Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/1/323830343a376161343a3a2f33322d3332203d3e20323731333833.roa
File: 323830343a376161343a3a2f33322d3332203d3e20323731333833.roa (raw, json)
Hash identifier: Hy0K3F3I5n3U486nQ4Fley+GlvKRbK17z1Bknw7XaRE=
Subject key identifier: 85:6A:A5:FE:C6:77:EB:22:29:5E:1F:4C:E6:65:3F:E0:37:4C:03:09
Certificate issuer: /CN=D8825DA77E058ADD2399FB091B8BC6C94D719DC6
Certificate serial: 1D7398D7DD6E85744C57D7D1F0555C1856CE7428
Authority key identifier: D8:82:5D:A7:7E:05:8A:DD:23:99:FB:09:1B:8B:C6:C9:4D:71:9D:C6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8825DA77E058ADD2399FB091B8BC6C94D719DC6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/1/323830343a376161343a3a2f33322d3332203d3e20323731333833.roa
Signing time: Thu 24 Aug 2023 18:53:30 +0000
ROA not before: Thu 24 Aug 2023 18:48:30 +0000
ROA not after: Thu 22 Aug 2024 18:53:30 +0000
asID: 271383
IP address blocks: 2804:7aa4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:73:98:d7:dd:6e:85:74:4c:57:d7:d1:f0:55:5c:18:56:ce:74:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8825DA77E058ADD2399FB091B8BC6C94D719DC6
Validity
Not Before: Aug 24 18:48:30 2023 GMT
Not After : Aug 22 18:53:30 2024 GMT
Subject: CN=856AA5FEC677EB22295E1F4CE6653FE0374C0309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7e:31:a3:2a:25:62:f1:5b:21:f3:26:d2:14:
54:ac:09:57:79:71:c3:62:21:fe:c4:6e:54:a9:8f:
bb:49:42:8f:72:ec:f9:13:4c:98:a2:c1:fe:3c:b5:
dd:d9:cb:e6:d3:2e:02:ba:b7:78:53:a3:82:f6:26:
18:99:ff:a7:76:be:00:49:a9:1f:35:91:fb:69:ba:
8d:55:9f:d3:61:fe:c4:0d:97:0b:b1:d5:50:11:7d:
89:74:6d:b2:84:db:6e:62:83:e7:6f:e8:35:0c:e7:
7f:06:80:75:57:e0:14:62:9e:d9:a0:11:80:62:d3:
2e:56:6f:30:cb:51:1a:d2:07:e3:d4:9d:3e:96:7f:
7a:b6:4b:0b:10:4d:d0:f2:21:ba:cf:74:d7:f4:1b:
01:be:cb:42:9b:69:7a:fd:89:b1:8b:db:99:29:49:
24:37:c3:98:82:3e:8e:bd:82:93:05:be:29:a4:40:
1d:55:10:8e:61:c6:2c:bf:0f:49:c8:f1:39:42:62:
9d:17:ca:92:15:03:c7:da:2e:26:6f:06:61:70:77:
22:c6:82:39:ea:b9:a9:70:fe:83:de:e6:02:34:ba:
a0:0d:53:a3:2a:c1:6e:b3:49:ae:33:3b:14:ea:53:
3b:ef:f5:66:c3:e8:4b:62:c4:d3:61:31:81:ed:c9:
63:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6A:A5:FE:C6:77:EB:22:29:5E:1F:4C:E6:65:3F:E0:37:4C:03:09
X509v3 Authority Key Identifier:
keyid:D8:82:5D:A7:7E:05:8A:DD:23:99:FB:09:1B:8B:C6:C9:4D:71:9D:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/1/D8825DA77E058ADD2399FB091B8BC6C94D719DC6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8825DA77E058ADD2399FB091B8BC6C94D719DC6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/1/323830343a376161343a3a2f33322d3332203d3e20323731333833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7aa4::/32
Signature Algorithm: sha256WithRSAEncryption
a3:68:53:3d:f4:48:bd:f1:1e:7f:a3:28:cc:72:03:f6:9b:fe:
02:79:ac:65:c4:15:ae:dc:99:3a:8b:6e:8f:53:0c:bb:9f:e3:
71:8b:21:5b:63:49:cf:be:55:1a:ef:0b:d0:76:e7:f3:1d:5c:
bc:1d:d0:15:a8:09:b8:92:8f:99:8d:6b:c3:3e:cd:05:2d:dd:
b2:80:80:59:2a:69:14:0e:3d:db:5b:15:02:d7:8f:38:19:bf:
32:f9:fb:a5:15:a2:9d:84:91:5d:fb:6a:b0:58:8b:43:6a:85:
ca:da:8b:aa:f4:db:c5:4f:7c:ae:e5:6d:60:66:fa:b4:ba:5d:
46:0a:51:c5:2d:26:2e:12:28:0b:11:35:4c:56:a7:5c:c1:ed:
54:fc:a5:61:e2:73:29:c7:f9:f6:93:9e:b3:8c:f6:19:46:96:
29:57:65:b8:af:ad:21:2c:ec:7f:54:94:64:46:5e:6c:e6:7c:
1d:06:22:09:11:96:de:f7:1e:ea:67:15:c1:47:65:d8:54:c5:
c1:0b:f6:37:50:94:14:d2:74:03:c9:62:d3:b6:35:a7:57:ff:
3b:79:af:20:75:ec:fe:17:15:5b:e8:d4:10:94:3b:9e:53:3d:
07:8c:65:81:26:73:c7:10:a3:9f:59:7f:b5:13:4e:26:b0:4e:
4e:61:f6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org