Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/1/323830343a316362303a3a2f33322d3438203d3e203631363639.roa
File: 323830343a316362303a3a2f33322d3438203d3e203631363639.roa (raw, json)
Hash identifier: bpd9uXDBs8tifLzwjicj3KLb5p4YrIUv1gW7+rLl7uY=
Subject key identifier: F9:84:7C:8B:77:D0:13:C6:47:C5:82:8F:10:B4:42:CA:CE:08:77:0F
Certificate issuer: /CN=70B3CABC94E867F7B72A9C99774813CAC6A4784D
Certificate serial: 406F6B0982CA32C5A3CA8074B5DEAFE4D1574D9C
Authority key identifier: 70:B3:CA:BC:94:E8:67:F7:B7:2A:9C:99:77:48:13:CA:C6:A4:78:4D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70B3CABC94E867F7B72A9C99774813CAC6A4784D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/1/323830343a316362303a3a2f33322d3438203d3e203631363639.roa
Signing time: Mon 21 Nov 2022 16:41:13 +0000
ROA not before: Mon 21 Nov 2022 16:36:13 +0000
ROA not after: Mon 20 Nov 2023 16:41:13 +0000
asID: 61669
IP address blocks: 2804:1cb0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:6f:6b:09:82:ca:32:c5:a3:ca:80:74:b5:de:af:e4:d1:57:4d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70B3CABC94E867F7B72A9C99774813CAC6A4784D
Validity
Not Before: Nov 21 16:36:13 2022 GMT
Not After : Nov 20 16:41:13 2023 GMT
Subject: CN=F9847C8B77D013C647C5828F10B442CACE08770F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b6:68:b1:dc:e0:f6:f5:a4:f6:e8:e5:dd:a0:
24:23:9d:b2:85:83:d2:85:b6:cf:91:8d:30:7f:e4:
ac:d1:1b:8d:15:0d:6a:0a:b6:9e:10:b6:6f:17:13:
d7:3d:ca:e5:95:7b:d4:63:a7:36:3f:91:e2:56:46:
61:ae:a0:86:c6:c6:bb:16:3a:7d:2b:ca:cb:6c:f4:
33:5d:75:9f:e7:1d:0a:4b:33:06:91:a6:48:ab:02:
c1:cb:ae:3d:4b:e5:39:83:fe:e1:40:7b:19:a8:8d:
e0:69:27:fc:5b:38:c1:0c:aa:73:cf:90:e9:b6:d4:
25:c6:c1:5a:c3:99:e9:d2:77:56:8f:2e:b6:08:c0:
25:3f:a9:e2:c6:a2:ca:df:22:74:43:2e:6c:8d:7d:
4b:09:2a:8c:f0:02:f3:e2:e7:6b:da:9b:48:b4:6c:
d7:13:85:c6:b0:d6:4d:e5:59:55:cb:65:f1:47:8e:
92:fb:37:94:0c:4b:06:4f:00:10:4d:50:1c:9a:d6:
a4:39:20:6e:3e:98:78:c3:e7:cb:86:c5:32:2b:7a:
a5:5e:e6:a7:20:fe:c9:ad:58:2f:06:54:57:e0:39:
e9:6e:90:a0:34:d8:dc:1e:1e:13:bc:b3:b0:8e:a4:
6e:ba:b2:1e:35:45:80:f2:75:8d:f2:c9:d3:f2:0d:
80:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:84:7C:8B:77:D0:13:C6:47:C5:82:8F:10:B4:42:CA:CE:08:77:0F
X509v3 Authority Key Identifier:
keyid:70:B3:CA:BC:94:E8:67:F7:B7:2A:9C:99:77:48:13:CA:C6:A4:78:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/1/70B3CABC94E867F7B72A9C99774813CAC6A4784D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70B3CABC94E867F7B72A9C99774813CAC6A4784D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/1/323830343a316362303a3a2f33322d3438203d3e203631363639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1cb0::/32
Signature Algorithm: sha256WithRSAEncryption
c4:3c:a9:61:d5:81:02:0b:2c:ca:d0:c2:36:f7:2f:94:a3:5e:
95:2f:11:19:99:0f:84:9b:37:05:90:08:9c:98:46:7c:24:1d:
a1:e2:09:c5:e0:d6:94:1f:55:22:64:34:ca:7e:8d:74:df:ed:
27:fe:3f:ec:72:10:b9:d1:70:19:c7:8b:41:40:26:70:55:ba:
da:91:3e:23:85:6e:f2:2c:f0:03:e2:fc:71:e8:96:57:18:87:
16:39:f3:8d:b4:a0:98:ce:6f:6b:20:85:78:ef:99:77:6b:bf:
d4:37:02:22:be:21:e6:65:bf:0f:75:12:2a:9f:75:e6:f5:3a:
9d:a3:5f:65:f9:96:05:82:4c:06:9a:bd:23:20:6b:7d:44:d8:
e3:51:46:fe:92:af:15:ae:3a:c1:96:14:93:99:a8:94:02:7c:
18:08:c5:67:83:a9:dd:8f:ba:f7:15:2f:a4:8c:e7:ad:ba:c7:
8f:24:00:89:8e:93:e3:17:a5:50:25:0c:28:b6:2a:04:58:b6:
28:21:6c:61:b0:d7:20:39:c8:3b:fd:e2:ca:72:28:ff:a2:a2:
ab:0f:64:a6:fc:48:0d:a8:13:21:81:fb:31:b1:1a:b9:3b:c7:
80:5a:e7:54:95:25:c4:3a:b4:10:a2:b3:be:30:f6:17:29:ca:
ea:8a:92:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:43 2024 by rpki-client on console-ams.rpki-client.org