Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a613030303a3a2f33352d3335203d3e20323633393730.roa
File: 323830343a323839633a613030303a3a2f33352d3335203d3e20323633393730.roa (raw, json)
Hash identifier: PDXCkB1dp9wCPoytRYbx5vnzwlxgamg7fEsqon7ovhE=
Subject key identifier: 95:23:F9:8C:50:57:30:42:74:18:D4:28:59:A9:14:DD:52:31:13:B0
Certificate issuer: /CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Certificate serial: 6705CD6C0926BEA414D826EB2978A2BF3F21BC34
Authority key identifier: 44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a613030303a3a2f33352d3335203d3e20323633393730.roa
Signing time: Mon 20 Jan 2025 11:48:02 +0000
ROA not before: Mon 20 Jan 2025 11:43:02 +0000
ROA not after: Mon 19 Jan 2026 11:48:02 +0000
asID: 263970
IP address blocks: 2804:289c:a000::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:05:cd:6c:09:26:be:a4:14:d8:26:eb:29:78:a2:bf:3f:21:bc:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Validity
Not Before: Jan 20 11:43:02 2025 GMT
Not After : Jan 19 11:48:02 2026 GMT
Subject: CN=9523F98C505730427418D42859A914DD523113B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:77:90:f5:d5:03:e6:09:8a:48:4b:61:b4:df:
ca:a9:3a:25:4c:fc:cd:1e:19:da:1e:5a:be:07:6f:
9c:65:52:9d:b6:11:d8:41:d4:b1:01:24:64:15:0e:
b7:01:38:a1:a1:51:e6:37:72:cb:a2:20:06:82:b7:
af:ba:7d:e0:f1:0f:72:3c:10:c5:e8:16:a2:ea:4d:
14:a2:df:f4:f5:4f:7d:1d:15:4e:e2:f2:3e:1e:52:
c2:31:6e:33:51:ba:b8:d3:cc:10:8e:70:c3:91:4e:
de:59:a0:2b:8d:6c:32:76:f4:17:6f:2d:00:58:cd:
98:f7:d3:b6:6e:3a:64:c5:52:b7:75:45:25:b2:4c:
68:23:08:6d:d3:06:49:5c:79:1f:ff:ac:ee:f5:70:
e5:a5:f6:cb:46:b3:e8:e7:f2:55:63:5d:0d:26:41:
61:e8:1d:c2:47:49:8c:ec:09:81:5e:ce:b9:81:b1:
fb:dd:bd:49:bb:ca:6d:e4:e2:12:49:c4:ca:08:d9:
44:a3:d3:cf:2d:c0:5c:c0:82:d8:8c:71:53:02:d9:
ce:5b:2b:48:cb:2b:69:27:a0:e4:19:ac:f7:a9:2f:
b7:7e:2f:1e:57:04:46:ae:3a:e0:aa:9a:ea:fa:99:
5f:48:9c:32:e0:1d:32:76:2a:b6:b6:f2:85:5f:c7:
28:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:23:F9:8C:50:57:30:42:74:18:D4:28:59:A9:14:DD:52:31:13:B0
X509v3 Authority Key Identifier:
keyid:44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/44D7F23D5E330CBCE5452DA8159460000FACF7DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a613030303a3a2f33352d3335203d3e20323633393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:289c:a000::/35
Signature Algorithm: sha256WithRSAEncryption
c0:4b:44:82:1b:af:c6:2e:13:49:d7:b3:db:a2:0c:e4:55:a0:
5a:2d:7d:b6:87:73:0d:41:00:cb:3a:bc:cf:73:9c:0f:0a:ba:
42:9e:6c:f9:6e:9d:04:32:07:d3:94:57:ad:c7:95:43:c4:4b:
33:37:55:35:a7:e5:40:f3:08:46:b5:78:ce:9e:03:73:49:30:
78:c4:2a:01:7d:79:71:4d:7f:3e:81:d3:54:9c:a4:f1:5e:a1:
0f:12:9d:08:ca:1a:43:e6:61:68:ca:6c:73:98:7b:4e:0c:2c:
67:60:e5:c1:52:01:3f:8f:dd:0e:fd:bf:e2:fe:89:3a:de:aa:
34:aa:c4:19:01:9f:d0:ac:0d:e3:40:2d:a4:bc:26:8e:0a:24:
d7:10:e1:a3:12:1a:e4:5b:4e:1c:c8:a2:93:43:93:c2:9c:e0:
27:bd:92:b5:ef:07:eb:64:40:d3:c7:ee:e7:22:a6:29:60:db:
69:e4:a3:4a:74:33:37:02:c1:4c:bb:63:66:89:9d:08:3a:0b:
1e:ef:3a:77:8f:60:e4:bd:8c:4f:6c:b5:58:3d:08:8b:f1:d8:
dc:f9:dc:27:9d:d0:87:42:3e:f7:83:d2:49:ee:c6:fc:4d:e4:
30:f3:a0:dc:a9:60:2e:f4:bf:2f:45:bf:82:86:f4:49:ff:08:
6e:48:84:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:40:15 2025 by rpki-client