Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9nUa6hVWLvnd3YyXxW6YMePALB7Tumbg43BePFJmadd5/0/323830343a333237343a3a2f33322d3438203d3e20323635303739.roa
File: 323830343a333237343a3a2f33322d3438203d3e20323635303739.roa (raw, json)
Hash identifier: Fwiot9xMBOqrZjRSTuAZd4FxGacJvEKb3yMIATBXq3A=
Subject key identifier: FB:02:3B:A5:12:19:F5:8D:43:70:FC:9B:72:1C:D5:7D:D7:90:C0:40
Certificate issuer: /CN=420A61C1F966588AE8CAED095F58CB189089BBBC
Certificate serial: 191BC3E91FCA8DFABBB285BD6F32022094B89166
Authority key identifier: 42:0A:61:C1:F9:66:58:8A:E8:CA:ED:09:5F:58:CB:18:90:89:BB:BC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/420A61C1F966588AE8CAED095F58CB189089BBBC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9nUa6hVWLvnd3YyXxW6YMePALB7Tumbg43BePFJmadd5/0/323830343a333237343a3a2f33322d3438203d3e20323635303739.roa
Signing time: Mon 06 Nov 2023 12:15:28 +0000
ROA not before: Mon 06 Nov 2023 12:10:28 +0000
ROA not after: Mon 04 Nov 2024 12:15:28 +0000
asID: 265079
IP address blocks: 2804:3274::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:1b:c3:e9:1f:ca:8d:fa:bb:b2:85:bd:6f:32:02:20:94:b8:91:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420A61C1F966588AE8CAED095F58CB189089BBBC
Validity
Not Before: Nov 6 12:10:28 2023 GMT
Not After : Nov 4 12:15:28 2024 GMT
Subject: CN=FB023BA51219F58D4370FC9B721CD57DD790C040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:37:1a:95:61:38:89:1d:81:15:43:92:c7:2d:
63:31:f8:08:6f:d7:c9:35:ec:78:cd:b8:31:b9:e1:
d3:b5:19:f3:08:ca:1f:8e:fb:8f:33:d4:3c:3e:2b:
7b:a6:dd:4d:1b:71:64:37:04:13:8f:e1:29:a3:3e:
e1:1b:b4:ec:9b:9e:17:28:5b:8b:3d:7c:ff:4a:42:
30:cf:c7:15:2e:fb:32:b8:e3:1a:7f:75:8f:c2:1f:
97:a0:62:3c:54:38:10:80:bd:ea:d4:39:fa:c6:85:
38:63:9f:43:57:d6:74:70:35:ea:8c:a2:aa:15:35:
46:be:d5:8b:b8:6c:fe:6b:2c:02:80:d2:25:c1:b4:
e0:8a:0c:76:dc:8d:64:fd:f1:7d:a2:8e:8d:9e:07:
05:51:83:3f:ed:fa:4c:81:a3:00:ca:75:5f:2c:34:
33:96:8c:5e:cf:cf:bd:5a:ce:e6:4e:fb:86:4b:1e:
93:ab:8d:9f:42:62:06:f9:4b:bc:d8:9d:e0:97:1e:
44:03:91:00:79:a2:6f:e3:13:df:f7:7d:3d:87:af:
1d:7c:cb:c9:ef:7a:0c:36:cc:2d:7e:a7:a4:78:eb:
ab:ea:71:37:1e:8e:82:aa:f9:92:36:00:b6:d1:56:
e4:a5:1f:0a:b0:fb:af:c6:d1:48:ee:31:5d:a3:f5:
ce:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:02:3B:A5:12:19:F5:8D:43:70:FC:9B:72:1C:D5:7D:D7:90:C0:40
X509v3 Authority Key Identifier:
keyid:42:0A:61:C1:F9:66:58:8A:E8:CA:ED:09:5F:58:CB:18:90:89:BB:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9nUa6hVWLvnd3YyXxW6YMePALB7Tumbg43BePFJmadd5/0/420A61C1F966588AE8CAED095F58CB189089BBBC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/420A61C1F966588AE8CAED095F58CB189089BBBC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nUa6hVWLvnd3YyXxW6YMePALB7Tumbg43BePFJmadd5/0/323830343a333237343a3a2f33322d3438203d3e20323635303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3274::/32
Signature Algorithm: sha256WithRSAEncryption
36:7d:4e:7d:55:2a:f8:76:df:9d:4f:84:cf:1d:bb:1e:5f:2b:
7f:2c:32:45:df:4f:30:d2:6a:e5:41:57:23:ea:8b:b8:fc:ff:
ea:e0:66:d4:74:90:fe:7d:07:be:df:44:99:57:ee:c6:d4:0f:
8b:3c:27:f2:e4:32:3c:20:1d:68:5e:2f:32:d0:2e:30:ab:0e:
86:8c:3a:4a:1e:5a:50:f1:dc:0b:d1:a3:a1:dd:b4:20:a7:53:
49:11:ad:c9:60:79:54:62:c9:e5:26:a6:c5:4b:bf:6d:e6:d5:
a8:d7:e2:75:4a:7c:5c:aa:79:2d:91:eb:04:78:9f:69:64:d2:
21:cf:e9:ae:06:24:84:40:b8:79:cd:70:76:c1:b0:3e:13:c0:
cd:7e:cb:c1:a8:66:05:5c:15:3d:f9:8f:19:77:f7:f0:2b:c3:
98:5b:0b:9e:95:0f:1d:67:a3:74:c2:4a:e0:89:44:1f:72:20:
bd:00:7f:ea:d7:ba:10:d7:ba:47:18:ca:23:49:28:91:09:52:
bb:f0:ab:2b:e8:80:36:ae:60:88:49:fc:eb:b3:aa:4c:60:12:
fb:36:7e:63:7f:31:21:5a:c7:33:87:ea:05:43:7a:8b:93:ee:
fc:bc:70:ac:45:41:71:5f:2f:7e:0f:65:59:ea:e0:8f:84:e1:
e4:a4:36:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org