Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/1/323830343a346233343a3a2f33322d3332203d3e20323637323930.roa
File: 323830343a346233343a3a2f33322d3332203d3e20323637323930.roa (raw, json)
Hash identifier: VdVCBZdTSxsPydzhnioBA73F7091db4fN5TAeVTNXKs=
Subject key identifier: EE:24:B4:A2:27:B1:1C:B3:73:56:69:B0:B4:C0:EC:0A:27:D5:99:58
Certificate issuer: /CN=29D189B9A7639658160A27FD17B6D238AB9BFD4A
Certificate serial: 764AE13A7ADB79EE436AFCB5CB6DF37E7CEEC27B
Authority key identifier: 29:D1:89:B9:A7:63:96:58:16:0A:27:FD:17:B6:D2:38:AB:9B:FD:4A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29D189B9A7639658160A27FD17B6D238AB9BFD4A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/1/323830343a346233343a3a2f33322d3332203d3e20323637323930.roa
Signing time: Wed 03 Apr 2024 18:31:27 +0000
ROA not before: Wed 03 Apr 2024 18:26:27 +0000
ROA not after: Wed 02 Apr 2025 18:31:27 +0000
asID: 267290
IP address blocks: 2804:4b34::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:4a:e1:3a:7a:db:79:ee:43:6a:fc:b5:cb:6d:f3:7e:7c:ee:c2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29D189B9A7639658160A27FD17B6D238AB9BFD4A
Validity
Not Before: Apr 3 18:26:27 2024 GMT
Not After : Apr 2 18:31:27 2025 GMT
Subject: CN=EE24B4A227B11CB3735669B0B4C0EC0A27D59958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:46:d3:29:65:0d:95:73:c4:ac:cb:1f:ad:48:
cf:de:bd:cb:75:c4:db:58:69:b4:9a:ef:87:3d:c1:
37:43:33:78:f8:75:8f:e2:ff:52:b6:8b:ed:e3:76:
6b:3e:a4:0c:1e:6c:68:a2:ff:41:5b:49:9c:77:75:
f6:ec:6f:14:62:42:bb:9a:89:18:c6:24:e9:cf:3c:
22:2a:5a:d3:98:43:97:8d:67:53:dc:b6:1d:11:5a:
bd:e3:1c:dc:92:68:c0:3a:9b:99:96:5a:eb:e4:7a:
92:46:f5:31:25:81:32:4c:2d:ff:65:e4:70:c6:4f:
0c:02:ba:21:fc:87:2d:7a:91:21:15:cf:62:04:b2:
1e:35:3f:15:6d:6d:16:60:39:44:6d:75:4e:be:c8:
57:51:aa:91:c0:87:e1:f6:b2:05:36:e4:78:37:93:
f4:de:04:82:d0:5f:25:d3:14:29:3d:3c:15:26:c7:
a1:d0:f9:ed:35:78:2c:54:06:f6:f8:12:7f:69:73:
5a:93:da:cc:f7:f1:97:eb:e5:ab:7d:4e:7f:f8:9c:
27:80:21:ba:d9:7f:c4:c7:2c:71:47:45:26:81:5d:
6e:f5:9f:d1:f3:dd:c8:31:72:ca:d6:ee:17:ea:bb:
53:a5:e8:ce:c5:50:12:da:9c:6a:b3:ea:3e:51:65:
9a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:24:B4:A2:27:B1:1C:B3:73:56:69:B0:B4:C0:EC:0A:27:D5:99:58
X509v3 Authority Key Identifier:
keyid:29:D1:89:B9:A7:63:96:58:16:0A:27:FD:17:B6:D2:38:AB:9B:FD:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/1/29D189B9A7639658160A27FD17B6D238AB9BFD4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29D189B9A7639658160A27FD17B6D238AB9BFD4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/1/323830343a346233343a3a2f33322d3332203d3e20323637323930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4b34::/32
Signature Algorithm: sha256WithRSAEncryption
78:07:25:fc:35:76:5a:28:4a:ab:18:81:95:d6:33:0b:38:78:
96:20:64:cd:62:47:56:ab:46:ea:77:be:73:1f:8b:b4:f6:8a:
dd:33:96:46:70:78:8d:a3:9d:bd:d9:81:83:b1:c4:c6:e7:bd:
af:7e:ed:dd:ba:32:4e:9f:ae:cf:53:f6:34:72:72:67:39:41:
71:5d:d3:b8:4f:b8:19:a7:0f:f2:46:43:9f:18:be:3e:7f:0f:
c7:60:5c:3c:7b:00:dd:24:2d:a6:8e:f5:d2:a5:5b:68:08:3e:
61:a3:22:b5:87:c9:d2:07:dd:56:65:eb:65:f7:ce:81:56:50:
d7:7b:83:2b:ce:86:9d:61:cb:64:90:f6:a8:e0:5a:8f:86:f5:
d2:d1:e7:22:69:a5:96:93:78:07:b9:57:99:d5:1f:b1:74:87:
6d:f8:e8:d1:bb:6b:28:39:24:72:67:54:88:4f:65:53:d0:67:
69:92:f1:4b:0c:ae:40:c8:89:f9:37:fe:aa:4a:f1:b0:b8:d3:
48:27:1e:e3:ee:9f:f3:ab:c8:55:95:15:81:3e:fb:14:7e:fe:
80:cb:de:61:4a:23:91:28:29:12:ff:09:96:c1:84:7b:14:aa:
3c:b3:26:76:e3:76:d1:f5:12:76:a0:7b:3a:95:73:63:14:f1:
8e:cc:9c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org