Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a663030303a3a2f33362d3336203d3e20323633393730.roa
File: 323830343a323839633a663030303a3a2f33362d3336203d3e20323633393730.roa (raw, json)
Hash identifier: p/JfthljddWdjcXnHL44Elsz6V8PU+yWMvKDRiE3CFQ=
Subject key identifier: 96:4F:78:60:61:4F:BF:0F:5E:C8:E5:3E:C4:46:D2:2C:69:C2:34:AA
Certificate issuer: /CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Certificate serial: 54A6B7C5A6C414866A3612D0FC7A101398403465
Authority key identifier: 44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a663030303a3a2f33362d3336203d3e20323633393730.roa
Signing time: Mon 20 Jan 2025 11:47:58 +0000
ROA not before: Mon 20 Jan 2025 11:42:58 +0000
ROA not after: Mon 19 Jan 2026 11:47:58 +0000
asID: 263970
IP address blocks: 2804:289c:f000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:a6:b7:c5:a6:c4:14:86:6a:36:12:d0:fc:7a:10:13:98:40:34:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Validity
Not Before: Jan 20 11:42:58 2025 GMT
Not After : Jan 19 11:47:58 2026 GMT
Subject: CN=964F7860614FBF0F5EC8E53EC446D22C69C234AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cf:5e:4d:f8:ad:29:a3:9e:22:32:11:d0:ce:
a3:df:5d:74:a5:4b:0d:e9:85:27:d5:22:c5:f7:dd:
c1:41:6d:6e:32:4b:29:7f:99:00:50:7a:d9:bc:01:
57:aa:bc:5a:7a:ba:95:4f:3f:25:af:b1:b2:94:45:
2c:e5:3e:1b:6e:a8:d1:87:6e:b0:87:a6:53:2c:15:
c5:64:54:be:94:ab:d1:1e:2e:e2:64:a3:f2:59:2c:
d1:6f:39:49:74:e1:69:fb:ce:58:24:d4:77:30:d8:
63:08:18:a3:40:2a:dc:52:ec:d1:61:a9:0a:9f:25:
a7:40:10:56:ba:e9:59:2f:d8:fe:d3:97:70:3a:3b:
14:ed:45:10:12:f3:02:38:87:ed:11:0c:ce:13:e6:
2a:00:e0:c0:23:b8:16:de:27:45:75:61:77:eb:04:
76:ab:6a:b3:38:1a:1e:f7:fe:bf:95:56:83:34:a8:
ae:76:0e:96:f9:2c:0b:bf:0e:0d:64:a3:05:e8:53:
e4:38:99:d2:11:1f:85:eb:c2:ea:bf:a7:dc:b6:28:
cb:2e:3f:2a:d5:46:73:5f:ce:d4:ec:6f:22:ac:1b:
53:81:dc:fd:69:c2:70:0c:24:52:aa:35:7e:d0:09:
c7:b1:45:13:55:ad:04:ca:d2:cd:71:6b:c8:b2:e4:
8e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4F:78:60:61:4F:BF:0F:5E:C8:E5:3E:C4:46:D2:2C:69:C2:34:AA
X509v3 Authority Key Identifier:
keyid:44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/44D7F23D5E330CBCE5452DA8159460000FACF7DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/323830343a323839633a663030303a3a2f33362d3336203d3e20323633393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:289c:f000::/36
Signature Algorithm: sha256WithRSAEncryption
ba:37:af:d1:6b:b3:3c:41:33:b9:92:61:b1:8d:b6:80:35:84:
1c:9e:8e:7c:b8:b9:88:b3:42:ba:27:10:75:a8:00:5c:e5:68:
01:19:6a:3f:1e:22:43:c6:60:87:ff:dc:e1:60:2a:04:8d:30:
53:cc:f1:3c:31:95:0c:57:60:8a:0b:f6:3f:b0:1b:93:6e:35:
79:27:58:21:78:fd:e0:cd:36:4b:35:87:a0:b1:a5:88:aa:8d:
ed:11:ad:15:eb:d4:51:1f:27:25:6d:fb:ff:7d:1d:f5:f6:fa:
05:0d:1f:4d:7f:f4:4b:24:f8:da:e5:5f:06:f2:0e:e8:8b:42:
42:fa:bb:ff:9e:78:eb:13:74:33:6b:2c:dc:f0:9c:32:9b:86:
3c:23:16:21:07:b7:3c:06:f2:7d:ef:78:85:b5:4d:ea:d6:94:
a2:b7:95:3a:46:7c:e5:9f:a1:9b:25:c8:b3:02:72:7b:53:4d:
20:00:6d:a7:cd:56:e0:1e:7d:82:30:48:79:65:db:02:51:01:
2c:24:90:b9:2b:d3:b6:73:5d:ed:95:d1:14:dd:23:16:c8:2e:
28:35:b8:3a:7b:0a:96:2d:b9:a6:e1:36:97:75:3a:46:00:df:
85:98:1c:10:1b:9b:87:1e:83:97:9d:91:79:1a:c0:23:e1:0f:
3e:6b:be:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:38:15 2025 by rpki-client