Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/323830343a336534343a383030303a3a2f33342d3334203d3e20323636353834.roa
File: 323830343a336534343a383030303a3a2f33342d3334203d3e20323636353834.roa (raw, json)
Hash identifier: fhClcuJGR/5kR7AoSuFJ6qLDwBAFonCggzbPIQA14Gc=
Subject key identifier: A6:28:BC:79:FB:E8:12:4D:E5:B8:B8:30:17:54:86:9E:16:41:D2:9E
Certificate issuer: /CN=CFB94B3528DB4AA42655F32491EFCB3F404B31CD
Certificate serial: 237E05158EC3CB84D7ADE4860BF38458DA21988E
Authority key identifier: CF:B9:4B:35:28:DB:4A:A4:26:55:F3:24:91:EF:CB:3F:40:4B:31:CD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFB94B3528DB4AA42655F32491EFCB3F404B31CD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/323830343a336534343a383030303a3a2f33342d3334203d3e20323636353834.roa
Signing time: Tue 20 Jun 2023 13:19:14 +0000
ROA not before: Tue 20 Jun 2023 13:14:14 +0000
ROA not after: Tue 18 Jun 2024 13:19:14 +0000
asID: 266584
IP address blocks: 2804:3e44:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:7e:05:15:8e:c3:cb:84:d7:ad:e4:86:0b:f3:84:58:da:21:98:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFB94B3528DB4AA42655F32491EFCB3F404B31CD
Validity
Not Before: Jun 20 13:14:14 2023 GMT
Not After : Jun 18 13:19:14 2024 GMT
Subject: CN=A628BC79FBE8124DE5B8B8301754869E1641D29E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1e:1e:23:7a:4b:30:a5:f0:2f:f5:aa:d1:43:
b0:be:82:1a:c3:de:49:b1:78:9e:25:1a:75:2f:59:
ee:1d:50:75:dd:a6:d8:0d:c6:3b:a6:6f:e0:67:1e:
53:cd:5d:2d:20:c4:2a:2a:09:93:b9:4c:4b:0e:13:
c7:7d:5d:0b:61:d1:8e:e4:f9:a1:c9:66:3f:19:91:
58:fb:d3:c0:cf:ba:6f:c8:0a:ff:32:ea:25:31:77:
c8:2d:ba:0b:97:14:f1:c9:25:b8:cc:96:16:4f:0a:
10:30:53:57:6e:6f:9c:ab:f5:fd:1b:25:0e:49:f7:
b5:c4:2b:d9:08:ed:dd:e7:f3:c1:1b:42:84:01:b8:
90:4b:d8:a6:57:0a:bf:5a:50:31:83:fe:69:e6:79:
4f:bd:cc:7b:9d:bc:e6:cd:a8:63:62:d7:09:ca:16:
2b:19:18:1c:55:6a:f2:ce:b7:b9:52:49:e0:de:6e:
2b:88:15:b7:e4:ac:ea:bb:6b:a1:a4:83:04:f6:d4:
91:c5:07:80:da:3d:67:fa:91:77:91:ca:c8:d3:a7:
e1:47:51:a6:ac:10:67:55:4a:df:f3:80:7d:ac:74:
ba:f4:f1:22:90:96:eb:26:31:97:5c:b9:07:16:0d:
25:f3:00:df:7e:ff:10:c8:af:98:52:68:49:4d:8d:
dc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:28:BC:79:FB:E8:12:4D:E5:B8:B8:30:17:54:86:9E:16:41:D2:9E
X509v3 Authority Key Identifier:
keyid:CF:B9:4B:35:28:DB:4A:A4:26:55:F3:24:91:EF:CB:3F:40:4B:31:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/CFB94B3528DB4AA42655F32491EFCB3F404B31CD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFB94B3528DB4AA42655F32491EFCB3F404B31CD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/323830343a336534343a383030303a3a2f33342d3334203d3e20323636353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3e44:8000::/34
