Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/323830343a316430343a3a2f33322d3438203d3e203631363839.roa
File: 323830343a316430343a3a2f33322d3438203d3e203631363839.roa (raw, json)
Hash identifier: Fef14uH3AwKQBWl+rs3Gsel7FdVIVI1VPGCoDamgvWg=
Subject key identifier: D2:DB:01:A7:7C:71:23:29:E3:AF:F4:8E:01:DD:71:84:FB:35:E5:85
Certificate issuer: /CN=725625A656CCD2BE3F3F0F87D9A4BF2E192BE414
Certificate serial: 0C13D299E8049CE7D61FDE4E86D1BD939A14C519
Authority key identifier: 72:56:25:A6:56:CC:D2:BE:3F:3F:0F:87:D9:A4:BF:2E:19:2B:E4:14
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/725625A656CCD2BE3F3F0F87D9A4BF2E192BE414.cer
Subject info access: rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/323830343a316430343a3a2f33322d3438203d3e203631363839.roa
Signing time: Wed 10 Apr 2024 13:35:24 +0000
ROA not before: Wed 10 Apr 2024 13:30:24 +0000
ROA not after: Wed 09 Apr 2025 13:35:24 +0000
asID: 61689
IP address blocks: 2804:1d04::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:13:d2:99:e8:04:9c:e7:d6:1f:de:4e:86:d1:bd:93:9a:14:c5:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725625A656CCD2BE3F3F0F87D9A4BF2E192BE414
Validity
Not Before: Apr 10 13:30:24 2024 GMT
Not After : Apr 9 13:35:24 2025 GMT
Subject: CN=D2DB01A77C712329E3AFF48E01DD7184FB35E585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:df:c8:a4:30:53:04:43:1b:56:66:e8:98:c5:
6c:58:06:80:6e:de:58:bd:02:b1:fe:63:62:f1:cb:
c8:e7:2a:3c:22:71:a0:71:97:cc:82:13:3c:76:c5:
9c:e1:11:09:c1:9e:7a:42:63:af:b5:f2:20:58:10:
37:47:8f:ca:d4:07:5f:be:d8:8a:84:fc:a4:ea:0b:
27:23:1f:b5:9b:20:1d:ee:dc:aa:a8:d8:ac:e1:31:
8b:82:8c:62:12:d1:a2:df:1e:2f:dd:a9:dd:12:7c:
a2:80:7d:95:38:11:41:ec:c8:7b:92:1c:8e:2f:f0:
b3:5a:64:23:51:fd:59:bc:25:a2:72:27:f2:42:10:
8a:6d:32:8a:f2:07:f3:3a:97:e2:98:8c:8c:67:6a:
5c:52:ef:26:77:7e:fa:ed:d7:71:6a:a2:27:d8:96:
5e:c8:1f:ac:4a:70:cf:5e:5c:e1:6b:89:54:52:58:
fd:24:4a:3b:47:04:7a:4f:fd:c0:7d:ae:e5:d4:21:
68:7d:d2:d6:33:b1:f8:8a:27:d8:d9:d2:e4:36:46:
40:a3:4d:73:c4:29:b3:26:0b:25:8f:95:28:72:2e:
33:61:37:32:40:63:3e:16:d4:c3:a4:24:4b:41:c0:
df:56:00:74:9a:49:3b:8b:86:63:cf:f7:6f:46:92:
04:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DB:01:A7:7C:71:23:29:E3:AF:F4:8E:01:DD:71:84:FB:35:E5:85
X509v3 Authority Key Identifier:
keyid:72:56:25:A6:56:CC:D2:BE:3F:3F:0F:87:D9:A4:BF:2E:19:2B:E4:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/725625A656CCD2BE3F3F0F87D9A4BF2E192BE414.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/725625A656CCD2BE3F3F0F87D9A4BF2E192BE414.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/323830343a316430343a3a2f33322d3438203d3e203631363839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1d04::/32
Signature Algorithm: sha256WithRSAEncryption
a3:0b:85:2b:b1:05:b1:62:4d:3e:4c:a3:2e:3c:bd:60:8e:82:
1e:9b:87:65:54:35:d3:40:7d:73:ea:3c:f2:b8:f8:31:23:69:
0d:47:b9:64:ce:24:b0:85:d3:6f:86:db:78:20:de:1a:71:f7:
9f:99:ca:b1:da:52:c3:ff:bc:b0:d6:ea:a8:0a:3c:84:39:b2:
a8:b7:64:61:69:cb:28:3b:f6:91:6d:16:5e:6d:b9:0f:65:f4:
70:4c:0c:9f:47:e6:24:54:75:be:8d:24:0b:d8:3c:bf:5d:e7:
58:8f:1a:f2:c1:fe:2e:4d:cf:4f:4a:58:37:76:0a:41:7a:18:
29:d1:ad:fe:f6:d9:d8:be:88:cf:f0:f3:5c:cb:27:2a:7b:fa:
c8:16:0b:58:d6:58:c8:66:2e:06:08:e8:87:55:88:0b:55:34:
27:37:dc:c0:ba:3d:2c:cd:a5:cf:87:d5:0a:fd:24:d0:f2:c5:
c4:47:25:74:fd:6a:d5:ac:ff:13:b4:e4:79:8b:95:d0:49:99:
a2:31:62:fd:67:a9:50:f5:86:5f:f6:dc:78:3e:76:6c:66:db:
98:be:73:2d:65:41:97:0d:09:3f:b2:69:1f:48:f3:ab:07:22:
79:2d:d6:c7:03:a5:d4:58:9b:0c:80:cf:96:19:71:f1:96:33:
28:11:c5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org