Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/323830343a336638383a383030303a3a2f33332d3333203d3e20323635383939.roa
File: 323830343a336638383a383030303a3a2f33332d3333203d3e20323635383939.roa (raw, json)
Hash identifier: fH2oOA79spYfD+enYvDBZt/BlIF1QlTl8KNTts5JMLs=
Subject key identifier: CC:94:1F:DB:C6:79:7E:73:60:82:6D:B5:14:10:DE:11:F5:20:2F:2D
Certificate issuer: /CN=2B85A27C4FB648CC562C2FE2B0DEA8A5755FAB62
Certificate serial: 7EC31EAFF7BB15E358717AF8ADDEBC63BC7EA356
Authority key identifier: 2B:85:A2:7C:4F:B6:48:CC:56:2C:2F:E2:B0:DE:A8:A5:75:5F:AB:62
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B85A27C4FB648CC562C2FE2B0DEA8A5755FAB62.cer
Subject info access: rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/323830343a336638383a383030303a3a2f33332d3333203d3e20323635383939.roa
Signing time: Tue 20 Feb 2024 13:43:43 +0000
ROA not before: Tue 20 Feb 2024 13:38:43 +0000
ROA not after: Tue 18 Feb 2025 13:43:43 +0000
asID: 265899
IP address blocks: 2804:3f88:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:c3:1e:af:f7:bb:15:e3:58:71:7a:f8:ad:de:bc:63:bc:7e:a3:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B85A27C4FB648CC562C2FE2B0DEA8A5755FAB62
Validity
Not Before: Feb 20 13:38:43 2024 GMT
Not After : Feb 18 13:43:43 2025 GMT
Subject: CN=CC941FDBC6797E7360826DB51410DE11F5202F2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ba:ba:58:7a:20:1c:88:d6:c2:b3:5f:39:c2:
68:8d:99:b7:53:84:bb:21:bf:15:94:87:44:39:4c:
7c:bf:cc:7e:83:dd:cb:49:0c:00:79:5d:bb:39:37:
4d:a6:ba:58:47:b2:c9:6f:5a:38:74:08:79:5c:06:
75:bc:9b:1b:38:6c:bf:8b:7c:ee:4b:7f:a0:02:9f:
b3:43:f3:97:15:74:00:44:c2:b3:07:03:db:8f:05:
26:24:15:4a:e3:26:ba:5a:ad:b5:18:9d:98:88:f6:
e0:5f:57:a4:99:f8:f2:72:71:96:ba:2d:3e:17:f0:
b2:61:45:d3:03:04:0d:5e:dc:e6:2f:e2:47:12:08:
8e:31:00:d5:9e:63:32:58:bd:0d:cd:27:cb:02:3d:
ba:61:16:17:4a:75:e1:c9:7c:07:c8:1f:d9:63:5a:
c6:f7:db:ca:f9:df:13:9a:5f:06:02:6c:7b:0d:c1:
70:83:a7:68:7f:74:e8:fe:17:92:2d:b2:b1:cc:ad:
b3:93:57:de:5c:9e:93:5c:73:0c:bd:aa:d3:90:04:
fe:45:13:dd:d8:44:f6:e1:ee:2a:00:5d:fe:5b:0d:
85:10:39:65:14:96:75:d8:c4:df:0f:5a:6a:79:6f:
0f:65:8f:59:f6:39:47:d3:0b:3f:47:c1:66:26:b6:
7a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:94:1F:DB:C6:79:7E:73:60:82:6D:B5:14:10:DE:11:F5:20:2F:2D
X509v3 Authority Key Identifier:
keyid:2B:85:A2:7C:4F:B6:48:CC:56:2C:2F:E2:B0:DE:A8:A5:75:5F:AB:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/2B85A27C4FB648CC562C2FE2B0DEA8A5755FAB62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B85A27C4FB648CC562C2FE2B0DEA8A5755FAB62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/323830343a336638383a383030303a3a2f33332d3333203d3e20323635383939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3f88:8000::/33
