Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a37313a3a2f34382d3438203d3e20323633303733.roa
File: 323830343a3935343a37313a3a2f34382d3438203d3e20323633303733.roa (raw, json)
Hash identifier: dji+zmPkA8PWQCLJhvD/DnV9FvLt1lV/DqIijd2fpuU=
Subject key identifier: B7:7C:A5:90:C8:D0:FF:DE:DF:6C:E5:E3:7F:FC:57:C1:AA:93:A3:2F
Certificate issuer: /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial: 49C39D6A83D0FA55AF9582BAE50B218D545757D2
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a37313a3a2f34382d3438203d3e20323633303733.roa
Signing time: Fri 22 Dec 2023 20:25:06 +0000
ROA not before: Fri 22 Dec 2023 20:20:06 +0000
ROA not after: Fri 20 Dec 2024 20:25:06 +0000
asID: 263073
IP address blocks: 2804:954:71::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:c3:9d:6a:83:d0:fa:55:af:95:82:ba:e5:0b:21:8d:54:57:57:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Validity
Not Before: Dec 22 20:20:06 2023 GMT
Not After : Dec 20 20:25:06 2024 GMT
Subject: CN=B77CA590C8D0FFDEDF6CE5E37FFC57C1AA93A32F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:22:18:b5:c7:02:67:0d:26:63:c8:bd:1a:47:
e2:a3:f2:87:0b:27:12:49:88:fd:3e:c8:02:4c:1b:
77:54:24:36:e8:7b:f4:b1:3a:d0:77:f8:12:b7:7b:
fa:14:fe:e3:96:05:3a:90:d4:7d:f3:b6:0e:dd:ce:
84:75:44:05:64:8e:3f:f3:20:09:e0:ce:2c:23:cb:
b5:06:60:4b:36:5d:96:d8:38:ec:5e:7c:25:c6:52:
c4:3b:ac:0f:aa:20:8e:a7:1c:ff:16:6b:b2:81:f0:
64:59:fd:c1:88:13:77:9e:dc:41:c2:fa:bb:0a:82:
66:35:aa:ce:9a:a7:c0:0e:f4:ca:f8:cb:f8:0a:1d:
a0:a7:25:6a:76:b7:da:e4:94:89:d7:79:e9:99:f1:
56:8c:b2:e9:6f:9a:8d:b5:c2:3e:48:64:4e:6e:d4:
a7:ce:ef:23:ef:8e:e8:11:5f:05:78:00:46:de:7e:
f4:13:6f:2c:f2:1c:20:f6:3e:1a:cf:ef:20:2b:84:
da:6d:15:e3:a9:4c:ed:21:2e:f1:37:7c:76:e6:ee:
93:a9:38:03:7f:ef:f9:63:50:19:0f:d6:d0:c1:ad:
e6:8c:99:ca:07:e4:0a:2e:d6:46:a4:95:8c:fb:20:
20:1e:57:a4:ba:06:d8:85:97:f7:19:53:db:6c:35:
70:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7C:A5:90:C8:D0:FF:DE:DF:6C:E5:E3:7F:FC:57:C1:AA:93:A3:2F
X509v3 Authority Key Identifier:
keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a37313a3a2f34382d3438203d3e20323633303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:954:71::/48
Signature Algorithm: sha256WithRSAEncryption
57:d7:f2:79:89:c8:f4:e4:6e:37:20:87:07:d2:df:0d:1d:54:
bc:14:0a:eb:91:1b:3c:9f:f9:50:4e:f0:f2:4b:37:c0:bc:42:
c6:06:c3:91:a5:03:0e:23:c4:bf:7d:e9:83:b3:0a:d9:4d:99:
d5:1b:11:13:95:d0:58:3b:ca:26:4b:f3:c4:89:2b:56:25:41:
be:a7:3e:f0:2d:a7:70:4d:41:fc:6b:ee:8e:92:5f:41:df:8c:
5c:80:d9:86:30:fb:fc:28:a6:43:da:b2:d0:5b:60:36:48:e8:
d9:db:a6:f6:45:f4:92:d2:f2:67:40:3b:1d:da:43:8c:a8:e6:
8c:47:98:ff:d3:85:45:4e:99:8d:45:fb:9c:bb:3c:33:70:24:
24:0a:70:e3:92:e1:24:77:96:46:0e:3a:87:88:e4:bf:d6:c0:
ca:16:8b:0b:ab:e8:31:53:a2:19:34:e7:29:1b:ef:14:16:4d:
52:20:76:f3:cc:09:b7:7b:93:79:99:67:77:63:1f:dd:52:cb:
0d:97:40:cf:62:b3:3f:c2:1d:1e:95:d4:b1:94:b2:cc:50:bc:
40:66:81:dc:4a:14:4c:c4:af:f4:bd:7a:95:69:4b:b9:37:31:
a8:4f:0e:95:02:cd:48:2f:77:36:1a:5a:6a:42:e5:62:1e:8a:
a4:e4:ec:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:05 2024 by rpki-client on console-fra.rpki-client.org