Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/0/323830343a376232303a3a2f33322d313238203d3e20323731343132.roa
File: 323830343a376232303a3a2f33322d313238203d3e20323731343132.roa (raw, json)
Hash identifier: HnLhR9M+dXKzP+and2Bvl6fLX38KPaokAbFGRfOj30g=
Subject key identifier: D8:08:0D:D3:7A:40:16:9B:6B:9F:C7:43:94:E0:FC:FB:58:17:C1:C5
Certificate issuer: /CN=C32EF4FE36152A1B57F8E49C42908899C2D13CF0
Certificate serial: 42FE0989B91D24EE733B6F88AF1D736324AAAE17
Authority key identifier: C3:2E:F4:FE:36:15:2A:1B:57:F8:E4:9C:42:90:88:99:C2:D1:3C:F0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C32EF4FE36152A1B57F8E49C42908899C2D13CF0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/0/323830343a376232303a3a2f33322d313238203d3e20323731343132.roa
Signing time: Sat 01 Jul 2023 12:21:30 +0000
ROA not before: Sat 01 Jul 2023 12:16:30 +0000
ROA not after: Sat 29 Jun 2024 12:21:30 +0000
asID: 271412
IP address blocks: 2804:7b20::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:fe:09:89:b9:1d:24:ee:73:3b:6f:88:af:1d:73:63:24:aa:ae:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C32EF4FE36152A1B57F8E49C42908899C2D13CF0
Validity
Not Before: Jul 1 12:16:30 2023 GMT
Not After : Jun 29 12:21:30 2024 GMT
Subject: CN=D8080DD37A40169B6B9FC74394E0FCFB5817C1C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f8:a5:d5:92:98:1f:3a:4d:8e:92:02:0c:3b:
aa:b8:ba:a2:a3:f2:d2:fd:82:de:1a:f0:89:1a:b3:
0e:5f:3b:5f:bb:37:07:a7:85:cd:7c:71:83:1f:ea:
cc:e9:fa:42:bc:72:a0:80:a2:6d:ac:20:01:20:ad:
c1:2c:2d:24:58:cb:02:cb:a4:72:6a:77:9f:4f:87:
f5:5f:75:80:b0:62:a5:1f:bc:2d:f3:40:dd:40:aa:
f6:37:2b:1d:1c:c9:ca:f4:21:5a:56:b9:8f:aa:aa:
af:23:34:ff:75:38:5a:f9:d3:4e:2b:34:18:34:7b:
5e:8f:2e:c7:47:4c:17:84:0a:c8:ef:d3:c1:94:b2:
4c:28:6d:65:93:81:0f:cc:24:0d:bd:24:63:23:59:
a7:6a:43:b4:59:e6:18:db:bb:4a:77:89:e8:cf:81:
eb:58:50:1e:ec:0d:86:ea:af:19:60:f5:2b:d4:15:
e2:6c:dc:2c:c8:13:97:6c:47:0f:bf:0c:3a:b2:15:
4b:21:d9:25:b4:e1:66:0d:56:67:42:ed:b7:c2:bc:
f6:b6:77:71:5d:7a:14:1f:7c:89:cf:6c:3d:1d:33:
da:be:5b:e7:ad:06:e2:b5:96:fd:81:d3:d4:a8:6c:
a6:eb:7e:2d:b9:98:10:fd:e9:d4:04:f0:31:4a:50:
e3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:08:0D:D3:7A:40:16:9B:6B:9F:C7:43:94:E0:FC:FB:58:17:C1:C5
X509v3 Authority Key Identifier:
keyid:C3:2E:F4:FE:36:15:2A:1B:57:F8:E4:9C:42:90:88:99:C2:D1:3C:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/0/C32EF4FE36152A1B57F8E49C42908899C2D13CF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C32EF4FE36152A1B57F8E49C42908899C2D13CF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/0/323830343a376232303a3a2f33322d313238203d3e20323731343132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7b20::/32
Signature Algorithm: sha256WithRSAEncryption
44:78:ea:69:da:1d:61:b7:6f:b4:f8:3b:d6:02:43:5d:f4:75:
33:e2:83:62:92:48:f7:e2:8b:04:cd:49:44:51:32:af:d6:a0:
b9:02:d7:5e:31:98:3b:3d:6e:03:51:ad:3f:53:d9:f1:d6:a4:
cc:69:7c:8e:6a:64:50:88:e7:eb:4d:a6:ab:eb:73:2e:db:96:
40:f4:0c:3b:79:2f:2a:62:72:d5:47:4a:39:78:6b:f1:23:8b:
be:9a:b4:9d:2b:4e:4e:90:f5:e3:09:aa:8a:67:65:d3:cf:85:
e9:18:fb:49:63:bd:08:40:70:54:cb:11:44:8a:b3:24:3d:b5:
61:a4:9b:71:ce:1a:c0:84:23:72:7c:d5:45:83:b2:75:e7:1b:
9e:dc:55:77:56:bb:0f:34:66:27:7d:8b:5d:55:db:33:11:4c:
05:b9:f7:88:d3:a8:df:66:0d:04:5d:80:44:be:1a:f8:9c:c1:
40:18:a1:f6:db:0f:07:1c:e9:26:52:5b:bf:8d:dd:f7:0d:4a:
b0:5e:ae:a5:ed:91:37:a8:a4:06:71:ac:15:98:82:8c:ba:8d:
6b:07:d7:e5:30:5d:73:e3:ba:47:25:e8:6d:4d:b3:88:dc:2e:
94:de:f5:67:ec:c1:d3:a5:e3:9f:43:a6:8a:b6:de:e8:4e:5d:
a5:99:7d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:11 2024 by rpki-client on console-ams.rpki-client.org