Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/0/323830343a363063633a3a2f33322d3332203d3e20323639313932.roa
File: 323830343a363063633a3a2f33322d3332203d3e20323639313932.roa (raw, json)
Hash identifier: 3LGzve+F83fcfAzjKSQgYmCWK68+K7tqSas33uwxg2I=
Subject key identifier: 7D:04:C3:F7:E6:22:78:CC:12:FC:44:58:D7:5F:BA:8E:4E:11:DA:90
Certificate issuer: /CN=A9019D0A5557DBD77DD42CDCED37B55CC0A2087C
Certificate serial: 560BD022DB8A69D20F3D3D1C46760103B50E98ED
Authority key identifier: A9:01:9D:0A:55:57:DB:D7:7D:D4:2C:DC:ED:37:B5:5C:C0:A2:08:7C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9019D0A5557DBD77DD42CDCED37B55CC0A2087C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/0/323830343a363063633a3a2f33322d3332203d3e20323639313932.roa
Signing time: Mon 29 Jan 2024 20:00:00 +0000
ROA not before: Mon 29 Jan 2024 19:55:00 +0000
ROA not after: Mon 27 Jan 2025 20:00:00 +0000
asID: 269192
IP address blocks: 2804:60cc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:0b:d0:22:db:8a:69:d2:0f:3d:3d:1c:46:76:01:03:b5:0e:98:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9019D0A5557DBD77DD42CDCED37B55CC0A2087C
Validity
Not Before: Jan 29 19:55:00 2024 GMT
Not After : Jan 27 20:00:00 2025 GMT
Subject: CN=7D04C3F7E62278CC12FC4458D75FBA8E4E11DA90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f5:0f:98:9d:f9:17:04:3f:62:ef:d6:61:2f:
9b:47:f6:1a:e2:af:41:01:41:72:47:7e:28:d0:73:
2c:c5:91:4c:c7:5b:2f:4e:0f:86:87:32:e5:dc:1f:
13:9a:c6:1a:95:19:ca:a6:16:7a:00:97:22:04:08:
25:2b:4f:70:51:3b:ce:26:e4:84:95:d0:d4:72:9a:
48:b3:55:ab:1f:4e:61:d3:d5:33:a2:d9:90:2c:ae:
ba:00:82:a0:f8:84:ac:dd:94:0f:09:9c:17:55:b1:
40:c4:dd:7e:52:0a:7e:0c:5e:77:bd:69:05:50:49:
e6:dd:98:e4:ae:ec:ac:c9:03:34:57:32:5e:66:57:
78:ff:9a:72:0e:23:af:ca:09:31:12:0d:24:6e:a9:
81:c6:2b:a6:57:7d:3f:74:79:09:ae:16:07:2f:5f:
53:46:f6:bd:10:8d:87:59:82:ee:5f:5b:d0:c1:3d:
de:90:fd:20:12:29:f7:73:26:63:04:79:a5:b8:f1:
f4:40:ad:8e:7e:2f:1e:2f:da:3a:b5:27:29:66:54:
79:7c:18:bc:2c:e7:98:36:6f:2c:2f:fb:2b:81:93:
a5:fa:f8:3a:b8:28:11:10:bd:65:8d:f2:8f:88:04:
00:4b:3d:d8:80:61:c0:41:46:e0:88:4a:b6:f4:6a:
db:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:04:C3:F7:E6:22:78:CC:12:FC:44:58:D7:5F:BA:8E:4E:11:DA:90
X509v3 Authority Key Identifier:
keyid:A9:01:9D:0A:55:57:DB:D7:7D:D4:2C:DC:ED:37:B5:5C:C0:A2:08:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/0/A9019D0A5557DBD77DD42CDCED37B55CC0A2087C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9019D0A5557DBD77DD42CDCED37B55CC0A2087C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/0/323830343a363063633a3a2f33322d3332203d3e20323639313932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:60cc::/32
Signature Algorithm: sha256WithRSAEncryption
2d:79:af:5a:f4:5b:e1:c7:ad:01:f7:51:a8:6d:6e:d9:a9:06:
d8:9f:e0:5d:67:0c:7e:65:a4:7f:d7:bf:c3:06:6c:a7:b7:9f:
48:78:63:d6:de:a3:c5:ef:b9:eb:a5:f3:fc:61:41:e7:d3:c9:
ad:25:38:a1:64:20:fc:f9:6c:f8:f4:6e:57:0e:bb:13:d5:4c:
48:8d:5d:29:78:77:3c:7d:5d:8d:11:c4:c5:c9:06:27:f8:df:
94:3b:84:18:63:c2:83:af:c6:ae:9b:00:62:9e:10:3a:19:81:
8f:79:8c:c0:10:6b:a7:e1:2e:c0:a5:7a:e0:df:aa:ce:26:e4:
d3:82:7a:0d:d6:3a:c6:cd:31:d3:19:cd:74:af:43:75:9f:3e:
65:d4:aa:a4:eb:80:ec:41:38:6d:c4:a5:ea:25:2b:d1:73:74:
6f:b3:b4:c5:8b:00:e4:14:2f:f5:11:5e:20:2f:e2:90:91:ef:
f8:3a:ef:39:5e:bf:81:cc:43:6f:40:b8:84:08:44:b7:07:b6:
75:cd:1f:9f:d1:70:cb:11:6d:c5:bc:4f:78:36:2b:c7:a7:4e:
03:8c:43:71:83:e6:a0:58:e3:ab:a5:d1:c2:00:5e:4d:bc:50:
f0:38:7d:66:b4:29:90:4a:33:ed:23:05:72:92:37:43:31:ff:
9e:bd:fa:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org