Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5H1FT2my4MpiREG6xUNNuLKvFEVZvx51gz3JhGurhYWi/1/323830343a323332633a3a2f33322d3438203d3e20323634313436.roa
File: 323830343a323332633a3a2f33322d3438203d3e20323634313436.roa (raw, json)
Hash identifier: Be6Pcr/CjLSQHSghywc02q754u97HqlTdF87zazzP8s=
Subject key identifier: 3F:8F:3A:CB:BB:D4:2E:67:82:BF:D4:15:F6:C5:B0:04:70:5B:8E:56
Certificate issuer: /CN=BA9646257906A6D1ECDD6F200CB215B5C5E01F07
Certificate serial: 20E50AA673D0A4684526E750F1A1AAF658F985E0
Authority key identifier: BA:96:46:25:79:06:A6:D1:EC:DD:6F:20:0C:B2:15:B5:C5:E0:1F:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA9646257906A6D1ECDD6F200CB215B5C5E01F07.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5H1FT2my4MpiREG6xUNNuLKvFEVZvx51gz3JhGurhYWi/1/323830343a323332633a3a2f33322d3438203d3e20323634313436.roa
Signing time: Thu 04 Apr 2024 05:51:28 +0000
ROA not before: Thu 04 Apr 2024 05:46:28 +0000
ROA not after: Thu 03 Apr 2025 05:51:28 +0000
asID: 264146
IP address blocks: 2804:232c::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:e5:0a:a6:73:d0:a4:68:45:26:e7:50:f1:a1:aa:f6:58:f9:85:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA9646257906A6D1ECDD6F200CB215B5C5E01F07
Validity
Not Before: Apr 4 05:46:28 2024 GMT
Not After : Apr 3 05:51:28 2025 GMT
Subject: CN=3F8F3ACBBBD42E6782BFD415F6C5B004705B8E56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:90:9f:39:bd:a3:68:0b:4d:fa:bc:82:dd:87:
26:bf:7e:55:05:9a:2e:7e:f8:a7:db:d0:c0:30:c2:
89:78:54:22:18:6f:13:b7:a1:75:63:86:7d:c0:79:
21:38:27:d2:0e:c0:a8:56:43:4c:5b:53:75:46:d4:
8d:ba:44:d8:60:10:92:f2:cb:fb:62:8e:e4:22:6f:
6b:22:5f:48:f6:96:43:98:3a:e3:c7:89:ab:de:ab:
d5:5d:06:97:30:28:25:22:81:fd:1e:11:06:ea:54:
2b:6e:03:f4:86:f4:0e:89:6a:58:e7:0b:40:65:93:
2a:83:6e:ee:17:b4:7a:e7:ba:f4:1e:2d:c9:11:99:
2a:ba:56:97:f1:40:f7:ba:9a:98:4a:a8:1d:54:de:
10:8d:0f:25:53:db:37:29:75:af:20:60:09:2f:59:
a0:a7:e4:4a:8c:87:37:a5:98:ec:5f:ff:08:20:ee:
b3:5e:df:68:d6:d1:be:98:8e:e9:56:5a:fd:b6:b2:
4a:3c:eb:49:be:b2:5c:2a:ab:2c:93:53:4a:77:cd:
99:c5:5b:0e:98:50:e1:98:79:00:59:9f:f1:21:f7:
62:03:05:fe:ab:c1:70:2e:51:50:cc:88:dd:f6:84:
f1:75:70:84:ec:e4:4d:b3:13:cb:0c:e5:ab:17:06:
35:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8F:3A:CB:BB:D4:2E:67:82:BF:D4:15:F6:C5:B0:04:70:5B:8E:56
X509v3 Authority Key Identifier:
keyid:BA:96:46:25:79:06:A6:D1:EC:DD:6F:20:0C:B2:15:B5:C5:E0:1F:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5H1FT2my4MpiREG6xUNNuLKvFEVZvx51gz3JhGurhYWi/1/BA9646257906A6D1ECDD6F200CB215B5C5E01F07.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA9646257906A6D1ECDD6F200CB215B5C5E01F07.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5H1FT2my4MpiREG6xUNNuLKvFEVZvx51gz3JhGurhYWi/1/323830343a323332633a3a2f33322d3438203d3e20323634313436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:232c::/32
Signature Algorithm: sha256WithRSAEncryption
b6:68:0c:37:79:8f:c2:eb:0d:90:b4:29:df:6c:40:92:82:1d:
b3:16:28:63:2a:c5:a1:5a:99:92:b4:24:15:8d:4e:98:60:e9:
48:12:b9:76:1d:a0:37:e0:6f:0f:a7:dd:e2:ce:1d:92:b6:b6:
65:f6:ae:dc:e4:f8:12:1b:41:d0:8b:ae:59:a1:a6:e9:80:0a:
a5:c4:1e:0a:9c:9b:e3:e1:4d:13:64:55:05:bd:74:0b:4f:e5:
9b:d9:8b:11:3a:03:e5:30:45:15:9f:72:ce:a2:ec:9c:0e:95:
f4:c5:52:75:c9:5e:01:8a:ab:34:ad:d2:be:e2:80:3d:22:b5:
78:5c:70:14:a6:f3:c9:8d:14:37:16:ae:54:59:87:52:6c:15:
43:58:80:6b:3e:93:d9:56:e7:29:c6:62:3e:1f:97:a3:2c:de:
89:47:fa:1b:bc:e9:10:65:ab:06:d0:3e:66:70:c7:fa:eb:a0:
6d:6f:55:52:85:04:1b:43:8f:ec:ec:2b:05:25:62:13:83:67:
a3:69:24:4d:90:2d:4a:6e:7f:7c:9e:37:c6:20:fa:25:41:bb:
3a:30:b9:0b:2c:53:78:13:5e:c6:3a:f1:94:e7:3f:33:ca:06:
f6:89:71:29:ee:1e:0f:3f:e8:28:70:1e:43:06:c3:70:06:dc:
19:04:aa:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org