Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a633030303a3a2f33352d3335203d3e20323633393730.roa
File: 323830343a323839633a633030303a3a2f33352d3335203d3e20323633393730.roa (raw, json)
Hash identifier: yjYFubKEz0JorKqAXsvr4WMCc8PJtGVTMGnHt8eVASk=
Subject key identifier: DB:A7:B4:48:A9:54:C2:A8:C2:92:17:FC:C6:37:02:6C:95:D1:84:17
Certificate issuer: /CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Certificate serial: 0BBE124B4758D9A33837A29ACB1CECDB48205E50
Authority key identifier: 44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a633030303a3a2f33352d3335203d3e20323633393730.roa
Signing time: Mon 20 Jan 2025 11:48:01 +0000
ROA not before: Mon 20 Jan 2025 11:43:01 +0000
ROA not after: Mon 19 Jan 2026 11:48:01 +0000
asID: 263970
IP address blocks: 2804:289c:c000::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:be:12:4b:47:58:d9:a3:38:37:a2:9a:cb:1c:ec:db:48:20:5e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Validity
Not Before: Jan 20 11:43:01 2025 GMT
Not After : Jan 19 11:48:01 2026 GMT
Subject: CN=DBA7B448A954C2A8C29217FCC637026C95D18417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:69:a2:fa:f8:7f:32:b9:5c:f0:81:c0:ea:f6:
41:4e:44:75:98:ed:08:2f:aa:b8:50:a4:5e:27:a2:
3b:0c:90:fe:eb:0c:e3:a8:03:25:79:2f:09:eb:53:
29:10:97:e8:c8:68:06:4a:f7:89:7f:f2:9b:8c:ba:
30:5f:15:42:4c:44:87:32:42:9b:c5:54:00:9f:3b:
05:1e:c8:20:5c:26:d0:8e:b9:69:77:66:71:e2:65:
7e:a2:50:36:53:4e:45:f8:aa:ac:7f:76:32:7f:2c:
2d:d1:cf:b2:54:df:01:b8:0a:c8:e8:71:3c:3d:bd:
0c:76:32:1a:20:0c:e2:ca:56:4c:43:61:1d:e7:08:
3e:13:c3:e6:57:af:07:ea:7b:b3:5b:f9:90:e3:3c:
2c:b5:4f:a0:9c:53:d2:64:cc:ea:45:15:12:cc:f7:
22:03:39:11:ea:c2:a5:7a:b0:5a:3b:aa:c0:d6:bf:
56:db:a1:b9:f9:c1:ae:e5:fb:31:e4:d7:1f:d9:b2:
12:2c:80:d3:69:68:70:b0:40:d0:a0:04:0f:36:b2:
ec:3a:58:4c:82:a8:81:76:34:b9:41:ab:9d:22:55:
60:31:c3:9d:74:ae:9b:a7:9e:ec:00:30:ca:d3:19:
67:48:95:b1:66:99:b5:58:d3:f6:fb:c3:28:f3:3e:
35:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A7:B4:48:A9:54:C2:A8:C2:92:17:FC:C6:37:02:6C:95:D1:84:17
X509v3 Authority Key Identifier:
keyid:44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/44D7F23D5E330CBCE5452DA8159460000FACF7DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a633030303a3a2f33352d3335203d3e20323633393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:289c:c000::/35
Signature Algorithm: sha256WithRSAEncryption
b1:9b:e7:23:2e:ad:52:52:18:c8:58:f7:c5:2e:82:6b:5b:fc:
63:dc:0b:6a:5d:62:a0:f7:be:df:99:2e:5e:f6:44:1b:c4:a1:
