Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a653030303a3a2f33362d3336203d3e20323633393730.roa
File: 323830343a323839633a653030303a3a2f33362d3336203d3e20323633393730.roa (raw, json)
Hash identifier: RW8aILyQkisL28IEIOANQestaoemlqbOwBMCYbzxGXE=
Subject key identifier: 21:4E:FD:84:31:10:4A:6B:55:28:4E:39:C5:05:F2:75:5E:95:10:C1
Certificate issuer: /CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Certificate serial: 036C1C1D31D4F044A40CEFB0B64437E898CAE208
Authority key identifier: 44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a653030303a3a2f33362d3336203d3e20323633393730.roa
Signing time: Mon 20 Jan 2025 11:47:57 +0000
ROA not before: Mon 20 Jan 2025 11:42:57 +0000
ROA not after: Mon 19 Jan 2026 11:47:57 +0000
asID: 263970
IP address blocks: 2804:289c:e000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:6c:1c:1d:31:d4:f0:44:a4:0c:ef:b0:b6:44:37:e8:98:ca:e2:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Validity
Not Before: Jan 20 11:42:57 2025 GMT
Not After : Jan 19 11:47:57 2026 GMT
Subject: CN=214EFD8431104A6B55284E39C505F2755E9510C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0a:e2:89:5c:d1:77:80:54:51:df:a0:51:1e:
2d:aa:33:69:9b:01:a9:98:92:13:8d:89:6b:94:ed:
ca:91:ed:bc:66:7c:73:51:95:da:1c:32:b1:27:94:
c9:2d:95:33:da:05:df:6d:b0:3f:59:f1:fb:6f:bb:
42:25:e8:42:55:55:dd:28:1f:e3:e3:b4:7a:d5:eb:
5d:0d:f5:2e:ab:ec:df:1c:4b:a3:77:ea:d2:13:96:
7b:7a:12:f0:60:b1:59:00:b4:ba:d5:5a:e6:8c:0b:
4c:bd:2a:ae:d8:e8:96:bc:de:20:bc:e5:7b:51:bb:
cc:2b:81:e0:f8:31:ee:64:3c:87:57:76:43:de:66:
45:1d:9e:da:de:d4:69:4a:0f:2a:bb:db:5c:11:d4:
8d:43:39:3c:68:e5:5c:a5:85:e1:fa:df:95:49:e9:
3a:be:ca:be:5b:43:d2:4b:2f:3d:46:13:6e:45:7d:
49:5a:d7:fa:af:e9:9b:91:70:00:bf:5d:e7:ab:0d:
83:3e:f4:20:50:38:ad:9f:d9:60:de:9f:01:c7:33:
c3:3f:55:74:31:9b:be:6d:42:31:70:51:63:79:7e:
57:33:3a:10:d5:e8:24:b1:06:d0:dc:02:65:60:3d:
b2:16:e6:97:65:fc:01:c8:bc:7e:f2:95:ae:e8:e2:
08:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4E:FD:84:31:10:4A:6B:55:28:4E:39:C5:05:F2:75:5E:95:10:C1
X509v3 Authority Key Identifier:
keyid:44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/44D7F23D5E330CBCE5452DA8159460000FACF7DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a653030303a3a2f33362d3336203d3e20323633393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:289c:e000::/36
Signature Algorithm: sha256WithRSAEncryption
0b:cf:ef:d5:40:57:6b:1d:fe:dd:2e:2c:a6:b4:4b:4e:5f:90:
74:72:57:4d:e2:2d:68:f1:8b:ec:91:15:fc:e6:5d:da:e0:e4:
0b:a3:bf:e1:17:1f:ed:44:f2:4f:cb:f9:ff:bb:70:c8:7c:a3:
cb:d8:0f:d7:a9:67:95:31:3e:ea:2f:9b:38:c8:eb:a1:eb:17:
c5:84:32:69:a2:0d:0e:4c:ca:a3:63:1b:e0:cb:5e:ab:78:fb:
da:a9:c8:f5:2f:aa:37:53:70:bc:31:e3:0c:2a:9e:9d:c8:48:
40:8b:b9:de:d2:47:64:06:16:75:a9:ef:42:70:78:9a:df:ca:
e9:0b:cd:ea:0b:ea:df:4e:a3:f7:07:de:a1:c0:e5:e4:a7:2e:
cf:b6:99:dd:cd:b2:0a:70:3f:01:5b:51:cb:1d:01:46:f3:42:
64:f0:5b:9e:ba:e2:2a:fc:af:06:03:88:b8:a1:5c:50:9f:7b:
a2:43:50:df:0b:af:26:8a:fa:37:ca:af:33:b4:92:54:61:22:
da:a1:3b:ce:c2:07:3d:5b:89:64:ea:c1:f1:a4:eb:52:98:53:
71:8d:45:0e:08:9e:31:34:03:c0:3c:a0:7d:fe:f3:2d:6f:ef:
c3:3c:ab:2a:b9:2d:8b:f4:83:fb:2f:e5:b4:96:6c:24:6f:65:
eb:27:e8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:38:46 2025 by rpki-client