Signature Algorithm: sha256WithRSAEncryption
38:d6:73:6b:87:05:99:aa:93:94:5b:60:f2:ca:97:78:5c:a2:
57:a5:f1:1d:bb:93:62:65:2d:21:8d:85:df:c8:64:5b:be:f6:
09:9d:51:1c:03:b7:e4:28:33:7a:83:77:4b:b8:42:cf:f8:34:
64:84:52:5b:f9:eb:e3:e4:6e:23:dd:f1:0c:6a:d4:2a:20:6b:
a2:ee:04:44:27:75:1a:4d:d4:05:c2:7a:61:f4:57:f8:0c:c6:
16:18:39:d9:90:18:32:34:a5:d5:ea:33:95:1f:85:0d:48:15:
92:91:6a:04:8c:ac:d0:38:06:0d:ac:a5:a2:f2:b7:00:4d:0f:
af:db:cc:3a:e8:00:a9:f3:41:84:37:76:d1:d6:40:a8:69:00:
59:2d:89:9d:9d:09:8f:77:12:15:e2:80:6d:ed:cf:4d:ab:47:
d6:f4:9c:9f:ae:49:fe:8d:51:e9:a0:48:41:58:f6:25:1f:47:
33:d3:b7:fe:2a:02:73:9b:f5:9e:52:da:92:09:51:2d:be:bc:
12:1e:93:a0:4a:59:96:1c:75:4e:9e:18:09:14:48:8a:0a:72:
a6:e6:d6:62:e9:55:5d:ce:c5:d0:f2:c2:d7:c5:35:b3:0e:bc:
bb:0d:cc:77:c9:e7:75:05:4a:fb:13:30:9f:e9:a1:4d:32:7c:
71:72:e4:6d
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUI34FFY7Dy4TXreSGC/OEWNohmI4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0ZCOTRCMzUyOERCNEFBNDI2NTVGMzI0OTFFRkNCM0Y0
MDRCMzFDRDAeFw0yMzA2MjAxMzE0MTRaFw0yNDA2MTgxMzE5MTRaMDMxMTAvBgNV
BAMTKEE2MjhCQzc5RkJFODEyNERFNUI4QjgzMDE3NTQ4NjlFMTY0MUQyOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Hh4jekswpfAv9arRQ7C+ghrD
3kmxeJ4lGnUvWe4dUHXdptgNxjumb+BnHlPNXS0gxCoqCZO5TEsOE8d9XQth0Y7k
+aHJZj8ZkVj708DPum/ICv8y6iUxd8gtuguXFPHJJbjMlhZPChAwU1dub5yr9f0b
JQ5J97XEK9kI7d3n88EbQoQBuJBL2KZXCr9aUDGD/mnmeU+9zHudvObNqGNi1wnK
FisZGBxVavLOt7lSSeDebiuIFbfkrOq7a6GkgwT21JHFB4DaPWf6kXeRysjTp+FH
UaasEGdVSt/zgH2sdLr08SKQlusmMZdcuQcWDSXzAN9+/xDIr5hSaElNjdyDAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUpii8efvoEk3luLgwF1SGnhZB0p4wHwYDVR0j
BBgwFoAUz7lLNSjbSqQmVfMkke/LP0BLMc0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM21LYXpheTlYV283ZVpqVHRRVThvUVd2THNUSGFORmVhbk5XWjZUWnJ0
TWUvMS9DRkI5NEIzNTI4REI0QUE0MjY1NUYzMjQ5MUVGQ0IzRjQwNEIzMUNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NGQjk0QjM1MjhEQjRBQTQy
NjU1RjMyNDkxRUZDQjNGNDA0QjMxQ0QuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNtS2F6YXk5WFdvN2VaalR0UVU4b1FXdkxzVEhhTkZlYW5OV1o2VFpydE1lLzEv
MzIzODMwMzQzYTMzNjUzNDM0M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNjM1MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEPkSAMA0GCSqGSIb3DQEBCwUA
A4IBAQA41nNrhwWZqpOUW2Dyypd4XKJXpfEdu5NiZS0hjYXfyGRbvvYJnVEcA7fk
KDN6g3dLuELP+DRkhFJb+evj5G4j3fEMatQqIGui7gREJ3UaTdQFwnph9Ff4DMYW
GDnZkBgyNKXV6jOVH4UNSBWSkWoEjKzQOAYNrKWi8rcATQ+v28w66ACp80GEN3bR
1kCoaQBZLYmdnQmPdxIV4oBt7c9Nq0fW9Jyfrkn+jVHpoEhBWPYlH0cz07f+KgJz
m/WeUtqSCVEtvrwSHpOgSlmWHHVOnhgJFEiKCnKm5tZi6VVdzsXQ8sLXxTWzDry7
Dcx3yed1BUr7EzCf6aFNMnxxcuRt
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org