Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/0/323830343a353063303a3a2f33322d3332203d3e20323638343038.roa
File: 323830343a353063303a3a2f33322d3332203d3e20323638343038.roa (raw, json)
Hash identifier: geASsW0/TMOkETm1utEkmglJvpd/GaAQaBFCgZSmIP8=
Subject key identifier: 19:94:5D:0A:CF:E2:C3:34:DD:3E:4E:25:8E:C8:0D:D4:41:52:89:DD
Certificate issuer: /CN=BE34597B7ABF76EF20D214D43F25E2579F560E78
Certificate serial: 4DB1E9429889E9BE47B55D781CC0075E65A6F60C
Authority key identifier: BE:34:59:7B:7A:BF:76:EF:20:D2:14:D4:3F:25:E2:57:9F:56:0E:78
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE34597B7ABF76EF20D214D43F25E2579F560E78.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/0/323830343a353063303a3a2f33322d3332203d3e20323638343038.roa
Signing time: Mon 08 Jan 2024 15:07:54 +0000
ROA not before: Mon 08 Jan 2024 15:02:54 +0000
ROA not after: Mon 06 Jan 2025 15:07:54 +0000
asID: 268408
IP address blocks: 2804:50c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:b1:e9:42:98:89:e9:be:47:b5:5d:78:1c:c0:07:5e:65:a6:f6:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE34597B7ABF76EF20D214D43F25E2579F560E78
Validity
Not Before: Jan 8 15:02:54 2024 GMT
Not After : Jan 6 15:07:54 2025 GMT
Subject: CN=19945D0ACFE2C334DD3E4E258EC80DD4415289DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fb:bd:e7:ee:e4:60:b9:ca:ed:5f:c3:21:f7:
dd:48:86:cc:5c:7b:f8:18:ee:e3:e6:11:90:5c:ac:
64:03:a7:94:a5:4d:ac:a1:8d:b0:c6:4f:ad:ab:e6:
fc:e3:cc:a0:b7:fb:60:fe:16:81:04:12:ad:e8:52:
9d:98:08:73:a3:ff:6f:0f:79:27:9d:05:f1:c3:c3:
32:43:18:28:89:f4:73:be:d7:bf:a2:ab:a1:e0:fa:
e6:7c:89:04:64:74:ed:36:5a:98:69:51:a5:15:10:
49:9b:85:61:4f:87:6a:20:30:9e:1d:76:de:49:34:
37:61:64:84:9c:d7:f1:6b:85:2e:9a:91:57:86:d8:
af:fc:42:a1:27:c4:fe:67:52:94:8f:d6:ec:41:4d:
de:51:3f:fe:70:c4:3e:97:d9:ff:2c:66:dd:50:46:
8d:d0:14:8b:98:3f:06:e6:c8:0e:0e:b6:ba:18:62:
8b:19:d0:a9:32:e4:64:83:97:06:87:02:06:6b:c0:
5d:75:96:26:ad:b5:2e:22:30:4f:bc:64:5b:c3:07:
20:de:92:a5:a4:59:21:b8:a8:ef:42:b8:76:95:94:
bd:14:8e:17:64:5a:23:31:60:61:c6:23:7a:e3:2b:
a6:49:35:3d:a6:8c:e0:b7:64:db:eb:b7:02:8b:dc:
a6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:94:5D:0A:CF:E2:C3:34:DD:3E:4E:25:8E:C8:0D:D4:41:52:89:DD
X509v3 Authority Key Identifier:
keyid:BE:34:59:7B:7A:BF:76:EF:20:D2:14:D4:3F:25:E2:57:9F:56:0E:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/0/BE34597B7ABF76EF20D214D43F25E2579F560E78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE34597B7ABF76EF20D214D43F25E2579F560E78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/0/323830343a353063303a3a2f33322d3332203d3e20323638343038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:50c0::/32
Signature Algorithm: sha256WithRSAEncryption
61:e4:46:5e:69:15:54:36:d2:64:3a:bd:57:fc:2b:db:5a:1b:
a8:82:f4:69:00:d7:3e:f5:e9:32:8f:a6:85:80:b2:21:81:ba:
32:60:a0:ac:7b:fe:35:04:45:1d:d8:bd:1b:12:1b:8d:06:6b:
48:21:8c:0d:27:90:9c:cc:87:d7:46:0f:47:28:26:42:0a:51:
a4:e9:3a:a6:2e:97:15:a1:63:47:85:6f:c0:ab:59:bd:27:9a:
6e:ea:04:de:ce:aa:a5:89:e2:51:c6:77:2d:bf:dc:8c:39:47:
53:78:d5:e0:21:9c:7c:8d:d2:20:6a:f4:ae:d5:a9:e0:ab:09:
b9:5b:8d:de:43:45:d4:3c:10:fa:cb:b4:84:e1:74:5a:97:ad:
c2:69:db:cd:1f:48:22:e3:c5:01:64:f3:05:33:4d:e8:25:c2:
92:2b:a4:b2:46:cc:18:7b:ec:1e:91:75:21:68:a8:40:c4:79:
54:9c:2b:5f:fd:11:c0:7d:3d:bd:cd:1d:97:a1:99:95:55:b4:
df:b5:03:d4:b4:b8:69:81:2f:bf:b1:31:61:f4:a5:54:7f:54:
f1:de:76:42:a3:ae:38:15:19:92:0f:42:a4:8a:c5:16:1c:f0:
47:e2:92:2a:06:8e:c0:a9:59:fa:a6:46:7b:e4:09:ca:fb:68:
a7:59:bb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org