Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/323830343a313832343a3a2f33322d3332203d3e20323632333031.roa
File: 323830343a313832343a3a2f33322d3332203d3e20323632333031.roa (raw, json)
Hash identifier: AUKwKZ9L8JSC5bhovRJk89yyF560RqWuFBc95N3tTqM=
Subject key identifier: A5:23:BC:36:CA:8B:EF:BC:A2:45:30:29:1E:FA:6D:BA:B2:1B:48:3D
Certificate issuer: /CN=20D0C50C62128FF4D2F9FF85B6A5784BF430123F
Certificate serial: 493AC9479BC6785F5D591AD551B7093EEE4BCFB3
Authority key identifier: 20:D0:C5:0C:62:12:8F:F4:D2:F9:FF:85:B6:A5:78:4B:F4:30:12:3F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20D0C50C62128FF4D2F9FF85B6A5784BF430123F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/323830343a313832343a3a2f33322d3332203d3e20323632333031.roa
Signing time: Thu 07 Mar 2024 17:15:00 +0000
ROA not before: Thu 07 Mar 2024 17:10:00 +0000
ROA not after: Thu 06 Mar 2025 17:15:00 +0000
asID: 262301
IP address blocks: 2804:1824::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:3a:c9:47:9b:c6:78:5f:5d:59:1a:d5:51:b7:09:3e:ee:4b:cf:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20D0C50C62128FF4D2F9FF85B6A5784BF430123F
Validity
Not Before: Mar 7 17:10:00 2024 GMT
Not After : Mar 6 17:15:00 2025 GMT
Subject: CN=A523BC36CA8BEFBCA24530291EFA6DBAB21B483D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ef:8c:cc:e1:20:c8:8a:29:b6:3e:c7:de:9e:
37:85:41:c2:48:32:96:43:19:91:77:2f:be:f7:95:
90:25:d0:de:df:df:42:6e:40:59:bf:7c:e7:c2:18:
b5:af:78:44:00:07:ec:32:67:7c:0e:29:be:82:28:
a1:32:67:3a:c0:72:83:f6:24:87:97:73:20:3d:58:
2a:68:c9:52:69:89:dd:fb:0a:a7:a1:07:b5:2b:20:
f8:76:25:06:a5:f5:f4:8b:72:41:08:d3:ff:0c:ec:
b2:d4:dd:79:80:00:b6:b1:72:2d:b1:a0:47:20:41:
d0:c0:f9:1a:29:e0:8a:3b:6f:d9:25:8b:3a:1f:cf:
79:2a:fe:7d:d4:18:38:9e:05:ea:89:3c:9e:13:32:
83:9e:16:3c:c5:b9:e0:5d:5d:43:ec:2f:6c:1b:56:
59:7d:87:ab:21:d8:f9:fa:4b:a7:98:16:b7:c9:1e:
14:e3:37:ad:ee:64:33:68:aa:1c:79:7b:ef:88:57:
02:61:95:91:2b:3a:d0:4b:bb:38:58:9a:82:25:dc:
9f:1b:53:12:f1:a1:05:9a:20:bb:e6:be:c8:ef:73:
65:64:93:3b:3d:72:e4:98:40:34:78:9b:29:9d:bb:
9d:55:9f:a4:ac:d8:b8:2e:11:65:e0:70:ba:40:ed:
f0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:23:BC:36:CA:8B:EF:BC:A2:45:30:29:1E:FA:6D:BA:B2:1B:48:3D
X509v3 Authority Key Identifier:
keyid:20:D0:C5:0C:62:12:8F:F4:D2:F9:FF:85:B6:A5:78:4B:F4:30:12:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/20D0C50C62128FF4D2F9FF85B6A5784BF430123F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20D0C50C62128FF4D2F9FF85B6A5784BF430123F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/323830343a313832343a3a2f33322d3332203d3e20323632333031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1824::/32
Signature Algorithm: sha256WithRSAEncryption
67:da:f2:60:cb:18:f7:7a:89:b3:ff:92:a0:fa:5c:fb:1f:2a:
ab:9d:9f:93:24:73:7e:54:47:ce:53:09:b0:b2:ca:ee:4c:1e:
59:0f:2c:64:27:7e:94:3b:ae:9f:df:d2:43:0f:73:c5:38:e6:
3f:95:da:99:f1:d5:b0:fb:fb:ca:ad:fd:f0:7c:54:10:15:07:
78:5e:79:73:e3:90:2c:ab:dc:0a:b9:4c:43:57:3a:aa:1b:18:
a5:53:f9:bf:97:55:63:3b:3d:e1:1f:1c:a0:ea:f1:c0:3a:fb:
68:4b:b3:38:7a:d8:4a:00:a2:d7:98:78:ea:af:71:9e:cb:22:
13:94:6c:7b:b4:34:3d:03:b3:b4:dd:d8:72:27:41:c5:2d:ad:
f2:be:e2:7a:b3:3d:2d:b4:41:49:4a:89:0e:df:b2:3c:54:3b:
4f:95:5e:27:0c:de:a0:bf:16:b4:34:c3:1f:01:08:d1:27:ec:
81:7c:27:1d:84:3a:64:c8:08:ea:2b:85:d8:d1:77:7c:f6:7c:
b1:fb:a4:54:9a:3a:18:f3:e5:78:a1:f5:6e:cc:6b:fa:22:04:
39:56:92:84:40:94:f1:97:fb:75:31:62:c1:b2:ea:49:4d:67:
95:6b:77:38:71:1f:75:d0:c3:2d:36:ab:f9:23:9e:5c:b9:8b:
52:52:86:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org