Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/323830343a3133383a613030303a3a2f34372d3437203d3e203131343332.roa
File: 323830343a3133383a613030303a3a2f34372d3437203d3e203131343332.roa (raw, json)
Hash identifier: 8BEoFeg1QsPcwvvGwkFxMqi9QjFFBOOeV8NcpgeYOnk=
Subject key identifier: DD:9C:71:51:6F:AA:68:4D:7E:B7:7C:DE:CD:23:84:88:EC:9F:11:F7
Certificate issuer: /CN=70DA7242E148C2B1BBEE8AA222CAF3FEB3BCDA07
Certificate serial: 3B5CA37832A489B776AC2263C3D14BFE5246F1A1
Authority key identifier: 70:DA:72:42:E1:48:C2:B1:BB:EE:8A:A2:22:CA:F3:FE:B3:BC:DA:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70DA7242E148C2B1BBEE8AA222CAF3FEB3BCDA07.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/323830343a3133383a613030303a3a2f34372d3437203d3e203131343332.roa
Signing time: Wed 31 Jan 2024 15:50:01 +0000
ROA not before: Wed 31 Jan 2024 15:45:01 +0000
ROA not after: Wed 29 Jan 2025 15:50:01 +0000
asID: 11432
IP address blocks: 2804:138:a000::/47 maxlen: 47
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:5c:a3:78:32:a4:89:b7:76:ac:22:63:c3:d1:4b:fe:52:46:f1:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70DA7242E148C2B1BBEE8AA222CAF3FEB3BCDA07
Validity
Not Before: Jan 31 15:45:01 2024 GMT
Not After : Jan 29 15:50:01 2025 GMT
Subject: CN=DD9C71516FAA684D7EB77CDECD238488EC9F11F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:dc:32:8e:8e:cc:39:16:37:7b:61:d4:00:71:
3b:41:3d:8c:75:ea:ca:3d:d5:64:c9:39:25:54:82:
96:9d:34:38:38:5f:bf:47:31:f3:79:46:ec:8b:fc:
37:3f:ec:b1:b7:06:55:6c:56:f6:4d:5f:50:af:89:
33:92:e6:2b:ad:68:8f:64:06:80:bb:ae:3d:8d:cf:
be:c8:87:aa:99:3b:cc:d0:59:ec:67:b4:78:57:be:
8b:df:a7:f2:d1:69:4e:e0:32:c8:e7:de:d3:5e:73:
9b:2e:6b:2a:09:c9:63:05:73:84:b6:37:a9:78:eb:
1e:c5:de:12:b4:ad:2b:f2:52:d0:8d:13:c4:2e:68:
d9:9d:b6:66:78:52:b1:b1:4c:01:b0:3c:f3:77:bf:
61:0e:3e:46:ea:a9:dd:bf:ad:f1:a8:0c:37:ca:35:
7f:06:b1:cd:08:e9:d1:b2:66:3e:33:19:b9:62:43:
da:18:9e:43:67:97:b2:7f:cc:fc:74:f1:57:4f:b4:
e4:6c:3d:d0:3d:e3:3a:e5:fa:12:0d:1e:0d:e3:57:
a6:bf:c7:c3:90:86:f8:12:53:df:6f:0e:01:3d:3d:
b0:f0:6b:86:f9:36:39:b0:3e:28:c1:3a:43:68:f9:
5d:cc:74:54:ba:b5:10:d6:99:f6:0b:4d:df:55:5c:
28:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9C:71:51:6F:AA:68:4D:7E:B7:7C:DE:CD:23:84:88:EC:9F:11:F7
X509v3 Authority Key Identifier:
keyid:70:DA:72:42:E1:48:C2:B1:BB:EE:8A:A2:22:CA:F3:FE:B3:BC:DA:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/70DA7242E148C2B1BBEE8AA222CAF3FEB3BCDA07.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70DA7242E148C2B1BBEE8AA222CAF3FEB3BCDA07.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/323830343a3133383a613030303a3a2f34372d3437203d3e203131343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:138:a000::/47
Signature Algorithm: sha256WithRSAEncryption
74:08:32:0e:d2:b8:46:85:9e:9f:1b:9e:46:d1:6e:e6:73:8a:
6e:3f:47:6f:0a:c3:05:dc:16:f5:9e:b1:a3:2f:cb:82:0f:64:
6b:1d:c6:d6:59:20:0c:c4:94:d3:f5:a8:62:2c:f0:f9:53:5f:
0b:cd:a1:57:31:86:d5:85:f4:10:f8:41:bc:fa:85:bb:85:f5:
c6:16:c2:65:38:94:35:4e:a7:85:ca:3f:1a:e2:8c:55:3c:0f:
5f:ab:49:08:a8:83:0c:f2:fe:0a:85:48:3b:1c:91:f2:74:15:
0f:ed:3f:a8:c0:c7:d2:39:76:19:e3:26:7d:d4:c0:ed:93:43:
c1:63:a0:60:c5:67:30:ed:8a:54:48:f4:4c:ec:cf:6a:68:2a:
05:ec:34:16:d2:d0:83:ea:6f:4b:2e:49:5f:a0:40:bf:3f:c0:
06:4c:2a:71:3c:32:e7:2f:32:6c:31:e1:fa:c2:86:6d:77:ea:
02:c5:d3:f0:99:c0:a4:d0:4f:8d:30:8b:db:6d:d0:81:d0:8c:
a9:81:e9:e9:39:dd:30:98:35:cf:9d:ee:6d:a6:3c:f1:a2:dc:
a8:07:9f:62:fb:7a:3c:d2:7c:ac:62:49:b4:e7:e2:53:5f:4a:
e0:73:a7:02:ca:f8:f6:80:d0:6c:25:3f:8a:28:21:4c:1e:61:
1f:51:15:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org