Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/1/323830343a346331303a3a2f33322d3336203d3e20323637333437.roa
File: 323830343a346331303a3a2f33322d3336203d3e20323637333437.roa (raw, json)
Hash identifier: aIPEosH75TTTaI3WNTp9jEkUhL1FwVzt2OeWgI5nIis=
Subject key identifier: B6:32:DD:A8:13:C3:B4:4A:99:E0:E4:33:8D:27:60:D7:AC:32:B4:0E
Certificate issuer: /CN=891C68CB622D162913FED257108AE6F48235EE16
Certificate serial: C76847B0A28C87AFC049090A3083F97FA4573A
Authority key identifier: 89:1C:68:CB:62:2D:16:29:13:FE:D2:57:10:8A:E6:F4:82:35:EE:16
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891C68CB622D162913FED257108AE6F48235EE16.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/1/323830343a346331303a3a2f33322d3336203d3e20323637333437.roa
Signing time: Wed 03 Apr 2024 19:48:44 +0000
ROA not before: Wed 03 Apr 2024 19:43:44 +0000
ROA not after: Wed 02 Apr 2025 19:48:44 +0000
asID: 267347
IP address blocks: 2804:4c10::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
c7:68:47:b0:a2:8c:87:af:c0:49:09:0a:30:83:f9:7f:a4:57:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=891C68CB622D162913FED257108AE6F48235EE16
Validity
Not Before: Apr 3 19:43:44 2024 GMT
Not After : Apr 2 19:48:44 2025 GMT
Subject: CN=B632DDA813C3B44A99E0E4338D2760D7AC32B40E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9b:d6:12:9a:b4:75:6a:3c:bb:62:0f:47:35:
6a:63:38:f1:d1:ce:c7:12:b3:5f:3c:39:71:ee:61:
ca:b4:91:8c:2a:27:8b:56:60:a9:a6:2e:e3:b9:d7:
28:dc:cf:40:b9:14:f5:4c:55:07:18:5f:52:a8:24:
f3:99:95:38:81:f5:9e:c5:24:14:3d:1b:f3:f1:dd:
84:ed:3f:09:29:68:a2:78:2b:0e:35:35:fa:75:e6:
55:2a:d9:1c:c5:c1:d4:4a:b5:ad:7c:18:19:17:dc:
1d:da:9b:75:ee:fb:6d:97:ed:a8:a7:79:79:b4:9a:
49:33:96:96:a7:1d:90:f6:b1:80:0f:67:77:99:37:
6d:7b:bd:96:5e:bd:69:41:4f:aa:bf:29:a9:2a:79:
1e:64:93:bd:33:72:87:00:62:c4:de:a8:54:db:12:
37:11:25:d1:36:10:ac:aa:91:06:a6:f4:15:b7:7b:
1a:26:5e:af:4f:10:b5:4c:b0:aa:a7:f0:d6:8e:d0:
3c:25:f5:6b:d8:ac:e3:c5:be:fe:8b:ff:10:bc:64:
21:e7:81:7f:d7:7a:30:bb:03:8e:77:6d:5a:f3:d8:
34:77:24:19:47:5d:6f:51:11:c5:f9:0b:e0:93:64:
7f:33:fb:16:d4:d1:82:2d:b6:ce:6b:5c:20:ad:71:
e1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:32:DD:A8:13:C3:B4:4A:99:E0:E4:33:8D:27:60:D7:AC:32:B4:0E
X509v3 Authority Key Identifier:
keyid:89:1C:68:CB:62:2D:16:29:13:FE:D2:57:10:8A:E6:F4:82:35:EE:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/1/891C68CB622D162913FED257108AE6F48235EE16.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891C68CB622D162913FED257108AE6F48235EE16.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/1/323830343a346331303a3a2f33322d3336203d3e20323637333437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4c10::/32
Signature Algorithm: sha256WithRSAEncryption
4a:a3:58:14:fd:aa:79:29:1d:42:84:4b:4d:56:b2:38:fb:bf:
c1:4f:82:59:a2:5d:d2:41:69:a7:0e:41:49:24:22:25:97:49:
e9:ef:49:8e:11:5b:6f:a5:3b:94:a6:e6:01:40:41:5b:d6:dc:
09:a2:f9:f5:67:f5:95:85:d7:c0:28:7a:58:0a:77:af:3d:b0:
86:65:b3:de:b8:f5:c2:a6:7f:c3:a3:21:90:d8:2c:e8:7d:5e:
8f:f7:e6:37:e3:53:09:d8:37:fa:47:64:31:63:6b:fe:72:9f:
ea:cc:37:c0:6d:ef:79:46:32:4b:a5:e6:e5:87:3c:9e:46:1f:
1c:f7:99:40:35:36:95:4a:94:6f:7d:f3:1d:61:e8:ac:80:79:
97:82:f1:c0:9d:43:58:15:c1:7a:c1:3f:56:61:e0:6a:7c:20:
8b:32:84:a3:b3:72:96:76:de:e6:8c:70:9d:7b:15:9b:4c:ec:
13:cd:ac:b9:73:0e:dc:4c:85:7e:99:12:00:d4:3a:7d:9c:eb:
92:28:14:62:a2:eb:ca:4a:66:d2:d2:b8:32:6d:6a:ca:e4:2b:
aa:27:bb:5f:a9:ac:b2:24:4f:35:7a:78:c9:ad:9c:77:8e:13:
16:b8:f2:30:2c:03:bc:47:33:43:8a:1f:35:71:26:b4:cd:c4:
bf:9b:de:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org