Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/1/323830343a386538343a3a2f33322d3332203d3e20323733343331.roa
File: 323830343a386538343a3a2f33322d3332203d3e20323733343331.roa (raw, json)
Hash identifier: m7sNwy5T1HfokczeE1dQ/oBhDMGMWnDgCtUe3h9UeHY=
Subject key identifier: 53:E8:8A:9C:CE:D4:A7:98:D2:81:6C:BB:36:2E:19:F0:27:3F:44:7C
Certificate issuer: /CN=8165B54E8405655BA46AF4CE440711AE717F2BE5
Certificate serial: 6CAECA8D32FDD6EAA739CCE7FA9B2D47E9C517E9
Authority key identifier: 81:65:B5:4E:84:05:65:5B:A4:6A:F4:CE:44:07:11:AE:71:7F:2B:E5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8165B54E8405655BA46AF4CE440711AE717F2BE5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/1/323830343a386538343a3a2f33322d3332203d3e20323733343331.roa
Signing time: Thu 04 Apr 2024 10:36:38 +0000
ROA not before: Thu 04 Apr 2024 10:31:38 +0000
ROA not after: Thu 03 Apr 2025 10:36:38 +0000
asID: 273431
IP address blocks: 2804:8e84::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:ae:ca:8d:32:fd:d6:ea:a7:39:cc:e7:fa:9b:2d:47:e9:c5:17:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8165B54E8405655BA46AF4CE440711AE717F2BE5
Validity
Not Before: Apr 4 10:31:38 2024 GMT
Not After : Apr 3 10:36:38 2025 GMT
Subject: CN=53E88A9CCED4A798D2816CBB362E19F0273F447C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bc:8e:bd:db:58:4d:aa:f9:f4:6c:3d:c3:30:
16:fe:83:3d:0b:40:e8:bf:5d:3b:27:0b:de:90:ef:
0a:00:05:82:33:48:05:0e:10:ed:54:a8:0b:a2:05:
3e:ac:68:a2:b6:17:6c:ae:d7:10:03:63:0e:f1:29:
86:85:e1:28:05:34:72:1b:d2:93:04:8f:2f:d5:3d:
27:12:62:40:d7:39:6e:7a:dc:4d:89:78:af:5d:99:
35:6b:5d:76:58:20:03:77:2b:3f:c4:a9:25:0b:f8:
fa:29:ba:41:22:27:f3:32:91:c8:75:68:32:05:65:
fd:38:05:1d:35:6b:01:41:01:f0:41:8e:b9:88:9d:
c5:e0:82:91:af:93:dd:e6:c5:81:a1:54:50:52:1e:
5c:34:28:ed:f5:f5:cb:59:03:7c:77:11:c5:53:1a:
f6:24:17:3d:04:9b:63:2a:9d:7f:3a:86:73:43:01:
22:c8:12:38:99:a4:69:74:19:ee:18:b2:36:e6:48:
2a:a5:29:6d:bf:b4:be:5e:60:e3:20:c0:53:bc:f7:
c8:f3:ce:e1:c2:49:9d:dc:a9:7d:54:dc:9a:e8:5b:
de:c7:62:30:d8:81:dd:92:9d:df:6e:b3:ec:b4:3f:
35:bd:62:fc:71:6f:be:53:9d:6a:1f:58:ce:f4:1a:
b3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E8:8A:9C:CE:D4:A7:98:D2:81:6C:BB:36:2E:19:F0:27:3F:44:7C
X509v3 Authority Key Identifier:
keyid:81:65:B5:4E:84:05:65:5B:A4:6A:F4:CE:44:07:11:AE:71:7F:2B:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/1/8165B54E8405655BA46AF4CE440711AE717F2BE5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8165B54E8405655BA46AF4CE440711AE717F2BE5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/1/323830343a386538343a3a2f33322d3332203d3e20323733343331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8e84::/32
Signature Algorithm: sha256WithRSAEncryption
7e:02:3b:cb:4c:20:9f:fa:0c:9b:c1:c0:9f:aa:7f:da:fc:1a:
70:e8:fa:bd:88:2e:02:6c:f9:21:44:5c:44:a3:0d:82:96:64:
28:05:d5:23:ab:ce:aa:c8:ef:de:0e:88:60:2d:e5:83:12:89:
ed:90:c5:31:3a:1b:07:b0:ff:18:b3:5b:23:72:66:f9:39:a4:
d7:54:c7:2f:50:0c:58:dc:ec:fe:40:d3:d6:c2:5f:d1:b4:e6:
f4:76:a1:d0:93:90:15:71:ed:d1:b2:cc:97:50:83:4c:ee:e7:
8b:e4:e0:ec:7a:14:5e:46:46:1a:63:06:20:df:14:3e:d1:b8:
37:13:ff:d6:d2:ee:a6:64:45:1d:72:2f:e0:d2:3a:72:15:98:
71:52:6c:5a:a2:44:8e:b8:a0:45:44:5e:1c:46:18:71:ad:b6:
15:d9:51:fe:34:0f:04:08:d9:31:7c:88:ec:20:9d:7a:4a:b0:
95:76:b8:c3:8a:e5:c8:d6:36:9f:15:ed:f1:b1:3c:8e:92:be:
bd:5d:e9:fb:91:cc:12:5a:5c:e7:40:ac:ce:be:a7:ea:cf:53:
8f:85:80:c2:4c:81:b9:ef:c3:cb:ff:5e:57:a9:58:41:05:ff:
24:db:8e:62:a4:85:cb:e7:ce:f4:87:78:32:50:a5:95:da:69:
89:f6:ef:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-ams.rpki-client.org