Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/323830343a6463303a3a2f33332d3333203d3e203238363130.roa
File: 323830343a6463303a3a2f33332d3333203d3e203238363130.roa (raw, json)
Hash identifier: aY1q3WhUn2Qx1fBWVORf7iAPX/bKOQKxcw+jPnvkYbE=
Subject key identifier: D7:74:E2:88:40:7A:E3:F5:35:F4:76:B3:1A:7A:91:4A:77:DC:30:59
Certificate issuer: /CN=E30F23C8792C39E2DA52F7E0AD9F8864F13B5E7A
Certificate serial: 511BDE8EB928AC78350A3671069E610640404F
Authority key identifier: E3:0F:23:C8:79:2C:39:E2:DA:52:F7:E0:AD:9F:88:64:F1:3B:5E:7A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E30F23C8792C39E2DA52F7E0AD9F8864F13B5E7A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/323830343a6463303a3a2f33332d3333203d3e203238363130.roa
Signing time: Wed 27 Dec 2023 17:35:14 +0000
ROA not before: Wed 27 Dec 2023 17:30:14 +0000
ROA not after: Wed 25 Dec 2024 17:35:14 +0000
asID: 28610
IP address blocks: 2804:dc0::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:1b:de:8e:b9:28:ac:78:35:0a:36:71:06:9e:61:06:40:40:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E30F23C8792C39E2DA52F7E0AD9F8864F13B5E7A
Validity
Not Before: Dec 27 17:30:14 2023 GMT
Not After : Dec 25 17:35:14 2024 GMT
Subject: CN=D774E288407AE3F535F476B31A7A914A77DC3059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5f:2e:80:ef:0b:3b:54:50:45:9b:cc:e5:32:
44:bc:b8:3d:3e:d9:ea:fb:2e:69:fd:52:4c:7f:0f:
0c:f9:91:5a:71:df:32:b5:8a:7b:c6:6b:12:a5:3e:
cd:9f:ff:87:70:d9:fb:af:f2:16:45:e7:78:af:bb:
c8:94:b0:66:ef:63:11:cd:b7:7f:0d:f5:ea:26:3e:
1f:71:da:fb:6f:fd:3f:16:98:c6:b6:0f:48:1f:c7:
aa:4a:47:9b:4c:de:9d:df:85:54:30:b8:8d:29:3c:
38:5f:35:35:46:54:0e:66:d6:d4:9f:fd:b7:f6:e5:
cc:2c:38:5a:11:d3:33:0e:2c:7d:1f:20:4c:dc:51:
97:ee:d9:0c:87:2c:82:12:c2:f8:91:4a:ca:e8:44:
71:93:5c:e8:c4:44:30:fa:ed:fb:eb:2a:50:17:07:
ce:62:7b:ce:a3:87:2a:a9:52:6e:19:de:7c:3a:c1:
73:4f:f0:e7:82:8c:63:ba:bc:4b:c8:04:dd:bd:34:
63:e3:78:0a:17:c4:63:b1:9e:b2:93:c9:c5:79:e5:
e3:e5:80:7c:1c:13:37:77:b9:19:f6:98:20:bc:1a:
e0:89:4a:65:07:78:79:8f:40:d3:9b:bd:2d:ee:db:
48:dc:c2:f9:03:77:cb:bf:83:ad:66:ba:3a:3c:83:
94:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:74:E2:88:40:7A:E3:F5:35:F4:76:B3:1A:7A:91:4A:77:DC:30:59
X509v3 Authority Key Identifier:
keyid:E3:0F:23:C8:79:2C:39:E2:DA:52:F7:E0:AD:9F:88:64:F1:3B:5E:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/E30F23C8792C39E2DA52F7E0AD9F8864F13B5E7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E30F23C8792C39E2DA52F7E0AD9F8864F13B5E7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/323830343a6463303a3a2f33332d3333203d3e203238363130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:dc0::/33
Signature Algorithm: sha256WithRSAEncryption
3b:de:41:29:d4:01:c2:1b:8e:55:d6:69:46:85:b9:01:16:d5:
0c:38:9b:a2:c2:c3:e6:59:a4:6b:7d:17:c7:9c:eb:11:06:b2:
22:b8:f7:52:ba:6e:fb:0f:f2:96:81:a8:c6:52:2a:58:e8:5e:
18:9d:68:92:0c:c0:1a:49:d4:31:70:3e:46:65:e5:3d:b4:70:
d1:ae:d9:0b:5b:d1:19:d5:b2:9e:60:93:cb:a2:9d:46:63:dc:
27:73:91:da:5f:00:75:65:d3:37:5b:d4:8b:66:53:57:42:5d:
4f:54:02:5b:b1:29:7c:ba:88:22:8b:78:e4:44:49:42:54:75:
76:ff:b6:48:52:7f:e5:d2:eb:26:b6:c9:5d:a2:7f:66:dd:6b:
29:ca:2a:a3:d0:4c:98:a5:b3:83:ee:1f:87:b2:0f:f1:ce:c5:
d6:28:af:45:b7:65:83:3e:1e:d7:d4:66:d5:80:1e:d8:b6:3d:
b1:01:92:43:ac:52:ca:48:74:7a:9a:cf:9d:6c:a4:25:9c:6c:
bc:c1:1f:3b:84:26:83:83:0f:e2:3e:fe:af:35:90:25:eb:c2:
86:90:55:b1:ad:ff:26:ef:ae:78:ed:a3:b6:a3:bc:cc:43:0a:
70:55:75:5c:ea:cd:20:ff:52:9d:21:a9:29:d9:b6:34:e6:7b:
80:ed:ae:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org