Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/0/323830343a323163303a3a2f33322d3332203d3e20323634353731.roa
File: 323830343a323163303a3a2f33322d3332203d3e20323634353731.roa (raw, json)
Hash identifier: IKEo7IMEy7QRx4Ut66mBSavZfHQSd5D9hMKWBCmGffI=
Subject key identifier: FE:79:E2:3A:7C:DE:87:7C:CA:D6:28:9F:C2:AC:B6:39:6B:C1:A0:05
Certificate issuer: /CN=211F2EA499E75BB9BC78B84D5AAA75DDE784939C
Certificate serial: 353511D2B4416F018186CFF4A50E0035CD4F21FF
Authority key identifier: 21:1F:2E:A4:99:E7:5B:B9:BC:78:B8:4D:5A:AA:75:DD:E7:84:93:9C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/211F2EA499E75BB9BC78B84D5AAA75DDE784939C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/0/323830343a323163303a3a2f33322d3332203d3e20323634353731.roa
Signing time: Mon 04 Dec 2023 21:00:00 +0000
ROA not before: Mon 04 Dec 2023 20:55:00 +0000
ROA not after: Mon 02 Dec 2024 21:00:00 +0000
asID: 264571
IP address blocks: 2804:21c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:35:11:d2:b4:41:6f:01:81:86:cf:f4:a5:0e:00:35:cd:4f:21:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=211F2EA499E75BB9BC78B84D5AAA75DDE784939C
Validity
Not Before: Dec 4 20:55:00 2023 GMT
Not After : Dec 2 21:00:00 2024 GMT
Subject: CN=FE79E23A7CDE877CCAD6289FC2ACB6396BC1A005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:07:fe:5a:a6:b9:1b:c3:07:b3:31:2b:1b:97:
29:61:32:5e:ed:c5:2f:c1:f0:42:61:2f:57:4a:76:
b0:89:bf:7b:a8:d4:74:b5:23:de:d1:ca:b6:31:a6:
d6:c1:95:34:44:49:90:d8:3f:07:71:40:0b:79:8d:
af:88:df:8d:22:2b:e9:00:6d:f2:26:84:3c:ae:d2:
19:e4:01:df:84:1b:62:44:87:ed:b4:be:2d:1d:47:
d2:19:90:78:52:b3:e8:d8:b7:24:3a:af:f3:36:0f:
0b:1d:95:04:c0:1c:ce:7d:cd:5a:a2:09:42:69:44:
21:6a:8e:d0:ba:d4:d3:37:91:90:58:53:a5:9e:2b:
24:14:13:b4:74:6f:5d:1a:5f:02:14:fb:f8:88:41:
24:d4:9f:94:bb:7b:fe:a9:8f:d2:6e:a1:18:8f:85:
ab:86:9c:f8:6c:ff:fe:8d:a1:83:87:06:5f:33:41:
a0:d1:7a:76:33:dc:c7:76:3a:59:81:f6:01:6f:81:
a4:f3:30:e5:e8:d0:c3:95:c0:b9:ed:13:43:b0:11:
91:59:6b:cf:29:d7:a1:fa:53:b6:c5:4a:55:1d:db:
c9:53:56:71:00:8a:11:a6:9d:e0:38:59:db:9e:65:
72:3f:ce:ad:2e:64:16:55:6a:89:d7:e3:0e:dd:c8:
2e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:79:E2:3A:7C:DE:87:7C:CA:D6:28:9F:C2:AC:B6:39:6B:C1:A0:05
X509v3 Authority Key Identifier:
keyid:21:1F:2E:A4:99:E7:5B:B9:BC:78:B8:4D:5A:AA:75:DD:E7:84:93:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/0/211F2EA499E75BB9BC78B84D5AAA75DDE784939C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/211F2EA499E75BB9BC78B84D5AAA75DDE784939C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/0/323830343a323163303a3a2f33322d3332203d3e20323634353731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:21c0::/32
Signature Algorithm: sha256WithRSAEncryption
90:2c:0c:18:f3:69:5c:cb:7e:18:0d:92:36:f9:2d:17:af:1e:
2e:44:fa:b9:0e:7f:68:72:8b:3f:ff:cf:ea:0c:13:e7:99:5a:
ed:11:c5:7b:a3:7c:66:e8:61:53:2b:d2:51:90:ed:ce:32:37:
e1:15:d1:c8:42:8a:2b:86:4c:36:3d:0e:d3:38:3d:f1:b9:84:
80:b0:d3:3a:74:d5:a0:9e:82:77:6a:54:52:40:97:f1:ec:f5:
12:e1:78:ae:f5:ef:ec:6b:c5:ef:b2:a8:01:d6:57:45:c6:c9:
86:73:39:6e:5d:ac:f9:49:b8:05:67:b5:db:cf:ef:0e:25:be:
45:ec:23:09:67:28:62:1f:b3:d8:e2:98:35:85:0e:a9:34:c5:
40:ce:40:78:49:a2:67:9b:ec:78:bc:24:d1:23:b7:02:bc:86:
62:56:41:45:6f:30:17:de:0e:14:d6:9c:c9:f9:b7:82:b1:c0:
86:9c:34:33:61:9b:c1:71:5f:11:e3:29:4e:93:c8:52:1b:27:
8b:16:de:82:11:12:c3:8a:ce:82:84:24:e2:5a:7d:66:9d:2d:
98:77:f2:00:fb:3b:ea:81:39:4c:0e:5d:17:67:1e:42:d6:3a:
b6:10:1e:bb:1f:1c:a5:ee:6f:25:e1:77:14:b3:b1:0d:7e:0a:
64:80:ec:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:05 2024 by rpki-client on console-ams.rpki-client.org