Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/1/323830343a333562633a3a2f33322d3332203d3e20323636333033.roa
File: 323830343a333562633a3a2f33322d3332203d3e20323636333033.roa (raw, json)
Hash identifier: h4gWgUJxi6nkGpjsoCUM1x7QUA6zSYRvxLWZUL9yo2U=
Subject key identifier: 84:28:56:82:3E:19:9E:2B:0C:E3:E0:8D:AE:CA:DB:BB:66:2F:B0:2C
Certificate issuer: /CN=DB78049BFAA2384D5A158AA82F18399C706E6157
Certificate serial: 1E7DF9B9FBD1AE28BC400CAD23B291D167696A7D
Authority key identifier: DB:78:04:9B:FA:A2:38:4D:5A:15:8A:A8:2F:18:39:9C:70:6E:61:57
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB78049BFAA2384D5A158AA82F18399C706E6157.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/1/323830343a333562633a3a2f33322d3332203d3e20323636333033.roa
Signing time: Wed 03 Apr 2024 23:01:37 +0000
ROA not before: Wed 03 Apr 2024 22:56:37 +0000
ROA not after: Wed 02 Apr 2025 23:01:37 +0000
asID: 266303
IP address blocks: 2804:35bc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:7d:f9:b9:fb:d1:ae:28:bc:40:0c:ad:23:b2:91:d1:67:69:6a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB78049BFAA2384D5A158AA82F18399C706E6157
Validity
Not Before: Apr 3 22:56:37 2024 GMT
Not After : Apr 2 23:01:37 2025 GMT
Subject: CN=842856823E199E2B0CE3E08DAECADBBB662FB02C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8f:a9:7b:a5:98:b8:16:9a:25:eb:cc:f1:09:
69:01:b7:15:e7:9d:89:ff:61:7a:d1:d4:86:09:df:
d3:dd:40:2f:9d:62:11:5a:2d:ca:a5:ad:36:d0:65:
f3:21:47:51:75:f5:36:b0:2a:35:ca:94:45:3d:4a:
36:00:81:5e:1e:ba:5e:64:66:af:5a:56:5b:62:44:
37:a0:59:66:1e:86:38:6a:e7:90:2c:49:8c:3a:77:
a3:33:3a:4b:b1:e8:69:e3:07:c0:3d:15:b0:fd:d9:
19:91:44:63:f4:5f:65:e8:29:04:f7:08:40:0a:5a:
ef:c0:cc:db:36:fb:65:cf:f4:e9:93:f4:92:8c:08:
f6:8c:ee:f4:9c:80:89:cf:e5:59:5c:ce:26:15:31:
85:f2:51:31:10:7e:c5:a8:32:9d:69:5c:08:19:6e:
e9:eb:72:28:3b:db:31:01:74:ef:5d:d6:60:94:7e:
1a:38:b8:f0:13:37:0a:b0:d3:62:9a:03:88:29:d5:
dd:43:4d:54:9b:0c:a1:cc:85:cb:2a:89:d2:fa:0e:
ff:2e:3d:73:d4:71:db:8e:30:89:b8:b1:07:a0:25:
cd:26:cf:cc:68:d8:b6:c3:a4:2d:ca:3d:ae:83:a0:
36:b0:23:25:39:ea:eb:30:64:f3:ee:ec:8f:78:29:
76:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:28:56:82:3E:19:9E:2B:0C:E3:E0:8D:AE:CA:DB:BB:66:2F:B0:2C
X509v3 Authority Key Identifier:
keyid:DB:78:04:9B:FA:A2:38:4D:5A:15:8A:A8:2F:18:39:9C:70:6E:61:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/1/DB78049BFAA2384D5A158AA82F18399C706E6157.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB78049BFAA2384D5A158AA82F18399C706E6157.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/1/323830343a333562633a3a2f33322d3332203d3e20323636333033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:35bc::/32
Signature Algorithm: sha256WithRSAEncryption
13:7f:0f:38:4e:b3:e9:00:77:5d:ed:ba:0d:70:fc:51:1e:cc:
d4:e5:26:52:68:af:2f:7e:aa:4b:2e:4c:2e:d2:db:1a:82:a0:
48:e8:c2:08:1e:ed:de:39:c5:cf:be:38:9a:b8:f0:a5:26:84:
2a:c2:c7:c8:78:2e:f8:c5:e5:d3:ce:eb:f3:23:2f:d5:1c:40:
d1:04:3d:0e:22:b6:15:8e:fa:d0:5c:60:6f:31:63:1c:12:aa:
c3:28:81:64:cf:92:c3:b5:3f:de:ae:ef:c1:7d:5f:b5:d6:68:
f2:11:ce:3e:39:ed:21:13:27:57:ae:3e:e8:36:5a:23:31:8c:
e4:61:e0:d5:9c:99:e4:26:0d:5e:96:ce:02:28:a6:8f:06:34:
33:ba:39:63:5c:91:e5:53:7b:1b:e1:a4:b9:5b:9b:fb:6e:84:
29:89:57:9a:14:7f:eb:e5:db:86:91:9f:8e:17:fa:3d:3f:54:
e2:bc:10:14:32:2d:d8:86:b5:94:7e:a1:c6:63:10:21:01:d4:
88:e7:92:5f:22:47:c0:88:74:90:5b:39:6b:e8:4e:bb:d5:e2:
d0:0f:88:96:64:1b:f5:62:6c:7f:db:93:59:39:6f:6c:9c:13:
89:f8:fa:99:71:0a:a8:6a:bf:86:4f:d9:29:80:5b:fc:9b:16:
eb:f7:2c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org