Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/0/323830343a323664343a3a2f33322d3336203d3e20323633383630.roa
File: 323830343a323664343a3a2f33322d3336203d3e20323633383630.roa (raw, json)
Hash identifier: Vge/E+yDQ0VmAdWIb+CvLQs7NbfRpkQVGVva6h9Qmgg=
Subject key identifier: 43:45:70:CE:EB:4B:80:24:9B:05:C6:01:6B:1E:F2:D9:48:F4:CF:B1
Certificate issuer: /CN=21D786A9E3E9F6FD8067630222961B177E0DA001
Certificate serial: 75476A8A05D67716690E4AA02E31ADDA027CE3AA
Authority key identifier: 21:D7:86:A9:E3:E9:F6:FD:80:67:63:02:22:96:1B:17:7E:0D:A0:01
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21D786A9E3E9F6FD8067630222961B177E0DA001.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/0/323830343a323664343a3a2f33322d3336203d3e20323633383630.roa
Signing time: Tue 20 Feb 2024 20:44:06 +0000
ROA not before: Tue 20 Feb 2024 20:39:06 +0000
ROA not after: Tue 18 Feb 2025 20:44:06 +0000
asID: 263860
IP address blocks: 2804:26d4::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:47:6a:8a:05:d6:77:16:69:0e:4a:a0:2e:31:ad:da:02:7c:e3:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21D786A9E3E9F6FD8067630222961B177E0DA001
Validity
Not Before: Feb 20 20:39:06 2024 GMT
Not After : Feb 18 20:44:06 2025 GMT
Subject: CN=434570CEEB4B80249B05C6016B1EF2D948F4CFB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8a:16:95:ed:3a:42:f0:f4:71:ef:fc:e2:71:
8d:25:d6:bb:87:e2:0e:ca:66:93:d4:2b:08:ca:15:
2b:44:d6:e3:2a:ab:32:c4:54:76:e5:08:64:71:39:
4e:db:e3:1b:1b:45:f9:3f:0c:e7:3c:51:23:17:98:
1c:d9:2c:3c:cc:e1:df:bd:bf:11:1f:ba:49:e1:77:
9a:77:e9:71:47:d1:1b:f6:a1:11:cc:ba:f5:c1:c7:
e6:e6:fd:6c:6f:f0:e1:4d:c4:a1:48:9b:6a:59:a6:
40:3b:95:59:21:ce:5d:90:fa:08:67:fc:b2:c5:ea:
a7:02:86:aa:6d:c2:2a:a5:d9:4c:ba:0b:0b:2e:3f:
dc:fa:a7:03:1c:b9:70:88:7d:1e:b3:ed:0f:79:e3:
de:22:16:03:3f:65:6a:aa:77:ad:22:54:67:29:64:
6a:ac:bc:27:67:29:29:70:55:95:b6:59:77:67:67:
51:54:bb:22:db:4d:b1:ab:86:89:ff:d6:8b:a3:92:
58:12:79:46:27:77:7c:28:4d:17:91:c0:7b:41:37:
94:a7:4e:a8:e8:1c:02:4d:34:a0:42:5e:61:35:b2:
54:5b:3c:de:42:1f:f2:1e:3e:5d:87:31:37:90:6a:
c6:c2:e8:28:f3:b1:de:c6:77:0a:0e:6e:fd:1c:f0:
44:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:45:70:CE:EB:4B:80:24:9B:05:C6:01:6B:1E:F2:D9:48:F4:CF:B1
X509v3 Authority Key Identifier:
keyid:21:D7:86:A9:E3:E9:F6:FD:80:67:63:02:22:96:1B:17:7E:0D:A0:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/0/21D786A9E3E9F6FD8067630222961B177E0DA001.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21D786A9E3E9F6FD8067630222961B177E0DA001.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/0/323830343a323664343a3a2f33322d3336203d3e20323633383630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:26d4::/32
Signature Algorithm: sha256WithRSAEncryption
5d:ae:26:1b:24:7c:e3:dc:27:1f:3e:8c:72:32:ac:d0:f8:5d:
26:89:4e:76:e6:ae:ad:13:1b:45:7a:77:ea:96:af:0a:22:61:
d4:cc:0f:22:60:20:a2:1c:cb:71:03:db:fc:22:89:35:93:ca:
6e:fb:61:1f:ba:e6:bd:7d:50:3f:06:05:e7:22:04:dc:16:b8:
15:f4:f7:c3:7a:82:b8:6f:1f:f6:52:94:f7:81:5c:67:2b:e0:
93:0b:cf:07:f3:56:ed:4b:1b:00:88:19:1d:39:28:a6:2a:e4:
a5:e7:01:a0:92:9e:58:33:22:69:8d:50:fe:85:0b:ca:f5:cb:
ed:63:c0:c8:4f:56:af:ed:ea:54:f0:f5:1c:86:31:01:e7:f7:
54:7e:51:c2:79:47:04:96:18:92:7c:62:2b:0e:7f:ab:f1:d1:
5c:9c:31:96:5f:d2:33:b6:15:ec:e3:a7:6d:6a:64:99:26:68:
c5:76:48:77:80:24:ea:73:ca:1d:a5:9e:97:f7:cd:7b:12:53:
bb:e1:ee:81:03:f7:54:bc:ae:05:45:6e:e4:e8:37:12:b7:c6:
dc:08:8f:55:02:30:92:64:52:56:dc:f3:e8:a0:8b:4a:36:bf:
87:38:78:05:0a:81:95:8f:2f:f9:56:ad:56:4f:6a:c4:9c:09:
ea:7a:7b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org