Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/323830343a363563383a3a2f33332d3333203d3e20323639353134.roa
File: 323830343a363563383a3a2f33332d3333203d3e20323639353134.roa (raw, json)
Hash identifier: hS+EfG/oBllTT/npraQM6ohSZ+TU2PMAfX7JaVUWX/0=
Subject key identifier: 9B:EC:05:40:DD:52:1D:67:D6:B7:0C:EB:0D:6F:A1:A9:56:A7:E0:FE
Certificate issuer: /CN=3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008
Certificate serial: 553573423AECF522BEB82BFA0554551211746AD7
Authority key identifier: 3B:C9:D1:D1:AF:32:F1:CF:DB:A0:FC:7A:17:C0:11:66:EB:B7:B0:08
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/323830343a363563383a3a2f33332d3333203d3e20323639353134.roa
Signing time: Sun 07 Apr 2024 03:21:56 +0000
ROA not before: Sun 07 Apr 2024 03:16:56 +0000
ROA not after: Sun 06 Apr 2025 03:21:56 +0000
asID: 269514
IP address blocks: 2804:65c8::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:35:73:42:3a:ec:f5:22:be:b8:2b:fa:05:54:55:12:11:74:6a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008
Validity
Not Before: Apr 7 03:16:56 2024 GMT
Not After : Apr 6 03:21:56 2025 GMT
Subject: CN=9BEC0540DD521D67D6B70CEB0D6FA1A956A7E0FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8e:48:f7:86:8f:78:2b:7f:52:7f:08:e1:6f:
cd:ff:4f:1d:ef:0a:a9:48:20:6e:39:1e:7d:07:b5:
73:63:06:08:ec:35:2b:d2:72:b6:06:ed:47:14:99:
a7:54:46:36:cb:12:05:a3:78:8b:aa:7f:17:c8:2a:
33:fa:10:fb:8a:4d:92:3a:23:39:47:90:01:69:9a:
3d:6b:1e:da:c5:ff:a1:aa:29:09:1b:99:06:1f:00:
0c:17:e1:86:52:fd:78:e4:49:28:df:f2:be:48:dc:
33:30:77:29:d0:ed:70:ef:fb:f7:8c:9e:5f:4b:0e:
96:28:ee:6a:54:f8:ce:6a:7f:99:1e:e6:24:39:b0:
98:12:4b:b7:ba:cd:d1:29:31:cb:a6:74:ff:04:0d:
81:55:d7:c3:9a:74:dc:54:4d:ff:08:ff:8f:75:5b:
55:cc:08:c6:23:1e:35:dd:a3:15:bb:38:79:56:47:
ee:b7:cd:f3:93:3d:4c:3d:50:d5:ee:2a:17:93:34:
a2:86:6f:1a:a2:82:63:15:01:26:16:a6:ee:8e:55:
3f:33:ae:06:10:b8:c2:9c:65:02:9d:e7:6e:6e:d7:
92:47:b2:ba:89:6c:ec:64:9e:88:a1:74:a1:b1:28:
f9:cb:2d:63:be:45:b3:c0:a1:4e:cc:9c:d2:40:11:
84:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:EC:05:40:DD:52:1D:67:D6:B7:0C:EB:0D:6F:A1:A9:56:A7:E0:FE
X509v3 Authority Key Identifier:
keyid:3B:C9:D1:D1:AF:32:F1:CF:DB:A0:FC:7A:17:C0:11:66:EB:B7:B0:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/323830343a363563383a3a2f33332d3333203d3e20323639353134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:65c8::/33
Signature Algorithm: sha256WithRSAEncryption
11:64:f2:97:a6:46:c5:8c:e6:05:40:f2:bb:22:f5:ce:cb:5b:
8a:40:ea:09:0c:9b:b5:61:e9:3c:4b:b4:7e:3a:9f:d8:a6:46:
16:66:28:db:75:ed:a6:d8:aa:bb:8c:29:1b:a5:60:44:73:6f:
5e:49:ce:66:83:b8:32:9c:c0:39:c5:44:67:21:4f:ce:0e:e3:
c2:95:a5:0a:45:b0:f7:e7:66:52:70:a1:c5:93:38:3c:41:a3:
e4:73:b1:82:58:0a:68:e8:59:a9:77:d4:2f:ea:18:11:38:0c:
4c:59:4d:80:98:f1:4d:e9:4c:14:0d:14:ff:73:ce:08:5a:25:
c9:e3:72:61:de:4a:66:20:85:d9:d7:aa:95:7a:01:ad:01:17:
9b:ac:57:b0:c7:9f:06:8b:bf:3a:9b:e8:39:da:ad:7e:72:c4:
b8:34:e9:fa:40:f2:c4:7f:eb:a1:6b:12:c2:c7:e0:cc:5a:48:
2e:7e:35:2f:f6:3c:92:b2:28:cc:dd:45:82:36:da:15:d2:f4:
78:72:80:0c:44:e0:67:eb:58:b4:0a:21:8a:8b:19:a7:44:d5:
59:01:ff:bc:74:7f:2a:75:ac:4e:ad:35:67:d0:c7:76:37:fc:
cc:4e:a3:3b:aa:73:7c:17:f2:ae:70:a7:9b:e3:4f:16:25:9f:
1b:a1:de:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org