Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/323830343a373064343a383030303a3a2f33342d3334203d3e20323730373531.roa
File: 323830343a373064343a383030303a3a2f33342d3334203d3e20323730373531.roa (raw, json)
Hash identifier: 7lFpubF1BE1vfU4p0KLHnd3Jed+cZEGftmmGeVUxvUE=
Subject key identifier: FF:58:87:C8:E2:89:91:C7:86:7B:9E:91:72:3C:7A:38:DF:55:F6:56
Certificate issuer: /CN=98A3C167BE65CE4BA1585E8D4F90A6AB2489F92D
Certificate serial: 16689824C197E812E1AAAC959DBF6495F6B2EC43
Authority key identifier: 98:A3:C1:67:BE:65:CE:4B:A1:58:5E:8D:4F:90:A6:AB:24:89:F9:2D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98A3C167BE65CE4BA1585E8D4F90A6AB2489F92D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/323830343a373064343a383030303a3a2f33342d3334203d3e20323730373531.roa
Signing time: Fri 12 Jan 2024 16:00:21 +0000
ROA not before: Fri 12 Jan 2024 15:55:21 +0000
ROA not after: Fri 10 Jan 2025 16:00:21 +0000
asID: 270751
IP address blocks: 2804:70d4:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:68:98:24:c1:97:e8:12:e1:aa:ac:95:9d:bf:64:95:f6:b2:ec:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98A3C167BE65CE4BA1585E8D4F90A6AB2489F92D
Validity
Not Before: Jan 12 15:55:21 2024 GMT
Not After : Jan 10 16:00:21 2025 GMT
Subject: CN=FF5887C8E28991C7867B9E91723C7A38DF55F656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b3:86:9e:fa:65:39:e0:87:3e:cb:ec:c2:32:
6a:8e:73:7e:f7:7c:25:d1:37:b0:7d:fc:d5:7a:bb:
17:ea:dd:1c:0e:1f:65:0a:c4:88:26:fe:92:bf:f4:
96:fa:d6:dd:30:9b:6e:ec:84:60:80:1c:30:31:40:
5d:c8:9b:4e:d8:d4:31:8d:c8:39:fd:c3:fe:38:5a:
52:39:ce:de:d4:f2:96:42:31:16:19:07:ab:4d:22:
fb:c7:94:b8:fc:5b:17:3c:18:de:ff:5e:46:28:b6:
a6:fd:af:ee:1a:d5:38:b1:74:60:6c:5d:30:d4:be:
66:b3:8a:ca:6e:f0:68:c3:20:e1:55:c7:15:d5:ee:
5f:fe:d1:8f:92:6f:80:af:01:1c:b0:0e:97:7e:7a:
ff:b5:57:1b:da:59:b8:cd:5a:8d:a8:b3:14:c9:e5:
5e:2d:90:65:2f:b7:e1:af:16:b6:c1:e4:28:50:2a:
f2:a8:42:13:59:d3:09:23:46:30:7e:84:f0:21:13:
94:05:48:d0:33:1a:59:3e:9a:84:0c:9b:55:bb:13:
3d:5a:a1:c6:2b:b1:5a:02:06:13:61:7d:f1:17:f2:
d9:f8:13:9e:a7:01:03:e8:dc:01:61:ee:78:53:87:
7d:a6:94:b1:59:0e:3f:75:7b:85:77:28:4b:f4:27:
58:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:58:87:C8:E2:89:91:C7:86:7B:9E:91:72:3C:7A:38:DF:55:F6:56
X509v3 Authority Key Identifier:
keyid:98:A3:C1:67:BE:65:CE:4B:A1:58:5E:8D:4F:90:A6:AB:24:89:F9:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/98A3C167BE65CE4BA1585E8D4F90A6AB2489F92D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98A3C167BE65CE4BA1585E8D4F90A6AB2489F92D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/323830343a373064343a383030303a3a2f33342d3334203d3e20323730373531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:70d4:8000::/34
Signature Algorithm: sha256WithRSAEncryption
58:36:61:4f:39:8b:ca:f0:85:d2:cd:1c:ce:0c:6e:10:56:d2:
18:5d:d2:80:5a:c7:8c:e4:a7:4b:60:fc:4f:ea:f8:d5:62:e0:
6f:09:65:94:ed:8c:47:87:91:6b:60:d8:5f:97:72:20:9d:24:
c0:72:2b:b0:cb:d6:d4:50:49:bf:29:1d:57:b0:70:53:ad:88:
5b:2e:6c:9c:a5:39:67:30:3c:23:a1:4e:64:70:7d:a9:d8:0f:
20:d9:82:24:80:94:fc:62:85:0f:22:57:48:37:32:fe:28:48:
fd:03:43:c3:0b:c8:c0:fd:f0:cf:68:55:b9:c9:13:62:92:e3:
05:e4:ba:7d:82:8b:03:91:8a:54:45:86:e6:92:08:23:81:09:
4f:9c:8a:7e:7c:16:93:c9:2a:04:6e:ea:05:c1:1a:7b:dc:9d:
5f:15:cd:bd:38:42:18:4e:1d:59:a9:7c:71:54:e3:fc:69:f2:
ff:00:d5:f7:fc:30:e8:d2:5f:39:f9:81:a1:8d:d0:28:cc:e7:
13:74:3d:ca:41:69:c4:c5:21:f8:30:ba:63:2d:b2:5b:a0:cb:
3d:3a:ce:b9:ce:ca:2f:5c:10:66:25:e9:10:8f:39:ab:32:b5:
de:97:c2:81:37:e4:a8:5d:d5:a6:25:13:82:31:d2:5c:ce:24:
8e:4b:4c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org