Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a343430303a3a2f33382d3338203d3e20323639343633.roa
File: 323830343a363530343a343430303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier: 3qwiNhn0Dcx21W7/XBp7N64Rx9YfxZ6cXMmft4v/4HM=
Subject key identifier: A3:5A:D5:4F:BE:AD:16:4C:63:62:0D:6D:48:58:DC:81:6E:A0:01:FD
Certificate issuer: /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial: 7F379214D93FA830A4F74F7D30BFCD3CB795EC08
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a343430303a3a2f33382d3338203d3e20323639343633.roa
Signing time: Thu 03 Nov 2022 18:43:35 +0000
ROA not before: Thu 03 Nov 2022 18:38:35 +0000
ROA not after: Thu 02 Nov 2023 18:43:35 +0000
asID: 269463
IP address blocks: 2804:6504:4400::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:37:92:14:d9:3f:a8:30:a4:f7:4f:7d:30:bf:cd:3c:b7:95:ec:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Validity
Not Before: Nov 3 18:38:35 2022 GMT
Not After : Nov 2 18:43:35 2023 GMT
Subject: CN=A35AD54FBEAD164C63620D6D4858DC816EA001FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:16:f3:cb:c2:2b:13:d3:86:9b:4d:63:e9:62:
6a:ca:2e:ea:65:7f:7e:25:5d:54:56:35:14:ac:74:
38:ea:88:05:60:22:d5:0d:a0:a9:1a:3e:48:20:7f:
92:d6:33:34:c3:1d:20:1e:81:a1:6d:a1:4c:d5:66:
40:65:88:57:aa:c6:0b:6b:94:f1:8f:7e:9e:4d:a8:
bc:e6:b4:ca:b0:50:ff:c4:51:5b:a9:72:29:d1:67:
be:34:5a:aa:c2:ea:c8:a0:95:a3:8d:8a:a2:51:d4:
4d:4d:75:dd:37:36:5d:dc:32:64:93:2c:11:30:ab:
43:88:09:91:92:54:e1:19:65:ea:db:c7:46:bb:06:
47:4f:dd:91:b0:d1:a8:58:d1:1d:1d:e8:f7:aa:6f:
5e:eb:5e:42:e9:4f:6c:7c:a9:29:7c:3e:ea:44:b8:
54:88:d2:c6:2f:ef:e3:63:5a:7e:e8:71:20:cd:e1:
ee:d5:39:67:b2:4d:42:3c:58:c1:8d:7d:0b:74:dc:
f9:f2:34:19:80:82:2f:51:72:1a:62:81:ad:cf:bf:
be:eb:31:5d:a4:c4:50:78:8c:08:5b:be:05:04:3d:
1f:0e:48:fb:c2:e5:48:b8:51:b7:f4:a5:01:d0:75:
9d:fd:ac:13:5a:46:a0:e4:81:36:e1:6b:c8:5a:21:
0a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5A:D5:4F:BE:AD:16:4C:63:62:0D:6D:48:58:DC:81:6E:A0:01:FD
X509v3 Authority Key Identifier:
keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a343430303a3a2f33382d3338203d3e20323639343633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6504:4400::/38
Signature Algorithm: sha256WithRSAEncryption
5d:8f:1c:78:cb:8e:cd:36:e9:dd:f8:ec:8a:8d:19:36:c1:d9:
13:40:c8:37:0b:21:18:bb:60:51:79:9d:6b:57:11:91:ac:03:
b8:9d:e7:b6:88:17:4d:66:35:e4:48:fd:41:57:b6:aa:2a:c0:
97:7a:34:ed:ff:a4:aa:f1:d3:3f:02:9f:b6:8d:3f:40:2f:68:
19:61:4e:54:a8:68:c6:21:ec:01:38:d8:69:5a:cb:d7:d2:76:
ab:ec:78:77:3a:7e:2e:bc:86:bc:e8:de:e0:1a:16:f6:42:c0:
da:69:4b:34:e1:21:f2:dc:b7:23:fa:a3:29:17:3f:2b:57:cf:
9e:59:a3:f3:2c:0e:5a:19:5d:ca:84:91:c9:f4:03:16:ee:83:
c8:23:9d:a3:bf:6e:5e:9a:e0:f7:e6:01:2b:c3:f6:b2:c8:9d:
e6:d3:1d:6a:10:ea:d2:94:bc:9a:3c:8e:0e:69:23:2b:fe:e0:
19:27:b2:1d:d8:25:21:ec:0f:7d:cb:d1:f8:e0:e8:da:71:0a:
95:22:89:f0:90:ae:08:00:5e:eb:a9:83:9d:73:42:68:fd:12:
85:10:ae:63:c9:89:08:9d:cc:d4:f8:8a:5e:65:c6:d2:2f:18:
d1:30:18:51:fd:bd:40:c8:50:ea:f1:14:ec:70:f2:98:90:ed:
66:ca:b6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:35:37 2025 by rpki-client