Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a663132373a38353a3a2f36342d3634203d3e203631353839.roa
File: 323830343a343866303a663132373a38353a3a2f36342d3634203d3e203631353839.roa (raw, json)
Hash identifier: otgFEb/nQPxivMgnCVCmxGEG/dAfrPcRSBpmYBEO86o=
Subject key identifier: ED:28:CE:1C:8A:D6:32:38:89:6C:98:96:66:B0:5C:26:5E:89:5A:E2
Certificate issuer: /CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
Certificate serial: 275EC31C5D53E97E487D3F2A9BCAED6DAE69190C
Authority key identifier: B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a663132373a38353a3a2f36342d3634203d3e203631353839.roa
Signing time: Mon 24 Apr 2023 11:53:02 +0000
ROA not before: Mon 24 Apr 2023 11:48:02 +0000
ROA not after: Mon 22 Apr 2024 11:53:02 +0000
asID: 61589
IP address blocks: 2804:48f0:f127:85::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:5e:c3:1c:5d:53:e9:7e:48:7d:3f:2a:9b:ca:ed:6d:ae:69:19:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
Validity
Not Before: Apr 24 11:48:02 2023 GMT
Not After : Apr 22 11:53:02 2024 GMT
Subject: CN=ED28CE1C8AD63238896C989666B05C265E895AE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:17:81:d9:aa:d1:a8:ed:e8:40:ec:a1:3b:46:
3e:9c:cb:06:46:d8:4d:2e:43:93:88:22:0f:17:6b:
22:80:64:28:3a:69:e6:9f:35:e2:06:dd:78:d9:a1:
d4:65:95:ba:0f:54:d8:3a:11:91:e4:11:e8:9c:6d:
80:ea:bd:b6:fe:dc:c3:9a:d7:5b:f0:a7:14:eb:33:
2d:f5:7e:6e:a7:b5:6b:65:91:2a:b1:f0:3e:28:6c:
08:62:0b:63:2f:48:a7:79:3f:65:3e:d6:29:eb:28:
59:31:13:8a:5a:32:9b:3c:83:56:0b:cc:9a:e9:76:
4c:63:bf:63:a3:db:5d:17:b4:ee:53:aa:3f:a9:40:
ef:46:5e:10:76:69:91:16:54:0d:7d:0b:c9:70:82:
0d:74:5a:97:dc:56:dd:e8:ce:f1:f6:ef:fd:2e:92:
d2:b6:03:87:ee:f9:8a:63:cd:ab:ef:ee:ad:97:7d:
50:4d:6d:48:5b:ac:cc:9e:62:d7:f9:03:a3:4a:7e:
e4:78:08:19:07:d1:83:97:14:50:24:cc:58:aa:a4:
d1:24:4a:d2:a6:d6:65:f7:06:87:32:0f:e4:7f:7f:
8e:01:aa:11:4d:cf:76:0b:04:4d:6f:25:8a:6d:d1:
0c:8b:e7:5c:91:f1:4a:10:5c:ca:c1:72:a3:64:ee:
7d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:28:CE:1C:8A:D6:32:38:89:6C:98:96:66:B0:5C:26:5E:89:5A:E2
X509v3 Authority Key Identifier:
keyid:B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a663132373a38353a3a2f36342d3634203d3e203631353839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:48f0:f127:85::/64
Signature Algorithm: sha256WithRSAEncryption
61:e0:ca:fb:37:0e:ac:25:2a:46:cc:98:fd:5c:ad:48:e0:38:
82:a6:d7:39:5e:92:40:19:9e:e6:b9:ae:00:a9:d2:f2:b5:bb:
dc:5b:a9:be:6e:5b:00:45:13:cc:ea:9a:ad:89:7e:d5:05:26:
1b:cf:26:e6:53:b6:ad:7e:3d:4c:78:b4:f5:1e:b8:c6:2b:21:
b2:7a:65:32:cf:07:bd:5b:5c:1e:93:af:6b:18:cc:fd:95:14:
d0:7c:02:5d:03:4e:45:23:5e:23:64:68:ff:f5:b5:aa:a3:dc:
8b:45:11:ca:b1:e2:e0:a8:6e:f3:6d:c0:20:fa:36:01:cd:cd:
f9:84:a0:96:12:ed:a0:76:8d:7b:a5:97:d0:83:e4:5e:d6:ad:
57:41:f4:b6:3b:94:7c:77:5c:69:1f:74:7a:d4:ce:b7:ff:d4:
dc:c4:8a:22:c7:51:90:13:db:68:70:d6:bc:82:c5:fc:9e:e8:
56:88:5a:82:4d:65:a1:ef:67:28:72:de:3f:15:2a:9a:64:34:
7c:19:39:df:33:2c:67:ec:54:1a:61:f4:82:14:7a:3e:47:c1:
7a:25:85:16:d8:88:3a:a9:b0:0b:56:b7:10:bc:ed:e7:00:6e:
13:65:eb:2f:0f:3b:5a:fa:35:25:d0:a9:e9:0a:94:8a:53:be:
d8:f4:b5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:59 2024 by rpki-client on console-ams.rpki-client.org