Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a653030303a3a2f33352d3335203d3e20323633393730.roa
File: 323830343a323839633a653030303a3a2f33352d3335203d3e20323633393730.roa (raw, json)
Hash identifier: iqOlyvNiu6nvKWeTZyouO0WTFPYCiYcF7Bdge9eiaFI=
Subject key identifier: 7A:78:CD:7B:94:E7:7A:C5:0A:95:76:D7:7C:76:A7:FD:87:90:9E:63
Certificate issuer: /CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Certificate serial: 1BE6EEBEB8531E7553ED58E6D1519DD0939D70AB
Authority key identifier: 44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a653030303a3a2f33352d3335203d3e20323633393730.roa
Signing time: Mon 20 Jan 2025 11:47:58 +0000
ROA not before: Mon 20 Jan 2025 11:42:58 +0000
ROA not after: Mon 19 Jan 2026 11:47:58 +0000
asID: 263970
IP address blocks: 2804:289c:e000::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:e6:ee:be:b8:53:1e:75:53:ed:58:e6:d1:51:9d:d0:93:9d:70:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Validity
Not Before: Jan 20 11:42:58 2025 GMT
Not After : Jan 19 11:47:58 2026 GMT
Subject: CN=7A78CD7B94E77AC50A9576D77C76A7FD87909E63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:63:b4:de:eb:c7:be:ad:9c:ce:52:4d:6a:2e:
f4:6f:dd:21:a2:a2:f0:e5:a8:6e:f6:9f:25:00:ef:
0a:5d:71:e2:2d:60:d5:04:20:a4:3b:a5:59:1e:f0:
ab:b6:93:15:d3:9e:0f:16:07:4a:64:4e:30:b3:c5:
ba:f7:80:51:0e:5a:da:f4:c5:2e:a9:aa:fe:bc:59:
92:52:7e:ee:6c:48:38:5e:ce:c7:a5:c3:40:2f:a8:
05:48:c1:db:dd:94:aa:dd:61:53:f6:bd:46:67:55:
27:ca:06:a5:e8:3f:46:94:5b:fc:dd:1e:e1:e3:0e:
10:fc:59:d4:c6:25:cf:08:3a:bb:01:d8:88:75:ab:
fe:18:1c:a5:42:91:02:ba:ea:3a:d7:1d:20:76:8d:
4c:9f:f0:dd:9a:ed:0c:4b:c5:db:bf:97:3f:1d:54:
4a:c6:e2:16:8b:49:4d:f5:53:5a:b9:e7:19:88:33:
e6:4b:7a:5a:f0:95:96:fe:7b:1a:66:de:22:7b:d5:
af:38:c8:a0:1d:3f:22:26:38:e2:1e:10:9c:3a:80:
b7:7b:5b:3b:d8:cb:4e:0a:5b:c7:52:66:29:0e:18:
ba:38:ad:19:98:76:81:a9:ff:1a:12:bf:72:21:ad:
71:3c:3c:5c:35:12:d9:55:c7:3e:c1:b5:8a:ba:bd:
47:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:78:CD:7B:94:E7:7A:C5:0A:95:76:D7:7C:76:A7:FD:87:90:9E:63
X509v3 Authority Key Identifier:
keyid:44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/44D7F23D5E330CBCE5452DA8159460000FACF7DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a653030303a3a2f33352d3335203d3e20323633393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:289c:e000::/35
Signature Algorithm: sha256WithRSAEncryption
45:93:37:58:65:e0:3b:e5:87:4b:8c:a8:09:0f:a1:88:e6:aa:
e2:a7:e3:fa:1b:ac:d5:0c:e3:b8:41:e7:67:24:57:d0:36:a1:
52:08:ab:3e:f5:9e:08:c6:01:f8:97:9a:85:41:d9:c2:70:ba:
be:7d:fe:5d:f0:60:6e:86:5c:4b:fc:4e:42:62:d2:85:f9:4d:
56:43:ea:5d:0b:7c:26:e3:b0:6f:7c:6c:34:66:4f:63:0d:95:
06:e2:af:c5:54:74:cd:84:41:d5:79:17:05:61:29:a1:23:53:
ac:46:f4:c1:b7:22:ea:4c:db:fc:46:40:57:bf:de:69:44:10:
84:7d:14:70:a8:dc:4b:0e:70:2a:64:4f:7e:62:db:54:c7:f6:
cf:27:68:39:e8:54:11:93:3a:ca:91:cf:28:51:ee:c6:fc:fb:
77:0a:4d:c6:1f:61:88:bc:9f:af:63:74:52:72:ba:cc:7d:a5:
04:98:73:d7:e3:5c:36:6c:2d:7c:ab:27:cd:43:5a:8c:05:56:
71:b3:87:5b:40:94:4c:cd:34:b3:13:00:b1:14:9e:4f:cc:af:
e1:7d:38:e4:d0:37:fd:2d:cf:99:9b:48:2c:5e:41:27:fd:c9:
9d:30:f1:ca:48:bf:ec:aa:95:dd:d0:8f:2e:e8:07:f6:1a:c1:
68:69:7c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:30:08 2025 by rpki-client