Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/323830343a336461343a3a2f34302d3430203d3e20323636353434.roa
File: 323830343a336461343a3a2f34302d3430203d3e20323636353434.roa (raw, json)
Hash identifier: VCxH21XwECD+UYu3aleBTqn6/Tix1cVZGZ8WUD5yueo=
Subject key identifier: D5:A3:BA:E6:EC:46:D3:81:4A:87:2A:4E:2F:73:E1:EA:D0:CB:7E:3F
Certificate issuer: /CN=E292884C68346AF58C437DEF5B2C1314F4748BFF
Certificate serial: 3BE22C2164337BFC104A45B7C59D3DFFBFF1DF2B
Authority key identifier: E2:92:88:4C:68:34:6A:F5:8C:43:7D:EF:5B:2C:13:14:F4:74:8B:FF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E292884C68346AF58C437DEF5B2C1314F4748BFF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/323830343a336461343a3a2f34302d3430203d3e20323636353434.roa
Signing time: Sat 06 Aug 2022 16:35:54 +0000
ROA not before: Sat 06 Aug 2022 16:30:54 +0000
ROA not after: Sat 05 Aug 2023 16:35:54 +0000
asID: 266544
IP address blocks: 2804:3da4::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:e2:2c:21:64:33:7b:fc:10:4a:45:b7:c5:9d:3d:ff:bf:f1:df:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E292884C68346AF58C437DEF5B2C1314F4748BFF
Validity
Not Before: Aug 6 16:30:54 2022 GMT
Not After : Aug 5 16:35:54 2023 GMT
Subject: CN=D5A3BAE6EC46D3814A872A4E2F73E1EAD0CB7E3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:64:aa:08:11:b5:ca:4f:b5:a7:74:4c:d0:6f:
e7:33:ea:ea:2a:24:72:fb:b6:35:5d:bf:24:0e:a5:
84:5a:9d:27:9d:9a:d3:19:76:7a:8e:97:4a:49:12:
45:f0:60:0c:00:8e:ff:97:c4:4b:89:7b:56:ef:52:
bc:9c:1c:3f:bc:24:20:43:66:6b:28:61:e4:96:80:
99:31:05:8e:26:6c:05:65:e6:5e:6f:65:49:91:a6:
3f:5d:94:11:ba:f3:c1:e0:7d:c5:93:42:44:70:eb:
93:14:86:76:b5:dc:99:de:f5:5a:ab:af:61:42:3f:
52:2f:e1:32:94:8a:6e:6f:99:d4:bc:17:24:ea:27:
9b:e9:43:ba:34:22:ce:4b:54:f6:27:b5:5d:bb:10:
8b:16:3e:79:37:13:49:98:2c:c8:53:e1:24:9c:f1:
4a:82:95:88:3d:fd:d9:b5:8d:8a:8f:91:9c:14:8f:
e6:4f:ab:cf:cd:3d:f6:ec:74:f0:83:b4:18:4e:e4:
52:39:54:54:a6:a1:bc:a9:31:fd:13:f9:2e:a9:2f:
d5:99:f1:b8:1a:b9:6a:3e:23:b0:06:2e:f5:08:3b:
b6:be:d9:65:18:4c:c3:44:73:83:2b:39:2c:82:55:
1e:9a:df:c8:dd:52:2d:30:79:aa:f1:7e:3e:7f:b1:
ef:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A3:BA:E6:EC:46:D3:81:4A:87:2A:4E:2F:73:E1:EA:D0:CB:7E:3F
X509v3 Authority Key Identifier:
keyid:E2:92:88:4C:68:34:6A:F5:8C:43:7D:EF:5B:2C:13:14:F4:74:8B:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/E292884C68346AF58C437DEF5B2C1314F4748BFF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E292884C68346AF58C437DEF5B2C1314F4748BFF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/323830343a336461343a3a2f34302d3430203d3e20323636353434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3da4::/40
Signature Algorithm: sha256WithRSAEncryption
8d:d2:2c:6a:85:70:d4:48:1e:00:df:25:f2:86:a7:9b:09:ef:
7f:28:07:44:47:c2:9b:84:a6:6b:15:6c:ca:c3:02:ef:06:20:
88:4b:b3:96:0f:a6:dd:95:1d:96:c3:88:99:4f:8e:b9:78:9b:
19:7f:be:00:15:6e:95:4d:b0:cb:91:c7:73:5a:cc:ee:80:52:
3e:b8:95:b9:99:0f:ea:d4:04:60:91:48:b9:b5:99:16:fa:4a:
c8:ec:26:bc:39:00:49:2e:70:83:0a:c2:9b:ae:92:cf:f4:6c:
cb:db:14:52:15:de:80:8e:24:8b:74:b7:b1:9b:80:83:17:d2:
3b:42:8a:28:8e:41:ed:65:fb:e2:e4:ae:cc:2f:a8:49:76:4c:
92:fc:32:54:5f:18:85:e7:f5:b9:94:4b:cb:46:26:62:d1:bc:
d2:cb:50:82:25:da:34:fc:72:8f:c3:d3:88:4d:f1:b3:af:f0:
c5:5a:77:a1:95:98:3a:94:1e:20:ca:ff:35:94:31:21:b4:9f:
fd:3d:06:5a:28:98:02:fa:4b:5d:7a:10:04:f0:f0:12:b0:66:
b0:b6:c8:05:47:ba:c8:78:f9:93:8b:db:36:b2:88:e1:d2:4c:
ff:dc:a3:92:43:15:34:f4:c0:16:43:16:cd:77:f5:19:58:30:
1a:ab:00:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----