Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a666666663a343038393a3a2f36342d3634203d3e203631353839.roa
File: 323830343a343866303a666666663a343038393a3a2f36342d3634203d3e203631353839.roa (raw, json)
Hash identifier: C+Dj05oXUl+A8jIacogpBRQ7TOm+3qY5Lsxe5w13/Ns=
Subject key identifier: B9:F6:B2:E5:BA:34:67:3C:DC:7D:08:BB:ED:E8:D5:EB:BE:48:9A:F9
Certificate issuer: /CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
Certificate serial: 74478519D8411AE3B7BE244C12D8CC6192822411
Authority key identifier: B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a666666663a343038393a3a2f36342d3634203d3e203631353839.roa
Signing time: Mon 24 Apr 2023 11:53:12 +0000
ROA not before: Mon 24 Apr 2023 11:48:12 +0000
ROA not after: Mon 22 Apr 2024 11:53:12 +0000
asID: 61589
IP address blocks: 2804:48f0:ffff:4089::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:47:85:19:d8:41:1a:e3:b7:be:24:4c:12:d8:cc:61:92:82:24:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
Validity
Not Before: Apr 24 11:48:12 2023 GMT
Not After : Apr 22 11:53:12 2024 GMT
Subject: CN=B9F6B2E5BA34673CDC7D08BBEDE8D5EBBE489AF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cf:ff:82:21:ca:a0:03:de:e4:1a:32:36:ed:
7a:6b:c9:df:6c:9e:a2:b6:67:10:39:21:d5:05:bb:
50:59:88:bb:1c:03:b0:27:95:11:c5:2f:98:d4:59:
f3:3e:b9:e5:e4:f7:49:16:cf:dc:79:78:27:c5:5b:
a8:34:a9:19:77:7c:18:7d:2b:79:1c:48:8a:ff:7e:
cd:9d:fe:54:a8:33:79:1f:fd:c3:2b:1e:9e:fd:76:
56:f9:c5:20:23:15:57:d0:6c:63:79:0e:39:fa:26:
3a:92:5e:9b:9a:11:3f:73:a8:6c:40:9c:60:d7:10:
b8:5c:4f:91:66:9e:f2:03:21:97:60:3e:87:10:f4:
9d:15:11:03:e7:89:5e:eb:cb:12:75:1a:e9:d1:e9:
8f:4b:f0:5c:cc:a2:f2:94:8d:2b:af:ac:b2:6d:94:
9f:58:f4:78:20:14:e8:2c:a5:07:a9:7e:9c:b6:75:
c2:e0:f5:b0:49:01:5a:f6:34:53:e9:f1:53:03:44:
4f:f8:e9:fd:78:91:16:f4:df:03:f5:0b:a8:af:9e:
13:77:4b:44:6d:a3:df:29:04:27:3b:eb:21:be:16:
10:e9:5d:13:6a:24:38:75:3b:7e:f6:f1:ec:54:6c:
f8:3a:c4:62:56:f1:9d:09:73:ff:fd:b4:70:8b:72:
50:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F6:B2:E5:BA:34:67:3C:DC:7D:08:BB:ED:E8:D5:EB:BE:48:9A:F9
X509v3 Authority Key Identifier:
keyid:B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a666666663a343038393a3a2f36342d3634203d3e203631353839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:48f0:ffff:4089::/64
Signature Algorithm: sha256WithRSAEncryption
c3:3b:58:b6:de:10:26:e3:ae:63:d2:d9:03:b0:9b:9c:db:cb:
57:3c:cc:3c:e3:66:83:7c:a4:3d:55:92:3b:06:25:0b:ae:1d:
29:56:ef:8b:89:73:c8:a5:61:35:0f:7d:f8:2c:9c:b0:b5:58:
b8:2b:9b:91:f5:92:aa:b6:65:11:07:8f:39:a9:f9:12:60:b2:
71:0f:d5:78:84:d4:53:ee:81:c4:d0:dc:a2:90:db:b2:ec:3d:
87:ca:57:4a:a1:e9:e5:cd:df:bc:94:76:98:24:12:b8:77:78:
63:ee:f1:63:4b:33:7c:7d:48:ac:d1:cd:c3:f9:b7:6a:d4:c6:
a8:d2:f1:ea:d0:39:2b:30:49:eb:95:98:36:7b:fb:df:84:13:
4d:4a:81:f7:95:3c:96:e4:5f:82:f5:d9:b8:66:29:6d:01:4c:
29:9f:52:40:96:c5:11:38:3b:52:34:a8:7a:63:75:0f:33:1c:
d3:92:24:19:17:53:17:d2:32:6a:59:44:08:e7:4b:aa:6a:dd:
ba:74:78:b8:aa:c6:db:42:22:2a:9e:a8:7f:d0:3d:82:fa:00:
cb:86:7e:fe:83:ff:0f:77:a9:18:01:1a:af:df:38:32:6f:89:
db:57:18:e1:ad:19:78:7b:4e:9c:9f:da:ee:b5:d8:75:91:8d:
ec:58:a2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:59 2024 by rpki-client on console-ams.rpki-client.org