Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/1/323830343a3830633a3a2f33322d3438203d3e20323632333433.roa
File: 323830343a3830633a3a2f33322d3438203d3e20323632333433.roa (raw, json)
Hash identifier: mwMuqql78CWYanxmVCipil7guDvYdvHbs/C7I/n/By8=
Subject key identifier: 02:B8:58:B9:EB:AE:99:CA:BD:4C:08:B7:49:72:20:42:A4:D2:9F:B1
Certificate issuer: /CN=3F0A020836A7712EC0C3C17FC164D37F5AB5E703
Certificate serial: 7CD5D44FB333240FCD8AE6A5C2B588B1E49A74C8
Authority key identifier: 3F:0A:02:08:36:A7:71:2E:C0:C3:C1:7F:C1:64:D3:7F:5A:B5:E7:03
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F0A020836A7712EC0C3C17FC164D37F5AB5E703.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/1/323830343a3830633a3a2f33322d3438203d3e20323632333433.roa
Signing time: Fri 26 Jan 2024 18:04:09 +0000
ROA not before: Fri 26 Jan 2024 17:59:09 +0000
ROA not after: Fri 24 Jan 2025 18:04:09 +0000
asID: 262343
IP address blocks: 2804:80c::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:d5:d4:4f:b3:33:24:0f:cd:8a:e6:a5:c2:b5:88:b1:e4:9a:74:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F0A020836A7712EC0C3C17FC164D37F5AB5E703
Validity
Not Before: Jan 26 17:59:09 2024 GMT
Not After : Jan 24 18:04:09 2025 GMT
Subject: CN=02B858B9EBAE99CABD4C08B749722042A4D29FB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b2:71:bd:52:f4:2d:e9:b3:9d:b7:cc:54:40:
e6:2f:c4:2a:e1:7c:c0:3c:38:33:01:0f:17:f6:73:
01:c3:ec:17:99:39:e9:04:78:7b:5a:60:f6:af:96:
4f:f7:0e:9e:d9:36:9d:de:0e:4b:d8:fd:37:b8:b8:
a9:12:66:3d:17:8f:db:64:d9:ef:a0:70:4b:d3:56:
1f:7d:27:af:96:6d:67:54:95:ef:28:13:68:49:1c:
60:1b:85:29:f2:0e:15:6e:e6:32:12:d2:b4:6c:32:
b6:85:15:7f:11:40:55:fa:f3:71:5b:62:e8:02:f6:
8c:92:4e:c5:ce:42:99:b9:41:25:0a:f2:24:a9:e5:
79:b6:6e:24:29:39:87:d8:00:a3:82:92:1b:52:2e:
f3:24:08:45:8e:da:d6:e8:26:18:72:ea:8f:02:31:
c3:83:37:d2:23:82:1d:e6:a2:e4:a5:78:43:c9:24:
c1:81:25:c5:c1:bf:28:17:fc:4f:19:99:a4:c7:b5:
49:02:ba:21:40:7c:1a:0b:1a:d4:db:fd:bc:d6:76:
f8:2a:6f:b4:78:d3:3f:80:74:b4:5c:40:e6:a6:fa:
3b:42:dc:d6:28:15:40:c1:e4:11:a8:14:bf:0a:ff:
a2:8c:bf:6f:5f:3c:b0:30:5e:19:f4:4d:28:e1:e0:
19:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B8:58:B9:EB:AE:99:CA:BD:4C:08:B7:49:72:20:42:A4:D2:9F:B1
X509v3 Authority Key Identifier:
keyid:3F:0A:02:08:36:A7:71:2E:C0:C3:C1:7F:C1:64:D3:7F:5A:B5:E7:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/1/3F0A020836A7712EC0C3C17FC164D37F5AB5E703.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F0A020836A7712EC0C3C17FC164D37F5AB5E703.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/1/323830343a3830633a3a2f33322d3438203d3e20323632333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:80c::/32
