Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/323830343a326231303a3a2f33382d3338203d3e203532393136.roa
File: 323830343a326231303a3a2f33382d3338203d3e203532393136.roa (raw, json)
Hash identifier: ii5LdGgQAVJngR0tW6I072dZ6akGNQSp1NBPA8yknUU=
Subject key identifier: BD:61:35:EF:0A:7E:A4:B9:93:8C:CA:2B:FC:E3:B5:9E:E4:C5:40:AA
Certificate issuer: /CN=D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D
Certificate serial: 4B83F713366CFCA5B53B120A2A276CAF892CBA7A
Authority key identifier: D1:03:4C:4B:71:C8:FD:5C:F3:CC:7E:3C:02:EC:F8:22:A1:A2:17:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/323830343a326231303a3a2f33382d3338203d3e203532393136.roa
Signing time: Tue 12 Mar 2024 12:30:50 +0000
ROA not before: Tue 12 Mar 2024 12:25:50 +0000
ROA not after: Tue 11 Mar 2025 12:30:50 +0000
asID: 52916
IP address blocks: 2804:2b10::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:83:f7:13:36:6c:fc:a5:b5:3b:12:0a:2a:27:6c:af:89:2c:ba:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D
Validity
Not Before: Mar 12 12:25:50 2024 GMT
Not After : Mar 11 12:30:50 2025 GMT
Subject: CN=BD6135EF0A7EA4B9938CCA2BFCE3B59EE4C540AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d6:2e:2d:3c:1d:2f:58:13:8d:6b:df:3b:39:
8a:ff:7e:e3:93:2b:cb:33:20:4c:f6:7e:d7:a4:37:
39:04:7f:7c:e0:b4:fd:58:a5:bc:f4:0e:2f:50:82:
8f:41:c7:08:72:6b:62:90:49:5a:4e:18:07:cf:02:
42:c0:bf:7f:85:ae:06:ad:7c:e1:f3:c5:d3:1c:89:
11:eb:d2:31:a4:80:c8:df:bd:6c:4b:a0:b6:38:33:
e6:87:60:be:d4:6e:c3:d5:37:1c:15:1b:88:00:c1:
bc:cb:26:02:77:d9:4c:03:1d:31:45:07:d8:02:9b:
c0:cf:cd:b3:2c:41:46:7a:1b:41:8d:83:f4:da:37:
41:16:7f:e6:37:8d:d4:81:82:92:56:f0:e1:0e:65:
9a:ac:ce:49:b6:7b:ca:84:9d:38:a5:24:58:2b:a0:
d2:c0:6b:23:97:0d:8f:cf:cb:fc:9c:3d:1e:ff:98:
2d:cb:df:f5:3d:ea:ca:f4:65:70:98:1c:f7:75:47:
27:10:fa:46:ef:63:2f:3b:9c:6b:7a:1a:f9:03:8b:
6f:67:e8:8a:38:b7:b9:77:dd:7a:5f:63:da:3f:cb:
53:b4:c7:2b:a5:2f:74:17:39:00:3c:ab:54:bb:60:
5d:32:44:69:1e:83:ad:7f:35:26:46:ae:b6:c0:3c:
d1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:61:35:EF:0A:7E:A4:B9:93:8C:CA:2B:FC:E3:B5:9E:E4:C5:40:AA
X509v3 Authority Key Identifier:
keyid:D1:03:4C:4B:71:C8:FD:5C:F3:CC:7E:3C:02:EC:F8:22:A1:A2:17:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/323830343a326231303a3a2f33382d3338203d3e203532393136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2b10::/38
Signature Algorithm: sha256WithRSAEncryption
bf:df:81:3c:a6:37:8b:cf:ed:a5:27:f3:bb:3a:08:b4:eb:63:
bf:75:c2:99:27:d6:21:a3:56:f1:fd:90:41:ae:39:1c:c4:08:
30:d3:27:a2:3d:b5:f4:de:b7:b3:a6:70:12:e7:d5:4e:5b:f5:
81:bf:2c:f3:27:f8:71:db:9c:87:31:c7:1d:7e:42:fa:d1:b9:
5a:7c:d3:82:7e:ad:17:19:2b:24:72:86:ee:f4:55:47:f4:85:
b0:3f:22:fc:57:12:ce:12:70:c4:f6:1e:01:55:67:01:e2:75:
07:0d:a0:db:c6:8d:1d:0c:bb:e9:2f:8b:30:43:b5:bb:b5:ad:
85:35:b6:fb:64:eb:5c:f9:d9:06:17:26:4d:94:76:1d:bd:73:
80:2e:a8:68:7d:01:bb:c8:02:52:d6:31:10:8f:3b:29:31:74:
f4:eb:8b:36:8b:c0:56:00:19:4d:34:d8:a3:8f:1f:18:bb:f4:
a5:c9:99:88:27:e2:3e:b7:11:f5:88:42:70:c1:9c:d6:e3:91:
2c:38:86:e6:40:d1:9d:93:38:45:55:5c:17:c0:d1:b4:38:6e:
db:a0:c1:c7:fb:fd:8d:9c:31:ae:e9:18:69:6f:5a:8a:4f:87:
4c:38:be:29:dc:a5:79:75:78:f6:77:e0:a9:7b:f2:01:fb:9c:
c1:ce:6b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org