Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/0/323830343a346262303a3a2f33322d3438203d3e20323637333234.roa
File: 323830343a346262303a3a2f33322d3438203d3e20323637333234.roa (raw, json)
Hash identifier: 0gxMFR6WTdTcDfdpddoDdOcLNZx+xjudJWc1Cacbvfw=
Subject key identifier: 30:33:AA:78:29:4C:22:48:50:53:00:6A:35:17:E8:88:58:98:D7:2C
Certificate issuer: /CN=7912F8D9ABC89D2A88E9AD0331C3F2F1B329665E
Certificate serial: 158F321D640A0AEE0E0A3B46F5135FFEBA6093B1
Authority key identifier: 79:12:F8:D9:AB:C8:9D:2A:88:E9:AD:03:31:C3:F2:F1:B3:29:66:5E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7912F8D9ABC89D2A88E9AD0331C3F2F1B329665E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/0/323830343a346262303a3a2f33322d3438203d3e20323637333234.roa
Signing time: Wed 03 Jan 2024 14:01:15 +0000
ROA not before: Wed 03 Jan 2024 13:56:15 +0000
ROA not after: Wed 01 Jan 2025 14:01:15 +0000
asID: 267324
IP address blocks: 2804:4bb0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:8f:32:1d:64:0a:0a:ee:0e:0a:3b:46:f5:13:5f:fe:ba:60:93:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7912F8D9ABC89D2A88E9AD0331C3F2F1B329665E
Validity
Not Before: Jan 3 13:56:15 2024 GMT
Not After : Jan 1 14:01:15 2025 GMT
Subject: CN=3033AA78294C22485053006A3517E8885898D72C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:33:af:11:49:65:49:c3:ff:72:25:2a:a3:83:
1f:ff:85:32:e6:43:cd:22:d9:90:5a:80:a7:ba:bd:
8c:62:d3:1a:4b:43:02:42:f6:9c:49:85:96:8f:0d:
14:f3:67:4e:7e:cc:0d:69:66:00:09:c1:42:d3:01:
35:68:e5:62:9d:84:43:21:86:08:a5:16:2b:e6:7c:
6d:e6:7f:fb:e9:9e:ea:b7:4f:29:dd:d1:8c:d7:66:
ae:0c:a1:d6:43:f1:94:f0:1a:c4:f5:3f:5b:99:88:
f5:eb:26:56:b2:d4:5c:8d:6b:23:d0:f6:f9:88:71:
18:99:8b:a1:b5:36:a6:96:bb:70:89:51:32:c2:09:
27:88:04:12:76:43:19:e8:83:26:59:3f:9f:1d:5e:
7d:16:e4:43:a7:00:38:68:88:7d:da:72:fd:69:59:
74:ed:b9:c4:22:f7:f7:86:2f:77:b6:2a:f5:ba:73:
be:c6:2f:ee:71:58:9e:29:5f:5d:78:cf:f6:fc:29:
26:b5:e8:45:06:35:a7:d2:38:25:81:fa:bf:c6:6e:
f7:7f:c7:78:ad:e8:10:77:7d:85:d3:30:6d:68:7d:
2e:9a:ef:4c:e9:52:d5:b0:44:13:4d:80:72:9a:87:
4e:d4:41:a3:c5:0c:f7:df:4f:a5:d0:ab:76:4a:5b:
90:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:33:AA:78:29:4C:22:48:50:53:00:6A:35:17:E8:88:58:98:D7:2C
X509v3 Authority Key Identifier:
keyid:79:12:F8:D9:AB:C8:9D:2A:88:E9:AD:03:31:C3:F2:F1:B3:29:66:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/0/7912F8D9ABC89D2A88E9AD0331C3F2F1B329665E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7912F8D9ABC89D2A88E9AD0331C3F2F1B329665E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/0/323830343a346262303a3a2f33322d3438203d3e20323637333234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4bb0::/32
Signature Algorithm: sha256WithRSAEncryption
ad:c5:db:d4:fc:b5:f2:fe:69:db:03:59:72:b2:58:1e:b1:34:
3e:4e:e2:87:bb:b3:1b:f1:a9:2f:2f:8a:27:99:53:db:90:77:
d9:a0:d2:fa:39:24:a2:c1:a3:0c:b0:ac:f1:62:3f:0e:47:1f:
4f:b7:60:f5:20:f8:71:55:8f:26:14:81:cf:3f:a7:88:18:97:
dc:97:a5:59:df:0e:29:d8:e4:22:79:b1:ad:ca:b2:80:c0:c4:
69:d3:9a:b4:c5:2b:9c:c7:49:88:fe:9e:c4:f0:4f:7f:2e:6b:
7f:93:9f:a2:79:d6:2e:d3:b1:00:6d:5a:e2:46:e2:34:cb:2a:
5c:21:fb:a2:86:8a:53:7b:a4:90:33:5b:cb:68:f9:f0:40:c5:
22:60:28:31:d2:10:e8:64:e9:61:e0:d1:c5:2f:e6:df:36:2f:
68:b1:d4:70:bb:ad:e6:fb:3f:16:4d:f3:69:57:cb:73:22:e4:
af:c1:ba:c6:52:60:0f:6a:04:00:0c:cd:d4:37:a2:19:8c:9e:
a7:ad:bb:18:eb:d6:6b:a5:eb:27:ee:5b:11:8d:5b:fc:df:e9:
cf:e0:fa:24:dd:40:4a:fd:19:7b:1c:3c:fb:0a:05:66:aa:f2:
36:38:da:b6:68:d6:20:2b:f1:0e:fd:cc:38:bc:3b:0c:2b:10:
72:96:d7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org