Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0/323830343a366635343a383030303a3a2f33332d3333203d3e20323730363533.roa
File: 323830343a366635343a383030303a3a2f33332d3333203d3e20323730363533.roa (raw, json)
Hash identifier: PQdmEPDhvomyade02MrFM26+xnDzJ1IrVmSJ8WzbpIM=
Subject key identifier: 85:E8:86:D6:FD:CF:8C:8E:2C:5A:66:94:39:3F:EB:95:43:98:C9:F0
Certificate issuer: /CN=04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7
Certificate serial: 0E1DEDDC05A868DB50417E042B84A22C736A5C2C
Authority key identifier: 04:BA:3E:C0:1D:42:C9:A7:C4:99:4E:A6:54:09:D6:A8:71:1A:0F:D7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0/323830343a366635343a383030303a3a2f33332d3333203d3e20323730363533.roa
Signing time: Wed 28 Jun 2023 15:00:00 +0000
ROA not before: Wed 28 Jun 2023 14:55:00 +0000
ROA not after: Wed 26 Jun 2024 15:00:00 +0000
asID: 270653
IP address blocks: 2804:6f54:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:1d:ed:dc:05:a8:68:db:50:41:7e:04:2b:84:a2:2c:73:6a:5c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7
Validity
Not Before: Jun 28 14:55:00 2023 GMT
Not After : Jun 26 15:00:00 2024 GMT
Subject: CN=85E886D6FDCF8C8E2C5A6694393FEB954398C9F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:83:6f:69:17:00:69:f0:57:12:3a:53:d2:e1:
35:d2:3d:d9:1a:b8:8a:25:46:de:68:12:1c:a8:35:
5a:29:91:75:85:4c:44:5e:29:54:c9:b0:06:5c:96:
df:0d:53:8d:40:eb:66:df:21:07:bf:7a:3d:f6:39:
43:09:6f:1c:81:ea:86:12:66:70:df:28:ec:b8:fb:
42:16:6d:1d:9d:1c:00:72:3e:06:1f:2d:20:7f:1d:
e5:4d:1a:4d:12:be:8f:92:87:6a:86:eb:74:64:eb:
1f:5c:7a:8e:ca:76:bb:58:8f:bd:e8:27:78:36:16:
2d:74:e2:97:81:18:3b:9f:d1:2b:1e:2c:e5:ba:c7:
fd:8f:53:dc:2c:31:9a:13:4c:56:97:10:87:e9:1e:
22:1b:41:a6:7e:f7:bd:21:f7:6e:c9:52:72:29:bc:
71:09:05:dd:0a:5d:e3:25:f2:0b:6a:5a:f6:d1:29:
d7:75:b1:50:94:cb:19:fd:72:d8:03:7b:75:9a:8e:
6a:fc:01:b8:45:9c:ef:fc:58:30:f9:d3:b2:14:99:
34:1b:11:fe:92:10:5b:f9:92:be:0f:88:a3:fa:d5:
18:9e:d1:7b:84:4c:33:9e:0d:38:a4:7b:5c:12:98:
a6:2c:3c:0f:31:74:30:6a:d1:dd:bc:c8:55:fd:9c:
7a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E8:86:D6:FD:CF:8C:8E:2C:5A:66:94:39:3F:EB:95:43:98:C9:F0
X509v3 Authority Key Identifier:
keyid:04:BA:3E:C0:1D:42:C9:A7:C4:99:4E:A6:54:09:D6:A8:71:1A:0F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0/04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04BA3EC01D42C9A7C4994EA65409D6A8711A0FD7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0/323830343a366635343a383030303a3a2f33332d3333203d3e20323730363533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6f54:8000::/33
Signature Algorithm: sha256WithRSAEncryption
56:3d:f5:63:47:22:ac:9b:e4:42:cd:a6:54:d8:f6:40:92:dc:
b9:54:45:ed:4c:cd:bb:e3:63:25:a0:f0:1d:6d:50:e9:27:6f:
7f:aa:e7:01:a8:21:ef:b1:70:c9:61:7a:fd:ed:36:df:98:80:
fc:cb:da:88:b2:7d:18:a9:6c:69:b1:c7:95:2e:f1:e1:64:1e:
88:31:79:ab:4b:ec:50:27:0e:89:ad:a5:3c:82:e7:f1:49:db:
a0:0b:a4:ed:85:d6:83:21:ac:e4:89:0b:8d:8d:ef:14:70:a6:
16:10:de:f1:c5:18:2b:06:1c:51:94:64:4f:2b:5d:10:29:e1:
16:eb:b4:c2:68:39:19:4f:32:9a:0d:7a:bc:ef:cc:fb:d3:8e:
57:db:e8:a3:34:b1:3b:e9:f8:6e:df:2f:9e:ca:92:37:a0:89:
50:1b:15:1f:34:5a:ab:24:85:c8:3f:9b:31:4d:3a:c1:5a:ca:
9a:ac:e3:58:7f:a9:05:52:69:aa:39:28:94:f1:b0:92:cb:32:
6f:7d:4f:46:b5:2d:05:5b:c4:76:cc:92:97:99:af:db:9c:14:
f4:a7:65:ce:41:c0:2f:09:94:40:4e:b1:84:62:c9:eb:5d:08:
b2:63:05:a8:3e:ab:44:b0:97:1c:f6:80:62:34:7d:fa:5d:7c:
9c:1a:46:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----