Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31323a3a2f34382d313238203d3e203532353830.roa
File: 323830343a6366383a31323a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier: XGgU9g9M/JfQ6RYJXwONM+QX9AJaScGrHGBChe7RnnU=
Subject key identifier: BA:94:39:8B:D6:DF:F0:5D:C0:40:55:1A:5F:EA:67:89:AE:A6:00:E9
Certificate issuer: /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial: 44A5400D1815A4355D98FE34738B3A0EA7F6496E
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31323a3a2f34382d313238203d3e203532353830.roa
Signing time: Fri 14 Feb 2025 19:26:18 +0000
ROA not before: Fri 14 Feb 2025 19:21:18 +0000
ROA not after: Fri 13 Feb 2026 19:26:18 +0000
asID: 52580
IP address blocks: 2804:cf8:12::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:a5:40:0d:18:15:a4:35:5d:98:fe:34:73:8b:3a:0e:a7:f6:49:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
Validity
Not Before: Feb 14 19:21:18 2025 GMT
Not After : Feb 13 19:26:18 2026 GMT
Subject: CN=BA94398BD6DFF05DC040551A5FEA6789AEA600E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:96:46:bd:cc:3b:bb:36:bf:c8:c9:9a:e6:f0:
d6:8b:6a:d4:42:d5:72:c9:8e:97:79:0d:58:81:5b:
49:12:8d:cd:69:7b:5d:16:98:44:54:6f:a1:36:37:
1d:2c:4b:e0:52:0b:e0:7c:d9:6c:1c:7d:3f:03:6e:
77:9a:12:87:e4:9f:a4:5d:39:bf:e8:48:30:7b:e6:
88:cf:2a:95:0e:82:9c:0e:86:59:47:71:17:f7:22:
b9:c4:07:44:bf:cc:13:47:f7:4b:fd:0b:84:73:bc:
60:74:17:49:01:6c:b0:66:4e:c0:26:bb:f2:d1:10:
d9:24:df:42:92:fc:15:85:9f:7f:97:ca:2b:3b:b8:
c4:f3:7c:b4:c1:9d:ff:fb:fc:b9:b7:4e:c8:f8:cb:
0a:43:2c:11:28:35:e2:8f:b6:b1:ee:76:dc:d9:8f:
a2:6d:2a:26:95:56:16:ef:27:96:45:38:97:71:38:
85:22:d5:a8:fe:cf:04:23:a1:1a:90:fe:c0:96:73:
d2:7a:ea:84:61:0f:2b:70:07:43:bf:34:ea:99:f4:
6b:a6:be:56:bb:e2:39:f7:bd:6d:b8:c5:56:d7:af:
48:30:d3:1c:59:a8:c9:59:36:ea:51:e7:9c:b8:fb:
2c:cb:7a:bf:cb:55:c3:ba:48:8d:b4:5e:42:85:7a:
af:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:94:39:8B:D6:DF:F0:5D:C0:40:55:1A:5F:EA:67:89:AE:A6:00:E9
X509v3 Authority Key Identifier:
keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31323a3a2f34382d313238203d3e203532353830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:cf8:12::/48
Signature Algorithm: sha256WithRSAEncryption
01:16:a3:28:e3:18:29:cf:83:99:ca:71:27:c4:c7:e6:19:44:
30:69:e7:8f:39:c3:e2:7f:60:b6:0d:6b:ad:16:3b:41:57:24:
b1:41:5c:39:25:b1:fa:7b:75:2f:15:3e:c8:3d:5f:4a:f8:41:
15:f8:b9:25:34:3b:99:32:4a:a7:1f:98:3c:90:f2:5a:75:4a:
46:5c:34:57:02:28:d5:47:40:cb:73:78:e9:66:da:64:48:f6:
57:5e:9e:78:53:07:00:1d:0f:61:a0:28:1e:21:d8:9a:bd:8e:
53:ea:ac:68:54:3a:02:50:39:33:7e:4e:9b:09:5b:8c:7d:a1:
b4:85:a2:d8:b7:7e:56:07:91:87:9b:06:89:78:5c:73:e9:f8:
c1:77:9d:81:2d:34:38:8f:9c:f8:ea:99:ee:ff:42:2e:71:8d:
5b:30:69:1c:a7:de:0f:13:86:69:fc:cc:65:09:0c:31:8e:c1:
e0:a9:bc:be:bc:4b:f0:77:81:e1:c4:6b:27:ce:a7:93:db:05:
68:87:54:7d:f5:99:6b:4b:62:45:d2:19:bc:c5:fd:00:5c:2e:
ca:f6:3d:ca:8e:d9:2e:ec:a9:9d:af:ca:18:58:ca:69:37:f4:
e1:42:58:eb:b3:34:c7:eb:61:05:69:b1:67:db:30:a8:a3:f4:
6a:33:2e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:15:56 2025 by rpki-client