Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a363531363a3a2f34382d3438203d3e20323638343731.roa
File: 323830343a353162343a363531363a3a2f34382d3438203d3e20323638343731.roa (raw, json)
Hash identifier: irVrNNrUvl5OOhF07NpHIcPQ/55i8+QlYMc8mgsaGU0=
Subject key identifier: A0:C9:09:40:46:EF:A5:5F:D3:2F:D4:FA:86:E0:64:CF:0C:97:92:14
Certificate issuer: /CN=3AA25D1A66959674425740B0D69389FFFDDE91CB
Certificate serial: 5F52CD2332DA9700251CD7BA765747A2388C21C9
Authority key identifier: 3A:A2:5D:1A:66:95:96:74:42:57:40:B0:D6:93:89:FF:FD:DE:91:CB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AA25D1A66959674425740B0D69389FFFDDE91CB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a363531363a3a2f34382d3438203d3e20323638343731.roa
Signing time: Wed 08 Mar 2023 13:35:01 +0000
ROA not before: Wed 08 Mar 2023 13:30:01 +0000
ROA not after: Wed 06 Mar 2024 13:35:01 +0000
asID: 268471
IP address blocks: 2804:51b4:6516::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:52:cd:23:32:da:97:00:25:1c:d7:ba:76:57:47:a2:38:8c:21:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3AA25D1A66959674425740B0D69389FFFDDE91CB
Validity
Not Before: Mar 8 13:30:01 2023 GMT
Not After : Mar 6 13:35:01 2024 GMT
Subject: CN=A0C9094046EFA55FD32FD4FA86E064CF0C979214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fb:82:1e:b8:50:d2:47:78:51:13:fe:a4:17:
ae:60:f7:44:96:57:82:af:94:6b:61:d0:4e:25:0e:
da:ab:df:85:fe:57:65:e6:00:ca:42:4a:04:3a:d1:
91:a3:0b:3c:19:eb:a4:6c:22:95:5b:eb:82:b7:e6:
40:43:c6:3c:c2:6f:89:55:b9:22:67:fd:b0:4c:7f:
42:cd:29:81:58:31:45:d6:5a:53:bb:16:43:2a:be:
11:91:d9:01:33:7f:36:33:52:ec:b1:ce:b9:3a:69:
7f:11:04:d2:ca:59:19:83:2a:6c:11:40:35:1e:20:
50:19:2d:d1:1d:be:63:b0:f3:6c:34:b3:1d:96:f2:
a5:03:b2:90:66:8c:66:7a:d6:e3:ae:7d:a1:81:da:
4f:c7:47:74:c7:eb:f7:68:63:01:0f:df:49:a4:b1:
c7:36:f6:cc:da:70:01:7e:8a:78:3e:05:be:df:cb:
7e:c8:72:e8:a6:1c:98:64:aa:57:fa:f5:db:5f:e0:
0c:aa:db:df:bc:17:37:ef:24:2b:bd:0a:5c:06:80:
f4:7b:9c:6b:5c:18:d5:78:0c:cf:be:cd:9a:60:c9:
7d:bb:ef:56:86:9d:92:46:dd:58:da:c8:2f:75:e6:
19:84:23:cc:0d:63:cf:63:c1:b9:bd:f7:e6:cd:fb:
cd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C9:09:40:46:EF:A5:5F:D3:2F:D4:FA:86:E0:64:CF:0C:97:92:14
X509v3 Authority Key Identifier:
keyid:3A:A2:5D:1A:66:95:96:74:42:57:40:B0:D6:93:89:FF:FD:DE:91:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/3AA25D1A66959674425740B0D69389FFFDDE91CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AA25D1A66959674425740B0D69389FFFDDE91CB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a363531363a3a2f34382d3438203d3e20323638343731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:51b4:6516::/48
Signature Algorithm: sha256WithRSAEncryption
28:d9:7a:6c:1c:a2:cc:49:ba:27:45:a5:10:1a:f8:29:e4:50:
61:91:f7:d6:f3:91:cf:db:f6:c5:b8:2b:08:32:d8:f6:51:04:
5e:6a:92:d6:9d:54:af:ac:89:1c:25:b4:a7:bf:1f:be:5e:1c:
7a:75:52:29:1a:ab:4b:ad:2b:5b:de:4f:1f:78:1f:d5:ab:d1:
33:81:ef:ff:fa:4d:df:d4:1e:f8:6f:31:0e:dc:e6:8a:89:7d:
6c:54:0c:c9:10:86:db:e3:d5:d9:97:0d:c3:64:11:4e:9c:66:
ac:f7:44:ed:75:37:d8:5d:85:f8:89:d5:3b:56:08:d4:3d:73:
fe:00:e9:7e:fe:2b:f1:97:aa:73:09:a8:6c:44:c1:0c:0b:b1:
af:94:f7:c1:d0:77:9b:b9:ef:7b:11:5d:7b:51:74:5a:81:55:
c9:83:9d:fb:25:99:4e:2a:2c:50:a3:79:c7:03:fc:0f:c0:89:
e4:00:9a:e5:16:7c:02:5a:65:28:19:71:b5:87:6a:27:4f:04:
52:44:f6:b3:c8:fd:ff:35:05:c7:65:ce:dc:29:8f:6d:60:c2:
e8:57:af:0e:9d:6d:dd:8a:05:92:e2:b8:60:20:03:5c:be:a5:
71:43:e0:74:d7:cf:71:05:9e:d7:65:cb:fd:98:c3:81:7a:ea:
3d:c3:91:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org