Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a3a2f33342d3334203d3e203631353837.roa
File: 323830343a333330303a3a2f33342d3334203d3e203631353837.roa (raw, json)
Hash identifier: SKNr3+M47AngELMIs05q68yd0149hy83SLevRJRnR9g=
Subject key identifier: 88:50:1E:AF:D1:C4:2D:FB:F0:5E:E7:66:08:6C:92:0D:2E:2D:02:40
Certificate issuer: /CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
Certificate serial: 759BBD47BB8688F46F8AC7686E8CA1801D574D26
Authority key identifier: B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a3a2f33342d3334203d3e203631353837.roa
Signing time: Tue 20 Feb 2024 13:43:44 +0000
ROA not before: Tue 20 Feb 2024 13:38:44 +0000
ROA not after: Tue 18 Feb 2025 13:43:44 +0000
asID: 61587
IP address blocks: 2804:3300::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:9b:bd:47:bb:86:88:f4:6f:8a:c7:68:6e:8c:a1:80:1d:57:4d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
Validity
Not Before: Feb 20 13:38:44 2024 GMT
Not After : Feb 18 13:43:44 2025 GMT
Subject: CN=88501EAFD1C42DFBF05EE766086C920D2E2D0240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:32:22:ba:e0:36:86:f7:dd:9d:d4:9a:29:8b:
5a:1c:e7:31:0e:ed:15:ac:b1:60:97:66:59:4c:1f:
28:e0:2e:10:67:8a:90:1c:0c:ef:ac:c1:7c:ba:42:
76:e3:8f:e7:7f:64:89:59:d9:62:13:c8:d9:ce:28:
4a:43:6b:aa:ce:94:56:b4:7e:d3:a4:ef:98:7a:e4:
fb:ed:3b:8e:eb:5c:7e:07:12:83:08:c8:ba:d0:be:
44:45:c2:f3:c8:66:49:f1:ad:06:1e:92:38:8e:1d:
6f:66:54:8c:72:82:82:3c:e9:7f:0d:32:66:20:a9:
a1:8f:c1:f1:0a:04:9f:df:e8:b6:3d:0d:cd:9f:0a:
b3:ee:0d:9d:dd:26:de:f7:9f:e4:31:b2:c4:63:05:
e4:4e:4d:5d:c6:93:76:7a:75:00:6f:a9:3a:8c:0a:
2b:21:c5:b9:49:ba:94:e7:b8:fd:63:bf:ee:fd:67:
71:e4:15:5f:0c:fc:b7:9f:a5:e9:da:5d:27:93:c5:
c6:0f:3d:22:6c:3b:05:87:e0:27:b6:92:a0:4b:72:
b8:65:06:60:7f:04:54:d7:c8:2a:3c:b3:b2:3b:94:
c7:1f:cd:02:d8:be:96:95:b9:43:3d:08:23:8e:a2:
3a:80:bf:9d:dc:33:66:d6:dd:bd:c4:87:4a:4b:f8:
4f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:50:1E:AF:D1:C4:2D:FB:F0:5E:E7:66:08:6C:92:0D:2E:2D:02:40
X509v3 Authority Key Identifier:
keyid:B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a3a2f33342d3334203d3e203631353837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3300::/34
Signature Algorithm: sha256WithRSAEncryption
59:45:87:2a:b4:51:ea:82:22:52:9c:6c:c5:9b:32:89:f6:13:
bd:14:e3:da:a6:3e:62:25:21:af:37:f0:b0:0d:d2:1a:64:15:
bc:0c:36:55:b0:cb:15:ee:10:f3:ab:b6:5c:57:37:a0:66:8c:
35:1b:b6:a7:32:85:26:5c:69:fd:d2:3c:f3:77:65:01:14:27:
01:ca:f3:34:28:95:f0:f2:1d:a7:a2:27:69:e7:02:a6:27:3f:
7d:46:87:aa:79:d9:c7:a7:ea:a5:80:3d:e9:1c:b6:fb:c1:9a:
0f:8c:5d:05:a6:e3:13:fa:1d:ce:d9:b8:cb:88:a6:65:07:40:
17:7a:c5:ab:c0:89:00:d8:c7:39:56:7a:ff:ca:ff:a2:7e:1d:
6d:63:63:7e:0b:7e:f1:9d:8d:33:ae:0d:07:be:be:13:67:9c:
64:96:85:12:14:4f:c6:ce:d4:87:1d:2c:b1:db:bf:94:5b:cb:
27:a0:63:1a:ef:49:c5:95:83:07:8e:42:f6:7e:4d:9c:e5:93:
11:74:6a:90:3b:2b:af:ff:1e:f6:42:0b:d7:24:59:7f:5b:25:
92:4f:9b:f4:55:2d:71:73:65:3c:3d:dc:d2:6a:d6:99:d3:16:
e9:28:7f:25:d3:f9:7a:f4:39:40:12:3e:c1:9f:c3:25:bf:29:
36:04:9d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:59 2024 by rpki-client on console-ams.rpki-client.org