Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/323830343a6663633a3a2f33342d3334203d3e20323633363034.roa
File: 323830343a6663633a3a2f33342d3334203d3e20323633363034.roa (raw, json)
Hash identifier: AYgy4YPavsgbst0DrvjyqbZ8Wys43Tom6JCeneO3I14=
Subject key identifier: A4:B2:56:0E:7B:C4:37:F2:50:77:89:FC:02:40:78:AE:68:70:A3:B1
Certificate issuer: /CN=11C498AC8321997BA4C8E8FDE6C86AB8C07045BB
Certificate serial: 07BFB5030CE2D5F024E56DCAC5951DB37291556C
Authority key identifier: 11:C4:98:AC:83:21:99:7B:A4:C8:E8:FD:E6:C8:6A:B8:C0:70:45:BB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11C498AC8321997BA4C8E8FDE6C86AB8C07045BB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/323830343a6663633a3a2f33342d3334203d3e20323633363034.roa
Signing time: Thu 21 Sep 2023 13:36:58 +0000
ROA not before: Thu 21 Sep 2023 13:31:58 +0000
ROA not after: Thu 19 Sep 2024 13:36:58 +0000
asID: 263604
IP address blocks: 2804:fcc::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:bf:b5:03:0c:e2:d5:f0:24:e5:6d:ca:c5:95:1d:b3:72:91:55:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11C498AC8321997BA4C8E8FDE6C86AB8C07045BB
Validity
Not Before: Sep 21 13:31:58 2023 GMT
Not After : Sep 19 13:36:58 2024 GMT
Subject: CN=A4B2560E7BC437F2507789FC024078AE6870A3B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ea:ef:2c:b0:5a:c8:d3:91:13:2b:7d:56:b5:
72:f2:53:ff:f2:3f:11:35:89:d8:e2:65:26:6e:36:
ee:df:aa:5f:4e:d9:c2:1a:10:19:e4:d3:2f:1c:f1:
83:e6:f9:f1:e6:3f:38:3c:18:56:67:c4:c0:88:f7:
04:a6:1c:cf:b9:a3:e1:1c:e7:91:fc:51:7a:db:a8:
41:e9:ba:9b:fd:0f:6d:b4:f9:a4:a0:29:5d:f8:8e:
af:19:ac:c1:c8:c8:fb:5b:0c:19:0b:76:56:2f:2d:
dd:9d:96:a6:c5:45:24:1f:3d:94:4d:9c:d0:b8:9d:
76:16:65:25:ac:3f:7b:0f:c9:f7:a9:fb:0a:3f:40:
e2:4d:53:32:d3:85:65:e5:75:a0:9e:ed:18:3c:07:
82:ca:5e:fd:e1:12:ce:af:85:d6:ec:6d:bb:a8:b7:
a4:81:1f:7e:58:f1:af:da:c2:6f:78:3f:46:91:87:
4a:2b:30:a5:0f:4e:3d:a3:0b:d2:5d:7b:d3:bb:49:
cc:eb:59:f7:a5:66:ab:b3:f4:d7:39:11:e0:e0:88:
66:d6:87:00:1d:26:3c:39:4f:f8:2a:06:66:b3:a0:
2f:88:22:23:d5:06:ce:da:cb:0d:fe:e5:0c:aa:15:
76:e5:fe:0e:61:2d:7f:c3:6a:8b:c7:b2:c9:ab:80:
5f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B2:56:0E:7B:C4:37:F2:50:77:89:FC:02:40:78:AE:68:70:A3:B1
X509v3 Authority Key Identifier:
keyid:11:C4:98:AC:83:21:99:7B:A4:C8:E8:FD:E6:C8:6A:B8:C0:70:45:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/11C498AC8321997BA4C8E8FDE6C86AB8C07045BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11C498AC8321997BA4C8E8FDE6C86AB8C07045BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/323830343a6663633a3a2f33342d3334203d3e20323633363034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:fcc::/34
Signature Algorithm: sha256WithRSAEncryption
28:d6:d7:e2:d4:f4:f4:ad:a6:de:eb:ac:99:40:b8:c4:6a:e6:
81:47:a5:90:cb:05:ae:7e:80:3a:a9:bf:1f:4e:1b:1f:7f:97:
63:af:12:7c:5e:e3:ec:3c:c8:69:53:4c:f4:dd:e5:d8:ae:1c:
4b:14:19:b2:a2:ba:3e:1d:33:48:7e:5b:84:ce:73:79:97:b7:
fa:d8:84:fe:8e:54:6b:72:93:bc:ae:d8:2f:09:52:a6:48:7d:
61:0e:33:12:33:06:ad:ea:be:f6:50:65:0f:a8:f3:21:b0:cb:
80:ee:c7:f1:f5:0e:ae:a7:a9:d3:ab:d8:93:ce:dc:ea:99:1c:
6c:fe:d5:80:a4:25:10:69:ec:d0:95:3e:8b:29:c6:52:f9:1f:
4f:62:c5:e3:94:94:27:23:3c:92:00:b7:7d:7f:7b:a3:d2:79:
a2:7c:0c:c4:e5:af:93:39:91:97:c7:57:30:a8:bf:22:18:df:
9a:55:59:87:37:2a:f1:83:ae:0f:d6:f1:f8:3c:05:ff:15:13:
1a:ef:13:a7:aa:97:1e:4e:61:16:39:f7:ae:f1:25:e3:24:92:
8c:14:14:9b:4a:d9:b7:e3:ba:8b:7c:81:16:8d:0b:5b:63:48:
7a:74:88:e2:f7:89:ff:4d:cc:62:74:53:b7:46:a8:b1:35:7b:
b0:b1:81:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org