Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/1/323830343a3830633a3a2f33322d3332203d3e20323632333433.roa
File: 323830343a3830633a3a2f33322d3332203d3e20323632333433.roa (raw, json)
Hash identifier: p9TqdMXVVHJY2rCPUWor2zddtlAeX+WQlZEcYQOKUL4=
Subject key identifier: D8:92:5B:85:7D:2D:30:ED:43:90:BC:B9:76:98:D6:18:63:57:F3:46
Certificate issuer: /CN=3F0A020836A7712EC0C3C17FC164D37F5AB5E703
Certificate serial: 48A4DDEFE367C1F58623249AD488CA353B0A12D9
Authority key identifier: 3F:0A:02:08:36:A7:71:2E:C0:C3:C1:7F:C1:64:D3:7F:5A:B5:E7:03
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F0A020836A7712EC0C3C17FC164D37F5AB5E703.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/1/323830343a3830633a3a2f33322d3332203d3e20323632333433.roa
Signing time: Wed 10 Jan 2024 17:00:43 +0000
ROA not before: Wed 10 Jan 2024 16:55:43 +0000
ROA not after: Wed 08 Jan 2025 17:00:43 +0000
asID: 262343
IP address blocks: 2804:80c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:a4:dd:ef:e3:67:c1:f5:86:23:24:9a:d4:88:ca:35:3b:0a:12:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F0A020836A7712EC0C3C17FC164D37F5AB5E703
Validity
Not Before: Jan 10 16:55:43 2024 GMT
Not After : Jan 8 17:00:43 2025 GMT
Subject: CN=D8925B857D2D30ED4390BCB97698D6186357F346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:39:bd:cf:fe:39:f5:ad:72:ff:1b:c9:bb:42:
3e:11:76:21:a0:f8:41:14:ff:40:76:8d:57:87:b7:
90:84:a3:ad:97:be:21:b2:a0:e7:aa:d2:97:25:cb:
7b:32:26:78:fa:00:ad:b9:d6:ff:b3:50:7a:e8:72:
6e:44:43:ab:80:6c:a6:b5:44:46:7d:87:21:9d:64:
d5:4d:44:d7:bd:68:e0:9b:02:5f:b8:15:a4:05:21:
34:46:de:5e:63:1c:13:72:ac:af:d6:89:91:89:b7:
e0:94:5d:98:ee:f5:c2:dd:b8:0e:a2:c8:67:89:e5:
7e:6c:10:47:5b:f1:94:11:28:fc:f0:81:67:77:d3:
02:b6:d2:8a:dd:a7:e9:82:6c:bd:63:e0:4d:64:ac:
7a:29:ac:f1:e5:46:b6:83:91:d3:d1:24:1c:be:19:
92:15:f3:bd:c9:91:1e:ee:59:41:0d:44:af:cf:a0:
9a:a7:26:8e:52:7d:04:11:e1:84:a3:b1:7b:9c:80:
7c:12:2d:01:e0:9a:4b:10:93:bf:f7:4b:23:ff:6e:
63:36:0d:59:19:cc:bd:96:8e:96:fb:1a:2d:d8:fc:
23:46:f6:90:38:4c:26:92:97:50:d0:ac:b4:0c:da:
58:be:df:82:24:39:8f:fd:da:75:a0:86:44:5a:c0:
7e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:92:5B:85:7D:2D:30:ED:43:90:BC:B9:76:98:D6:18:63:57:F3:46
X509v3 Authority Key Identifier:
keyid:3F:0A:02:08:36:A7:71:2E:C0:C3:C1:7F:C1:64:D3:7F:5A:B5:E7:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/1/3F0A020836A7712EC0C3C17FC164D37F5AB5E703.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F0A020836A7712EC0C3C17FC164D37F5AB5E703.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/1/323830343a3830633a3a2f33322d3332203d3e20323632333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:80c::/32
Signature Algorithm: sha256WithRSAEncryption
a7:6e:42:b4:3a:73:47:c0:3d:e9:69:17:40:ca:a7:04:61:a6:
a4:51:48:e2:06:99:0f:dc:be:0b:88:5d:54:dc:f6:2f:18:4d:
0f:48:b8:f2:2b:44:50:c2:09:eb:ed:ab:00:ec:80:27:07:db:
0d:57:d5:6e:c3:9d:84:07:b0:02:83:95:4b:24:e5:36:a4:5b:
ce:8c:36:40:11:af:fd:2c:8c:a6:21:13:38:c7:1f:ed:01:0f:
9a:39:fa:86:59:d5:b4:de:af:3e:54:82:f4:85:f2:1a:ac:df:
69:72:c0:3a:11:e3:2e:03:87:c0:ec:c8:b2:d2:7b:bd:d0:e6:
79:36:d4:28:8a:a4:56:20:61:05:d2:88:e7:e2:90:78:7e:30:
1e:8c:6d:6c:84:13:aa:fa:15:5c:3a:d3:11:eb:0c:6f:95:51:
d0:01:c1:b6:10:9e:9b:25:1d:b8:74:82:d1:66:a0:da:c6:67:
28:37:31:43:7a:e3:46:9c:e5:b6:93:c1:11:2e:ef:8b:51:bb:
5b:95:c1:cd:00:ae:2d:48:e1:2c:00:13:42:78:10:0d:93:ea:
f0:75:df:43:b0:7b:78:2a:e1:94:b3:4e:8e:07:f3:17:ec:3f:
44:b2:56:dd:1c:42:14:0e:94:c2:8b:37:af:62:58:18:4e:12:
a0:9e:49:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org