Signature Algorithm: sha256WithRSAEncryption
71:f4:67:7a:45:26:54:91:ca:78:ba:d4:82:69:99:1e:48:bf:
5a:93:7d:19:83:d4:23:71:94:22:84:7f:6d:bc:2b:ac:96:4f:
52:97:35:e3:fc:f5:63:39:ef:20:ed:fe:9a:34:d4:e4:69:d3:
1f:cb:92:76:40:48:2c:6e:b2:8e:bd:6e:cb:3d:d0:b6:e7:44:
cc:95:89:92:5e:8b:60:8d:2a:1f:b8:eb:6d:e2:aa:e1:1c:c6:
59:01:dd:bc:eb:ca:cf:fa:38:1a:5e:7b:e4:94:d8:ca:ef:a2:
37:c6:66:b7:5e:42:f5:51:dd:35:2d:77:43:f3:9b:f0:83:c7:
23:a3:25:24:21:af:90:05:bf:f1:37:50:16:fe:d8:68:94:e7:
a3:ec:d9:3e:0b:0d:f1:63:95:ea:0e:58:9e:a2:c3:fa:bf:89:
a3:c1:4e:1a:b2:86:94:8c:aa:42:8d:8b:09:f6:9d:7b:1b:f7:
6e:a8:5c:2b:d5:40:6d:39:57:a9:2e:ce:ff:4e:e6:36:d7:dc:
07:58:bb:df:89:13:82:24:b5:07:cf:2c:37:6d:19:f7:31:1b:
95:25:a8:80:68:e2:c9:a1:d8:3b:67:02:78:ae:3a:97:3a:5c:
f3:7b:0b:4a:32:a0:29:ef:0f:d8:c6:53:f8:bf:f8:52:32:5c:
5c:61:c9:e4
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUfsMer/e7FeNYcXr4rd68Y7x+o1YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI4NUEyN0M0RkI2NDhDQzU2MkMyRkUyQjBERUE4QTU3
NTVGQUI2MjAeFw0yNDAyMjAxMzM4NDNaFw0yNTAyMTgxMzQzNDNaMDMxMTAvBgNV
BAMTKENDOTQxRkRCQzY3OTdFNzM2MDgyNkRCNTE0MTBERTExRjUyMDJGMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPurpYeiAciNbCs185wmiNmbdT
hLshvxWUh0Q5THy/zH6D3ctJDAB5Xbs5N02mulhHsslvWjh0CHlcBnW8mxs4bL+L
fO5Lf6ACn7ND85cVdABEwrMHA9uPBSYkFUrjJrparbUYnZiI9uBfV6SZ+PJycZa6
LT4X8LJhRdMDBA1e3OYv4kcSCI4xANWeYzJYvQ3NJ8sCPbphFhdKdeHJfAfIH9lj
Wsb328r53xOaXwYCbHsNwXCDp2h/dOj+F5ItsrHMrbOTV95cnpNccwy9qtOQBP5F
E93YRPbh7ioAXf5bDYUQOWUUlnXYxN8PWmp5bw9lj1n2OUfTCz9HwWYmtno5AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUzJQf28Z5fnNggm21FBDeEfUgLy0wHwYDVR0j
BBgwFoAUK4WifE+2SMxWLC/isN6opXVfq2IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjVTcmJRZG9VWU5qcWtEb0V0ZmJweTd2OTdGMktabnhUdWhIQXZmM2FK
M3cvMC8yQjg1QTI3QzRGQjY0OENDNTYyQzJGRTJCMERFQThBNTc1NUZBQjYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJCODVBMjdDNEZCNjQ4Q0M1
NjJDMkZFMkIwREVBOEE1NzU1RkFCNjIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI1U3JiUWRvVVlOanFrRG9FdGZicHk3djk3RjJLWm54VHVoSEF2ZjNhSjN3LzAv
MzIzODMwMzQzYTMzNjYzODM4M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzNTM4MzkzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEP4iAMA0GCSqGSIb3DQEBCwUA
A4IBAQBx9Gd6RSZUkcp4utSCaZkeSL9ak30Zg9QjcZQihH9tvCuslk9SlzXj/PVj
Oe8g7f6aNNTkadMfy5J2QEgsbrKOvW7LPdC250TMlYmSXotgjSofuOtt4qrhHMZZ
Ad2868rP+jgaXnvklNjK76I3xma3XkL1Ud01LXdD85vwg8cjoyUkIa+QBb/xN1AW
/tholOej7Nk+Cw3xY5XqDlieosP6v4mjwU4asoaUjKpCjYsJ9p17G/duqFwr1UBt
OVepLs7/TuY219wHWLvfiROCJLUHzyw3bRn3MRuVJaiAaOLJodg7ZwJ4rjqXOlzz
ewtKMqAp7w/YxlP4v/hSMlxcYcnk
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org