Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/323830343a316362303a3a2f33322d3438203d3e203631363639.roa
File: 323830343a316362303a3a2f33322d3438203d3e203631363639.roa (raw, json)
Hash identifier: KSSD7w+k2BOTq35cN87LrUwrjEA1iG8Jvo3i9YMj0X0=
Subject key identifier: 13:FD:70:2A:91:7C:FB:27:86:AE:0E:5A:F9:1B:C4:98:C6:D7:04:EB
Certificate issuer: /CN=D42810233D486ABFF6FCD5876F529684C818D631
Certificate serial: 4D195B30CE58B39C4E40BF2539D0A3A33398615E
Authority key identifier: D4:28:10:23:3D:48:6A:BF:F6:FC:D5:87:6F:52:96:84:C8:18:D6:31
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D42810233D486ABFF6FCD5876F529684C818D631.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/323830343a316362303a3a2f33322d3438203d3e203631363639.roa
Signing time: Tue 01 Nov 2022 16:57:37 +0000
ROA not before: Tue 01 Nov 2022 16:52:37 +0000
ROA not after: Tue 31 Oct 2023 16:57:37 +0000
asID: 61669
IP address blocks: 2804:1cb0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:19:5b:30:ce:58:b3:9c:4e:40:bf:25:39:d0:a3:a3:33:98:61:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D42810233D486ABFF6FCD5876F529684C818D631
Validity
Not Before: Nov 1 16:52:37 2022 GMT
Not After : Oct 31 16:57:37 2023 GMT
Subject: CN=13FD702A917CFB2786AE0E5AF91BC498C6D704EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c8:9b:91:8d:f4:00:29:cc:24:5d:b7:a0:c2:
c6:95:a1:70:78:c1:bc:84:8a:9d:09:fa:17:30:80:
a9:6a:b6:e4:90:24:f7:4f:4c:9d:9d:d9:6e:a9:51:
09:93:4c:55:e3:52:76:18:06:55:2f:af:fd:cb:09:
19:67:fc:e8:fa:7e:5b:50:f2:7f:25:b7:c2:02:2a:
a7:e8:ef:bd:67:aa:93:66:63:c3:8e:ac:e9:fc:18:
af:97:ec:eb:e9:47:48:58:c7:22:a7:4c:b8:4d:6d:
f3:7e:d2:ad:71:d4:dd:ba:a8:1a:84:17:11:82:3e:
fe:d1:0c:22:f1:c4:a0:94:1f:1b:d7:bb:d5:b7:a0:
48:5e:e4:f4:61:25:e1:7a:0f:a9:18:1b:29:e3:3b:
91:5c:d5:eb:14:5c:a1:22:67:06:68:38:9f:84:87:
98:aa:69:12:87:d1:94:23:0b:66:c7:f8:8f:2e:58:
c3:ab:3a:d7:8f:07:3a:98:79:b9:7e:a7:b9:16:c9:
0b:f4:4b:7d:4b:95:73:f6:a8:b6:fd:18:30:93:fb:
32:75:4b:dc:9b:18:a6:db:e4:da:a7:5c:64:62:3d:
bd:b1:63:b2:68:1f:37:dc:a6:1b:e7:27:2e:2b:77:
d9:5c:95:6c:3c:04:45:0d:89:0f:4f:1e:72:7c:9c:
0e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FD:70:2A:91:7C:FB:27:86:AE:0E:5A:F9:1B:C4:98:C6:D7:04:EB
X509v3 Authority Key Identifier:
keyid:D4:28:10:23:3D:48:6A:BF:F6:FC:D5:87:6F:52:96:84:C8:18:D6:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/D42810233D486ABFF6FCD5876F529684C818D631.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D42810233D486ABFF6FCD5876F529684C818D631.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/323830343a316362303a3a2f33322d3438203d3e203631363639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1cb0::/32
Signature Algorithm: sha256WithRSAEncryption
3f:6a:27:b5:ef:6d:17:eb:77:92:f9:ce:69:c8:2e:ca:dc:05:
b2:fd:63:b0:70:04:e6:41:1a:e9:e3:08:14:a2:30:af:83:bf:
0d:e0:87:f7:49:92:74:0d:f1:55:56:ce:04:e8:69:4d:c1:75:
ff:6e:3c:8f:09:da:3c:05:6c:a7:cc:e5:61:64:2b:7f:7a:32:
b1:f6:c9:84:5f:e7:24:5b:85:86:25:fe:dd:d4:56:31:cc:e6:
ad:5d:ea:92:38:9b:ba:8c:4a:14:b0:9d:42:0d:f4:cb:20:4c:
c2:8f:9a:b6:1a:fc:c4:33:26:af:5d:6f:d0:fb:47:ca:af:0d:
fe:0e:29:04:d0:1d:7c:17:ed:c4:c8:dc:6f:e7:15:a8:5d:0f:
40:01:09:67:57:01:30:9d:9b:5e:84:d4:f2:2b:bc:16:67:e2:
b4:cb:8a:46:bb:71:c2:59:b2:39:03:b3:80:8f:5c:6a:eb:2c:
6d:8f:57:80:87:7d:e1:86:e1:e6:07:a5:97:7e:f2:c0:94:55:
58:c3:5a:50:49:21:f1:ff:f6:cc:22:5d:0a:18:7d:4e:c4:92:
81:91:e4:88:0f:44:8d:d8:38:be:94:29:f3:fe:62:df:ed:8c:
b0:6e:67:49:9a:03:27:1f:30:55:38:31:e0:3e:19:ff:b0:1c:
b2:17:b9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org