Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/323830343a326637303a373030303a3a2f34382d3438203d3e20323634383931.roa
File: 323830343a326637303a373030303a3a2f34382d3438203d3e20323634383931.roa (raw, json)
Hash identifier: lnXJvZgyujrKVDwxCwM/HhIdhh93PnAs1pmMwblXPik=
Subject key identifier: CB:EA:A1:49:4B:E3:E6:A8:39:8E:F1:9A:FC:B1:8C:AF:F6:70:E4:CC
Certificate issuer: /CN=DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3
Certificate serial: 32B36D3E82222549D0C9CA8FEB68A2CBB78CFAA9
Authority key identifier: DD:E4:0F:9C:5F:2A:C6:0E:33:33:0A:FC:0F:D9:F2:9C:AB:19:15:A3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/323830343a326637303a373030303a3a2f34382d3438203d3e20323634383931.roa
Signing time: Thu 04 Apr 2024 13:52:29 +0000
ROA not before: Thu 04 Apr 2024 13:47:29 +0000
ROA not after: Thu 03 Apr 2025 13:52:29 +0000
asID: 264891
IP address blocks: 2804:2f70:7000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:b3:6d:3e:82:22:25:49:d0:c9:ca:8f:eb:68:a2:cb:b7:8c:fa:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3
Validity
Not Before: Apr 4 13:47:29 2024 GMT
Not After : Apr 3 13:52:29 2025 GMT
Subject: CN=CBEAA1494BE3E6A8398EF19AFCB18CAFF670E4CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e0:e7:1f:37:2a:b9:23:e8:47:04:60:e6:38:
7c:0f:25:ab:e4:8b:ae:82:6d:1e:df:48:86:86:d2:
d4:a0:6f:d1:6c:f6:0b:04:fd:cf:4c:a9:cf:72:19:
22:6a:ac:7c:55:bf:dd:c2:04:98:6f:b2:26:02:a2:
a2:a7:22:64:33:43:42:65:f6:49:5d:31:cc:8b:3d:
45:bd:56:62:dd:04:80:28:d7:ed:32:55:c5:da:82:
b3:4f:e0:ed:00:16:de:93:fb:3f:59:9d:68:2c:85:
c1:2c:ee:73:b5:e7:7e:b5:06:f0:30:78:fb:fb:12:
52:d8:b5:f1:92:89:51:67:4b:ec:d3:f8:dd:2b:87:
4d:a5:e3:a3:49:47:15:a9:a6:da:72:12:3b:9e:64:
5f:9d:7a:81:c5:ec:38:a9:a5:89:7c:88:05:12:68:
c8:b8:95:8c:76:ea:13:70:0c:2d:75:3e:5f:b7:50:
9f:87:90:bc:87:4b:cb:b3:6a:a4:23:4b:59:1c:2c:
cc:30:da:bf:f0:a9:eb:10:9e:35:f4:2b:ca:27:17:
20:bb:a1:3b:93:82:db:dc:3a:f0:ee:5a:a8:4e:1a:
f8:df:3e:7b:70:46:08:bc:5d:67:f8:f4:ec:fb:75:
41:96:25:36:30:20:9f:47:0f:ee:71:7d:45:c5:81:
14:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EA:A1:49:4B:E3:E6:A8:39:8E:F1:9A:FC:B1:8C:AF:F6:70:E4:CC
X509v3 Authority Key Identifier:
keyid:DD:E4:0F:9C:5F:2A:C6:0E:33:33:0A:FC:0F:D9:F2:9C:AB:19:15:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/323830343a326637303a373030303a3a2f34382d3438203d3e20323634383931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2f70:7000::/48
Signature Algorithm: sha256WithRSAEncryption
32:f4:f8:ed:d9:bb:cf:f1:1a:db:82:ea:c9:11:fc:76:e7:2a:
eb:02:6d:75:a3:7d:3e:12:f1:28:e9:0a:95:cf:1b:cd:a1:53:
89:82:15:9a:75:f3:d1:32:e7:62:df:66:5c:3f:fe:14:a8:35:
70:52:0c:d3:79:96:9f:db:95:10:7f:8c:75:be:bd:2c:ce:df:
55:bc:de:30:c0:9a:c3:2b:ab:17:06:47:60:7b:57:f2:19:36:
05:e0:ee:5c:af:bd:f3:5c:01:bd:0b:33:99:2a:66:83:51:a6:
0b:6b:45:a3:53:4a:bd:88:4a:28:00:c3:df:2d:a5:1e:99:b4:
ee:81:33:a5:74:00:e3:c4:e0:a3:96:bd:72:a2:14:44:38:b4:
eb:19:09:d6:7d:8e:ca:64:d7:89:ce:79:c3:af:5d:23:08:51:
52:d2:1e:38:5b:f1:1e:7d:d0:82:e0:0d:54:07:92:69:0e:cf:
32:c0:a3:5e:29:bc:70:6b:4a:2c:ba:b7:38:dd:15:fa:09:ad:
0a:3e:c0:5f:87:71:2f:a6:38:dc:c4:e8:db:dd:7c:c2:66:3a:
0a:21:e5:78:81:45:18:9e:e0:94:56:a7:ad:68:9c:d9:b2:32:
a7:cb:b9:a0:7b:ee:fb:a1:d3:3f:7f:53:73:46:e6:79:59:a0:
78:81:c0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org