Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a633030303a3a2f33342d3334203d3e20323633393730.roa
File: 323830343a323839633a633030303a3a2f33342d3334203d3e20323633393730.roa (raw, json)
Hash identifier: NFGpWaaKIWNw4N5xTqWS0FYhyIOxAR13vg4y77iPyIU=
Subject key identifier: 7C:ED:77:4A:37:F8:7C:C3:26:38:3E:77:42:2F:80:BD:CF:99:1B:5D
Certificate issuer: /CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Certificate serial: 2093F15B968E59B78161ACA0E79E2F57991C2BFF
Authority key identifier: 44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a633030303a3a2f33342d3334203d3e20323633393730.roa
Signing time: Mon 20 Jan 2025 11:47:56 +0000
ROA not before: Mon 20 Jan 2025 11:42:56 +0000
ROA not after: Mon 19 Jan 2026 11:47:56 +0000
asID: 263970
IP address blocks: 2804:289c:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:93:f1:5b:96:8e:59:b7:81:61:ac:a0:e7:9e:2f:57:99:1c:2b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Validity
Not Before: Jan 20 11:42:56 2025 GMT
Not After : Jan 19 11:47:56 2026 GMT
Subject: CN=7CED774A37F87CC326383E77422F80BDCF991B5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:52:dd:65:3c:85:05:c3:6a:2e:82:9c:9f:e8:
aa:ce:21:c9:63:d7:1d:15:24:c6:c6:56:ec:c1:31:
5e:3e:f2:20:f4:6f:f4:bc:25:c0:56:6d:dd:5e:3e:
b7:6f:a3:dd:06:6b:2c:a6:65:e0:14:ab:c3:f2:b8:
86:90:4e:76:93:64:27:25:91:cb:fb:7a:a9:fc:1d:
eb:23:ab:d7:9c:ce:f1:f6:12:cd:5d:c4:c3:ca:20:
c5:e3:88:f6:33:b5:56:66:05:01:59:cc:f8:b9:2c:
0a:41:2d:bc:e2:5b:cd:2e:cb:3b:77:bc:bc:8e:3d:
7c:77:22:19:8b:7a:12:a1:46:3a:3d:1e:03:18:80:
3c:cd:07:05:68:37:9f:5c:76:68:dd:1b:2e:90:b0:
de:97:04:7a:a6:3e:ad:b2:2c:c9:64:e7:73:ee:35:
c4:01:0e:4e:87:1b:c3:18:2f:8e:94:ab:b7:d4:28:
7e:28:dc:5e:dd:eb:c6:24:76:fd:0b:14:3f:7f:20:
6d:a3:eb:d7:0e:48:55:b7:59:c0:5d:b9:cb:24:cc:
24:a5:1f:f0:32:06:0f:40:40:8a:26:dd:f0:cc:4f:
a7:5c:ae:8d:cf:b8:52:ca:4e:05:b5:3c:bd:e8:76:
8e:a4:08:bf:6a:2e:da:b9:a8:be:96:fb:52:b0:7a:
4d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:ED:77:4A:37:F8:7C:C3:26:38:3E:77:42:2F:80:BD:CF:99:1B:5D
X509v3 Authority Key Identifier:
keyid:44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/44D7F23D5E330CBCE5452DA8159460000FACF7DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a633030303a3a2f33342d3334203d3e20323633393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:289c:c000::/34
Signature Algorithm: sha256WithRSAEncryption
5f:9c:3f:ae:89:1f:69:ed:cf:87:ad:9d:97:6f:31:5c:46:3a:
56:c6:5a:b8:2f:40:6f:e4:12:d8:b5:1e:6d:33:92:cb:b0:61:
e5:d4:66:b1:5a:ef:ac:84:da:7a:19:ac:23:d2:40:92:91:39:
66:32:ab:ec:5c:21:99:5e:62:ba:85:97:aa:c7:15:21:b4:40:
a7:4e:a6:55:e1:0c:5a:fd:ff:0c:ce:e0:2f:fe:54:2b:42:4f:
3b:3c:07:6e:38:62:ff:06:4d:1e:b9:c7:d8:15:c3:ce:ed:16:
4d:c8:95:f8:7c:c5:0f:93:d3:68:c6:ff:50:75:aa:35:a9:7a:
4c:e2:00:51:0c:27:40:cd:ed:d5:a6:59:f6:0a:4d:21:24:9e:
04:c4:f5:3f:3e:d2:4b:53:e0:dd:40:40:8d:31:36:e8:8c:9b:
61:c4:78:29:4e:32:7d:89:0e:14:d2:3c:36:e6:00:0a:ea:7e:
ff:f2:5c:16:e2:61:3d:ba:e8:1d:df:77:37:da:0b:b7:49:e8:
4b:6f:05:f7:32:9c:04:12:25:5d:31:e5:53:90:62:fc:52:1e:
2e:d2:f3:fa:9b:8e:7d:57:90:9e:27:c6:2e:0c:83:e8:08:73:
f6:af:f6:8d:a1:ed:b0:77:a2:72:c3:5a:dc:a9:21:e2:8d:d3:
b5:c2:78:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:13:18 2025 by rpki-client