e:b4:da:3a:89:62:23:31:
1d:e9:84:17:e8:c4:d5:c5:6c:12:cc:09:ae:04:b9:8d:6f:eb:
8a:ee:99:6f:5b:d4:f5:03:8f:af:47:56:39:d8:fc:1f:d5:7e:
9d:04:9e:b3:d9:43:fe:90:4d:bb:b0:16:15:66:cd:34:ff:58:
ba:af:45:f6:46:c4:07:fa:7e:cb:8e:f5:29:0f:fb:eb:d1:0b:
56:d3:08:fd:aa:fc:49:af:a8:bd:1e:ae:1d:2e:d5:3c:92:1e:
1a:b9:ed:dd:ad:c8:59:ff:8b:c5:ee:2a:48:ff:72:ce:bb:bb:
37:c4:de:71:aa:42:db:0e:c2:f2:13:ad:a4:c8:89:b0:7d:ce:
a2:5d:d9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:27:35 2025 by rpki-client