Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/323830343a346335303a343030303a3a2f33342d3334203d3e20323637333633.roa
File: 323830343a346335303a343030303a3a2f33342d3334203d3e20323637333633.roa (raw, json)
Hash identifier: LvZpRuHeq+e/lG6WFQEJ2Q1hMXc7joPeonr+nj0Fuzg=
Subject key identifier: 68:BF:63:D2:35:31:B4:4A:C9:00:31:26:F2:72:29:56:F6:B3:3B:0A
Certificate issuer: /CN=2AC986C39C68AAADAAD9F87F750E123A8F5A265F
Certificate serial: 722BA5AB589DD22CAF64350FC87349C45B7AE58A
Authority key identifier: 2A:C9:86:C3:9C:68:AA:AD:AA:D9:F8:7F:75:0E:12:3A:8F:5A:26:5F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2AC986C39C68AAADAAD9F87F750E123A8F5A265F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/323830343a346335303a343030303a3a2f33342d3334203d3e20323637333633.roa
Signing time: Wed 20 Mar 2024 19:26:18 +0000
ROA not before: Wed 20 Mar 2024 19:21:18 +0000
ROA not after: Wed 19 Mar 2025 19:26:18 +0000
asID: 267363
IP address blocks: 2804:4c50:4000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:2b:a5:ab:58:9d:d2:2c:af:64:35:0f:c8:73:49:c4:5b:7a:e5:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2AC986C39C68AAADAAD9F87F750E123A8F5A265F
Validity
Not Before: Mar 20 19:21:18 2024 GMT
Not After : Mar 19 19:26:18 2025 GMT
Subject: CN=68BF63D23531B44AC9003126F2722956F6B33B0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b1:8e:14:87:da:49:1d:9a:15:c7:5e:a2:47:
0c:ac:f7:f8:06:7c:19:92:a3:f6:75:ef:94:96:93:
88:71:7c:7c:1e:8d:76:b8:1f:97:b3:2a:88:ac:b8:
3b:a2:af:8c:5d:f8:de:58:37:5e:64:0e:df:be:98:
f9:fc:5b:50:3f:6e:36:52:03:43:b5:eb:6a:e6:01:
8b:77:f3:71:9e:9d:6c:3b:25:b9:4e:a6:2c:58:9b:
a3:ea:90:7f:54:63:56:82:0d:ab:b0:2c:f6:af:28:
49:30:d1:51:1b:88:dc:7f:91:5b:da:90:73:c8:9e:
e3:2d:eb:26:b9:49:19:95:e0:a5:ee:f3:12:b5:ce:
02:49:eb:bc:c1:c9:16:d1:09:9c:60:2e:9e:60:57:
37:16:aa:d5:e4:79:06:5d:19:23:29:58:9f:5b:98:
f4:f9:9f:e5:a2:76:a6:99:75:77:14:20:1f:3c:6e:
a6:aa:2d:9f:6c:02:75:6d:3a:58:5e:8f:4a:7e:8b:
a9:04:a9:5c:a7:01:a4:3a:b8:8b:b5:c5:5c:82:a6:
6d:33:7b:e4:2a:5d:b7:4b:a6:bf:a4:35:89:67:80:
9a:d4:24:eb:33:1b:b2:2a:07:96:7b:cf:24:06:3f:
3b:97:e5:ff:98:6f:17:8a:4f:5d:24:3a:f9:8e:7c:
9a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BF:63:D2:35:31:B4:4A:C9:00:31:26:F2:72:29:56:F6:B3:3B:0A
X509v3 Authority Key Identifier:
keyid:2A:C9:86:C3:9C:68:AA:AD:AA:D9:F8:7F:75:0E:12:3A:8F:5A:26:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/2AC986C39C68AAADAAD9F87F750E123A8F5A265F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2AC986C39C68AAADAAD9F87F750E123A8F5A265F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/323830343a346335303a343030303a3a2f33342d3334203d3e20323637333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4c50:4000::/34
Signature Algorithm: sha256WithRSAEncryption
03:8d:01:80:40:c3:59:f2:63:b2:4d:62:8b:dc:1d:a9:9d:6d:
f0:32:d4:4a:31:4b:fc:d6:43:44:49:89:10:5c:5a:48:c2:16:
ef:f6:7d:7e:94:20:f7:14:62:14:b0:57:d5:eb:42:88:3b:f1:
c3:36:12:b1:ca:ab:02:3c:9a:81:67:0f:71:d8:77:9f:ea:b9:
eb:da:f5:c4:50:35:c4:cb:88:73:6b:21:90:ca:f1:53:32:7f:
97:84:fb:37:6f:53:15:a0:d6:e2:64:3a:18:76:99:52:b1:8a:
db:64:b1:93:d3:12:90:6e:c7:83:ca:66:50:1f:ef:a4:f3:ce:
3f:a1:44:2e:da:5b:e5:9c:ee:6d:4b:54:db:df:85:04:99:63:
ae:8d:22:b1:f6:ca:66:e9:08:80:65:74:a8:fc:57:05:77:f9:
97:ad:a5:53:2f:1b:bf:52:78:cc:cd:7f:0c:81:79:0b:f5:69:
e5:2d:1a:cf:bb:3f:ae:7f:91:74:50:b9:78:83:56:d1:ce:61:
21:a0:d2:96:29:a5:7d:0b:1e:32:b3:4d:84:84:61:47:78:43:
17:57:bf:58:45:66:a4:13:54:c7:6a:f4:ce:a9:9c:90:e2:cf:
bd:02:7e:04:dc:85:4a:84:b5:c7:97:cb:75:6d:85:ea:45:0e:
33:93:91:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org