Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/0/323830313a38383a3a2f33322d3336203d3e203533313636.roa
File: 323830313a38383a3a2f33322d3336203d3e203533313636.roa (raw, json)
Hash identifier: cSVZtGfZeIJ+rOwrkRBm757G0BC5dPh/H3TmtFk814E=
Subject key identifier: A0:89:EA:22:E4:B5:D0:9C:18:C8:F4:1F:C8:9D:10:80:4E:AA:C7:0E
Certificate issuer: /CN=49614450300ED637E45BF74DC34E5F5622997AE3
Certificate serial: 2A569CCAF8DC86877668D70CE13059348DDFD4E5
Authority key identifier: 49:61:44:50:30:0E:D6:37:E4:5B:F7:4D:C3:4E:5F:56:22:99:7A:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49614450300ED637E45BF74DC34E5F5622997AE3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/0/323830313a38383a3a2f33322d3336203d3e203533313636.roa
Signing time: Fri 22 Dec 2023 15:00:00 +0000
ROA not before: Fri 22 Dec 2023 14:55:00 +0000
ROA not after: Fri 20 Dec 2024 15:00:00 +0000
asID: 53166
IP address blocks: 2801:88::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:56:9c:ca:f8:dc:86:87:76:68:d7:0c:e1:30:59:34:8d:df:d4:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49614450300ED637E45BF74DC34E5F5622997AE3
Validity
Not Before: Dec 22 14:55:00 2023 GMT
Not After : Dec 20 15:00:00 2024 GMT
Subject: CN=A089EA22E4B5D09C18C8F41FC89D10804EAAC70E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:60:44:28:55:70:3d:c9:89:88:f1:29:21:f8:
fd:50:76:c9:e0:e9:6a:96:37:4c:e1:2b:36:fb:d0:
c4:92:a7:6c:91:ed:63:1c:ce:94:15:3d:9d:07:3d:
b8:47:7d:ef:20:d5:24:5e:d6:fc:30:3e:46:e4:d8:
fa:e6:ce:f3:7a:8f:2f:95:de:67:b6:cd:a7:52:18:
6c:83:af:c6:fd:a6:4d:57:6e:39:38:19:56:0c:72:
73:36:b7:ce:0c:68:7c:1b:f6:8a:15:56:50:cf:fb:
54:7a:e1:8b:9f:4f:b8:6a:07:f3:43:30:ca:63:e5:
d6:9d:b1:a3:64:9c:08:3d:ed:1e:78:ad:03:d9:58:
76:d2:8e:95:16:f0:9d:9a:84:1f:be:dd:59:13:5a:
4e:14:cd:d1:0b:9d:0b:a3:2d:63:02:99:6f:c0:ae:
c0:91:b7:3e:e0:8c:e3:35:86:40:58:5d:a9:11:0e:
89:15:cb:65:40:6a:97:a8:9e:9f:c8:40:36:2d:66:
37:51:db:52:30:87:57:35:80:c6:24:ab:63:db:91:
7f:92:c2:dd:32:c2:64:8b:5d:57:d4:95:a6:67:41:
bc:cb:7f:23:fe:52:6d:67:cf:f0:83:91:97:be:a4:
4e:a2:2b:b5:68:4a:19:b1:06:f2:8c:bd:c4:85:26:
91:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:89:EA:22:E4:B5:D0:9C:18:C8:F4:1F:C8:9D:10:80:4E:AA:C7:0E
X509v3 Authority Key Identifier:
keyid:49:61:44:50:30:0E:D6:37:E4:5B:F7:4D:C3:4E:5F:56:22:99:7A:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/0/49614450300ED637E45BF74DC34E5F5622997AE3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49614450300ED637E45BF74DC34E5F5622997AE3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/0/323830313a38383a3a2f33322d3336203d3e203533313636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:88::/32
Signature Algorithm: sha256WithRSAEncryption
8f:85:50:25:85:16:24:64:6f:45:df:40:e4:ed:f9:94:d0:28:
1d:30:f4:92:43:a5:96:24:de:4d:f3:d4:33:5b:23:e9:50:dd:
75:e6:1c:88:a9:3b:a4:f4:a4:cb:46:59:15:45:9e:62:e3:5d:
5f:35:0c:fe:df:c7:d3:de:22:f0:fb:44:9f:56:80:e2:33:e5:
81:1a:c5:b2:79:1c:a5:c6:71:b6:c7:b6:21:29:69:40:be:3f:
e8:dd:a9:69:3b:ca:48:c0:be:30:38:38:a9:3e:83:c7:b8:78:
c1:98:cb:8b:ac:3e:73:ed:cc:74:40:55:e5:9a:4e:3a:14:3c:
d1:27:6e:00:11:b3:5a:92:aa:b3:43:63:63:fb:ae:1a:23:98:
0f:3d:fe:73:c8:53:b6:9b:0a:2e:72:b9:77:db:25:80:07:c7:
eb:6d:c0:09:c8:f8:fb:7e:7f:c6:40:b6:6b:8f:ea:a0:e6:e4:
49:ab:56:05:7c:8f:4a:31:0c:dd:58:b5:7c:d7:34:41:08:23:
eb:71:26:d1:58:04:5d:02:4e:22:03:64:20:d8:06:27:c5:a9:
8c:56:d9:f0:62:92:2a:eb:20:b4:42:3e:aa:ad:f2:37:80:be:
a2:55:b8:56:92:24:39:46:81:c3:fb:cb:34:41:f1:d4:b1:e9:
b3:4f:af:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:02 2024 by rpki-client on console-fra.rpki-client.org