Signature Algorithm: sha256WithRSAEncryption
74:87:f2:0d:0b:c7:34:6f:25:e1:bf:00:13:63:2b:6f:a1:48:
bb:0d:19:84:db:03:50:cb:c9:10:45:9a:fc:de:83:28:fd:11:
6d:15:d1:4d:cb:ff:82:71:a4:22:4e:06:ca:a1:67:61:14:3a:
c0:39:3e:53:0b:40:33:73:89:d3:6c:83:d8:93:e6:6a:a5:47:
3f:3c:8b:26:c1:73:86:3f:eb:37:21:8f:dc:3a:a5:0b:ea:cd:
0f:b3:74:9c:e0:38:13:20:c6:47:ca:ac:ea:05:b7:d7:30:98:
31:3a:b1:b5:e8:99:69:f3:82:97:76:c5:46:a3:ad:3d:e4:2a:
2d:59:8f:27:83:34:c3:0e:78:0f:b0:2b:72:c3:75:04:8c:52:
b2:9e:0d:05:ec:cf:fb:e3:d6:a9:77:4f:5e:d8:95:d9:e0:72:
12:37:68:70:38:2c:e2:70:a0:07:b9:b3:b6:47:5c:57:49:a9:
82:97:4e:51:0e:f7:0d:4e:33:31:bb:47:c4:f8:6f:c3:c3:52:
9f:a8:bb:e5:f6:3a:62:48:49:c5:b0:14:de:ce:66:98:f9:c1:
8b:aa:54:cb:dd:76:47:41:86:0a:ba:31:f9:5d:59:be:dc:22:
8a:e1:36:56:56:6a:fc:57:ba:09:6f:30:66:13:d9:00:c3:e0:
ec:8b:1b:10
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUfNXUT7MzJA/NiualwrWIseSadMgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YwQTAyMDgzNkE3NzEyRUMwQzNDMTdGQzE2NEQzN0Y1
QUI1RTcwMzAeFw0yNDAxMjYxNzU5MDlaFw0yNTAxMjQxODA0MDlaMDMxMTAvBgNV
BAMTKDAyQjg1OEI5RUJBRTk5Q0FCRDRDMDhCNzQ5NzIyMDQyQTREMjlGQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIsnG9UvQt6bOdt8xUQOYvxCrh
fMA8ODMBDxf2cwHD7BeZOekEeHtaYPavlk/3Dp7ZNp3eDkvY/Te4uKkSZj0Xj9tk
2e+gcEvTVh99J6+WbWdUle8oE2hJHGAbhSnyDhVu5jIS0rRsMraFFX8RQFX683Fb
YugC9oySTsXOQpm5QSUK8iSp5Xm2biQpOYfYAKOCkhtSLvMkCEWO2tboJhhy6o8C
McODN9Ijgh3mouSleEPJJMGBJcXBvygX/E8ZmaTHtUkCuiFAfBoLGtTb/bzWdvgq
b7R40z+AdLRcQOam+jtC3NYoFUDB5BGoFL8K/6KMv29fPLAwXhn0TSjh4Bn7AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUArhYueuumcq9TAi3SXIgQqTSn7EwHwYDVR0j
BBgwFoAUPwoCCDancS7Aw8F/wWTTf1q15wMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGszNHhnNUFZak5uMXZTZlo3enc0S3J5d3paRDh2NllFN3lvMzR2S3BX
b2ovMS8zRjBBMDIwODM2QTc3MTJFQzBDM0MxN0ZDMTY0RDM3RjVBQjVFNzAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNGMEEwMjA4MzZBNzcxMkVD
MEMzQzE3RkMxNjREMzdGNUFCNUU3MDMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RrMzR4ZzVBWWpObjF2U2ZaN3p3NEtyeXd6WkQ4djZZRTd5bzM0dktwV29qLzEv
MzIzODMwMzQzYTM4MzA2MzNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMjMz
MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgECAwwDQYJKoZIhvcNAQELBQADggEBAHSH8g0LxzRv
JeG/ABNjK2+hSLsNGYTbA1DLyRBFmvzegyj9EW0V0U3L/4JxpCJOBsqhZ2EUOsA5
PlMLQDNzidNsg9iT5mqlRz88iybBc4Y/6zchj9w6pQvqzQ+zdJzgOBMgxkfKrOoF
t9cwmDE6sbXomWnzgpd2xUajrT3kKi1ZjyeDNMMOeA+wK3LDdQSMUrKeDQXsz/vj
1ql3T17YldngchI3aHA4LOJwoAe5s7ZHXFdJqYKXTlEO9w1OMzG7R8T4b8PDUp+o
u+X2OmJIScWwFN7OZpj5wYuqVMvddkdBhgq6MfldWb7cIorhNlZWavxXuglvMGYT
2QDD4OyLGxA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org