Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/323830343a326233343a663830303a3a2f34302d3430203d3e20323635313430.roa
File: 323830343a326233343a663830303a3a2f34302d3430203d3e20323635313430.roa (raw, json)
Hash identifier: HRrp8eMjBUX7SHJZiJgrZmjTTBp8QHIE6x1tnJaS2/Q=
Subject key identifier: BF:08:84:62:B5:1A:EA:F6:47:39:72:4F:F6:9A:1B:C7:7B:DA:6A:B3
Certificate issuer: /CN=5116EB855CD239DCD4FE641CE53B61BA406A6AB8
Certificate serial: 20AFCE1BB947472B441A2F88F59E77C81734EAE6
Authority key identifier: 51:16:EB:85:5C:D2:39:DC:D4:FE:64:1C:E5:3B:61:BA:40:6A:6A:B8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5116EB855CD239DCD4FE641CE53B61BA406A6AB8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/323830343a326233343a663830303a3a2f34302d3430203d3e20323635313430.roa
Signing time: Thu 22 Feb 2024 13:41:46 +0000
ROA not before: Thu 22 Feb 2024 13:36:46 +0000
ROA not after: Thu 20 Feb 2025 13:41:46 +0000
asID: 265140
IP address blocks: 2804:2b34:f800::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:af:ce:1b:b9:47:47:2b:44:1a:2f:88:f5:9e:77:c8:17:34:ea:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5116EB855CD239DCD4FE641CE53B61BA406A6AB8
Validity
Not Before: Feb 22 13:36:46 2024 GMT
Not After : Feb 20 13:41:46 2025 GMT
Subject: CN=BF088462B51AEAF64739724FF69A1BC77BDA6AB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:24:0f:11:44:98:65:90:1e:ed:6e:03:27:16:
ba:ae:dd:62:0e:50:24:9e:e5:a0:a8:80:e1:b5:d5:
45:6a:55:0b:50:12:be:1b:7a:fb:38:26:d5:22:9a:
89:73:89:ad:ec:19:27:2d:ab:9f:a5:22:10:f3:c2:
dc:38:91:00:b3:d9:8d:49:bd:6b:c5:7d:f6:54:fe:
df:ff:55:2f:46:44:97:65:02:ef:d6:c0:a2:4d:72:
02:cd:e5:5d:27:90:a9:da:3b:9c:42:6e:5b:21:38:
30:7e:b5:1b:8d:dc:78:89:33:a5:a3:62:b5:c9:4e:
99:e6:19:bd:48:4c:33:19:0c:9c:9b:67:86:1c:08:
3b:90:07:87:43:2b:c0:82:81:92:bd:d9:a9:51:58:
bd:f0:39:16:51:02:11:d0:11:ed:6f:3c:c2:47:a9:
e7:0d:23:0a:75:16:1e:80:21:08:3a:f0:76:ab:08:
72:e2:7f:9d:25:fc:5b:e2:e5:f7:b0:d5:84:b4:ca:
b3:14:e5:aa:00:a1:55:c4:3a:66:04:08:50:37:af:
ca:b0:50:40:84:cc:d0:31:ab:92:21:f8:3b:42:c2:
39:35:ad:9b:fc:dc:02:35:f9:46:71:7a:e5:e1:a2:
cf:f4:0a:a6:ea:5f:fa:30:13:21:be:65:cc:c5:05:
9c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:08:84:62:B5:1A:EA:F6:47:39:72:4F:F6:9A:1B:C7:7B:DA:6A:B3
X509v3 Authority Key Identifier:
keyid:51:16:EB:85:5C:D2:39:DC:D4:FE:64:1C:E5:3B:61:BA:40:6A:6A:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/5116EB855CD239DCD4FE641CE53B61BA406A6AB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5116EB855CD239DCD4FE641CE53B61BA406A6AB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/323830343a326233343a663830303a3a2f34302d3430203d3e20323635313430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2b34:f800::/40
Signature Algorithm: sha256WithRSAEncryption
0e:8b:b5:a6:ce:06:c4:cb:83:b0:95:1e:c3:e1:51:6f:72:96:
3e:dc:60:52:b5:32:d8:11:88:aa:6d:b4:96:40:f0:21:e1:21:
72:de:db:f1:9d:85:d1:d8:f5:79:86:be:a7:05:d0:bd:af:7f:
44:39:84:15:62:7b:d7:c2:10:b6:cb:c5:88:26:de:bf:93:3f:
53:bf:6f:90:1d:f7:f3:dd:c7:dd:aa:f7:db:55:4b:38:4c:03:
64:53:4a:0d:db:34:d0:5b:af:37:9a:db:9a:fe:9f:36:34:5a:
73:bb:86:28:f9:97:01:a3:ee:bd:60:1a:40:70:71:45:60:e1:
cb:07:f4:ef:92:75:fa:d5:b8:00:14:25:cd:51:28:e1:9f:32:
8e:5e:a9:99:35:b9:46:4d:49:61:70:8d:5a:80:f3:c3:7f:0a:
a8:a0:45:42:9d:f9:61:9f:e7:df:8f:f3:00:00:2a:6f:77:ff:
7c:9f:ea:d0:45:49:74:7e:b4:ed:3e:16:6b:36:4a:07:a9:3e:
92:79:62:7d:55:14:b5:65:58:4c:6c:83:6d:6e:66:5b:f2:ef:
d3:a5:0b:9f:4e:a4:fc:48:db:55:0f:af:e0:6d:74:d6:44:5c:
94:20:6f:12:71:6e:1a:e6:2c:37:bf:4b:29:56:d6:ad:fd:d3:
bc:9a:f0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:51 2024 by rpki-client on console-fra.rpki-client.org