Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/323830343a363230633a3a2f33342d3334203d3e203238323235.roa
File: 323830343a363230633a3a2f33342d3334203d3e203238323235.roa (raw, json)
Hash identifier: 3uKqMz7kLSVRMBwRGVA72Nzr7tFaZNetr5X19ucZaCY=
Subject key identifier: E0:3F:52:84:B3:79:C1:A0:50:4B:4F:58:73:44:AA:97:F5:01:DA:65
Certificate issuer: /CN=A09DA72952F507E87867658358D81CEFBDB67686
Certificate serial: 323E83BC1295E432C89A05F4656CD84A636AB0B1
Authority key identifier: A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/323830343a363230633a3a2f33342d3334203d3e203238323235.roa
Signing time: Tue 09 Jan 2024 12:56:17 +0000
ROA not before: Tue 09 Jan 2024 12:51:17 +0000
ROA not after: Tue 07 Jan 2025 12:56:17 +0000
asID: 28225
IP address blocks: 2804:620c::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:3e:83:bc:12:95:e4:32:c8:9a:05:f4:65:6c:d8:4a:63:6a:b0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A09DA72952F507E87867658358D81CEFBDB67686
Validity
Not Before: Jan 9 12:51:17 2024 GMT
Not After : Jan 7 12:56:17 2025 GMT
Subject: CN=E03F5284B379C1A0504B4F587344AA97F501DA65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:42:dc:24:77:68:86:6c:19:cc:a2:85:06:9c:
e4:ec:e1:1e:31:ed:8f:77:05:90:8b:93:82:f8:1e:
a8:b1:c8:be:b4:bc:bc:3a:9e:8f:69:d0:1b:c4:2b:
8f:91:d2:be:c3:24:cc:01:22:67:46:81:c7:a3:4b:
de:72:b6:7f:e2:06:15:0c:6f:02:01:19:7f:c8:e1:
bf:68:74:8a:f4:64:b3:04:e9:42:d2:b6:e6:24:52:
96:77:24:c6:bd:45:54:5b:21:5d:5b:dd:67:6d:9d:
1d:30:43:6f:ce:32:7c:9d:60:e0:ff:9d:47:bb:11:
9f:2b:02:1a:56:4a:ed:a7:f0:1b:40:62:4e:e0:0c:
36:93:62:ba:ef:b9:94:28:87:56:11:d9:ee:9d:de:
bf:90:cf:ad:9a:df:d6:87:06:4c:bf:a1:cb:44:5f:
04:1d:f2:ab:fc:1b:0a:f0:3d:e7:3e:af:64:3b:4c:
d5:5d:4d:0d:bd:85:d6:0f:46:b0:0c:e2:0f:67:a0:
fa:1a:4b:e9:b9:5d:4c:23:3f:bc:c9:1b:ad:ca:c9:
54:52:bb:1e:7b:fc:6c:42:5c:da:7c:bb:3b:25:4e:
9c:12:e6:e4:78:e8:16:62:f3:6d:8f:53:b4:f5:14:
86:15:41:6c:17:16:f5:f6:fc:da:77:5d:16:4b:20:
a6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:3F:52:84:B3:79:C1:A0:50:4B:4F:58:73:44:AA:97:F5:01:DA:65
X509v3 Authority Key Identifier:
keyid:A0:9D:A7:29:52:F5:07:E8:78:67:65:83:58:D8:1C:EF:BD:B6:76:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/A09DA72952F507E87867658358D81CEFBDB67686.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09DA72952F507E87867658358D81CEFBDB67686.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/1/323830343a363230633a3a2f33342d3334203d3e203238323235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:620c::/34
Signature Algorithm: sha256WithRSAEncryption
3c:42:13:46:0c:11:f3:0b:e0:64:fb:69:cb:33:bf:d7:2a:24:
e0:c3:a7:0a:ef:c1:0d:83:ef:32:fa:1e:d0:42:0d:f4:57:b7:
f8:a2:64:6d:88:d4:90:0a:56:f6:a0:e9:a0:ec:47:3d:19:fd:
6f:66:f4:95:5a:09:fe:55:7e:bf:40:ba:bd:1f:a3:54:f1:aa:
e7:97:7d:2e:6a:e7:09:62:62:5e:60:61:ec:06:db:52:d5:95:
2f:2b:c6:ef:14:64:50:de:70:f4:fc:de:d3:20:7e:7c:61:0c:
79:8b:d6:38:0d:59:0f:28:88:8f:91:db:02:82:66:35:03:be:
d8:31:5a:d7:32:6d:b7:e8:37:ba:5c:c4:3c:5b:bc:97:22:7c:
53:67:84:80:10:48:af:a9:5d:63:be:eb:66:a1:76:6d:ce:5e:
1c:1a:49:74:fb:55:e9:5b:28:61:5e:2b:72:31:60:60:36:85:
cc:6c:03:6d:9e:c3:ce:d6:ab:94:c4:55:85:db:6a:a0:2a:ab:
10:f8:ce:2f:3f:70:20:6d:f6:36:38:60:b7:4f:ec:b3:43:5a:
9b:52:10:ce:9c:4d:eb:6a:a1:80:22:b4:95:50:c9:da:7b:88:
88:4f:7d:0c:87:bb:74:e2:74:8a:35:be:47:ed:01:8d:51:ab:
4a:0c:2d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:38 2024 by rpki-client on console-ams.rpki-client.org