Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a623030303a3a2f33362d3336203d3e20323633393730.roa
File: 323830343a323839633a623030303a3a2f33362d3336203d3e20323633393730.roa (raw, json)
Hash identifier: mZqVHw6T3996exOtdQLK+gVkggHuoaXdj6i+MlvTzkA=
Subject key identifier: F8:C1:2B:45:4A:AD:DD:89:4D:48:25:67:17:5F:B1:39:00:F2:E1:7F
Certificate issuer: /CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Certificate serial: 74B69EB0BF9122E6FAD90DD0799F6E7AB0A55572
Authority key identifier: 44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a623030303a3a2f33362d3336203d3e20323633393730.roa
Signing time: Mon 20 Jan 2025 11:47:57 +0000
ROA not before: Mon 20 Jan 2025 11:42:57 +0000
ROA not after: Mon 19 Jan 2026 11:47:57 +0000
asID: 263970
IP address blocks: 2804:289c:b000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:b6:9e:b0:bf:91:22:e6:fa:d9:0d:d0:79:9f:6e:7a:b0:a5:55:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Validity
Not Before: Jan 20 11:42:57 2025 GMT
Not After : Jan 19 11:47:57 2026 GMT
Subject: CN=F8C12B454AADDD894D482567175FB13900F2E17F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:61:95:8f:1b:36:c9:37:61:50:6f:0d:a1:a4:
87:23:28:e5:10:86:13:6d:5a:07:4a:03:7c:2a:32:
74:10:19:9e:8e:d7:f9:16:98:09:2e:b3:82:0b:c2:
d9:4f:1e:a0:7a:12:3e:93:4b:f5:d9:e6:24:d1:be:
c2:06:6d:70:24:2a:15:e1:8a:cc:b7:be:00:be:b2:
74:4f:f3:34:95:c3:d9:4f:df:2a:bf:18:4a:ce:57:
60:d4:a4:72:17:33:a4:c0:2b:dc:a5:05:e2:6d:2f:
4f:80:fa:29:6d:61:36:68:76:33:20:8c:9c:08:9b:
a9:50:2f:42:76:3f:24:86:a6:6c:ee:5f:2f:88:d4:
e6:aa:ff:d5:6f:de:00:c0:e1:39:15:ea:66:b5:4b:
de:3c:56:ab:6b:49:80:98:95:20:16:49:ad:d0:c6:
35:0a:38:f9:87:b4:0f:c3:b9:ce:f5:80:13:0e:ee:
2e:58:c5:13:e5:09:a2:60:20:42:bb:33:8e:8d:cf:
c0:00:2d:77:9e:34:af:df:4a:8d:f7:bf:94:e0:42:
e7:bc:91:5d:55:c8:b1:39:db:ca:6e:17:f5:b8:39:
29:09:a5:ff:6e:0d:a0:0c:17:a0:e7:dc:ab:8e:ff:
66:a6:ae:2a:8c:9b:53:ee:8a:2a:a4:e1:53:10:68:
6e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C1:2B:45:4A:AD:DD:89:4D:48:25:67:17:5F:B1:39:00:F2:E1:7F
X509v3 Authority Key Identifier:
keyid:44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/44D7F23D5E330CBCE5452DA8159460000FACF7DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a623030303a3a2f33362d3336203d3e20323633393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:289c:b000::/36
Signature Algorithm: sha256WithRSAEncryption
75:25:18:51:84:7b:5b:e6:dd:d9:db:33:0d:ed:64:5b:cf:3d:
d5:58:a4:5e:85:98:af:be:6e:ae:d7:88:af:1b:7f:60:b7:84:
db:e4:b9:01:83:d9:ec:a6:b0:2b:5c:17:a3:1b:d7:12:8c:ba:
2f:ba:b7:b4:67:06:82:a1:8a:ba:58:93:1b:22:4c:3d:fd:83:
4c:f9:3a:5d:f4:e0:d0:dc:b0:4b:c0:b1:a0:3f:7e:19:5f:19:
82:a0:c8:fb:bc:1c:37:f7:3a:fe:63:57:20:d1:69:9e:5b:f8:
f8:91:34:fd:f6:81:33:72:dc:73:18:88:93:35:08:32:a0:83:
54:59:fd:47:2e:e6:6c:d4:ca:a9:a4:2e:f6:5f:04:04:fc:bf:
6c:43:7a:17:67:f1:8f:2a:79:75:0c:35:d2:b5:7c:4d:37:bb:
18:cf:a1:df:5d:60:7a:e3:cc:05:9b:47:54:21:66:5c:a0:42:
09:2a:89:12:21:d9:43:e7:e2:8f:d7:c0:2a:d8:69:ae:5b:44:
16:a7:a7:a2:a0:f3:4a:c5:a0:ab:3d:54:8a:73:a9:22:f7:6d:
13:84:b4:69:30:6a:17:d7:86:e8:cd:fa:51:ad:53:8e:76:30:
fc:bc:fb:1d:1f:f3:d7:11:d0:7e:69:b4:03:1f:2a:09:4c:85:
f5:43:14:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:55:46 2025 by rpki-client