Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/0/323830343a313536343a3a2f33322d3336203d3e203532353730.roa
File: 323830343a313536343a3a2f33322d3336203d3e203532353730.roa (raw, json)
Hash identifier: EDLEFK2c2OsTV724ZulJywwBCNQB6sTm+pAEZnqh644=
Subject key identifier: CB:70:73:AE:7D:F8:C3:25:4F:2F:A0:43:7E:72:5B:52:A9:E1:BC:7E
Certificate issuer: /CN=2D5C6CACD311321B2E91159DD9A5CD72FCBDD966
Certificate serial: 3B83B558CACE0FDE9D8F5B70EAA710D112A67F0B
Authority key identifier: 2D:5C:6C:AC:D3:11:32:1B:2E:91:15:9D:D9:A5:CD:72:FC:BD:D9:66
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D5C6CACD311321B2E91159DD9A5CD72FCBDD966.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/0/323830343a313536343a3a2f33322d3336203d3e203532353730.roa
Signing time: Fri 08 Mar 2024 10:04:00 +0000
ROA not before: Fri 08 Mar 2024 09:59:00 +0000
ROA not after: Fri 07 Mar 2025 10:04:00 +0000
asID: 52570
IP address blocks: 2804:1564::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:83:b5:58:ca:ce:0f:de:9d:8f:5b:70:ea:a7:10:d1:12:a6:7f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D5C6CACD311321B2E91159DD9A5CD72FCBDD966
Validity
Not Before: Mar 8 09:59:00 2024 GMT
Not After : Mar 7 10:04:00 2025 GMT
Subject: CN=CB7073AE7DF8C3254F2FA0437E725B52A9E1BC7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ee:38:69:9f:bc:d1:af:91:03:32:59:cd:3e:
ed:1a:3c:3d:9c:36:63:c0:dc:fb:40:81:cc:93:ac:
33:99:99:8d:a0:6e:cd:f0:a3:a0:d0:6a:bd:c8:c3:
28:31:33:39:41:8d:83:5b:1a:86:6d:82:48:e8:a4:
a4:13:e3:db:cb:68:ed:78:82:28:0b:d8:bb:f7:8f:
37:cb:06:a9:9e:a9:43:6b:b8:ab:30:30:cb:d5:a3:
df:13:c2:fa:2b:e0:1a:3b:a9:4a:e3:1b:96:30:d4:
b4:a6:1a:a9:0a:97:25:a6:87:04:62:9d:54:fd:3c:
68:51:e1:87:bf:2e:71:2b:ed:a3:3a:9a:dc:06:ed:
d2:78:48:6a:48:8c:07:c1:e5:0a:5b:84:a7:66:aa:
5f:55:fa:92:f1:0d:5c:83:5a:c4:27:93:88:0d:47:
00:94:8d:ae:84:c7:d6:99:22:c4:39:e1:ed:6a:a4:
6c:4a:e5:5c:6c:7f:b0:d4:36:36:2b:9d:aa:52:cb:
ef:97:a8:cc:ff:7b:01:31:cd:b3:bf:d7:3f:53:95:
9d:f5:a1:e0:22:57:18:4c:71:8a:24:0c:69:e5:cd:
cc:2b:6e:06:fe:8d:e0:f3:7a:d9:9f:5a:52:0a:1c:
d2:af:7b:87:f2:0d:2f:70:7e:5e:e0:43:57:a8:96:
63:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:70:73:AE:7D:F8:C3:25:4F:2F:A0:43:7E:72:5B:52:A9:E1:BC:7E
X509v3 Authority Key Identifier:
keyid:2D:5C:6C:AC:D3:11:32:1B:2E:91:15:9D:D9:A5:CD:72:FC:BD:D9:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/0/2D5C6CACD311321B2E91159DD9A5CD72FCBDD966.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D5C6CACD311321B2E91159DD9A5CD72FCBDD966.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/0/323830343a313536343a3a2f33322d3336203d3e203532353730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1564::/32
Signature Algorithm: sha256WithRSAEncryption
44:72:70:6f:7b:04:1f:46:73:8e:bb:a7:9e:1b:db:3c:78:b5:
7d:5d:c2:88:b4:1c:53:89:ef:ab:23:d3:d3:b2:35:5a:55:3c:
38:b2:e7:f5:a1:ee:99:ac:a3:11:95:79:38:e5:f8:6e:b8:02:
90:41:2a:99:11:c0:48:dd:d8:35:1a:b3:e3:07:ab:fb:88:f2:
f0:34:5e:c7:9f:25:e9:67:64:5d:65:fb:bd:bc:95:90:7f:09:
2a:66:5e:95:47:b1:e8:b7:6e:b4:a8:7a:f1:70:1b:de:9d:6c:
78:63:1e:0a:a2:1a:45:79:6c:8c:57:27:b9:97:eb:4f:4e:27:
89:e3:90:f7:ea:f6:dc:0e:8b:5b:91:8f:2a:db:d3:b4:d6:c3:
47:91:2a:3d:89:75:2d:d2:4e:b5:df:b0:85:f5:79:c8:ed:c7:
7e:67:47:2d:50:8e:51:de:88:e1:69:79:7a:fa:86:ec:be:3b:
9b:a8:ab:e1:6b:b9:5a:e1:4e:5c:53:16:da:90:a7:2d:42:07:
74:69:c4:c7:c6:8b:4c:bf:58:22:d5:2b:52:00:e4:cd:46:a9:
cf:08:ff:b5:a6:e3:03:ea:34:5d:cf:27:b4:13:bd:e8:e3:84:
8c:75:11:10:89:04:1b:48:d0:3c:a2:46:93:3d:e5:af:a8:c2:
fd:fb:30:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org