Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a643030303a3a2f33362d3336203d3e20323633393730.roa
File: 323830343a323839633a643030303a3a2f33362d3336203d3e20323633393730.roa (raw, json)
Hash identifier: EvoGEfNulKH03F6SOGzjfQ5QfVA1ktqx10aW76NScVk=
Subject key identifier: 30:CE:5E:7D:D9:2E:12:68:3E:E2:ED:D3:76:E4:04:21:17:12:AE:35
Certificate issuer: /CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Certificate serial: 6123C4398F375618D6E2EA0AEEF1289A67AC34EC
Authority key identifier: 44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a643030303a3a2f33362d3336203d3e20323633393730.roa
Signing time: Mon 20 Jan 2025 11:48:02 +0000
ROA not before: Mon 20 Jan 2025 11:43:02 +0000
ROA not after: Mon 19 Jan 2026 11:48:02 +0000
asID: 263970
IP address blocks: 2804:289c:d000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:23:c4:39:8f:37:56:18:d6:e2:ea:0a:ee:f1:28:9a:67:ac:34:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Validity
Not Before: Jan 20 11:43:02 2025 GMT
Not After : Jan 19 11:48:02 2026 GMT
Subject: CN=30CE5E7DD92E12683EE2EDD376E404211712AE35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:78:55:e0:57:28:14:3a:94:50:28:7a:48:2a:
bc:62:b7:2b:06:d8:35:72:55:94:ac:15:72:31:d3:
09:7c:47:3d:e4:31:0e:97:ef:b1:c2:ca:6c:08:50:
c0:48:56:cf:8b:b6:4e:71:4f:12:6f:55:b1:49:ba:
55:e4:df:f9:2f:14:da:d4:94:d0:17:23:3c:17:5c:
69:78:74:85:68:33:3a:f5:5d:0b:4a:2f:b9:2c:de:
e8:69:02:de:70:f8:95:75:a3:ac:a1:cb:a9:81:d1:
eb:cb:67:d0:23:c5:e4:8b:a9:2c:44:61:90:49:9a:
60:87:d2:22:b5:cc:af:69:f0:43:6a:03:b1:c3:64:
8c:ed:91:78:16:7a:0f:8d:a7:c0:25:db:73:8d:1d:
d4:a2:76:06:22:9e:b5:70:61:dc:ed:64:8c:a4:5d:
ab:51:1e:21:90:d3:71:18:25:3b:37:cd:70:0f:48:
dd:6c:c5:74:d2:4c:38:3e:e3:0c:45:c0:11:90:f1:
ae:df:62:b2:a7:5d:06:ed:f5:c3:e2:a2:17:96:5d:
e2:85:66:30:be:c6:09:51:78:a6:ec:38:2a:ae:f2:
ac:e8:bc:98:50:c3:8b:95:0b:f7:ee:1a:4d:2d:bb:
4f:02:c0:64:83:d8:29:d2:ff:83:f6:5f:80:c6:df:
98:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CE:5E:7D:D9:2E:12:68:3E:E2:ED:D3:76:E4:04:21:17:12:AE:35
X509v3 Authority Key Identifier:
keyid:44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/44D7F23D5E330CBCE5452DA8159460000FACF7DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a643030303a3a2f33362d3336203d3e20323633393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:289c:d000::/36
Signature Algorithm: sha256WithRSAEncryption
25:8d:57:91:eb:46:da:2f:58:88:bc:4d:21:d7:c1:76:4b:f4:
3f:84:07:25:6a:98:1f:6a:fa:4f:31:60:57:cb:42:31:ce:73:
