Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/323830343a6139633a3a2f33322d313238203d3e203532383938.roa
File: 323830343a6139633a3a2f33322d313238203d3e203532383938.roa (raw, json)
Hash identifier: UGN17+HOg59kzxVNRGGz8Avoj3aoFhvBO9q46T9PsFA=
Subject key identifier: 03:49:FF:B5:5B:65:8C:E9:C4:22:6F:FD:CE:6D:6E:DE:4D:1D:1B:36
Certificate issuer: /CN=5685F2E6C66A6D819815D1D86FC270B4F36579E9
Certificate serial: 095B0A9A7B02F8DDBEA2B8F3A5F41A327FD164E4
Authority key identifier: 56:85:F2:E6:C6:6A:6D:81:98:15:D1:D8:6F:C2:70:B4:F3:65:79:E9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5685F2E6C66A6D819815D1D86FC270B4F36579E9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/323830343a6139633a3a2f33322d313238203d3e203532383938.roa
Signing time: Mon 10 Apr 2023 22:22:52 +0000
ROA not before: Mon 10 Apr 2023 22:17:52 +0000
ROA not after: Mon 08 Apr 2024 22:22:52 +0000
asID: 52898
IP address blocks: 2804:a9c::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:5b:0a:9a:7b:02:f8:dd:be:a2:b8:f3:a5:f4:1a:32:7f:d1:64:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5685F2E6C66A6D819815D1D86FC270B4F36579E9
Validity
Not Before: Apr 10 22:17:52 2023 GMT
Not After : Apr 8 22:22:52 2024 GMT
Subject: CN=0349FFB55B658CE9C4226FFDCE6D6EDE4D1D1B36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c5:69:ed:7c:3c:14:87:37:28:e1:d9:6d:c9:
12:90:2a:6f:7b:0a:8d:ed:c8:b2:33:cc:5a:32:75:
3b:01:ad:83:02:cc:9e:82:30:9e:26:ea:f6:cb:18:
8b:67:7b:aa:e9:e2:4b:f5:da:6d:50:44:2c:8a:56:
70:0a:d7:fe:3b:3d:61:e3:88:c9:ed:fd:17:10:19:
61:9e:ea:5f:ed:22:f6:f5:ac:0e:8f:2e:42:58:4b:
70:73:07:ae:b2:2b:6b:bf:95:51:36:3f:b1:10:47:
28:a0:09:88:5c:e3:1d:f0:0d:ec:79:ec:9d:33:d6:
a9:6e:59:51:90:d2:b6:80:e7:f2:c7:e4:f0:e4:8c:
d6:39:9c:70:a0:ae:b8:91:39:f9:1f:b2:86:a7:4b:
f8:54:d3:b8:ff:7b:60:ba:dd:9c:82:fc:56:1f:40:
eb:33:ed:4e:3b:15:64:ec:3c:a5:ee:75:17:a2:c7:
4f:4a:28:de:81:d8:62:c7:7b:39:1a:2f:9a:40:da:
f8:ca:d4:b9:e3:21:f2:d6:8e:0d:1f:a1:75:69:89:
3d:e8:64:23:c2:6a:ac:48:87:5a:38:54:0d:eb:c0:
43:a6:ba:38:4d:d0:b6:5c:f3:87:9d:b3:b1:a8:ff:
25:2e:21:c8:03:52:e0:c8:c6:2b:bd:27:df:cc:e6:
9c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:49:FF:B5:5B:65:8C:E9:C4:22:6F:FD:CE:6D:6E:DE:4D:1D:1B:36
X509v3 Authority Key Identifier:
keyid:56:85:F2:E6:C6:6A:6D:81:98:15:D1:D8:6F:C2:70:B4:F3:65:79:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/5685F2E6C66A6D819815D1D86FC270B4F36579E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5685F2E6C66A6D819815D1D86FC270B4F36579E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/323830343a6139633a3a2f33322d313238203d3e203532383938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:a9c::/32
Signature Algorithm: sha256WithRSAEncryption
7f:bc:75:29:18:38:64:37:48:b8:22:e0:1d:07:0e:28:18:5d:
b9:bf:fc:6f:0a:ff:3b:38:a7:77:29:b1:dd:65:df:03:22:12:
0a:48:ea:8a:48:ac:06:27:eb:66:dd:71:b7:a7:2f:c6:5e:e2:
3b:5a:ca:89:9e:58:aa:29:4f:81:d9:2f:e0:03:e5:99:de:d5:
ab:72:2b:4a:e5:7c:bc:1d:9b:af:c4:60:ee:ea:18:71:b1:e8:
93:f6:c6:e3:d7:88:a6:f9:6e:b1:7d:51:6a:15:81:96:be:70:
7a:88:9a:76:b5:95:c9:e9:54:02:e5:d3:89:0c:4b:62:52:f5:
2c:34:60:07:a6:11:e0:9b:1d:35:17:94:b4:ff:49:6e:b0:66:
7d:ca:9b:36:06:82:ef:dc:82:11:91:01:91:92:f9:dd:97:48:
72:86:88:34:20:bb:bc:43:15:92:e9:ef:de:68:0c:87:64:8c:
82:56:a1:fa:39:a9:2f:8f:cd:93:ce:5e:30:19:01:3c:20:6c:
f0:50:4f:e5:20:6d:18:ea:55:02:aa:ac:4e:15:18:71:cc:48:
b6:17:3d:ab:f1:f3:20:84:bd:bd:d3:ab:0a:6f:ef:51:3f:8f:
4b:f5:2f:72:28:b5:b3:9b:41:00:80:e7:24:21:ef:21:a7:e5:
0a:9a:f3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org