2c:87:95:61:82:75:a8:75:ea:e8:a7:6d:48:99:6f:61:55:4a:
ff:38:8a:23:bd:88:c9:aa:4b:0b:1e:27:d8:a4:31:10:30:0a:
ee:f9:b8:22:bc:fa:88:12:50:34:7b:a6:a1:cd:e5:3e:40:7a:
c3:d4:3b:8e:1e:cd:d8:06:89:90:cf:c0:cd:fe:ed:bd:2d:12:
ac:2b:12:1e:46:d2:5f:c0:7c:db:b5:3e:d9:38:5f:fd:7a:ea:
3c:53:0d:ef:6c:51:c6:0b:ec:d4:4a:85:b6:52:2e:e5:d9:75:
26:d1:ed:60:a9:e7:71:c3:d1:d4:ae:20:f2:d4:3a:86:fb:b6:
78:0b:db:5a:57:2d:cf:f9:ed:f8:67:72:6b:0b:68:ed:4a:41:
2d:38:2f:25:41:d9:3f:5d:26:6e:6c:c7:38:fd:84:41:57:3f:
40:89:35:1d:5d:d7:64:e4:e3:3f:98:bd:d2:e2:a9:29:20:49:
40:fe:21:62:6a:a4:6a:6f:47:ae:8c:9c:da:49:be:24:38:f1:
5a:96:11:b4:7e:f6:78:01:87:99:f9:28:20:27:3f:04:3c:5d:
36:ab:ac:be
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUC74SS0dY2aM4N6Kayxzs20ggXlAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDREN0YyM0Q1RTMzMENCQ0U1NDUyREE4MTU5NDYwMDAw
RkFDRjdERjAeFw0yNTAxMjAxMTQzMDFaFw0yNjAxMTkxMTQ4MDFaMDMxMTAvBgNV
BAMTKERCQTdCNDQ4QTk1NEMyQThDMjkyMTdGQ0M2MzcwMjZDOTVEMTg0MTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDaaL6+H8yuVzwgcDq9kFORHWY
7QgvqrhQpF4nojsMkP7rDOOoAyV5LwnrUykQl+jIaAZK94l/8puMujBfFUJMRIcy
QpvFVACfOwUeyCBcJtCOuWl3ZnHiZX6iUDZTTkX4qqx/djJ/LC3Rz7JU3wG4Csjo
cTw9vQx2MhogDOLKVkxDYR3nCD4Tw+ZXrwfqe7Nb+ZDjPCy1T6CcU9JkzOpFFRLM
9yIDORHqwqV6sFo7qsDWv1bbobn5wa7l+zHk1x/ZshIsgNNpaHCwQNCgBA82suw6
WEyCqIF2NLlBq50iVWAxw510rpunnuwAMMrTGWdIlbFmmbVY0/b7wyjzPjXLAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU26e0SKlUwqjCkhf8xjcCbJXRhBcwHwYDVR0j
BBgwFoAURNfyPV4zDLzlRS2oFZRgAA+s998wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWZMcVYyWURyMnJTazEyOHVOaEJLejh2MlJiMUFYbnZKY0VLM2pyVTNn
bWUvMC80NEQ3RjIzRDVFMzMwQ0JDRTU0NTJEQTgxNTk0NjAwMDBGQUNGN0RGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ0RDdGMjNENUUzMzBDQkNF
NTQ1MkRBODE1OTQ2MDAwMEZBQ0Y3REYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlmTHFWMllEcjJyU2sxMjh1TmhCS3o4djJSYjFBWG52SmNFSzNqclUzZ21lLzAv
MzIzODMwMzQzYTMyMzgzOTYzM2E2MzMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDMyMzYzMzM5MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEKJzAMA0GCSqGSIb3DQEBCwUA
A4IBAQCxm+cjLq1SUhjIWPfFLoJrW/xj3AtqXWKg977fmS5e9kQbxKEsh5VhgnWo
derop21ImW9hVUr/OIojvYjJqksLHifYpDEQMAru+bgivPqIElA0e6ahzeU+QHrD
1DuOHs3YBomQz8DN/u29LRKsKxIeRtJfwHzbtT7ZOF/9euo8Uw3vbFHGC+zUSoW2
Ui7l2XUm0e1gqedxw9HUriDy1DqG+7Z4C9taVy3P+e34Z3JrC2jtSkEtOC8lQdk/
XSZubMc4/YRBVz9AiTUdXddk5OM/mL3S4qkpIElA/iFiaqRqb0eujJzaSb4kOPFa
lhG0fvZ4AYeZ+SggJz8EPF02q6y+
-----END CERTIFICATE-----
Generated at Sat Feb 22 04:19:54 2025 by rpki-client