Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/0/323830343a313964303a3a2f33322d3438203d3e203631383230.roa
File: 323830343a313964303a3a2f33322d3438203d3e203631383230.roa (raw, json)
Hash identifier: dt94lToNKcXM2OAUfD4rOH/5+5I1fPz/Zq7KoBovE2Q=
Subject key identifier: 33:6F:3D:82:2F:D2:65:60:EB:2F:FD:A9:EF:29:F9:E0:7A:BB:2E:AC
Certificate issuer: /CN=21EAE9DD029A47329610D791B5D8984393ADCD7C
Certificate serial: 548F9B115191D12215402FDDAD5D158036078657
Authority key identifier: 21:EA:E9:DD:02:9A:47:32:96:10:D7:91:B5:D8:98:43:93:AD:CD:7C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21EAE9DD029A47329610D791B5D8984393ADCD7C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/0/323830343a313964303a3a2f33322d3438203d3e203631383230.roa
Signing time: Fri 22 Dec 2023 14:25:09 +0000
ROA not before: Fri 22 Dec 2023 14:20:09 +0000
ROA not after: Fri 20 Dec 2024 14:25:09 +0000
asID: 61820
IP address blocks: 2804:19d0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:8f:9b:11:51:91:d1:22:15:40:2f:dd:ad:5d:15:80:36:07:86:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21EAE9DD029A47329610D791B5D8984393ADCD7C
Validity
Not Before: Dec 22 14:20:09 2023 GMT
Not After : Dec 20 14:25:09 2024 GMT
Subject: CN=336F3D822FD26560EB2FFDA9EF29F9E07ABB2EAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:26:19:8e:2e:9b:f6:b9:87:34:ed:87:df:6e:
cd:6d:61:de:6d:2c:88:d2:99:41:48:bf:7e:ae:0e:
a8:3f:2e:13:44:f4:fd:74:3d:72:6b:cb:d5:a7:64:
85:28:fd:50:45:e8:69:c4:7a:b2:d8:25:3a:d4:17:
3d:c8:f6:23:1f:b9:12:0b:23:c0:9f:ed:18:fc:1b:
4d:60:75:f9:85:94:f1:d8:94:eb:86:76:ed:97:90:
6b:2a:bc:5e:42:de:0f:9b:8d:1f:c5:56:45:35:a2:
4a:c9:53:80:c0:7b:8b:47:14:0a:15:9f:f4:87:4d:
6a:62:07:2f:e2:a2:12:ee:04:45:08:8e:7d:a7:41:
d8:c0:42:fa:c7:59:d6:8c:82:85:94:0e:9b:d3:d3:
2b:dc:94:af:f7:61:a4:81:0d:84:9c:7c:8d:dc:91:
ef:60:9c:f3:5e:1b:26:17:30:f3:c8:fa:8c:0c:0d:
0d:e9:13:49:8e:a1:36:28:d7:08:8e:be:a8:a3:54:
ea:4f:16:e5:e1:e6:a1:3d:28:9f:41:a0:fd:7d:27:
7c:0f:ef:91:d4:4b:92:26:45:ff:5e:b2:7f:04:c3:
a6:aa:b0:df:1e:39:56:60:68:c2:3c:25:c5:92:9e:
e7:4e:e6:7d:66:01:8f:ef:93:c1:95:2f:3a:c1:61:
c5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6F:3D:82:2F:D2:65:60:EB:2F:FD:A9:EF:29:F9:E0:7A:BB:2E:AC
X509v3 Authority Key Identifier:
keyid:21:EA:E9:DD:02:9A:47:32:96:10:D7:91:B5:D8:98:43:93:AD:CD:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/0/21EAE9DD029A47329610D791B5D8984393ADCD7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21EAE9DD029A47329610D791B5D8984393ADCD7C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/0/323830343a313964303a3a2f33322d3438203d3e203631383230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:19d0::/32
Signature Algorithm: sha256WithRSAEncryption
74:1d:86:ff:20:b3:56:c7:e3:22:4b:10:9c:0f:6d:b5:d4:30:
1f:1d:39:3b:ff:72:c9:59:4c:50:f6:39:10:2c:0d:ee:38:52:
de:93:9a:72:98:42:5b:2a:22:33:ed:b0:1e:74:79:21:eb:c9:
30:a8:0b:1b:9d:8c:ef:49:5b:bf:c4:41:1c:64:94:6c:ea:c9:
81:b7:61:64:cd:f7:c8:8d:fc:9a:af:37:6c:e7:59:4a:23:4c:
05:dc:5f:2f:8f:e1:94:14:00:c2:ff:a5:31:72:eb:b1:05:ca:
93:00:af:76:35:3c:78:40:37:33:d3:56:28:3e:84:94:33:78:
5b:66:88:4f:39:8f:d1:1f:00:8b:07:f1:24:e6:1b:50:a2:aa:
43:bd:76:d5:6c:ef:1b:7e:59:2f:b2:24:11:5d:c0:3a:54:39:
7b:e7:66:e9:b7:91:92:d7:f5:42:0b:93:4f:91:10:6f:23:90:
bd:85:56:da:84:ae:27:a0:41:53:cf:0a:db:91:79:15:42:b9:
dd:29:3c:66:bf:d7:c3:ef:b9:a6:b5:c4:10:18:02:76:cd:48:
83:d4:2a:be:4f:bc:84:03:3a:7d:5a:c4:6c:bc:97:5f:c7:34:
84:12:19:72:a6:49:3c:bf:e1:96:23:72:7b:3f:a1:03:13:43:
e3:f3:ec:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org