Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/323830343a3838303a3130303a65643a3a2f36342d3634203d3e203236353036.roa
File: 323830343a3838303a3130303a65643a3a2f36342d3634203d3e203236353036.roa (raw, json)
Hash identifier: fK/NjiF0VPX1fPotWw5QBmAMF/iBzhvsxPal6v7wb2s=
Subject key identifier: CE:3F:CC:B0:83:89:33:F4:F3:68:D2:55:2C:BF:3C:98:C5:56:5C:E3
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 3AC7F7C864C4BA5810961F71919B677803BC0970
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/323830343a3838303a3130303a65643a3a2f36342d3634203d3e203236353036.roa
Signing time: Thu 07 Nov 2024 20:40:14 +0000
ROA not before: Thu 07 Nov 2024 20:35:14 +0000
ROA not after: Thu 06 Nov 2025 20:40:14 +0000
asID: 26506
IP address blocks: 2804:880:100:ed::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:c7:f7:c8:64:c4:ba:58:10:96:1f:71:91:9b:67:78:03:bc:09:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:14 2024 GMT
Not After : Nov 6 20:40:14 2025 GMT
Subject: CN=CE3FCCB0838933F4F368D2552CBF3C98C5565CE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2d:07:d0:36:31:3d:12:ab:4c:d2:98:80:22:
e9:00:b7:d5:e5:f1:11:ea:09:b8:f2:84:b2:67:73:
97:df:42:77:ec:e0:45:8c:e3:e0:be:95:2c:ae:33:
37:58:3b:f7:e0:f5:45:9b:dd:ac:0a:26:cf:0c:a5:
d7:54:ac:06:d3:a6:67:e1:c5:cd:c0:a4:e4:a9:27:
75:ee:98:9d:38:a4:3b:c8:8d:1f:0a:c9:81:a5:5c:
f5:e7:5f:f3:67:8d:77:96:73:71:51:cb:bb:fa:93:
47:b5:33:ea:bb:bc:a0:02:89:dc:37:cb:cf:86:4a:
9e:ce:62:87:5d:4b:34:af:5a:5a:47:6e:e8:50:86:
4d:c2:2e:81:0b:c2:cf:4e:f6:87:dc:48:09:a3:c8:
7b:56:e8:03:93:d9:21:1b:ea:c1:2a:a6:42:9a:ba:
29:96:29:36:f7:2a:05:a5:64:e2:90:23:e2:5e:ac:
24:45:df:d2:45:b9:9a:34:6d:ac:d6:d1:71:1e:82:
21:06:d1:1e:8b:10:81:54:9b:b6:15:09:9d:70:f4:
2c:cc:ca:1d:8e:ed:6c:4f:2a:2e:98:1a:b8:40:dc:
7a:8b:5e:37:b0:1e:06:38:47:98:b4:0b:c4:2d:c9:
72:7c:64:0c:3c:91:4a:33:3c:7c:6b:25:14:e0:8e:
c1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3F:CC:B0:83:89:33:F4:F3:68:D2:55:2C:BF:3C:98:C5:56:5C:E3
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/323830343a3838303a3130303a65643a3a2f36342d3634203d3e203236353036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:880:100:ed::/64
Signature Algorithm: sha256WithRSAEncryption
16:fb:49:88:a8:af:f3:0c:26:4f:87:de:c0:7b:9a:27:5f:4c:
37:a3:2d:e1:df:ad:a9:5b:5a:77:62:ce:ec:c8:c3:63:5a:95:
81:2c:40:ac:4c:19:61:f7:e9:96:e4:26:0c:98:2e:d3:8c:82:
b3:89:08:c2:2d:e3:65:8f:fb:1b:4b:83:63:1b:c8:7c:15:28:
bc:f2:11:fc:a0:c7:79:71:29:f4:0c:8a:07:ab:2a:00:e7:f0:
55:f0:b0:cc:45:7b:ad:8f:7a:ea:e5:28:a1:c2:ca:fd:ba:9c:
63:d4:5e:21:de:cd:b3:85:1a:0c:1d:64:e6:82:30:78:5a:8c:
b7:e4:92:30:e5:57:92:21:00:5b:e6:a7:c8:1b:67:10:a3:6e:
08:40:e3:97:f3:3a:fc:cd:e1:9d:bf:70:7d:0b:fa:ee:6b:2e:
2f:ea:02:d9:1c:b8:c9:07:8a:04:21:1d:3d:e6:bf:33:bf:6d:
f1:ce:86:e9:ae:fe:48:69:52:f9:79:19:42:21:1c:22:d3:02:
fc:8b:7f:34:89:12:2f:20:12:27:75:08:a8:54:5f:dc:76:2b:
fa:8b:21:1c:77:f1:ae:55:aa:eb:9a:00:5b:6f:40:70:bd:13:
a4:02:47:62:7c:df:28:a5:9d:88:c9:39:7d:a8:91:b7:d6:63:
ef:b0:55:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:08 2024 by rpki-client on console-ams.rpki-client.org