4e:5a:f7:e3:0a:e8:98:bc:7a:18:72:19:c1:f8:5a:83:21:2b:
36:b4:e7:57:fe:d2:c9:5a:d8:95:01:96:8a:cb:b9:c9:79:a1:
ca:ff:19:e9:32:f0:34:73:0d:8f:a6:c1:e2:7a:9a:d4:16:72:
d8:b2:48:77:cb:0c:a6:ee:0a:3f:b8:7b:95:0f:68:1a:e0:fe:
2d:3c:ad:6e:57:6e:98:e5:0a:a9:5e:ae:ee:44:1c:68:6b:ac:
cb:87:40:ba:c6:42:ef:6f:bb:49:73:83:fb:00:1b:51:b2:f4:
a7:c4:4e:2e:e4:46:d0:6b:bd:8e:e5:2f:9b:15:c7:11:83:cc:
be:2d:a5:31:8a:4c:77:50:6d:85:fd:ef:7b:11:c0:ed:d0:29:
8a:ff:82:21:bf:6e:ed:63:61:b0:69:26:3f:7c:34:b6:1b:cb:
77:56:f5:28:81:72:87:46:78:33:13:dc:c7:be:bd:8e:2f:42:
3c:40:c7:99:e9:02:68:5f:f7:8d:1f:33:19:77:f5:9e:23:14:
c4:4f:25:d9:96:df:aa:e2:fc:ce:44:d5:87:ee:ac:a8:d0:10:
94:98:13:7d
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUYSPEOY83VhjW4uoK7vEommesNOwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDREN0YyM0Q1RTMzMENCQ0U1NDUyREE4MTU5NDYwMDAw
RkFDRjdERjAeFw0yNTAxMjAxMTQzMDJaFw0yNjAxMTkxMTQ4MDJaMDMxMTAvBgNV
BAMTKDMwQ0U1RTdERDkyRTEyNjgzRUUyRUREMzc2RTQwNDIxMTcxMkFFMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYeFXgVygUOpRQKHpIKrxitysG
2DVyVZSsFXIx0wl8Rz3kMQ6X77HCymwIUMBIVs+Ltk5xTxJvVbFJulXk3/kvFNrU
lNAXIzwXXGl4dIVoMzr1XQtKL7ks3uhpAt5w+JV1o6yhy6mB0evLZ9AjxeSLqSxE
YZBJmmCH0iK1zK9p8ENqA7HDZIztkXgWeg+Np8Al23ONHdSidgYinrVwYdztZIyk
XatRHiGQ03EYJTs3zXAPSN1sxXTSTDg+4wxFwBGQ8a7fYrKnXQbt9cPioheWXeKF
ZjC+xglReKbsOCqu8qzovJhQw4uVC/fuGk0tu08CwGSD2CnS/4P2X4DG35irAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUMM5efdkuEmg+4u3TduQEIRcSrjUwHwYDVR0j
BBgwFoAURNfyPV4zDLzlRS2oFZRgAA+s998wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWZMcVYyWURyMnJTazEyOHVOaEJLejh2MlJiMUFYbnZKY0VLM2pyVTNn
bWUvMC80NEQ3RjIzRDVFMzMwQ0JDRTU0NTJEQTgxNTk0NjAwMDBGQUNGN0RGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ0RDdGMjNENUUzMzBDQkNF
NTQ1MkRBODE1OTQ2MDAwMEZBQ0Y3REYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlmTHFWMllEcjJyU2sxMjh1TmhCS3o4djJSYjFBWG52SmNFSzNqclUzZ21lLzAv
MzIzODMwMzQzYTMyMzgzOTYzM2E2NDMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzMzM5MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEKJzQMA0GCSqGSIb3DQEBCwUA
A4IBAQAljVeR60baL1iIvE0h18F2S/Q/hAclapgfavpPMWBXy0IxznNOWvfjCuiY
vHoYchnB+FqDISs2tOdX/tLJWtiVAZaKy7nJeaHK/xnpMvA0cw2PpsHieprUFnLY
skh3ywym7go/uHuVD2ga4P4tPK1uV26Y5QqpXq7uRBxoa6zLh0C6xkLvb7tJc4P7
ABtRsvSnxE4u5EbQa72O5S+bFccRg8y+LaUxikx3UG2F/e97EcDt0CmK/4Ihv27t
Y2GwaSY/fDS2G8t3VvUogXKHRngzE9zHvr2OL0I8QMeZ6QJoX/eNHzMZd/WeIxTE
TyXZlt+q4vzORNWH7qyo0BCUmBN9
-----END CERTIFICATE-----
Generated at Sat Feb 22 04:55:14 2025 by rpki-client