Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/323830343a3562303a3a2f33342d3334203d3e20323636313831.roa
File: 323830343a3562303a3a2f33342d3334203d3e20323636313831.roa (raw, json)
Hash identifier: L75T405dVC3P9HpPkyD8VFYjz7CpAmcL6MCJaovy5WM=
Subject key identifier: 1E:E7:18:8C:DC:E6:55:A6:44:4B:2B:ED:53:70:B0:A5:C6:98:D2:12
Certificate issuer: /CN=60E94AF72ACDFFC18F9151261A92F78E5CE8FF6F
Certificate serial: 567E89D6DEADBDD2F17AAAB3E188E6195E403832
Authority key identifier: 60:E9:4A:F7:2A:CD:FF:C1:8F:91:51:26:1A:92:F7:8E:5C:E8:FF:6F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60E94AF72ACDFFC18F9151261A92F78E5CE8FF6F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/323830343a3562303a3a2f33342d3334203d3e20323636313831.roa
Signing time: Thu 29 Jun 2023 14:57:35 +0000
ROA not before: Thu 29 Jun 2023 14:52:35 +0000
ROA not after: Thu 27 Jun 2024 14:57:35 +0000
asID: 266181
IP address blocks: 2804:5b0::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:7e:89:d6:de:ad:bd:d2:f1:7a:aa:b3:e1:88:e6:19:5e:40:38:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60E94AF72ACDFFC18F9151261A92F78E5CE8FF6F
Validity
Not Before: Jun 29 14:52:35 2023 GMT
Not After : Jun 27 14:57:35 2024 GMT
Subject: CN=1EE7188CDCE655A6444B2BED5370B0A5C698D212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:64:b4:64:eb:bb:de:7c:0f:fb:b8:d5:71:c5:
9c:e7:b2:5f:8d:6f:f2:e3:64:e9:fc:15:65:f4:c2:
08:40:7f:14:4d:2d:48:32:06:50:e8:13:6d:d8:0f:
74:87:76:0f:a0:20:94:9f:4a:10:20:85:9b:8f:3d:
6e:74:49:30:50:ca:9c:13:93:0d:38:50:12:77:df:
d6:40:db:28:90:75:cf:75:d4:0d:d1:4e:eb:8b:51:
f8:e7:1d:a6:86:9c:21:ed:52:46:72:29:aa:6f:cd:
b2:d1:05:ce:ea:a5:3f:23:e9:b3:13:8f:77:53:44:
47:24:45:ed:8b:cd:b2:8c:ec:6b:2a:07:62:49:4f:
84:29:4b:76:ca:a1:4e:b2:3f:dd:76:ba:cb:f9:01:
f5:96:76:2d:f4:39:34:cd:36:06:1a:3c:6d:e8:a3:
aa:66:1c:9b:fd:d3:f4:d8:62:29:dd:85:cb:d1:9d:
3c:23:a7:3c:c3:6c:33:80:1a:38:90:1b:fa:73:be:
99:ea:cc:14:d7:64:d5:14:97:8c:9e:e8:8e:a5:23:
cc:35:82:0a:b4:ec:19:68:2d:52:66:a6:fd:24:69:
ff:a8:30:04:a7:31:90:9e:66:39:16:6b:fd:ba:8f:
a3:f4:cf:ba:02:70:f2:2c:5d:35:42:df:99:2c:70:
9d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E7:18:8C:DC:E6:55:A6:44:4B:2B:ED:53:70:B0:A5:C6:98:D2:12
X509v3 Authority Key Identifier:
keyid:60:E9:4A:F7:2A:CD:FF:C1:8F:91:51:26:1A:92:F7:8E:5C:E8:FF:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/60E94AF72ACDFFC18F9151261A92F78E5CE8FF6F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60E94AF72ACDFFC18F9151261A92F78E5CE8FF6F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/323830343a3562303a3a2f33342d3334203d3e20323636313831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5b0::/34
Signature Algorithm: sha256WithRSAEncryption
5d:13:ea:76:21:03:f2:18:c3:fd:ba:1f:a7:9b:5f:23:16:e8:
dc:9b:75:a8:ca:c0:73:00:26:30:8c:de:dc:be:3b:3d:1e:8e:
d7:ee:fd:9f:fa:ec:f8:d9:8b:d9:79:f0:b4:90:bc:40:01:b0:
47:88:55:ed:96:a2:2e:b5:c4:cc:49:eb:a1:04:62:45:2b:74:
11:44:a0:e4:52:9d:10:bf:23:da:eb:29:d7:21:b8:7c:e9:e0:
c8:91:1c:a1:2e:9d:c0:a9:86:e0:1a:b7:ba:9c:56:9d:3e:e4:
ca:a4:d9:8d:da:d6:c5:17:c7:53:e5:e7:84:0a:c3:1a:10:ca:
6d:6d:8f:4b:70:2b:ed:dd:f6:b9:cc:05:2d:29:ef:b0:45:3f:
72:3e:64:0d:ec:39:90:90:7a:2f:70:5d:0a:e2:67:16:52:3c:
59:e3:a1:41:d2:60:5b:e0:f1:a9:10:34:ad:3c:66:c8:f1:20:
35:7a:f9:f8:95:c3:f6:c4:d9:cd:aa:a7:ca:81:6f:a7:90:c2:
b6:3a:4c:7c:6a:da:09:77:ec:3f:d6:fa:d6:31:b2:2e:44:11:
6a:48:4d:c6:23:e1:6c:90:69:93:bf:0f:4b:0c:44:52:d7:87:
e9:8a:82:a0:d5:60:2d:22:9e:5a:5e:37:b9:6f:23:92:fe:d4:
d9:17:e3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:41 2024 by rpki-client on console-ams.rpki-client.org