Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a3630303a3a2f34302d3430203d3e20323633303733.roa
File: 323830343a3935343a3630303a3a2f34302d3430203d3e20323633303733.roa (raw, json)
Hash identifier: +uVBS3+zJbrea6ZAsxV7w1dCoZRKcrXzEaXEZIr3AhY=
Subject key identifier: CE:75:71:9D:4C:61:AF:50:AD:46:78:BC:1D:6F:00:44:09:8D:2F:F9
Certificate issuer: /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial: 657D9AF62BCB14B98E1BAD16376C928A0F50F1C5
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a3630303a3a2f34302d3430203d3e20323633303733.roa
Signing time: Fri 22 Dec 2023 20:25:04 +0000
ROA not before: Fri 22 Dec 2023 20:20:04 +0000
ROA not after: Fri 20 Dec 2024 20:25:04 +0000
asID: 263073
IP address blocks: 2804:954:600::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:7d:9a:f6:2b:cb:14:b9:8e:1b:ad:16:37:6c:92:8a:0f:50:f1:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Validity
Not Before: Dec 22 20:20:04 2023 GMT
Not After : Dec 20 20:25:04 2024 GMT
Subject: CN=CE75719D4C61AF50AD4678BC1D6F0044098D2FF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ca:4b:69:a0:e0:b7:ae:2c:00:da:8a:ab:16:
20:50:87:cf:f2:9f:b5:79:42:0e:ab:ff:0a:87:ea:
b7:76:68:9f:71:9c:68:ed:4a:3e:de:6d:e9:4e:dd:
6c:e0:62:92:f2:e9:73:74:c1:74:19:b7:00:a5:d9:
de:0a:2c:2f:be:ac:c8:63:1f:7c:8f:06:44:ee:07:
93:58:5c:83:c8:23:c3:00:e6:b8:1d:ca:50:69:19:
ca:c1:fc:a7:e3:6c:34:bd:97:08:f5:db:e0:77:8e:
10:12:15:e1:5b:4c:01:97:48:8e:92:e6:8d:5b:65:
5a:1b:7d:d2:f7:28:ec:18:ca:37:5f:e4:1b:64:cb:
7d:d4:65:00:f7:d9:0a:98:73:7f:11:7b:f9:50:10:
8a:87:ed:76:88:5e:82:aa:c3:91:20:86:9d:94:a7:
3f:03:2b:d4:26:3f:fb:0e:29:a7:f7:23:14:0a:ea:
81:88:18:ca:94:3e:f2:7d:23:fa:0a:4e:da:92:c9:
14:a0:bc:00:07:c1:61:96:e6:da:f2:3e:9b:85:90:
54:fa:84:0e:48:d4:ae:80:6b:ae:5e:e6:58:03:28:
e1:8e:e3:11:06:b8:28:d9:6c:6a:b5:84:ce:9a:c0:
b9:c7:d1:bb:42:97:d0:35:a0:0e:af:58:83:47:09:
f2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:75:71:9D:4C:61:AF:50:AD:46:78:BC:1D:6F:00:44:09:8D:2F:F9
X509v3 Authority Key Identifier:
keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a3630303a3a2f34302d3430203d3e20323633303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:954:600::/40
Signature Algorithm: sha256WithRSAEncryption
4a:d5:3d:fa:40:20:f2:2f:ec:0b:57:a2:10:73:00:a1:d1:e0:
f2:95:0a:90:fd:4b:9d:47:48:da:e6:90:c1:16:f5:62:5f:9d:
fb:35:09:ca:a2:fc:09:b4:01:b2:ed:fd:75:63:4a:37:18:43:
48:6d:ea:96:20:df:ec:17:1e:54:1a:ac:48:c2:63:c1:8c:9a:
7c:d0:36:31:da:9b:22:09:6a:58:22:08:25:93:41:47:3c:24:
7f:3b:50:be:eb:3a:2f:fc:86:01:ab:57:3c:0c:5f:51:a9:69:
66:bb:c6:c5:b7:cb:ea:4a:14:34:69:90:b7:78:07:7e:71:b2:
14:cf:5b:21:b5:6d:3f:4d:1b:91:af:60:7b:b3:4c:72:27:0d:
ac:d0:9c:54:48:74:e3:20:0b:e1:5a:3a:fc:82:39:3f:38:d1:
e0:b4:ca:b6:77:b7:08:d4:a0:19:54:9b:15:27:58:9d:1c:7b:
2a:09:cb:e3:48:b7:5e:93:85:ba:2c:c7:03:3e:87:5a:7b:cf:
96:68:78:ad:f8:9d:a4:55:9c:bd:bc:00:4b:67:4d:97:7b:8f:
d9:9b:7c:2e:b6:49:de:af:f8:42:c9:56:bb:ae:68:87:36:34:
c6:f5:0b:77:30:87:5b:a7:28:6a:74:fd:46:59:f9:af:3d:1d:
73:bc:62:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:26 2024 by rpki-client on console-ams.rpki-client.org