Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/323830343a326635633a3a2f33322d3335203d3e20323634383836.roa
File: 323830343a326635633a3a2f33322d3335203d3e20323634383836.roa (raw, json)
Hash identifier: U1mKT6Oy8YG4n1SNF2+xTt9SSvwqNCJcQ3Zm+cufgMw=
Subject key identifier: BF:6A:2B:CE:9D:EC:1A:1F:73:97:64:B7:F4:5B:30:EA:C8:F1:0F:38
Certificate issuer: /CN=5D39942929DA6ADF1083B57D7ED72A3A4653C28F
Certificate serial: 310260B9C6018EFD22C8C948B9AB64E47D4E976B
Authority key identifier: 5D:39:94:29:29:DA:6A:DF:10:83:B5:7D:7E:D7:2A:3A:46:53:C2:8F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D39942929DA6ADF1083B57D7ED72A3A4653C28F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/323830343a326635633a3a2f33322d3335203d3e20323634383836.roa
Signing time: Thu 08 Feb 2024 15:01:49 +0000
ROA not before: Thu 08 Feb 2024 14:56:49 +0000
ROA not after: Thu 06 Feb 2025 15:01:49 +0000
asID: 264886
IP address blocks: 2804:2f5c::/32 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:02:60:b9:c6:01:8e:fd:22:c8:c9:48:b9:ab:64:e4:7d:4e:97:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D39942929DA6ADF1083B57D7ED72A3A4653C28F
Validity
Not Before: Feb 8 14:56:49 2024 GMT
Not After : Feb 6 15:01:49 2025 GMT
Subject: CN=BF6A2BCE9DEC1A1F739764B7F45B30EAC8F10F38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:30:dc:bb:5c:08:30:0a:4d:61:a0:c2:f4:2d:
79:3e:a2:aa:11:e6:1f:81:8a:3a:c7:4e:3a:f3:fe:
ca:1b:91:88:73:5f:b5:64:3e:51:cd:4e:1c:09:2d:
bf:3e:74:77:0d:33:92:3a:08:79:bc:40:f5:1b:9c:
68:5b:dd:26:27:66:95:00:32:ee:f9:c7:ae:17:d5:
bf:cb:4d:de:42:ed:36:14:a0:d3:81:6d:58:62:03:
7a:18:dc:ff:d9:90:b2:36:17:09:65:c5:b5:b2:05:
52:0a:a0:91:38:78:bd:46:6a:56:c4:42:e8:0a:8f:
93:74:34:c5:b5:a0:9f:f8:b4:a0:1a:ad:c0:9b:1f:
0b:41:6d:ae:78:8a:61:d5:d9:ce:e4:51:9f:be:45:
e6:ac:d1:ab:6e:80:52:6c:0e:30:c5:78:07:4c:21:
0c:40:40:8a:10:25:86:fa:b9:28:16:51:e4:36:74:
37:a2:be:a7:d5:88:44:75:f0:26:3b:0d:e0:25:56:
d9:f7:8f:95:ca:8d:f2:1a:14:42:b0:8d:17:b6:de:
1f:11:7f:7a:cf:9e:ec:24:6a:7d:04:17:87:fd:6d:
2c:69:ad:1d:2c:c9:cb:34:db:9c:b2:71:45:bb:76:
1d:71:78:dc:4c:93:9f:81:99:1f:a0:e3:82:1a:12:
8c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6A:2B:CE:9D:EC:1A:1F:73:97:64:B7:F4:5B:30:EA:C8:F1:0F:38
X509v3 Authority Key Identifier:
keyid:5D:39:94:29:29:DA:6A:DF:10:83:B5:7D:7E:D7:2A:3A:46:53:C2:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/5D39942929DA6ADF1083B57D7ED72A3A4653C28F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D39942929DA6ADF1083B57D7ED72A3A4653C28F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/323830343a326635633a3a2f33322d3335203d3e20323634383836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2f5c::/32
Signature Algorithm: sha256WithRSAEncryption
36:7a:f9:c4:ff:72:f4:16:74:12:8b:8f:9a:c5:cc:b9:85:45:
03:f4:59:40:0c:4b:eb:4a:6e:ab:b6:7f:09:ba:45:4b:ea:12:
48:77:04:af:51:35:8d:0e:6b:75:8f:93:93:fc:35:ad:cc:07:
83:ef:58:c6:0c:23:9b:5d:40:a3:12:09:73:ce:e0:7e:bc:a4:
75:aa:e3:be:61:2c:59:42:67:7a:eb:18:a9:17:4c:4a:f7:81:
8d:10:a9:fb:85:f6:db:2e:93:ee:ca:5a:14:04:5a:41:0c:52:
2f:14:9a:d0:37:4b:fd:df:14:ef:e9:1a:d0:cc:19:be:c7:24:
f1:af:3e:2b:80:06:c6:6f:b8:a3:30:f4:35:ef:c0:dc:46:93:
3e:86:27:96:10:22:30:a1:48:6c:54:d2:1e:58:b3:a7:56:54:
56:54:9f:e2:41:8b:cb:a3:dc:a4:4f:b1:25:73:5b:2b:b1:d4:
ec:29:c0:87:7c:0d:7b:23:45:a9:7f:aa:76:d4:82:00:a5:9b:
00:2e:f4:4a:ae:a4:dd:13:fc:8c:f8:2e:35:31:20:95:9d:bc:
1b:dd:d3:81:48:f0:12:7c:1b:44:a8:7d:e9:f0:11:3e:27:8c:
d5:a1:9f:d1:40:71:40:d1:d7:df:41:f1:16:da:9c:20:37:01:
9c:d6:3f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:57 2024 by rpki-client on console-ams.rpki-client.org