Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/1/323830343a323862303a633030303a3a2f33342d3334203d3e203532393332.roa
File: 323830343a323862303a633030303a3a2f33342d3334203d3e203532393332.roa (raw, json)
Hash identifier: ellBKl2IzCnxnxODCHPlM2i+R4HZ5VG79qTb2QBkb48=
Subject key identifier: A8:18:BF:DD:C9:CA:96:6B:2B:61:22:54:89:8F:A7:80:F8:C3:F9:8E
Certificate issuer: /CN=9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72
Certificate serial: 09CA4317006B6DAF5058B7C80063665796B9B0A5
Authority key identifier: 9D:34:8A:0A:66:A2:F5:5A:35:EE:3F:E7:6C:50:D4:DE:EE:98:4B:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/1/323830343a323862303a633030303a3a2f33342d3334203d3e203532393332.roa
Signing time: Wed 03 Apr 2024 18:31:11 +0000
ROA not before: Wed 03 Apr 2024 18:26:11 +0000
ROA not after: Wed 02 Apr 2025 18:31:11 +0000
asID: 52932
IP address blocks: 2804:28b0:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:ca:43:17:00:6b:6d:af:50:58:b7:c8:00:63:66:57:96:b9:b0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72
Validity
Not Before: Apr 3 18:26:11 2024 GMT
Not After : Apr 2 18:31:11 2025 GMT
Subject: CN=A818BFDDC9CA966B2B612254898FA780F8C3F98E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ba:fc:46:cc:02:0b:29:3c:80:4d:bf:0b:a8:
45:21:0d:7e:a6:7c:1e:28:e9:95:31:ff:b1:23:e0:
5e:cf:01:82:22:45:ac:7c:1b:c8:34:06:2d:28:d5:
9b:9e:bf:8a:22:fc:1e:1b:68:99:e5:14:5d:3f:00:
70:f9:f1:bd:bf:18:74:60:28:40:64:61:0d:1b:b4:
ba:05:e2:87:9c:09:05:61:8f:bf:3c:b6:8a:d4:cb:
96:c6:fb:bc:d6:d4:a7:68:8b:4e:4e:84:70:21:53:
34:69:2a:b4:fe:32:41:d2:2a:da:21:cf:87:88:af:
2a:eb:e6:fa:73:7f:f1:d6:38:30:70:34:91:bd:8f:
01:f7:1b:58:3a:3c:32:55:c7:ec:75:38:8f:71:03:
39:a6:3f:32:9b:74:4b:c3:62:f6:ea:89:41:58:89:
3d:76:73:e9:1e:64:4a:3a:f4:d0:f9:f0:a9:64:b5:
c6:43:7d:c3:2e:56:85:42:1a:66:bc:0b:2b:33:0a:
b6:bc:85:8b:2c:74:2f:0b:29:a1:4a:0c:69:91:a4:
b0:17:02:c4:e4:68:4c:e9:a8:8c:d9:f6:c4:ae:05:
a2:2c:79:45:43:99:50:36:6b:1b:28:69:c7:55:5c:
27:a8:ec:a1:f2:5f:47:54:d2:82:a9:bb:4f:62:48:
08:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:18:BF:DD:C9:CA:96:6B:2B:61:22:54:89:8F:A7:80:F8:C3:F9:8E
X509v3 Authority Key Identifier:
keyid:9D:34:8A:0A:66:A2:F5:5A:35:EE:3F:E7:6C:50:D4:DE:EE:98:4B:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/1/9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/1/323830343a323862303a633030303a3a2f33342d3334203d3e203532393332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:28b0:c000::/34
Signature Algorithm: sha256WithRSAEncryption
55:fc:5e:8d:d1:91:47:ca:ae:7b:c1:99:97:36:5b:61:40:ea:
22:1e:6a:da:42:02:e5:21:37:11:aa:a9:b8:2a:c6:18:b6:05:
d9:f8:f8:cf:41:3e:bd:ee:6a:d7:30:a0:f4:12:40:d9:c9:b4:
b7:b7:a1:7a:d3:cc:b5:20:98:76:6a:1e:bd:a3:81:9b:37:b7:
85:7b:75:87:58:15:35:66:98:90:d1:80:33:6b:8f:38:ed:54:
1a:b6:6b:ca:d2:e9:21:ff:c7:ce:c6:b1:a5:64:d2:70:8b:7e:
c2:40:f8:17:cc:0a:0a:74:94:31:13:0b:57:1a:06:8d:c6:da:
e7:81:98:92:b4:c9:65:d5:5e:5c:4f:d5:f6:25:ad:4d:04:11:
90:33:3b:89:49:3a:72:87:e3:8b:c6:e1:71:48:68:84:b5:e3:
a7:2e:7f:75:e3:b0:2f:f6:5c:9b:7e:f5:1c:ef:e2:99:85:4f:
e7:3e:d3:30:a3:cb:72:3c:8d:28:68:39:a0:d3:91:a9:34:0f:
a7:4a:99:ac:c6:71:b5:c3:63:32:50:ad:67:43:93:7f:92:9b:
d7:5c:27:71:9d:5b:be:70:3f:86:80:ec:bb:c8:df:1a:f4:7c:
a2:fe:3e:34:83:7b:b3:c6:72:5f:d7:fb:44:51:77:31:4d:f4:
82:c6:84:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org