Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/2/323830343a333336343a3330303a3a2f34302d3430203d3e20323635333933.roa
File: 323830343a333336343a3330303a3a2f34302d3430203d3e20323635333933.roa (raw, json)
Hash identifier: NUd78TnufwamXAxPIiSXPPsFUwee8AQqG5q2wX2Qymk=
Subject key identifier: 0B:B9:C5:6B:A9:49:85:B7:4C:55:A9:B0:F5:4A:59:40:A6:24:B1:37
Certificate issuer: /CN=997C15C2A44451CDBD2E1A86BDF8E5CE95CC6A1C
Certificate serial: 3323169BBF1C4372ACCD2DB6C5F2163CC191D281
Authority key identifier: 99:7C:15:C2:A4:44:51:CD:BD:2E:1A:86:BD:F8:E5:CE:95:CC:6A:1C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/997C15C2A44451CDBD2E1A86BDF8E5CE95CC6A1C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/2/323830343a333336343a3330303a3a2f34302d3430203d3e20323635333933.roa
Signing time: Mon 15 Jan 2024 00:20:36 +0000
ROA not before: Mon 15 Jan 2024 00:15:36 +0000
ROA not after: Mon 13 Jan 2025 00:20:36 +0000
asID: 265393
IP address blocks: 2804:3364:300::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:23:16:9b:bf:1c:43:72:ac:cd:2d:b6:c5:f2:16:3c:c1:91:d2:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=997C15C2A44451CDBD2E1A86BDF8E5CE95CC6A1C
Validity
Not Before: Jan 15 00:15:36 2024 GMT
Not After : Jan 13 00:20:36 2025 GMT
Subject: CN=0BB9C56BA94985B74C55A9B0F54A5940A624B137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f0:9e:ae:6b:dc:ab:42:3d:04:9f:34:85:ab:
e1:6c:39:e4:7e:b9:3a:9c:ee:e0:28:7e:c1:24:00:
6d:53:5a:9e:c3:44:f4:e7:d6:f9:8f:60:b8:41:25:
15:d0:58:7c:70:60:6e:bf:14:95:81:a8:fc:87:b6:
42:59:3d:8f:4b:77:85:df:40:db:dc:79:61:0c:9a:
30:91:f8:a4:f2:33:8f:9d:b0:cf:f0:99:b7:3d:b4:
d3:87:ea:e9:ac:a9:4b:0a:c5:b3:23:80:db:cc:3a:
ab:5d:d9:27:b9:81:27:c1:47:60:db:5e:af:2c:26:
00:ba:ec:99:03:46:be:e4:c1:4f:83:e7:8e:52:10:
57:86:b6:ae:2c:00:26:94:a0:d1:64:b6:b9:2a:90:
45:f7:da:b5:d0:03:60:d1:d6:35:5f:0b:89:2f:ff:
f0:2a:7d:be:e7:68:a6:75:de:6d:13:53:54:80:45:
7c:ac:3a:76:01:c6:65:7c:f3:d5:3d:50:f6:f1:64:
3c:97:f8:1d:78:ea:b7:4c:8d:0c:d2:87:39:9c:8f:
46:b4:68:c1:20:67:0f:31:34:98:f8:11:c7:28:ff:
52:70:c5:0e:54:b1:97:04:17:91:d8:cb:ea:b4:dd:
10:c0:dc:57:cb:7c:62:9c:95:aa:96:57:dc:54:c6:
d4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B9:C5:6B:A9:49:85:B7:4C:55:A9:B0:F5:4A:59:40:A6:24:B1:37
X509v3 Authority Key Identifier:
keyid:99:7C:15:C2:A4:44:51:CD:BD:2E:1A:86:BD:F8:E5:CE:95:CC:6A:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/2/997C15C2A44451CDBD2E1A86BDF8E5CE95CC6A1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/997C15C2A44451CDBD2E1A86BDF8E5CE95CC6A1C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/2/323830343a333336343a3330303a3a2f34302d3430203d3e20323635333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3364:300::/40
Signature Algorithm: sha256WithRSAEncryption
3a:11:fa:c8:d1:29:fd:e7:7d:24:d1:da:6e:f8:3e:77:86:9f:
22:9f:13:99:b4:f9:80:93:fa:d7:ca:e0:e4:5c:3d:9c:cc:55:
80:6c:db:be:ac:1e:4b:a1:68:3b:a9:24:79:8f:31:d0:fa:5c:
06:7c:47:4c:0d:be:97:fd:8b:69:92:3b:34:4a:1e:90:41:f2:
3b:46:b3:2b:d8:3e:65:75:05:7c:b0:76:37:94:05:75:90:d7:
47:24:ea:ea:e5:b5:84:e4:82:8f:22:71:ad:e2:23:e7:f8:e1:
91:a5:43:eb:f0:a2:92:b8:17:14:b0:2c:1c:49:d5:f8:6f:31:
8c:30:28:bf:fc:53:c0:50:80:c5:fa:4e:07:4e:8b:68:c2:a1:
a4:cd:cd:63:df:6b:81:80:15:32:c7:b2:18:07:82:f9:26:0f:
61:1e:59:98:f3:43:a4:2a:a6:bd:74:74:d3:be:1f:d9:d8:8d:
90:93:52:36:e6:e5:75:70:24:5c:2f:68:16:a8:b9:52:6b:2c:
32:6a:84:fc:f2:a3:60:c5:fc:04:ff:b2:08:bb:08:5e:e3:55:
5e:c7:9d:d8:7a:31:ff:3b:79:f3:2f:31:20:eb:e5:20:9a:20:
d4:6f:4d:4c:b3:b0:48:88:65:60:3b:1c:75:60:39:d1:54:2e:
24:43:75:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org