Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a3a2f33332d3333203d3e20323635343936.roa
File: 323830343a333530383a3a2f33332d3333203d3e20323635343936.roa (raw, json)
Hash identifier: 3PQC71a356PLCMOd8PBP0iCqWPPp1v5iuuRw//JMSuw=
Subject key identifier: 73:5F:02:1A:0E:EE:D3:F2:F2:D8:E2:32:6C:0B:47:1F:63:D8:CB:B8
Certificate issuer: /CN=1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517
Certificate serial: 2AFCE09ECA0BB2BC750A7DC19BCBEF21F58D71E7
Authority key identifier: 14:53:E0:F3:4C:FC:80:20:A8:BB:A2:A1:7C:CD:B7:CA:BC:9C:05:17
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.cer
Subject info access: rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a3a2f33332d3333203d3e20323635343936.roa
Signing time: Mon 03 Apr 2023 10:56:39 +0000
ROA not before: Mon 03 Apr 2023 10:51:39 +0000
ROA not after: Mon 01 Apr 2024 10:56:39 +0000
asID: 265496
IP address blocks: 2804:3508::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:fc:e0:9e:ca:0b:b2:bc:75:0a:7d:c1:9b:cb:ef:21:f5:8d:71:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517
Validity
Not Before: Apr 3 10:51:39 2023 GMT
Not After : Apr 1 10:56:39 2024 GMT
Subject: CN=735F021A0EEED3F2F2D8E2326C0B471F63D8CBB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b0:41:e2:c0:d2:58:6f:ad:7d:ea:e6:01:a2:
ae:96:5f:c5:3b:0f:cc:0e:6f:dd:ea:46:6c:7a:e9:
63:14:91:93:ef:87:0c:a5:cb:37:06:3b:13:df:96:
60:c2:e1:9e:3b:fd:ed:0a:7c:a7:46:f2:0c:35:cf:
eb:a0:27:68:98:da:18:4b:87:c2:f8:02:ab:6a:2b:
92:7b:ce:8d:bf:e8:74:76:60:9c:88:67:0f:14:9f:
7f:31:6f:2d:a8:05:75:eb:48:1e:98:84:3a:cb:e0:
6c:31:b2:3b:d3:5f:db:c8:11:1e:00:d5:7e:1d:96:
11:9a:7c:95:bd:1c:0c:83:33:62:3f:9b:78:de:6a:
60:c7:c3:ef:9c:9f:fc:ff:f1:99:b8:ea:d6:79:2f:
32:01:af:d0:56:00:82:a7:37:19:92:4d:9a:47:24:
77:5a:fd:c8:e1:e3:b7:b4:1f:4d:1f:65:0c:58:93:
a4:8c:6a:ac:28:ab:a1:e2:5a:2d:a6:d1:54:85:1e:
de:90:6b:ee:e2:9d:4f:b2:12:ad:c8:d6:3f:4d:7e:
99:e5:24:15:cc:a0:e8:1c:9d:8b:09:d1:d5:14:4f:
7e:58:d4:98:7b:c3:c6:0d:e4:64:96:29:95:02:14:
32:1d:1b:be:fa:c2:b9:58:ae:46:1d:ad:50:a8:75:
98:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5F:02:1A:0E:EE:D3:F2:F2:D8:E2:32:6C:0B:47:1F:63:D8:CB:B8
X509v3 Authority Key Identifier:
keyid:14:53:E0:F3:4C:FC:80:20:A8:BB:A2:A1:7C:CD:B7:CA:BC:9C:05:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a3a2f33332d3333203d3e20323635343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3508::/33
Signature Algorithm: sha256WithRSAEncryption
0f:e0:9c:a9:a3:dd:69:84:d5:93:64:e7:bd:d3:e7:74:fd:8f:
45:29:34:de:7b:16:00:1f:96:69:e3:33:35:52:4e:48:ff:0f:
5a:23:06:a9:a2:10:91:da:98:ee:ad:a2:48:2e:61:b2:8e:eb:
ee:8d:97:9a:b4:ce:4e:a3:c0:05:a9:2e:0c:cd:11:bd:40:a3:
30:d6:56:ba:b4:8c:fb:fc:35:49:7c:65:1b:20:f6:a0:d2:7e:
47:9a:5c:a1:57:dc:21:35:eb:d3:eb:99:6b:ea:b9:9a:ec:38:
d1:17:5d:ae:87:30:62:cd:27:28:f2:55:1b:de:1a:21:85:61:
d6:2a:8c:9a:62:04:2f:71:78:c3:d8:1d:3e:55:09:ea:2f:80:
3e:dd:ca:37:a8:bb:4d:14:dc:2d:e6:fe:ff:a6:40:19:c8:eb:
0c:a9:3b:3a:16:1d:f7:25:cc:d4:23:25:28:d0:b0:2c:2c:b5:
d5:3e:c0:7c:45:eb:ff:1d:22:e9:16:58:a0:ac:1e:e5:34:9d:
1a:d9:6e:03:81:4e:94:3a:fa:ab:e4:19:5a:84:25:27:92:f4:
a7:5b:cb:75:03:8b:28:df:eb:75:fe:70:7d:2b:b9:c6:78:ef:
8e:29:40:66:36:22:c6:9b:18:70:5c:8d:c5:52:8e:fc:c6:2e:
d7:7b:87:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org