Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/323830343a3535383a3a2f33322d3332203d3e20323632353039.roa
File: 323830343a3535383a3a2f33322d3332203d3e20323632353039.roa (raw, json)
Hash identifier: XldfH9f5D3FGQZDD25KyRBeL8FCGB7tk6o2gdIsKthw=
Subject key identifier: 42:3B:3D:6A:93:AB:72:1E:6D:A1:55:BD:A3:6F:C2:83:62:50:59:F6
Certificate issuer: /CN=34CE853537D20533D457CD0EA7BD47D01344C870
Certificate serial: 5F01A97FA1AB8753FB7D23A62280A34A8E8C1FC7
Authority key identifier: 34:CE:85:35:37:D2:05:33:D4:57:CD:0E:A7:BD:47:D0:13:44:C8:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34CE853537D20533D457CD0EA7BD47D01344C870.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/323830343a3535383a3a2f33322d3332203d3e20323632353039.roa
Signing time: Mon 23 Jan 2023 21:40:16 +0000
ROA not before: Mon 23 Jan 2023 21:35:16 +0000
ROA not after: Mon 22 Jan 2024 21:40:16 +0000
asID: 262509
IP address blocks: 2804:558::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:01:a9:7f:a1:ab:87:53:fb:7d:23:a6:22:80:a3:4a:8e:8c:1f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34CE853537D20533D457CD0EA7BD47D01344C870
Validity
Not Before: Jan 23 21:35:16 2023 GMT
Not After : Jan 22 21:40:16 2024 GMT
Subject: CN=423B3D6A93AB721E6DA155BDA36FC283625059F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5a:fd:39:ba:db:7d:98:d7:76:cc:48:56:c9:
47:12:d7:d2:51:88:a8:1a:62:5a:ad:d6:fb:e2:c8:
a0:bb:9d:02:b0:fd:07:0c:1a:6b:5e:1d:62:08:cf:
2d:f3:43:53:f5:42:fd:b2:f2:f0:d6:e6:10:7a:c5:
d1:be:ea:21:f1:ef:1d:17:f6:ad:8b:6f:e2:d7:2c:
35:39:60:29:d3:0d:b4:0a:56:b0:93:17:d5:6b:61:
45:f6:cf:98:3d:47:8e:aa:4b:88:af:6e:4c:62:8e:
fc:bb:fe:7d:57:75:19:70:15:ab:18:07:7d:aa:1f:
c5:dd:bc:47:9d:13:dc:0b:21:c8:09:c3:9d:22:b4:
ab:a8:61:7f:50:25:84:d6:7f:fb:e7:a6:c6:d7:39:
7d:3b:72:ea:fc:88:d1:24:d4:42:37:ff:98:33:ba:
c2:0d:5f:93:c1:9d:17:3f:ba:06:59:85:5d:ff:bd:
e5:bd:02:b3:22:1e:4a:d0:98:ce:42:44:9b:1f:d0:
a8:f3:3c:0d:12:7d:c0:e2:3a:c4:5d:d9:71:48:b6:
b2:40:c3:60:bf:77:bb:8a:23:df:39:af:59:54:3b:
71:a9:52:06:26:26:07:fc:15:93:34:e9:b2:3f:00:
56:20:cf:22:f3:9f:b6:97:52:7c:89:dc:08:b3:9d:
e4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3B:3D:6A:93:AB:72:1E:6D:A1:55:BD:A3:6F:C2:83:62:50:59:F6
X509v3 Authority Key Identifier:
keyid:34:CE:85:35:37:D2:05:33:D4:57:CD:0E:A7:BD:47:D0:13:44:C8:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/34CE853537D20533D457CD0EA7BD47D01344C870.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34CE853537D20533D457CD0EA7BD47D01344C870.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/323830343a3535383a3a2f33322d3332203d3e20323632353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:558::/32
Signature Algorithm: sha256WithRSAEncryption
26:51:95:54:aa:23:12:0a:58:80:c6:bb:40:6b:b5:56:c0:e6:
77:c5:d9:63:92:ed:21:e4:44:42:b8:de:f3:dd:c5:a2:d8:0c:
8e:d0:da:37:f0:c4:fe:98:e8:44:83:f4:d2:1d:eb:f9:8f:80:
b6:1a:17:a5:0a:55:7b:1e:37:4b:2c:e5:63:d7:dc:e7:ab:93:
5b:c4:56:fe:59:71:d5:f2:84:76:d0:ea:bf:b2:d2:75:d8:64:
6f:5f:91:ac:09:33:ca:ab:96:30:42:51:c8:4c:6c:66:23:a7:
9e:44:e3:a5:07:a7:ad:0a:6d:70:c7:09:55:f0:32:ff:d1:1d:
3f:2f:5c:ea:4e:d8:1d:0a:95:08:69:56:c9:1b:bd:9b:f2:22:
aa:dd:b2:bb:88:ac:fb:57:04:d9:01:55:a1:5a:15:f6:ef:23:
f5:8e:2a:01:24:5d:a3:7f:f4:0f:cc:3c:a8:e6:08:d1:6c:34:
cf:f0:62:01:13:be:6a:47:b3:50:e8:a9:b8:18:7f:ce:91:8c:
9e:4f:f1:6c:68:6e:ab:ee:ac:93:92:f4:40:03:29:d1:80:dc:
d9:cc:41:db:d4:f1:e6:ba:2d:f4:e5:d7:4e:0b:d6:2f:ba:2e:
45:ab:c1:4a:15:19:ff:d1:c2:8a:3f:5b:51:82:c0:f2:21:52:
b7:cc:cc:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org