Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/323830343a336534343a633030303a3a2f33342d3334203d3e20323636353834.roa
File: 323830343a336534343a633030303a3a2f33342d3334203d3e20323636353834.roa (raw, json)
Hash identifier: Fyyoj9tEsAKbBaO2B1MDAEYzaxIzWZx7FiC5b2mW8p8=
Subject key identifier: 38:CC:47:50:44:61:23:1E:16:D6:85:2B:54:42:01:3F:C1:9C:77:C5
Certificate issuer: /CN=40C85279D2EB71F1B3DF1E15E0F4676C22BA650A
Certificate serial: 4F849396C969E3B70FAC26218B20E7193A9B95B7
Authority key identifier: 40:C8:52:79:D2:EB:71:F1:B3:DF:1E:15:E0:F4:67:6C:22:BA:65:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40C85279D2EB71F1B3DF1E15E0F4676C22BA650A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/323830343a336534343a633030303a3a2f33342d3334203d3e20323636353834.roa
Signing time: Tue 02 Jan 2024 19:03:30 +0000
ROA not before: Tue 02 Jan 2024 18:58:30 +0000
ROA not after: Tue 31 Dec 2024 19:03:30 +0000
asID: 266584
IP address blocks: 2804:3e44:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:84:93:96:c9:69:e3:b7:0f:ac:26:21:8b:20:e7:19:3a:9b:95:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40C85279D2EB71F1B3DF1E15E0F4676C22BA650A
Validity
Not Before: Jan 2 18:58:30 2024 GMT
Not After : Dec 31 19:03:30 2024 GMT
Subject: CN=38CC47504461231E16D6852B5442013FC19C77C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f8:4e:55:71:2a:d1:6f:31:3b:78:05:2c:4c:
0d:cf:40:64:df:08:d8:d1:7d:9a:d9:1b:96:ca:9e:
26:80:17:8d:a2:4f:48:09:31:46:cd:85:ba:2a:dc:
5a:bd:9b:fc:8f:7f:f1:81:37:45:54:af:49:6a:56:
64:a8:9f:74:4b:c8:1c:60:8e:83:1d:99:0c:16:3d:
1b:f3:07:3c:b5:60:07:0e:37:b0:56:28:9f:dc:80:
73:57:9e:39:42:8b:9f:29:ac:c0:50:6d:c5:3a:7c:
36:46:42:c7:22:1a:2d:39:75:67:25:b9:c3:ae:b1:
38:be:2d:c3:4a:06:89:43:67:ad:ec:dd:03:c8:5d:
4b:ec:0d:41:54:6a:c4:66:a5:04:57:ef:e2:c9:5c:
16:1b:3b:ab:45:7d:65:2b:fb:62:7b:10:0e:b5:23:
07:88:eb:2b:1f:8b:34:55:cd:95:41:0b:8b:70:d0:
76:6b:3f:c6:ee:64:64:bd:78:20:6a:4c:cc:03:42:
d2:68:8b:ee:0c:83:5d:f8:81:f1:e6:21:63:2d:5d:
80:fa:eb:e6:ca:01:0b:ef:9a:81:60:f0:83:a0:43:
9c:d7:28:af:a8:ba:92:07:0e:52:a6:b4:c1:d9:67:
79:82:b2:56:1c:4a:8c:0f:f1:b2:d6:ef:8e:f4:13:
d0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CC:47:50:44:61:23:1E:16:D6:85:2B:54:42:01:3F:C1:9C:77:C5
X509v3 Authority Key Identifier:
keyid:40:C8:52:79:D2:EB:71:F1:B3:DF:1E:15:E0:F4:67:6C:22:BA:65:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/40C85279D2EB71F1B3DF1E15E0F4676C22BA650A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40C85279D2EB71F1B3DF1E15E0F4676C22BA650A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/323830343a336534343a633030303a3a2f33342d3334203d3e20323636353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3e44:c000::/34
Signature Algorithm: sha256WithRSAEncryption
5c:39:df:49:7b:d3:c8:f4:04:a3:e1:ed:aa:40:97:2a:2a:07:
b0:21:b1:ee:eb:2d:58:ac:4d:a1:68:e5:73:3d:08:3e:d0:18:
62:7e:5f:ef:c4:d6:c5:b1:a5:ee:08:24:99:b6:e6:1f:f5:f1:
e9:cb:3e:57:70:f4:e7:b4:5a:f4:72:89:52:12:30:85:67:d9:
4c:07:d9:76:24:dc:a4:d3:ce:77:bc:e0:69:d0:0d:62:55:b7:
9b:3f:37:4d:9b:80:cb:3c:ce:3a:26:a0:cb:8f:8e:64:cb:63:
fa:06:e2:44:a9:cf:5b:be:c9:a3:a7:67:96:9a:fc:62:7e:4d:
e2:87:aa:6e:af:4f:56:0a:92:23:72:04:81:39:dd:55:cc:fe:
66:ff:eb:63:9b:c3:60:6a:4e:3e:ee:2a:4d:0f:0e:b8:8b:79:
a4:4a:6d:ec:60:1f:c2:d4:9f:73:5f:f9:70:7f:9a:72:65:62:
09:1d:1c:5e:1e:35:97:6c:53:15:f4:90:48:b8:5b:e0:54:15:
a1:e7:ab:61:40:24:a0:14:df:7c:bb:ee:19:ca:c1:b4:88:25:
3f:45:51:3e:2d:bf:7b:79:e0:6f:ca:4b:cd:bc:48:4f:ce:c7:
71:d6:07:11:38:20:e3:1b:d7:d3:6a:2e:11:87:51:f4:b7:cd:
49:08:ee:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:52:51 2025 by rpki-client