Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/323830343a346335303a383030303a3a2f33332d3333203d3e20323637333633.roa
File: 323830343a346335303a383030303a3a2f33332d3333203d3e20323637333633.roa (raw, json)
Hash identifier: r1UV7Pv0pzqyae4lQCoAVt4aJurCb3nc0J4wtjO22cY=
Subject key identifier: B3:96:74:B5:9F:F7:BA:A3:89:43:D8:1A:8B:B0:45:66:92:DB:3F:8D
Certificate issuer: /CN=2AC986C39C68AAADAAD9F87F750E123A8F5A265F
Certificate serial: 4709526E314AAE8AC8B0C69D0B3168C7FB2D439E
Authority key identifier: 2A:C9:86:C3:9C:68:AA:AD:AA:D9:F8:7F:75:0E:12:3A:8F:5A:26:5F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2AC986C39C68AAADAAD9F87F750E123A8F5A265F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/323830343a346335303a383030303a3a2f33332d3333203d3e20323637333633.roa
Signing time: Wed 20 Mar 2024 19:26:18 +0000
ROA not before: Wed 20 Mar 2024 19:21:18 +0000
ROA not after: Wed 19 Mar 2025 19:26:18 +0000
asID: 267363
IP address blocks: 2804:4c50:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:09:52:6e:31:4a:ae:8a:c8:b0:c6:9d:0b:31:68:c7:fb:2d:43:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2AC986C39C68AAADAAD9F87F750E123A8F5A265F
Validity
Not Before: Mar 20 19:21:18 2024 GMT
Not After : Mar 19 19:26:18 2025 GMT
Subject: CN=B39674B59FF7BAA38943D81A8BB0456692DB3F8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0b:94:df:48:b0:a1:ce:c2:d4:d2:9e:d4:01:
2e:ee:b4:d6:60:c2:e7:61:20:9d:85:f9:8c:f1:fd:
40:40:d6:b5:aa:47:f7:d9:06:61:a0:a2:71:a8:28:
33:41:bf:3c:5b:93:35:fd:f5:e8:7a:c4:de:96:89:
0f:97:94:cf:06:71:4a:92:34:b3:8c:d2:74:74:82:
5d:8a:eb:a7:19:f6:0d:99:b1:29:6b:0b:cc:ab:2c:
80:09:93:65:1f:74:c1:0f:68:2b:18:bf:1c:26:f1:
a0:80:05:a8:b3:38:48:96:46:42:7e:22:9f:46:a9:
62:02:69:43:bd:7e:b3:86:70:cb:a0:5b:cf:3f:82:
9b:f7:c1:c4:ea:3f:a6:36:3c:86:28:bc:ab:08:c5:
d0:1a:77:e8:08:cf:61:8d:b0:37:4f:5b:a1:22:e8:
24:e9:1c:43:1e:8d:49:69:53:3b:c2:49:04:d8:e7:
fa:ea:72:2e:81:b8:9f:4c:05:6f:5e:10:b4:44:79:
1e:54:a2:c3:d7:dd:2b:f5:64:ec:8a:ab:ec:33:99:
ab:e4:9b:b0:76:27:4c:1a:4f:b9:2a:fd:d4:c3:30:
94:57:b6:34:2e:4e:c4:74:2b:4b:4c:66:6b:bf:88:
20:10:a9:b8:0b:c3:d3:b8:4c:7b:57:6f:6f:5d:c8:
01:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:96:74:B5:9F:F7:BA:A3:89:43:D8:1A:8B:B0:45:66:92:DB:3F:8D
X509v3 Authority Key Identifier:
keyid:2A:C9:86:C3:9C:68:AA:AD:AA:D9:F8:7F:75:0E:12:3A:8F:5A:26:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/2AC986C39C68AAADAAD9F87F750E123A8F5A265F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2AC986C39C68AAADAAD9F87F750E123A8F5A265F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/323830343a346335303a383030303a3a2f33332d3333203d3e20323637333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4c50:8000::/33
Signature Algorithm: sha256WithRSAEncryption
8a:25:e5:85:bd:2d:7b:fb:60:94:93:ff:0a:01:94:fa:37:2c:
6c:31:ea:ee:2a:62:c2:29:6b:ab:93:1a:35:92:fc:bf:b0:2c:
31:4c:ba:6a:24:37:ee:7b:0c:20:20:c7:0f:17:22:b2:a8:ad:
d9:a9:45:13:bd:52:be:79:df:78:14:13:86:a8:85:55:f7:a3:
52:57:c3:1a:0a:6a:8d:7d:e1:a3:5d:6c:72:43:9b:da:c5:fd:
81:e2:04:c2:8b:f2:d6:75:6d:a3:27:37:ff:cb:01:5d:3a:a0:
e7:9a:c9:bd:32:b4:8c:a2:87:94:35:29:62:ac:c0:a9:b2:6c:
ba:e0:0f:5d:6b:3f:a5:39:70:3e:5c:b8:46:f6:fd:bc:2f:a0:
ec:66:12:b0:1e:ba:07:24:d3:24:9d:6c:63:5a:f8:ad:ef:4c:
3e:e7:ea:01:09:10:22:d5:48:e6:61:6a:99:17:c0:0a:ba:c4:
9f:49:2d:c4:8f:b7:36:2b:86:e9:5d:9c:bf:22:ac:92:5b:a9:
f8:6a:33:8f:61:92:56:1d:2a:6e:87:89:92:0c:c0:da:f2:5d:
34:30:9c:f4:bb:68:57:f6:33:0b:38:49:53:de:f6:3c:c7:77:
48:97:d3:67:d3:fe:d9:a3:0b:0e:56:69:4b:91:7d:b8:ff:51:
73:cc:a5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org