Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CD9y4WrxR5Z8ABqDAfLrTXgwN3dSnZJDtpd1nPAeAprx/0/323830343a366266633a383030303a3a2f33332d3333203d3e20323730343338.roa
File: 323830343a366266633a383030303a3a2f33332d3333203d3e20323730343338.roa (raw, json)
Hash identifier: omHx0X6uo7RLRobSqJRG9LasyUW2P0pCx8W26mEQVgg=
Subject key identifier: F6:3F:ED:C2:84:A7:DE:69:FD:CE:8E:04:5B:52:AA:A4:7C:E0:89:7A
Certificate issuer: /CN=555670031340B5D31FA9E93EFAB4F49D5A553B33
Certificate serial: 1CC4156013360F67AF374886307474F1F752300A
Authority key identifier: 55:56:70:03:13:40:B5:D3:1F:A9:E9:3E:FA:B4:F4:9D:5A:55:3B:33
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/555670031340B5D31FA9E93EFAB4F49D5A553B33.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CD9y4WrxR5Z8ABqDAfLrTXgwN3dSnZJDtpd1nPAeAprx/0/323830343a366266633a383030303a3a2f33332d3333203d3e20323730343338.roa
Signing time: Wed 01 Nov 2023 18:24:05 +0000
ROA not before: Wed 01 Nov 2023 18:19:05 +0000
ROA not after: Wed 30 Oct 2024 18:24:05 +0000
asID: 270438
IP address blocks: 2804:6bfc:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:c4:15:60:13:36:0f:67:af:37:48:86:30:74:74:f1:f7:52:30:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=555670031340B5D31FA9E93EFAB4F49D5A553B33
Validity
Not Before: Nov 1 18:19:05 2023 GMT
Not After : Oct 30 18:24:05 2024 GMT
Subject: CN=F63FEDC284A7DE69FDCE8E045B52AAA47CE0897A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:df:02:99:39:d8:6c:29:f5:dc:11:59:44:4f:
77:f7:5d:33:12:38:f6:40:85:b1:05:3f:23:9f:17:
77:8f:53:98:f4:75:25:99:59:ae:de:a0:af:7c:fe:
ed:91:e3:bf:69:8d:44:21:db:6f:30:57:5d:03:80:
57:9b:ba:66:66:ee:e6:8e:9b:dc:00:b4:00:96:48:
31:83:4f:f1:72:e5:90:da:84:9c:e6:0e:e0:33:02:
e7:54:4f:e2:35:20:92:72:9e:40:44:db:68:f3:06:
7c:c8:af:49:a6:70:ab:59:63:80:7a:8c:4a:bd:8c:
1f:42:fc:c4:14:6f:f6:e9:00:d0:ca:38:70:a1:f9:
f4:d2:73:07:a0:02:d7:90:6d:3c:fe:89:0b:c5:a5:
c8:02:86:39:6b:00:cf:ca:33:92:40:33:e5:a5:6b:
fa:4e:4d:90:6a:5c:c9:98:d2:36:f7:bf:59:1d:86:
a3:f6:17:c1:f9:f9:0e:20:49:d3:6e:40:86:ca:54:
cc:9a:1d:37:70:69:56:c7:c5:ed:5f:2a:cc:91:fa:
be:4c:10:ff:b0:56:4a:d1:74:65:ea:d2:7b:bd:b7:
d3:29:61:0d:fa:2c:3a:a2:f2:63:8e:3a:a9:d0:08:
51:cf:d5:40:7b:bd:21:aa:6e:c5:6a:ef:77:a2:80:
14:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3F:ED:C2:84:A7:DE:69:FD:CE:8E:04:5B:52:AA:A4:7C:E0:89:7A
X509v3 Authority Key Identifier:
keyid:55:56:70:03:13:40:B5:D3:1F:A9:E9:3E:FA:B4:F4:9D:5A:55:3B:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CD9y4WrxR5Z8ABqDAfLrTXgwN3dSnZJDtpd1nPAeAprx/0/555670031340B5D31FA9E93EFAB4F49D5A553B33.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/555670031340B5D31FA9E93EFAB4F49D5A553B33.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CD9y4WrxR5Z8ABqDAfLrTXgwN3dSnZJDtpd1nPAeAprx/0/323830343a366266633a383030303a3a2f33332d3333203d3e20323730343338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6bfc:8000::/33
Signature Algorithm: sha256WithRSAEncryption
73:94:f5:4f:cf:43:ac:11:05:44:b7:26:85:be:14:df:fa:8f:
99:fd:c6:28:0a:1d:06:f5:2d:41:36:47:49:bf:9d:ac:9c:0e:
ac:5c:ba:fb:95:13:34:98:13:80:66:0e:d8:ca:ea:c0:36:54:
3f:03:24:46:f3:72:ce:b0:c1:7a:78:15:83:ca:5d:5f:63:de:
ec:16:17:97:8a:38:29:14:2c:1b:e3:1f:3d:b2:4a:0c:da:59:
f4:e3:d2:fc:8b:b3:56:3b:c2:64:77:41:66:c7:e2:52:ec:39:
36:1b:7e:3f:23:e9:44:f9:0c:49:20:69:cb:5c:48:17:fb:f3:
6b:73:56:3c:22:ed:bf:54:a9:ce:ae:27:1b:27:5a:ae:0a:f2:
c2:f2:72:0b:c8:02:1e:d2:fd:e0:d1:5e:3a:13:c8:85:92:da:
1c:7f:26:5e:de:eb:45:44:d4:af:0f:2a:b0:08:3d:0b:d0:ba:
48:15:e0:ae:28:75:ad:77:35:2a:e1:13:be:d2:b3:b6:5b:52:
85:f3:fe:6f:10:01:f5:63:a1:1d:1e:c6:fa:b3:ea:8c:fc:eb:
1c:7b:dc:c7:9e:a4:23:46:13:49:ce:a4:e2:b1:54:e0:e5:b3:
f2:d8:bc:ea:d2:b8:ba:f6:83:21:4a:0d:e7:7f:56:8c:ab:bb:
ab:98:06:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org