Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/323830343a313238383a663939393a3a2f34382d3438203d3e20323633343832.roa
File: 323830343a313238383a663939393a3a2f34382d3438203d3e20323633343832.roa (raw, json)
Hash identifier: WqM+9f3ZOVghsUSR1/y3noa3EY0B8QX2wjgADkGnHfA=
Subject key identifier: 83:B6:FB:7F:61:87:28:EE:2D:3D:45:15:11:F8:B0:64:85:27:EA:1A
Certificate issuer: /CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
Certificate serial: 0A08764452A4D3E1E4D5A985CB3853A0871EC884
Authority key identifier: 03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/323830343a313238383a663939393a3a2f34382d3438203d3e20323633343832.roa
Signing time: Fri 24 Nov 2023 07:10:08 +0000
ROA not before: Fri 24 Nov 2023 07:05:08 +0000
ROA not after: Fri 22 Nov 2024 07:10:08 +0000
asID: 263482
IP address blocks: 2804:1288:f999::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:08:76:44:52:a4:d3:e1:e4:d5:a9:85:cb:38:53:a0:87:1e:c8:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
Validity
Not Before: Nov 24 07:05:08 2023 GMT
Not After : Nov 22 07:10:08 2024 GMT
Subject: CN=83B6FB7F618728EE2D3D451511F8B0648527EA1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:92:e7:c5:ff:95:5c:b9:1d:e7:a4:ac:9e:c2:
11:70:69:50:e6:24:6f:cd:ea:2f:8a:a3:01:5d:50:
20:8a:a6:a6:59:07:ec:fa:35:0b:b6:69:d5:4b:cc:
be:52:8a:8d:92:19:ee:d1:db:f5:67:74:7b:6d:ca:
d8:49:27:ac:c4:8c:ba:48:a7:80:94:6c:fd:1e:3a:
3e:e0:5b:fb:93:1c:d3:a2:9b:8c:92:db:9c:0a:1e:
da:c9:4c:9f:48:92:01:7f:32:ee:8a:d6:a9:a4:90:
9a:cb:3c:ec:f3:67:b6:9c:94:c5:96:04:84:7f:7c:
d7:0c:d2:d8:65:f3:07:a7:65:73:36:43:3b:d4:c3:
12:69:3a:53:a1:8c:34:17:c0:82:3e:74:82:4f:92:
e6:d0:d2:e3:76:6a:6c:30:ec:28:3d:c3:6c:84:c1:
51:2a:39:8a:c3:5d:0f:10:31:86:40:24:ed:9a:bd:
85:a5:e8:ab:72:13:81:78:09:f5:51:44:0a:0c:b6:
e7:51:41:7a:01:4d:8a:2f:23:ab:b8:9e:c0:4f:81:
9f:e0:8b:43:b6:6a:06:f0:98:0e:99:67:3b:57:18:
d9:0d:8d:2c:78:03:62:24:78:84:7b:be:07:5f:18:
09:21:d7:9c:f5:26:bc:c1:85:14:f6:b8:9f:b6:a1:
21:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B6:FB:7F:61:87:28:EE:2D:3D:45:15:11:F8:B0:64:85:27:EA:1A
X509v3 Authority Key Identifier:
keyid:03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/323830343a313238383a663939393a3a2f34382d3438203d3e20323633343832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1288:f999::/48
Signature Algorithm: sha256WithRSAEncryption
13:57:f5:6c:15:65:ec:62:78:de:b5:35:e7:e8:b8:cd:92:03:
93:77:9e:af:2d:d1:0d:42:63:61:9e:3f:e9:eb:af:c0:18:01:
50:6e:a6:c4:5e:c7:f3:e4:de:be:65:b2:b7:d1:36:34:50:83:
d9:0f:da:08:d3:4c:cd:3f:eb:8d:75:d9:95:bb:31:51:a5:33:
4f:7b:25:98:e7:53:61:67:ee:a4:9d:3b:19:9a:43:6c:83:7e:
5e:03:e1:4b:cf:e8:fd:05:5f:c5:a0:36:89:94:68:ac:50:c6:
c5:f0:88:ac:c2:d8:ea:9b:a4:fb:9b:0d:69:52:37:63:76:b6:
40:b8:d8:ae:d2:ec:e4:9e:5e:ce:8d:9a:d8:e3:10:c9:0f:b4:
90:fc:d4:90:e2:dc:f0:21:e8:98:05:55:29:57:16:14:34:24:
23:81:cb:17:3c:80:fe:a9:6d:bd:42:14:e8:85:d1:03:46:d8:
77:ec:b8:c3:d1:83:e3:cf:51:52:7e:48:9f:00:8b:1b:7d:07:
af:03:2d:10:c4:b1:27:a8:02:3c:2d:57:92:d9:10:c2:3a:49:
8a:dc:27:29:4c:ca:91:6a:8b:53:de:88:44:ab:8f:37:c4:97:
55:80:33:c6:76:68:3f:a8:87:a7:20:67:cf:f1:6e:a6:a6:78:
e0:50:ae:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:21 2024 by rpki-client on console-ams.rpki-client.org