Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a663830303a3a2f33382d3338203d3e20323639343633.roa
File: 323830343a363530343a663830303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier: ZTil2tfbMhUCIhYW35JpyQXTt20hJPlcCZWacMgtDGA=
Subject key identifier: F4:40:D4:2A:A8:97:41:B1:D6:86:2F:DA:32:13:FB:C6:69:0F:1C:CA
Certificate issuer: /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial: 6976C9224B4FB672B584AB7F2CF54DC9EBCBBA1A
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a663830303a3a2f33382d3338203d3e20323639343633.roa
Signing time: Thu 03 Nov 2022 18:43:27 +0000
ROA not before: Thu 03 Nov 2022 18:38:27 +0000
ROA not after: Thu 02 Nov 2023 18:43:27 +0000
asID: 269463
IP address blocks: 2804:6504:f800::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:76:c9:22:4b:4f:b6:72:b5:84:ab:7f:2c:f5:4d:c9:eb:cb:ba:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Validity
Not Before: Nov 3 18:38:27 2022 GMT
Not After : Nov 2 18:43:27 2023 GMT
Subject: CN=F440D42AA89741B1D6862FDA3213FBC6690F1CCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7b:ba:93:93:e4:45:25:43:e4:7b:8b:80:c4:
a9:a7:6d:69:45:45:0b:81:e8:27:2e:d4:55:6d:f8:
cb:ee:35:c4:ae:97:43:d2:7e:1e:b4:0b:73:31:e6:
8d:0c:e2:1f:14:9e:80:fe:4f:46:a3:ee:67:71:83:
d6:c2:3d:16:4e:ef:dd:1d:82:03:58:c4:32:64:90:
04:f3:43:53:e5:7d:38:2a:6d:fd:f4:3e:14:f1:1b:
8b:47:1d:67:a2:c5:90:82:61:12:b8:9f:12:69:b1:
05:f6:69:be:71:0c:be:88:52:86:10:52:3c:d4:da:
80:bf:f8:22:3b:ba:0e:0e:12:49:bc:bf:49:80:9e:
9d:60:40:18:35:a1:a5:ba:15:af:48:cc:0b:60:ea:
ed:cb:e0:b2:5b:92:a2:e0:0b:24:45:20:34:31:8f:
60:39:9e:b0:51:14:43:c7:7f:89:0b:0c:11:af:7f:
47:4d:13:b4:01:fa:0f:5b:85:e2:28:0c:15:27:f0:
c6:00:5c:bf:1c:2e:c4:75:8a:6c:23:2b:12:b5:0f:
92:eb:db:0c:39:2e:09:9e:72:99:8a:ca:dc:64:fb:
70:ec:41:f3:a5:be:b2:c0:b4:fb:ce:1e:42:b4:a2:
96:6d:40:5b:cb:a8:77:81:90:6e:fd:5f:28:89:81:
4d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:40:D4:2A:A8:97:41:B1:D6:86:2F:DA:32:13:FB:C6:69:0F:1C:CA
X509v3 Authority Key Identifier:
keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a663830303a3a2f33382d3338203d3e20323639343633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6504:f800::/38
Signature Algorithm: sha256WithRSAEncryption
81:aa:12:a5:47:90:28:64:68:ee:46:e8:a8:d7:0d:fe:09:72:
8c:46:2c:01:20:32:1f:fc:54:89:2a:56:4e:37:38:22:84:bc:
16:cd:a4:f8:36:ea:98:6d:bd:97:0d:6a:b3:0a:a3:e7:d5:f4:
5d:01:45:1d:19:9b:f8:fb:42:ef:f7:ac:8b:33:f2:88:65:dd:
e8:a8:c3:60:15:10:4f:b1:1e:bf:00:b8:00:e0:de:bd:09:f8:
fd:94:da:0d:a5:30:95:80:6c:e3:08:ac:25:4c:35:2c:46:db:
90:76:4b:8b:1e:b5:eb:ba:e6:b4:dc:dc:71:99:e9:b0:4c:b7:
fc:ef:e1:c0:71:e8:d6:ca:f5:67:5c:8c:88:77:31:ba:e6:fa:
9d:e3:46:92:d4:a7:65:7c:85:2a:21:50:ad:cd:d6:23:02:5f:
4b:2c:36:ab:84:de:45:21:2b:29:0a:3a:8b:9f:66:d4:47:94:
af:fe:fb:8e:8c:48:ef:e3:f5:87:db:d4:27:5e:22:52:1a:15:
c8:60:bc:49:34:6b:64:a7:1c:62:ea:90:71:c6:ea:ca:20:e9:
4b:b1:d8:e8:ff:fd:ef:df:eb:cc:08:c2:b8:2a:1d:cb:99:fe:
ed:7c:41:5d:a9:5a:bb:b0:00:68:5d:f5:48:14:d2:6d:aa:70:
4e:f9:09:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org