Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/1/323830343a346263633a3a2f33322d3332203d3e20323637333330.roa
File: 323830343a346263633a3a2f33322d3332203d3e20323637333330.roa (raw, json)
Hash identifier: Ls86kMKUF1kwY3ARNLdn2eeVOZH5yj80phvpAQxQ7vc=
Subject key identifier: BC:78:91:C7:A2:A9:A7:64:B9:9A:BE:EA:AF:43:69:E9:86:CE:74:29
Certificate issuer: /CN=D1522A5217E184CA7B071011FCF96A20332AF33F
Certificate serial: 55F48AFF06729AB9FEAA02B06F9C1A3703935E46
Authority key identifier: D1:52:2A:52:17:E1:84:CA:7B:07:10:11:FC:F9:6A:20:33:2A:F3:3F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1522A5217E184CA7B071011FCF96A20332AF33F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/1/323830343a346263633a3a2f33322d3332203d3e20323637333330.roa
Signing time: Wed 03 Apr 2024 21:51:57 +0000
ROA not before: Wed 03 Apr 2024 21:46:57 +0000
ROA not after: Wed 02 Apr 2025 21:51:57 +0000
asID: 267330
IP address blocks: 2804:4bcc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:f4:8a:ff:06:72:9a:b9:fe:aa:02:b0:6f:9c:1a:37:03:93:5e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1522A5217E184CA7B071011FCF96A20332AF33F
Validity
Not Before: Apr 3 21:46:57 2024 GMT
Not After : Apr 2 21:51:57 2025 GMT
Subject: CN=BC7891C7A2A9A764B99ABEEAAF4369E986CE7429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c1:3d:99:b7:c0:22:80:14:2c:5c:cc:e4:5f:
dc:3b:06:21:13:bc:4e:2b:75:af:ce:0b:01:22:63:
77:1f:fe:1d:74:a4:c2:b9:24:41:9e:59:30:c2:12:
ad:84:2b:20:8b:8a:aa:8b:ae:72:b1:a6:a5:f4:85:
15:b6:f0:cd:49:05:53:7c:f0:ca:7d:cb:83:75:25:
62:a2:00:26:5f:e0:c1:d6:a5:e3:60:11:69:b3:d0:
70:2d:6d:26:4e:a0:e8:b0:0d:4e:70:35:2c:d4:7e:
3e:29:00:e9:91:f6:3b:bf:60:75:c5:6a:54:30:ab:
5b:e8:03:9f:f8:c0:e0:5a:a7:cb:6d:a7:36:94:9d:
ee:cd:94:fa:87:9e:ee:04:e9:57:4a:a2:c0:f3:ab:
22:77:38:52:db:4a:0e:b6:42:1e:c6:44:1e:0a:bf:
e1:95:a2:25:36:8b:ab:1e:d0:13:25:a7:f5:71:0c:
9e:51:0c:d0:75:db:48:bd:19:71:fe:16:04:84:e5:
44:2f:d3:85:c4:a5:59:99:35:d6:23:ec:b1:aa:2c:
f6:b5:0b:89:12:01:65:cb:d0:29:11:14:db:ae:be:
5b:18:dd:d1:9e:a8:26:7b:55:d5:fc:ba:c0:f4:60:
ab:28:e5:b5:ff:10:c1:85:f3:fb:23:5c:a4:05:63:
8b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:78:91:C7:A2:A9:A7:64:B9:9A:BE:EA:AF:43:69:E9:86:CE:74:29
X509v3 Authority Key Identifier:
keyid:D1:52:2A:52:17:E1:84:CA:7B:07:10:11:FC:F9:6A:20:33:2A:F3:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/1/D1522A5217E184CA7B071011FCF96A20332AF33F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1522A5217E184CA7B071011FCF96A20332AF33F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/1/323830343a346263633a3a2f33322d3332203d3e20323637333330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4bcc::/32
Signature Algorithm: sha256WithRSAEncryption
85:6c:05:21:d4:6b:98:6b:2c:d6:66:6c:0d:81:0f:19:e0:11:
e3:47:c0:db:01:53:56:61:97:1c:34:a6:1d:bb:f1:2a:01:28:
ea:c3:91:af:3c:b3:29:26:8a:01:6e:88:78:46:38:49:94:c5:
e9:2f:ae:ec:43:c8:cc:ed:c0:77:cf:3b:d6:ea:ec:bd:64:fb:
9e:7a:b7:eb:fe:ad:f6:56:93:72:ab:f8:a2:ed:94:ef:62:60:
7f:88:3c:71:a1:af:fa:84:77:bc:db:19:33:a7:68:22:0f:6b:
9d:97:c2:5e:64:74:28:73:a1:59:e6:9b:8b:57:2a:c9:6f:41:
3b:68:87:b5:bc:43:f0:ea:a8:ae:c2:10:15:cd:98:8a:5c:1e:
5c:07:ce:36:a2:c9:5a:b4:e4:3c:1f:0e:3c:c8:47:09:fc:12:
08:37:1e:06:3b:31:49:e0:ec:f1:f2:1c:8f:dd:cd:64:1a:7d:
0b:80:7b:43:a7:20:86:f1:81:0c:08:9e:96:09:e9:1c:57:6d:
58:5c:ea:7c:dc:36:fa:ca:fc:b5:5c:8a:4d:b0:24:30:dd:f4:
e1:83:92:22:3c:81:e6:14:d1:80:61:fb:de:8a:8a:90:11:ea:
cf:88:d9:1e:ac:23:16:29:1c:b7:a3:ee:d9:be:42:cc:6f:5e:
bf:03:8b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org