Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/323830343a366130303a3a2f33322d3335203d3e20323730333035.roa
File: 323830343a366130303a3a2f33322d3335203d3e20323730333035.roa (raw, json)
Hash identifier: CzSte827MYTnm/9ixHaqAIrVQuB4GLNsckq2Kj+nFm8=
Subject key identifier: 63:D3:C3:AC:F0:CB:C3:45:4C:E0:1B:E4:F9:0E:2E:48:A9:F0:07:CB
Certificate issuer: /CN=670B53705B1407CC3B30DDA3548CFE22775A41B9
Certificate serial: 21A3EC6BC8124785FFF960EAFD8522DA79E482E7
Authority key identifier: 67:0B:53:70:5B:14:07:CC:3B:30:DD:A3:54:8C:FE:22:77:5A:41:B9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/670B53705B1407CC3B30DDA3548CFE22775A41B9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/323830343a366130303a3a2f33322d3335203d3e20323730333035.roa
Signing time: Thu 04 Apr 2024 15:50:36 +0000
ROA not before: Thu 04 Apr 2024 15:45:36 +0000
ROA not after: Thu 03 Apr 2025 15:50:36 +0000
asID: 270305
IP address blocks: 2804:6a00::/32 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:a3:ec:6b:c8:12:47:85:ff:f9:60:ea:fd:85:22:da:79:e4:82:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670B53705B1407CC3B30DDA3548CFE22775A41B9
Validity
Not Before: Apr 4 15:45:36 2024 GMT
Not After : Apr 3 15:50:36 2025 GMT
Subject: CN=63D3C3ACF0CBC3454CE01BE4F90E2E48A9F007CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:73:77:ec:8a:36:f2:a8:34:02:e7:7e:c4:5b:
8f:f6:05:65:06:07:f2:2c:de:80:23:3d:01:32:ed:
3e:14:6e:5d:72:92:bb:07:d3:53:e6:83:d3:ed:87:
75:13:7b:f1:89:26:65:e6:c6:ef:34:0e:86:33:da:
0d:70:83:33:85:45:5d:2c:e9:c7:d4:26:ec:3f:4c:
f9:02:e5:1c:dd:08:cb:36:be:ba:b7:0f:7e:1a:13:
74:65:83:68:0a:8c:c4:3b:ac:8e:de:04:e9:9c:0a:
c2:33:63:2a:b3:5f:b9:25:d0:1f:67:eb:47:84:2d:
b6:e4:60:bd:0c:e2:b4:56:b8:a5:1b:66:df:14:9d:
c0:45:0d:77:2e:64:ba:2b:1c:ec:60:6e:77:2c:96:
ae:f0:67:52:45:27:9c:d0:c4:c7:21:63:59:d8:48:
e4:03:20:a5:f4:8f:72:07:4d:67:f4:df:56:c3:aa:
3b:46:7e:29:ed:8e:74:5f:f5:60:fd:66:2c:2d:3c:
b6:39:8c:6c:66:03:c4:c5:0b:d7:80:89:3d:34:08:
52:9d:29:b3:de:2f:ed:f8:41:29:dd:99:6a:22:63:
9d:83:c1:9c:9a:c2:4e:27:8a:48:1f:f3:02:d3:ee:
0a:05:21:fa:5d:49:59:fa:af:42:b4:0a:1e:24:fb:
6e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D3:C3:AC:F0:CB:C3:45:4C:E0:1B:E4:F9:0E:2E:48:A9:F0:07:CB
X509v3 Authority Key Identifier:
keyid:67:0B:53:70:5B:14:07:CC:3B:30:DD:A3:54:8C:FE:22:77:5A:41:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/670B53705B1407CC3B30DDA3548CFE22775A41B9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/670B53705B1407CC3B30DDA3548CFE22775A41B9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/323830343a366130303a3a2f33322d3335203d3e20323730333035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6a00::/32
Signature Algorithm: sha256WithRSAEncryption
54:be:8f:ad:21:bb:cc:bb:c8:f6:49:f4:06:bb:5d:2f:f5:00:
5e:96:54:b4:62:a3:a4:02:19:2c:ac:7e:28:a9:47:53:29:c7:
93:3a:2f:d9:03:08:bd:0e:5c:5d:06:09:90:02:d1:2f:f1:7a:
67:8b:9f:39:3f:54:7d:4d:6b:a2:e3:49:cb:74:b7:20:06:b1:
d7:e4:ea:a2:a8:90:0a:e4:52:03:2f:01:6f:15:8f:42:3c:da:
70:95:b6:f5:c7:4a:8d:50:70:4b:ac:40:ce:fc:a7:b9:34:c3:
8f:e3:fe:60:c9:f4:88:4d:ef:62:fa:f3:c5:e0:78:83:3b:bf:
0a:ce:85:ea:0b:69:0e:bc:a7:c8:0d:d7:a8:0d:d2:9f:80:7b:
f1:b8:76:ef:c2:4d:9b:4d:49:f8:37:b2:78:20:df:03:ef:f9:
67:18:ca:cb:d6:17:dc:e0:34:de:0e:5f:6e:0f:0c:bf:3e:dc:
56:04:a5:c9:cd:2a:17:45:25:0f:36:00:3f:7d:26:01:7f:3a:
9d:b5:44:89:55:a1:3a:94:cd:02:06:b0:f6:d3:10:43:d2:22:
68:b0:d2:ca:71:ce:d1:d0:77:74:a0:56:9f:74:84:36:0e:78:
65:33:a4:65:fd:94:07:3e:d6:2f:01:06:a1:67:f0:2d:c0:1b:
7b:83:0a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:02 2024 by rpki-client on console-ams.rpki-client.org