Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a613030303a3a2f33362d3336203d3e20323633393730.roa
File: 323830343a323839633a613030303a3a2f33362d3336203d3e20323633393730.roa (raw, json)
Hash identifier: JEdsstZ5Wr/QIP8ETx2sIQcXWSswghUkt574Zn3D2/w=
Subject key identifier: C8:E8:2E:84:41:23:C9:64:F4:7C:E6:82:AB:E7:9F:25:3F:7D:66:A1
Certificate issuer: /CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Certificate serial: 42C0EE99EBBD5286735236518C5DC59B3A8A3CE8
Authority key identifier: 44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a613030303a3a2f33362d3336203d3e20323633393730.roa
Signing time: Mon 20 Jan 2025 11:47:59 +0000
ROA not before: Mon 20 Jan 2025 11:42:59 +0000
ROA not after: Mon 19 Jan 2026 11:47:59 +0000
asID: 263970
IP address blocks: 2804:289c:a000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:c0:ee:99:eb:bd:52:86:73:52:36:51:8c:5d:c5:9b:3a:8a:3c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Validity
Not Before: Jan 20 11:42:59 2025 GMT
Not After : Jan 19 11:47:59 2026 GMT
Subject: CN=C8E82E844123C964F47CE682ABE79F253F7D66A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:55:ef:e3:b1:5e:8a:d0:fa:1f:ed:7a:21:b9:
e4:26:6b:33:4b:08:36:b3:39:d6:76:80:4b:ed:70:
6e:33:c5:e2:ed:2b:c7:f3:96:9a:d8:6e:d7:b4:8e:
38:34:d3:ec:b2:02:57:89:6b:b1:c1:a9:2b:cf:a2:
24:3b:66:11:66:50:4f:6b:f6:0f:74:5a:40:d6:ec:
ff:23:7a:48:8a:81:29:07:e1:3a:be:b9:c9:18:56:
6b:f8:d9:16:06:17:75:71:c4:3a:8b:6d:5d:38:62:
21:52:61:52:be:9a:17:f0:5d:5c:09:6d:40:ce:3a:
2a:00:88:e7:e5:41:ba:89:d0:7a:db:cf:73:bd:eb:
40:02:2e:c5:05:af:e6:c4:c2:86:e3:a2:43:7e:f4:
2f:d9:a0:0f:82:e8:9e:02:15:eb:64:15:ce:c5:22:
66:a4:97:1b:b8:eb:15:6e:1b:77:72:cc:fd:e0:d0:
71:e3:7f:73:ef:09:a2:a0:34:4a:33:3c:64:41:98:
b4:6c:d3:d1:87:da:72:f2:77:8d:6f:4e:a6:0a:72:
c6:f6:f0:44:b6:e6:fd:9d:8c:fa:50:00:1f:aa:09:
ed:89:7a:25:91:8f:b5:0d:be:cf:fc:73:20:2b:fa:
df:f0:67:d7:69:97:49:92:5e:05:28:05:4d:f1:c7:
ab:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E8:2E:84:41:23:C9:64:F4:7C:E6:82:AB:E7:9F:25:3F:7D:66:A1
X509v3 Authority Key Identifier:
keyid:44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/44D7F23D5E330CBCE5452DA8159460000FACF7DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a613030303a3a2f33362d3336203d3e20323633393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:289c:a000::/36
Signature Algorithm: sha256WithRSAEncryption
27:38:de:85:cc:bf:05:bd:ae:76:d8:86:c7:19:2d:7c:6f:f5:
d2:31:67:c8:46:c7:48:2b:41:fe:25:00:9c:8d:87:f8:a4:b6:
9c:ac:4e:25:0e:79:dc:58:0b:6a:ce:b9:b6:6b:92:e5:9a:26:
14:0e:bc:75:bc:2b:fe:00:e4:d2:b2:9b:8a:c7:a0:62:b8:a5:
d0:66:0b:fa:cd:16:90:00:76:d5:d8:e8:c7:03:ef:df:69:50:
95:6d:ea:20:a0:fa:26:ff:5c:68:1e:78:39:7a:03:de:8a:af:
63:4f:1e:63:27:23:e4:a0:b2:cc:bc:47:68:f5:e5:64:96:40:
42:87:4c:d0:b6:4d:50:7e:27:83:f5:bc:3b:89:e0:50:f0:c8:
44:4c:f3:77:ad:d3:25:cb:05:95:e3:68:7a:63:f5:32:5e:c5:
86:da:58:5f:76:4e:1f:a5:ab:1b:cb:93:ab:a2:89:86:c0:38:
83:db:c4:f9:60:87:23:f1:71:24:15:5e:c4:92:fe:25:1e:8c:
6f:46:7c:ea:65:8f:e8:86:99:4b:2e:62:a3:f7:f0:3b:24:a5:
d4:f7:9c:e1:e7:9b:c1:18:37:3f:13:56:37:1a:cd:8b:3a:b5:
b3:3d:c0:94:5b:67:38:9e:5a:ad:cf:1c:a0:67:93:ca:bb:2c:
28:b2:c7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:36:50 2025 by rpki-client