Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/323830343a3362303a3a2f33322d3438203d3e203533303632.roa
File: 323830343a3362303a3a2f33322d3438203d3e203533303632.roa (raw, json)
Hash identifier: t6ev1NzNKDqVmtLeEiADXNPI7G11xFqoWVGfD2bJgac=
Subject key identifier: 32:4D:17:52:EB:21:31:F6:CB:35:63:37:88:F0:DA:F3:26:8F:D0:0B
Certificate issuer: /CN=FF8022FCD112C507FDC1D72A4931605EF74BC817
Certificate serial: 72158BBD1814F0C6902774971BA2C5ECDD13B856
Authority key identifier: FF:80:22:FC:D1:12:C5:07:FD:C1:D7:2A:49:31:60:5E:F7:4B:C8:17
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF8022FCD112C507FDC1D72A4931605EF74BC817.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/323830343a3362303a3a2f33322d3438203d3e203533303632.roa
Signing time: Thu 04 Apr 2024 11:47:44 +0000
ROA not before: Thu 04 Apr 2024 11:42:44 +0000
ROA not after: Thu 03 Apr 2025 11:47:44 +0000
asID: 53062
IP address blocks: 2804:3b0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:15:8b:bd:18:14:f0:c6:90:27:74:97:1b:a2:c5:ec:dd:13:b8:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF8022FCD112C507FDC1D72A4931605EF74BC817
Validity
Not Before: Apr 4 11:42:44 2024 GMT
Not After : Apr 3 11:47:44 2025 GMT
Subject: CN=324D1752EB2131F6CB35633788F0DAF3268FD00B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:13:70:f8:c1:2b:c6:03:6f:e5:2b:d6:c3:ce:
03:23:d0:3a:0e:b3:e0:ce:3c:b6:33:05:58:a0:4b:
4c:ad:67:cc:a7:19:a1:20:59:25:ae:17:32:37:d8:
18:d7:b5:1e:80:ee:f4:1c:96:0e:8c:11:a9:e7:5d:
a1:be:27:f9:19:ce:9e:f0:47:3a:38:87:87:be:eb:
14:85:a7:68:e2:ee:38:e3:55:06:d1:84:e8:ba:c4:
d9:44:b1:f1:08:f3:43:68:d5:ce:c7:76:41:20:01:
fa:1e:96:3a:34:66:59:0d:33:da:e8:f3:af:03:26:
df:3b:87:0e:84:bc:2f:33:1d:7c:a9:4b:b5:b8:51:
96:74:35:ab:13:d8:fb:e4:51:06:61:9d:50:7e:97:
bb:d3:23:61:02:1d:4a:cc:dc:35:53:4f:04:42:ae:
a7:d8:3c:6f:d9:a2:43:fb:64:b4:4b:9f:d2:ad:dd:
b7:84:81:68:c7:34:26:f7:04:45:5d:76:1b:16:d0:
ff:27:73:4f:e0:73:0e:df:01:65:4c:97:00:1d:fb:
0b:0d:85:5e:4d:f7:69:f5:8a:21:82:41:4f:c9:28:
86:8a:ae:c1:15:91:b0:88:7a:a3:c6:c3:54:a0:ca:
eb:d6:a9:fe:94:27:b3:db:6a:9d:a4:ad:df:ce:50:
52:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4D:17:52:EB:21:31:F6:CB:35:63:37:88:F0:DA:F3:26:8F:D0:0B
X509v3 Authority Key Identifier:
keyid:FF:80:22:FC:D1:12:C5:07:FD:C1:D7:2A:49:31:60:5E:F7:4B:C8:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/FF8022FCD112C507FDC1D72A4931605EF74BC817.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF8022FCD112C507FDC1D72A4931605EF74BC817.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/323830343a3362303a3a2f33322d3438203d3e203533303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3b0::/32
Signature Algorithm: sha256WithRSAEncryption
3b:fc:45:78:bb:a9:d7:90:f3:89:5a:13:87:12:81:d4:59:47:
eb:89:ad:20:20:3f:c1:d7:08:58:47:32:3f:75:ec:4e:d9:00:
0c:9b:75:41:57:6e:ab:24:51:4b:34:86:27:d6:5e:36:bd:ca:
f9:6c:bc:99:e5:30:9a:68:b5:61:8b:49:81:6b:e2:87:f7:17:
77:6b:92:18:f1:3c:15:10:be:5c:6c:08:f5:88:5a:36:cd:3a:
bb:f3:24:8f:79:03:cd:55:e2:5a:8d:55:9a:17:db:94:fd:ce:
62:ec:86:9f:c7:90:4c:c0:ee:06:63:9f:61:2a:39:e1:c2:2b:
60:12:d9:d3:50:c5:06:0c:b8:d6:9f:56:9a:ad:32:9e:a7:6e:
36:c1:af:3c:bd:88:f7:f7:63:05:67:6b:63:81:64:55:31:c2:
ee:de:6b:01:28:b8:79:2d:b9:87:af:3d:51:c5:a9:56:91:be:
28:1b:59:4d:04:79:6e:87:28:6f:1d:39:dd:7e:d6:83:7a:4d:
27:d6:ec:57:3f:97:96:0b:10:00:df:2c:c3:b3:be:d1:7d:d0:
60:89:f3:1a:e7:49:fd:13:4a:fa:db:5f:cf:03:5d:3c:e7:fb:
a5:00:9a:fb:0c:90:80:7b:3c:68:cf:3d:a0:3d:04:52:02:86:
2e:7e:74:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 02:00:09 2024 by rpki-client on console-fra.rpki-client.org