Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/323830343a353135633a383030303a3a2f33332d3333203d3e20323638343437.roa
File: 323830343a353135633a383030303a3a2f33332d3333203d3e20323638343437.roa (raw, json)
Hash identifier: 84+gl0KkekGu3XNge0ip+et5Szrq/y9PmoNsDHScqCI=
Subject key identifier: 38:24:F7:52:9C:16:AF:5D:F2:01:C3:05:9C:52:0E:96:AE:3D:23:28
Certificate issuer: /CN=3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B
Certificate serial: 168DEC34F496FECEA141F3B562272BE94BBBE2B6
Authority key identifier: 3F:F0:A5:DF:EC:FD:F8:D0:6F:63:C2:BA:6B:24:8B:FC:D4:B9:3B:4B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/323830343a353135633a383030303a3a2f33332d3333203d3e20323638343437.roa
Signing time: Mon 21 Oct 2024 13:31:35 +0000
ROA not before: Mon 21 Oct 2024 13:26:35 +0000
ROA not after: Mon 20 Oct 2025 13:31:35 +0000
asID: 268447
IP address blocks: 2804:515c:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:8d:ec:34:f4:96:fe:ce:a1:41:f3:b5:62:27:2b:e9:4b:bb:e2:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B
Validity
Not Before: Oct 21 13:26:35 2024 GMT
Not After : Oct 20 13:31:35 2025 GMT
Subject: CN=3824F7529C16AF5DF201C3059C520E96AE3D2328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2f:8b:22:d1:37:3e:10:82:ed:2a:3b:51:0c:
43:cd:5c:3f:cc:ad:ec:23:b1:56:bf:a4:d2:4e:d8:
32:d9:59:7c:03:56:cd:96:d1:35:12:64:49:cb:e0:
c8:f6:3f:36:59:b3:a8:9d:f2:36:16:fc:52:bb:57:
6a:16:df:6d:49:a5:5d:d3:16:c5:65:77:93:6f:21:
2c:c1:26:45:a8:2d:c5:b7:b6:86:a0:1e:96:e4:e3:
a3:03:eb:30:ae:63:15:f2:92:23:fb:11:9c:4b:2e:
3e:57:7b:8d:a4:42:bc:ea:9f:b8:24:cc:05:d3:9d:
c1:fb:f8:38:93:1f:12:16:59:e8:a7:d5:98:cb:76:
11:67:72:3d:17:5c:3f:3c:a5:7b:fd:00:fd:a0:45:
31:09:1a:72:6c:1e:3c:c4:ab:8c:0b:80:8c:39:b3:
4b:bb:75:54:cd:d2:d1:c9:03:8c:e5:7b:fa:5a:72:
1f:ef:0f:02:35:5d:4b:6f:eb:42:74:39:55:36:56:
42:ed:a4:34:dc:4e:5b:5e:59:48:fb:f9:41:6c:84:
3f:37:ee:e8:fa:a0:65:f0:55:8c:f3:57:cb:46:19:
92:ae:9c:9a:cc:ac:8c:7f:ce:ad:cf:06:64:1b:55:
1f:02:d5:60:a1:13:42:c3:82:1a:41:e7:2b:93:f3:
3e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:24:F7:52:9C:16:AF:5D:F2:01:C3:05:9C:52:0E:96:AE:3D:23:28
X509v3 Authority Key Identifier:
keyid:3F:F0:A5:DF:EC:FD:F8:D0:6F:63:C2:BA:6B:24:8B:FC:D4:B9:3B:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/323830343a353135633a383030303a3a2f33332d3333203d3e20323638343437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:515c:8000::/33
Signature Algorithm: sha256WithRSAEncryption
32:64:85:3e:19:9a:46:f5:58:6e:e1:45:54:40:23:39:fd:36:
45:67:43:4d:e7:00:e8:bc:61:64:69:79:6d:09:35:26:de:76:
0c:48:09:bd:c9:80:29:ea:0c:87:84:e6:c5:29:d7:75:53:6d:
65:83:21:9e:41:36:f1:76:06:b5:ec:a1:63:f6:f3:ab:b8:a5:
d8:e1:55:0a:77:64:e3:07:83:77:f3:41:8c:ea:e4:e3:c2:18:
c9:5a:0f:71:69:12:cf:34:e8:36:d6:12:1c:2a:72:dd:cb:d2:
63:73:0b:99:13:0a:19:e6:1c:23:d7:c7:f4:be:e8:14:8f:10:
c0:f6:7b:98:d8:66:48:d7:2b:f7:cb:a5:18:c9:82:dc:48:33:
5b:55:b1:4f:73:80:a1:cb:82:ce:d6:1e:3a:20:3c:7d:9d:00:
30:cf:c0:e5:52:cf:b9:74:d2:3c:b4:c3:43:06:f8:11:73:75:
e3:93:38:2b:73:7a:a8:2c:93:0e:ee:08:d9:2a:62:7b:d2:17:
56:54:57:46:f9:79:a9:fe:60:57:f9:0d:33:68:2c:5c:40:86:
1c:38:91:12:07:48:c2:1d:ab:83:af:e2:26:cd:6c:31:6f:9d:
e4:e9:52:9a:ec:bb:d2:6a:2b:8f:80:07:91:04:4b:0a:34:c6:
97:3f:91:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:17 2025 by rpki-client