Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a3a2f33322d3332203d3e20323633303733.roa
File: 323830343a3935343a3a2f33322d3332203d3e20323633303733.roa (raw, json)
Hash identifier: 1zazdWANvZyLzTHsk1aKaTKjeXom2Jw+If/m9RIcY3s=
Subject key identifier: A1:72:7A:37:2A:41:B6:B9:8B:05:DD:87:D2:F2:45:CD:8A:05:B2:80
Certificate issuer: /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial: 155A28CDA0FDDBD8FA2902E84C0F521558EC542D
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a3a2f33322d3332203d3e20323633303733.roa
Signing time: Fri 22 Dec 2023 20:25:05 +0000
ROA not before: Fri 22 Dec 2023 20:20:05 +0000
ROA not after: Fri 20 Dec 2024 20:25:05 +0000
asID: 263073
IP address blocks: 2804:954::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:5a:28:cd:a0:fd:db:d8:fa:29:02:e8:4c:0f:52:15:58:ec:54:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Validity
Not Before: Dec 22 20:20:05 2023 GMT
Not After : Dec 20 20:25:05 2024 GMT
Subject: CN=A1727A372A41B6B98B05DD87D2F245CD8A05B280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:98:b7:ae:01:86:fc:b5:cb:05:98:0d:eb:09:
58:23:74:bd:44:25:3a:e1:1c:38:90:81:ae:d6:53:
41:35:cd:c8:f5:2c:db:33:08:43:23:cf:69:fe:aa:
81:63:2e:9c:77:18:0c:fb:51:db:53:f6:b0:8c:bb:
f8:8a:b4:82:b2:44:3a:19:38:42:3a:5f:58:7c:61:
60:66:66:35:38:e0:1d:a8:d6:f3:e9:22:11:5f:f1:
97:72:b3:e4:c8:09:bc:d4:f3:e8:9a:e2:42:6f:17:
56:bb:29:90:dd:b9:67:cb:fb:a9:96:6b:de:fc:b5:
5e:12:48:f8:69:05:43:be:b8:fd:b9:5b:31:92:0f:
51:6a:29:66:94:8e:71:c6:fd:6f:f9:ec:bd:60:3f:
9b:4e:b7:f4:d7:5a:33:03:8c:79:7a:5c:80:cc:56:
81:24:f8:fb:66:d0:bc:a6:d4:dc:42:23:40:de:a3:
bd:f7:31:ab:f1:cf:39:2e:4d:67:a0:f7:eb:97:de:
74:49:b2:6f:60:13:45:38:e8:8c:15:4e:c1:70:05:
02:ed:88:c1:42:e1:2b:e8:dc:e2:1e:fe:40:78:59:
fc:72:d9:60:19:72:f1:39:ff:31:00:92:a9:82:a4:
f1:f3:c4:bb:d1:aa:29:cd:54:10:62:46:37:a0:41:
c3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:72:7A:37:2A:41:B6:B9:8B:05:DD:87:D2:F2:45:CD:8A:05:B2:80
X509v3 Authority Key Identifier:
keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a3a2f33322d3332203d3e20323633303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:954::/32
Signature Algorithm: sha256WithRSAEncryption
02:69:ec:6a:9c:19:a3:12:cd:76:9a:66:64:58:84:d8:49:ad:
22:43:2e:13:ac:89:40:2b:0f:3c:5f:e1:72:49:44:0c:0d:42:
5e:24:45:44:04:19:da:2d:32:0a:56:18:3c:b2:d3:77:c9:1e:
0d:d4:91:e9:80:7a:cd:2a:dd:32:d0:37:af:45:47:7f:dc:88:
11:08:67:76:e3:88:7b:1c:95:bb:51:31:d4:bc:92:8a:8d:70:
d7:de:29:6b:65:a8:7b:4b:9e:82:fa:d2:2e:84:cc:a0:20:81:
72:36:f8:ee:77:b4:e8:91:2c:8e:fd:7f:a9:f2:f5:74:07:90:
bd:d1:9f:38:82:ff:fb:98:c3:ea:82:23:8d:0a:bb:3f:af:55:
2b:5d:c9:d1:ba:22:14:b4:f6:4c:57:52:2d:7b:f4:95:c0:75:
8c:ac:a9:a9:ea:99:50:c0:94:0f:e8:a6:1e:80:18:8a:cc:4e:
0f:ff:52:c5:4c:96:67:74:25:38:84:ea:14:e3:60:79:a7:1a:
f8:e6:13:e2:9c:f8:55:5b:18:bd:e5:28:44:c6:1e:b5:b1:2f:
58:be:8b:d7:2f:96:94:45:84:2c:0c:4b:a8:68:aa:bd:b0:f3:
1e:8b:2c:08:51:ce:42:4a:63:b3:b2:5b:8b:d2:01:3e:e9:a0:
0b:53:4f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:26 2024 by rpki-client on console-ams.rpki-client.org