Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/1/323830343a34633a3a2f33322d3438203d3e2038303535.roa
File: 323830343a34633a3a2f33322d3438203d3e2038303535.roa (raw, json)
Hash identifier: gbGFidQSryg87jx0ax92K0/F3Z7idjAciufEyi/UNJM=
Subject key identifier: 03:20:2C:79:06:0D:8A:46:8C:F4:24:30:19:B4:F0:31:B0:EE:7F:3F
Certificate issuer: /CN=3B2ECC1C5E247D5DBE9CD0F668277EEAB0637717
Certificate serial: 2523E26E47D2189C1A93F174EC9C4BD19D1F08FB
Authority key identifier: 3B:2E:CC:1C:5E:24:7D:5D:BE:9C:D0:F6:68:27:7E:EA:B0:63:77:17
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B2ECC1C5E247D5DBE9CD0F668277EEAB0637717.cer
Subject info access: rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/1/323830343a34633a3a2f33322d3438203d3e2038303535.roa
Signing time: Wed 03 Apr 2024 18:31:52 +0000
ROA not before: Wed 03 Apr 2024 18:26:52 +0000
ROA not after: Wed 02 Apr 2025 18:31:52 +0000
asID: 8055
IP address blocks: 2804:4c::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:23:e2:6e:47:d2:18:9c:1a:93:f1:74:ec:9c:4b:d1:9d:1f:08:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B2ECC1C5E247D5DBE9CD0F668277EEAB0637717
Validity
Not Before: Apr 3 18:26:52 2024 GMT
Not After : Apr 2 18:31:52 2025 GMT
Subject: CN=03202C79060D8A468CF4243019B4F031B0EE7F3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:91:f5:13:7b:43:b8:de:b5:ab:6a:7e:fc:a7:
58:11:b6:f0:f6:26:4c:87:4b:d2:74:dc:9a:14:85:
00:bd:ad:7f:06:48:a2:f9:1f:4a:43:68:99:27:1a:
40:d6:f9:bc:73:4e:bf:97:7b:a6:0c:26:ec:ff:70:
c7:13:aa:0e:10:7f:7e:50:59:e8:cd:27:1f:31:af:
72:e5:a2:00:36:40:9f:28:2e:57:b7:21:4c:81:2d:
13:59:64:2b:09:b6:d4:13:ab:19:4d:f2:25:07:bf:
cd:1d:33:3d:02:e6:c1:68:25:44:98:04:7e:4a:ff:
ab:8b:d8:34:d9:08:fc:88:f8:5c:8d:cf:a0:28:0f:
37:36:a3:ba:24:4b:f3:9c:f4:7b:7d:d3:43:34:6d:
d5:e6:66:2d:09:b9:f1:a1:49:89:47:cd:8a:84:8a:
91:f2:71:5e:fb:b3:e0:d0:1e:9f:ee:50:d8:9d:2e:
30:7b:de:c2:ea:66:47:0a:97:aa:7a:d2:4f:7b:d2:
54:11:11:1b:0e:b6:5b:5c:e4:6b:95:63:86:11:b1:
37:e3:1f:b1:1a:cf:98:e6:d1:02:8a:52:14:41:a8:
26:c2:3e:dd:11:89:22:6d:c8:74:ea:67:22:f1:02:
d6:0a:12:a9:47:2a:73:3f:c4:b6:e6:c4:e2:29:6b:
7d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:20:2C:79:06:0D:8A:46:8C:F4:24:30:19:B4:F0:31:B0:EE:7F:3F
X509v3 Authority Key Identifier:
keyid:3B:2E:CC:1C:5E:24:7D:5D:BE:9C:D0:F6:68:27:7E:EA:B0:63:77:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/1/3B2ECC1C5E247D5DBE9CD0F668277EEAB0637717.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B2ECC1C5E247D5DBE9CD0F668277EEAB0637717.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/1/323830343a34633a3a2f33322d3438203d3e2038303535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4c::/32
Signature Algorithm: sha256WithRSAEncryption
ca:ea:ae:84:39:1f:92:fa:15:42:60:88:56:a5:a7:b7:8f:6c:
93:dc:fd:ae:25:8a:ae:68:c9:8c:38:be:90:b4:9f:81:a7:d1:
dc:c6:bb:c6:13:55:8c:23:32:7d:72:3f:ca:62:24:b4:83:74:
e6:35:ce:6c:4b:77:60:8f:75:a4:8a:91:e6:71:e6:08:ff:5c:
3a:e5:c4:ba:af:44:cd:c4:34:1a:cb:7b:57:6f:73:c6:1e:e2:
f5:f1:43:ec:47:dc:07:c3:e3:29:8b:54:c5:a7:3c:a7:3a:4b:
fe:2b:d1:80:27:d7:b8:10:dc:76:bc:48:4e:20:29:c9:96:fb:
63:ef:1e:26:d2:1d:18:2c:30:e0:8f:53:db:d5:5c:22:8a:5d:
09:35:a1:34:ba:f4:db:bd:9c:6c:5a:0d:0b:b0:47:9e:5d:b7:
f7:4a:a6:3f:44:23:ce:da:fc:fa:61:fa:9d:04:71:f9:39:29:
3e:dc:5c:ac:88:0d:3a:8e:d5:75:87:3d:9c:51:a3:20:1b:7d:
fa:3a:b0:f4:71:db:a2:7f:f9:ee:01:c9:a5:90:94:c2:88:bf:
24:5c:43:95:8f:91:46:ef:8d:7d:de:f8:cb:b7:97:40:89:83:
34:43:a2:b2:b7:3f:ff:92:ad:67:c9:cb:7f:b5:45:b3:3b:2d:
47:03:fe:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org