Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a3a2f33352d3335203d3e203631363337.roa
File: 323830343a316331383a3a2f33352d3335203d3e203631363337.roa (raw, json)
Hash identifier: fQXKINTSiC/4RyvLp9BCfl0dJH/19OckYZuVwuUFSR8=
Subject key identifier: E4:D9:3C:DC:1C:C1:7F:ED:7D:21:09:64:59:77:D9:8F:07:3E:ED:26
Certificate issuer: /CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
Certificate serial: 0A5D906034F6B133AB5178A8AFBDFCBD6E721C8D
Authority key identifier: 59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a3a2f33352d3335203d3e203631363337.roa
Signing time: Fri 23 Feb 2024 20:36:53 +0000
ROA not before: Fri 23 Feb 2024 20:31:53 +0000
ROA not after: Fri 21 Feb 2025 20:36:53 +0000
asID: 61637
IP address blocks: 2804:1c18::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:5d:90:60:34:f6:b1:33:ab:51:78:a8:af:bd:fc:bd:6e:72:1c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
Validity
Not Before: Feb 23 20:31:53 2024 GMT
Not After : Feb 21 20:36:53 2025 GMT
Subject: CN=E4D93CDC1CC17FED7D2109645977D98F073EED26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:be:11:cb:d7:82:06:dd:54:7c:3d:b1:b3:6a:
7b:46:9d:5a:0d:ac:5d:45:49:c0:04:23:12:ac:a9:
a5:a0:c6:53:06:1e:df:60:17:fb:6b:1b:16:bf:eb:
ea:fc:2e:8d:17:6a:30:ed:bd:59:e6:c6:60:51:e5:
e0:ac:cf:91:82:3d:2a:64:a9:4b:7a:07:8a:15:ab:
54:c1:f3:11:e0:cd:16:5c:82:44:c7:29:31:c4:a7:
40:e8:91:c7:2d:47:c2:34:45:42:7e:28:cb:35:3e:
d1:a2:0e:8b:e2:04:c2:10:2c:d3:55:18:17:63:d2:
62:df:85:87:b2:2a:5a:6e:4e:19:fe:13:05:fb:82:
d8:2c:3c:26:3f:74:bd:09:3c:08:e6:c4:a6:79:2b:
64:5a:d1:d0:ae:28:01:aa:06:fe:3a:a1:69:06:4d:
60:d7:86:a6:a3:7a:e5:99:fd:f6:83:a5:8a:9e:7e:
19:e9:e6:3e:7b:88:9b:fc:7f:b5:c2:34:fd:60:44:
52:e1:ca:58:e8:41:ba:a8:bb:fa:9f:a3:af:1d:06:
a3:1d:4c:23:57:09:2e:cb:38:72:18:6b:0f:83:73:
1e:6a:5d:d9:95:1d:1f:83:0d:f4:59:27:15:a8:cc:
5b:48:b4:52:57:f1:48:dc:44:e7:ed:fa:e7:ae:e4:
ba:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D9:3C:DC:1C:C1:7F:ED:7D:21:09:64:59:77:D9:8F:07:3E:ED:26
X509v3 Authority Key Identifier:
keyid:59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a3a2f33352d3335203d3e203631363337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1c18::/35
Signature Algorithm: sha256WithRSAEncryption
85:51:ad:2b:86:b3:ee:cb:28:fa:46:7b:0c:da:e7:ca:c4:2f:
4d:a8:d8:24:16:cb:ee:ff:59:70:e6:30:cb:21:d4:e1:99:6d:
21:45:f7:cf:70:44:c3:63:9a:ca:11:20:07:42:6d:b2:16:2a:
06:db:61:32:b2:4d:fe:bf:33:3e:81:70:f6:9d:2c:9c:c4:7b:
83:bb:8b:d8:f0:50:f7:ce:c9:0e:bc:83:b5:02:7d:f0:c5:ca:
af:38:31:10:15:e5:9c:f2:68:04:8e:58:42:88:85:39:5e:6b:
d1:91:8c:74:ab:f7:34:78:7b:d1:81:25:8b:88:e4:9e:30:ae:
8a:06:11:c4:b7:5d:21:43:70:07:c7:ba:f0:dc:98:5c:c3:97:
15:39:d8:de:1c:63:3a:f1:c5:cf:7b:cc:12:96:73:62:90:bb:
72:ab:41:e3:53:97:7f:1c:b3:e0:78:29:42:88:cc:4e:90:ee:
2b:59:d5:7d:d4:e7:1b:13:86:c6:d2:f0:12:60:92:72:f1:d3:
77:b6:54:58:f2:24:62:fb:4c:60:7e:f4:3e:ef:ba:e3:27:71:
47:6b:1e:7a:03:42:29:e4:0a:9e:0d:e0:59:2b:60:15:04:45:
26:fc:b0:07:f9:a2:8d:43:88:81:18:29:ac:6e:1a:10:98:b0:
c1:e1:5a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:24 2024 by rpki-client on console-ams.rpki-client.org