Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CQ6LwpSyfpXdSUmE9iShCeAi7ZCKdPDJ4LgDHa9zwAPV/0/323830343a343232303a3a2f33322d3332203d3e20323637343739.roa
File: 323830343a343232303a3a2f33322d3332203d3e20323637343739.roa (raw, json)
Hash identifier: ASu1AV2NRVDIEiDpxHpWWNj5fGKGAokncp6aoMpWhBA=
Subject key identifier: 3E:F6:21:F4:F9:39:0F:90:DF:4B:93:FB:2D:2E:39:C1:C5:8B:39:D2
Certificate issuer: /CN=CD2876FE25D1172BDF72E8EC902B7BBF8F561B93
Certificate serial: 16639A1EDA5FF8254B58A5AE77D0C8D758406BCE
Authority key identifier: CD:28:76:FE:25:D1:17:2B:DF:72:E8:EC:90:2B:7B:BF:8F:56:1B:93
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD2876FE25D1172BDF72E8EC902B7BBF8F561B93.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CQ6LwpSyfpXdSUmE9iShCeAi7ZCKdPDJ4LgDHa9zwAPV/0/323830343a343232303a3a2f33322d3332203d3e20323637343739.roa
Signing time: Thu 01 Feb 2024 02:31:14 +0000
ROA not before: Thu 01 Feb 2024 02:26:14 +0000
ROA not after: Thu 30 Jan 2025 02:31:14 +0000
asID: 267479
IP address blocks: 2804:4220::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:63:9a:1e:da:5f:f8:25:4b:58:a5:ae:77:d0:c8:d7:58:40:6b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD2876FE25D1172BDF72E8EC902B7BBF8F561B93
Validity
Not Before: Feb 1 02:26:14 2024 GMT
Not After : Jan 30 02:31:14 2025 GMT
Subject: CN=3EF621F4F9390F90DF4B93FB2D2E39C1C58B39D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cd:52:6d:c2:3a:b3:e5:b9:09:a5:ae:50:ce:
f3:60:6d:e0:c7:e8:77:b7:84:5d:7e:b4:42:45:97:
76:46:bd:50:86:80:d8:77:eb:69:4e:2d:2a:ff:e7:
8f:b1:c7:89:49:6f:44:13:82:76:5a:99:0e:ed:65:
09:6d:4a:90:8e:84:24:b3:d7:1c:c5:30:fb:76:a7:
78:f1:e3:f2:b1:65:86:42:97:4e:21:63:ec:9a:2e:
27:dd:b6:31:61:b2:7c:35:e7:3a:89:de:43:4f:18:
c5:5b:e6:8c:d9:01:0e:85:d7:4e:41:16:8a:19:20:
1b:54:5f:80:e9:87:a0:6c:4e:26:f8:d5:ca:64:77:
50:43:41:b6:09:84:9b:d3:3a:c4:f3:ab:e5:10:b2:
25:c8:02:3c:a4:d1:a5:4b:d8:6a:8a:74:62:34:58:
27:00:28:97:23:5a:81:f0:92:4f:6f:b1:09:c3:d4:
55:01:05:63:66:da:e1:4a:28:10:2b:2a:28:9b:d7:
1c:7a:a6:db:51:6c:ae:4a:91:fd:6f:d2:74:d6:d1:
0c:3b:8f:bf:06:f3:db:01:ca:29:66:23:83:0a:f6:
42:a2:fb:0e:c3:7e:60:cf:78:15:09:5e:0c:5a:db:
30:1a:35:d7:66:68:b2:3a:9f:9f:b0:f2:69:21:45:
56:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F6:21:F4:F9:39:0F:90:DF:4B:93:FB:2D:2E:39:C1:C5:8B:39:D2
X509v3 Authority Key Identifier:
keyid:CD:28:76:FE:25:D1:17:2B:DF:72:E8:EC:90:2B:7B:BF:8F:56:1B:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CQ6LwpSyfpXdSUmE9iShCeAi7ZCKdPDJ4LgDHa9zwAPV/0/CD2876FE25D1172BDF72E8EC902B7BBF8F561B93.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD2876FE25D1172BDF72E8EC902B7BBF8F561B93.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQ6LwpSyfpXdSUmE9iShCeAi7ZCKdPDJ4LgDHa9zwAPV/0/323830343a343232303a3a2f33322d3332203d3e20323637343739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4220::/32
Signature Algorithm: sha256WithRSAEncryption
97:80:4c:86:f4:4a:ff:95:ea:7e:c3:e6:cc:57:2a:de:c0:b2:
72:65:c8:70:ba:ec:8b:71:e8:e4:a1:21:d0:85:c5:71:f2:64:
22:63:68:7d:36:98:d3:6f:36:7c:a7:20:34:b8:e5:98:8e:22:
38:21:24:3e:6e:92:f3:a5:f9:aa:e0:c8:e7:b6:b7:7c:b4:a3:
48:e2:57:5c:c6:48:90:a4:83:cd:31:d2:9f:cb:27:8a:09:10:
09:8e:cf:02:83:6e:93:7e:7c:8e:66:18:04:be:2b:ae:33:80:
b7:2a:3c:a6:aa:bf:e8:04:84:a7:1d:b3:90:9e:2c:fd:14:7e:
4d:30:73:a6:3c:21:55:bd:85:ab:f6:23:40:2e:57:17:65:84:
61:d4:74:02:a0:04:0b:9c:96:ff:73:10:ef:59:ea:c9:f7:cc:
a1:67:57:1f:12:ba:e0:3d:f1:47:4c:b5:1c:24:89:f0:8b:f3:
5b:3d:d9:14:ba:d7:9f:8b:7c:21:14:23:26:3a:2f:35:b7:bb:
3d:18:24:f9:06:bd:c4:31:6c:e4:17:55:3c:cd:a2:ca:6f:96:
46:75:05:bd:05:c6:cd:cb:8b:79:5d:89:87:c9:d2:64:68:46:
95:9a:42:96:0a:a4:51:b1:2a:63:11:88:50:39:df:45:dd:e7:
b2:fc:72:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org