Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a3a2f33322d3332203d3e203631363738.roa
File: 323830343a316364343a3a2f33322d3332203d3e203631363738.roa (raw, json)
Hash identifier: 3pkBk/Ss6lpvNSIHjiXEVLp569p+XK6yt62lkS2Efw0=
Subject key identifier: BD:E9:28:3F:E4:93:F6:5E:E1:E6:8B:06:04:93:9C:44:E7:E8:56:EB
Certificate issuer: /CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
Certificate serial: 2886FF57CD39F9864C0708443A40A79879AF7D2B
Authority key identifier: 5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a3a2f33322d3332203d3e203631363738.roa
Signing time: Tue 24 Oct 2023 12:43:09 +0000
ROA not before: Tue 24 Oct 2023 12:38:09 +0000
ROA not after: Tue 22 Oct 2024 12:43:09 +0000
asID: 61678
IP address blocks: 2804:1cd4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:86:ff:57:cd:39:f9:86:4c:07:08:44:3a:40:a7:98:79:af:7d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
Validity
Not Before: Oct 24 12:38:09 2023 GMT
Not After : Oct 22 12:43:09 2024 GMT
Subject: CN=BDE9283FE493F65EE1E68B0604939C44E7E856EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:06:76:8f:02:54:c7:64:90:5a:d7:a0:5e:2f:
20:8a:82:20:d3:97:ef:4b:12:72:a1:3b:08:b9:1d:
9a:c3:35:40:a9:7b:75:0b:cf:54:f4:f2:7c:9e:17:
46:70:ae:cd:92:80:f1:8f:f5:a5:94:d3:e2:93:91:
06:8b:65:ec:09:49:ee:24:47:08:ac:35:47:40:1a:
92:3d:a5:48:2c:7b:c7:06:ea:4a:a6:5b:31:97:0b:
58:fd:5d:d0:46:af:43:24:29:34:12:60:7d:f6:f6:
23:77:63:b2:a7:af:04:59:ee:f0:b8:02:7d:bc:84:
5c:87:15:92:76:89:f5:58:db:b1:31:5f:dc:5c:2c:
7f:9d:59:80:38:94:b7:f4:df:90:5d:ac:a6:43:dc:
a2:d8:36:9b:5d:47:c8:6a:ef:24:b5:30:7a:43:34:
ac:75:67:21:56:04:23:87:66:4b:d9:6f:98:1a:38:
19:78:c6:cf:a9:6c:09:1a:7e:6f:62:1f:30:94:a7:
24:ec:b3:26:80:05:5a:a7:2a:cc:b6:8e:c0:ff:9c:
56:5a:38:ad:7d:63:34:b0:bd:18:4f:12:52:c5:2f:
99:6b:40:4b:06:8c:dd:9d:d7:bf:66:13:f2:b9:2b:
59:55:91:42:33:35:13:d2:d3:65:65:6f:04:bc:bd:
b4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E9:28:3F:E4:93:F6:5E:E1:E6:8B:06:04:93:9C:44:E7:E8:56:EB
X509v3 Authority Key Identifier:
keyid:5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a3a2f33322d3332203d3e203631363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1cd4::/32
Signature Algorithm: sha256WithRSAEncryption
8a:94:84:35:e8:2e:99:a6:52:aa:40:14:8c:b9:59:e3:5c:65:
cd:b3:e3:52:55:42:61:82:ca:5f:44:7c:da:9b:c1:1c:5d:62:
00:a3:57:c6:16:87:f8:b8:3e:9d:21:f2:fd:25:70:01:2c:3e:
ac:0d:82:c8:92:29:d7:57:83:67:76:39:6d:84:b3:27:5e:4c:
52:c2:df:30:14:19:81:7b:8e:d9:3d:0f:23:c4:39:3c:7f:4f:
c7:fa:29:e0:76:3d:4e:0f:9e:49:62:d6:b9:e4:17:6c:0c:4a:
a8:72:0d:60:ff:fe:ed:c9:4a:24:03:ea:95:4b:6c:5c:53:51:
3f:ac:33:67:b6:b9:ad:da:e6:21:7c:c7:4e:e0:fb:3c:9e:fe:
a5:a7:03:fc:dd:9a:2a:96:a9:67:82:e8:4e:71:63:06:4b:0d:
2f:4b:9c:7e:e1:08:cf:d9:ab:46:eb:8a:71:b7:03:06:b6:e6:
2a:a0:c7:0c:b4:fb:ca:2f:21:6f:59:67:5a:35:b5:4a:24:c6:
b6:70:86:36:d4:af:89:26:91:99:72:49:aa:fc:24:22:e5:75:
55:be:0b:60:59:dc:fb:8b:99:7a:94:03:2f:b1:d7:12:98:de:
d8:da:0e:cc:d5:34:26:33:00:51:30:21:a5:67:90:f8:78:ad:
ff:65:6e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org