Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a633030303a3a2f33362d3336203d3e20323633393730.roa
File: 323830343a323839633a633030303a3a2f33362d3336203d3e20323633393730.roa (raw, json)
Hash identifier: UPwOuEREQkvJDn20Ao0vRhA9TmMoD2t08nK5gxiRR20=
Subject key identifier: BD:30:BC:5C:35:D0:A2:B1:D3:1F:54:FC:0C:85:3D:D4:62:52:7A:8E
Certificate issuer: /CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Certificate serial: 4C4F91C12DDF21369D9AAFCB08C507E7FA688282
Authority key identifier: 44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a633030303a3a2f33362d3336203d3e20323633393730.roa
Signing time: Mon 20 Jan 2025 11:48:03 +0000
ROA not before: Mon 20 Jan 2025 11:43:03 +0000
ROA not after: Mon 19 Jan 2026 11:48:03 +0000
asID: 263970
IP address blocks: 2804:289c:c000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:4f:91:c1:2d:df:21:36:9d:9a:af:cb:08:c5:07:e7:fa:68:82:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Validity
Not Before: Jan 20 11:43:03 2025 GMT
Not After : Jan 19 11:48:03 2026 GMT
Subject: CN=BD30BC5C35D0A2B1D31F54FC0C853DD462527A8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:54:8f:c4:63:86:17:d0:dd:f9:33:2c:a5:e0:
7b:b5:5c:28:b4:15:50:bf:25:bd:c4:0d:ff:b3:9d:
1e:fb:e6:9f:05:e2:18:24:40:ff:53:05:ef:69:19:
2e:b9:3d:84:b6:25:c0:24:96:c0:12:02:b9:df:49:
4d:95:1c:4c:30:e9:9b:f3:bc:ea:4a:63:8f:a7:6a:
16:bd:a8:d2:5d:0d:4b:77:1f:94:c1:fc:5e:5c:94:
aa:d5:5a:34:4d:88:ae:f3:b4:1e:9f:09:f1:6b:ed:
38:fe:29:73:d1:13:e1:30:a4:a6:4a:4d:12:a9:43:
c3:98:e6:1c:4a:f6:51:47:f3:3c:2f:32:5f:18:b4:
ac:8a:eb:62:44:45:88:e6:10:f2:43:fb:fd:bd:87:
3f:ec:59:4d:1c:80:ea:00:c1:e9:17:78:c5:4d:f4:
4c:20:31:89:8f:5f:58:21:5a:c9:ae:0d:e6:49:5c:
b7:a9:4b:91:d4:09:af:24:f8:43:b3:85:d3:7f:cb:
61:e2:39:ee:92:cd:5d:2b:c0:e3:0c:94:22:bc:b2:
7f:11:44:1b:84:f8:27:d7:5b:c2:c4:00:07:7e:cd:
fc:49:de:42:1b:1b:9e:7d:41:00:65:9f:87:7e:83:
33:41:86:2f:cb:76:d7:86:5c:c2:e3:01:ec:c4:5d:
c2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:30:BC:5C:35:D0:A2:B1:D3:1F:54:FC:0C:85:3D:D4:62:52:7A:8E
X509v3 Authority Key Identifier:
keyid:44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/44D7F23D5E330CBCE5452DA8159460000FACF7DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a633030303a3a2f33362d3336203d3e20323633393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:289c:c000::/36
Signature Algorithm: sha256WithRSAEncryption
73:46:5f:0d:a5:8a:47:2b:79:6b:6e:8b:e6:4d:db:d5:f6:8b:
59:df:e5:3a:40:a5:a5:e8:e8:88:7d:f0:d3:25:f1:2e:f1:da:
96:3b:6e:29:64:16:81:86:35:9b:5a:c5:30:18:af:ce:d4:26:
44:5e:84:f2:9d:53:90:bc:51:67:23:10:c8:ea:f5:54:28:2a:
34:43:df:5e:96:13:1f:da:d0:46:60:63:7e:24:86:51:e3:9a:
42:72:dd:e6:77:a7:6f:32:89:56:7c:ca:27:65:41:98:ea:e2:
a6:5c:1d:1b:29:ac:69:2b:25:78:ac:56:9f:7b:63:0e:7e:7e:
71:64:09:ea:0a:4a:c0:7c:06:5d:0c:58:93:78:a9:b4:94:4f:
41:42:d8:26:d2:60:19:46:c0:54:2d:4e:02:74:a5:a5:c9:a9:
75:f8:a4:42:b5:c0:da:b9:c3:95:d2:54:96:4e:62:2f:f4:45:
14:63:04:b3:cd:89:fc:fd:a7:a6:08:e4:48:08:c3:62:3b:85:
73:72:2a:fc:84:d6:54:e7:2c:0f:72:7d:59:87:7c:94:b5:99:
15:7d:32:c7:05:29:e0:8c:f8:23:84:20:a2:38:b5:d5:bb:97:
45:36:b8:4d:5f:49:91:49:34:ce:14:ce:5e:c9:ca:c7:72:a1:
72:10:ba:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:33:40 2025 by rpki-client