Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a363831363a3a2f34382d3438203d3e20323638343731.roa
File: 323830343a353162343a363831363a3a2f34382d3438203d3e20323638343731.roa (raw, json)
Hash identifier: Q5qd4OjUQiCnpgP9E1nbOwD+6NLkQill7EcDxjj4lXM=
Subject key identifier: 1E:22:52:75:EB:5D:8A:E6:95:71:DF:84:F6:2D:F4:AD:B4:38:20:0C
Certificate issuer: /CN=3AA25D1A66959674425740B0D69389FFFDDE91CB
Certificate serial: 7C94536879C212494286232C647D540774E587DC
Authority key identifier: 3A:A2:5D:1A:66:95:96:74:42:57:40:B0:D6:93:89:FF:FD:DE:91:CB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AA25D1A66959674425740B0D69389FFFDDE91CB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a363831363a3a2f34382d3438203d3e20323638343731.roa
Signing time: Wed 08 Mar 2023 13:36:44 +0000
ROA not before: Wed 08 Mar 2023 13:31:44 +0000
ROA not after: Wed 06 Mar 2024 13:36:44 +0000
asID: 268471
IP address blocks: 2804:51b4:6816::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:94:53:68:79:c2:12:49:42:86:23:2c:64:7d:54:07:74:e5:87:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3AA25D1A66959674425740B0D69389FFFDDE91CB
Validity
Not Before: Mar 8 13:31:44 2023 GMT
Not After : Mar 6 13:36:44 2024 GMT
Subject: CN=1E225275EB5D8AE69571DF84F62DF4ADB438200C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fb:8a:8c:ad:42:d7:e7:54:94:cb:1c:e2:94:
3e:7d:57:bd:51:fd:e7:5e:93:cc:69:2e:9f:e4:15:
5a:fa:90:77:33:d9:09:a3:27:21:e6:88:48:b0:e5:
d5:fb:c4:d0:6d:ac:18:dc:8d:80:cf:0e:f2:ab:7d:
28:7b:15:50:c8:49:2b:a0:32:30:8e:97:db:49:89:
66:a1:61:b2:8e:92:0f:b6:cb:7b:c9:36:f7:db:b7:
8f:7d:0f:8c:43:22:17:81:ae:15:00:b0:fd:cf:73:
7c:c7:76:e3:81:f3:a5:4b:61:75:80:28:ba:73:f6:
9a:ed:92:13:76:cf:ad:b9:26:b7:dd:79:10:5c:65:
5f:3f:85:e7:80:d9:a1:6c:24:ae:fc:58:e5:be:88:
52:c3:11:74:c7:3b:ef:2d:10:be:ff:95:97:42:96:
a7:87:73:6c:01:aa:04:7e:51:6c:53:bd:1f:11:59:
53:d6:df:51:88:4f:76:c5:01:4d:a9:b4:8b:29:a8:
7e:c2:47:6b:d3:83:5a:69:50:73:d8:9b:d9:fc:f4:
f5:4e:a4:7e:26:44:f4:54:b0:7f:9f:35:70:26:8b:
08:b6:ba:9a:75:be:79:4f:fe:c8:28:e7:10:d1:34:
e6:4d:28:9e:5d:22:84:b2:52:18:9d:f3:46:9d:0e:
5e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:22:52:75:EB:5D:8A:E6:95:71:DF:84:F6:2D:F4:AD:B4:38:20:0C
X509v3 Authority Key Identifier:
keyid:3A:A2:5D:1A:66:95:96:74:42:57:40:B0:D6:93:89:FF:FD:DE:91:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/3AA25D1A66959674425740B0D69389FFFDDE91CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AA25D1A66959674425740B0D69389FFFDDE91CB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a363831363a3a2f34382d3438203d3e20323638343731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:51b4:6816::/48
Signature Algorithm: sha256WithRSAEncryption
93:11:7a:96:3c:57:de:21:b6:05:0c:3b:2d:79:d2:a3:e8:a2:
12:fa:57:93:04:f5:dd:05:4d:8e:a7:73:98:18:3a:17:e9:c8:
c8:1f:65:a0:00:ab:ba:9f:d4:62:d0:09:d1:dd:8a:59:1d:f4:
c0:11:3e:bf:e7:ca:52:02:28:ad:66:13:f2:a3:af:fd:53:4a:
0a:b6:3d:97:93:94:06:29:d3:30:65:a4:7f:05:c4:98:3e:92:
21:18:ca:62:66:93:db:14:30:bb:fb:7b:1a:6f:80:32:c8:d9:
28:ef:c3:9c:63:b6:6a:0d:44:0c:9b:0a:14:23:5f:df:ad:04:
51:59:d1:50:4c:08:9f:eb:bc:5a:17:2f:bc:94:17:3d:4f:4c:
d4:e4:8d:84:49:72:fb:d3:3f:cf:84:ef:f2:f5:5c:d1:00:53:
97:0d:0d:f4:de:a1:9d:28:4b:58:22:ce:42:43:98:af:01:28:
f1:d7:b3:c7:77:d5:53:a6:37:c4:4f:93:93:75:5e:2c:62:63:
83:d9:32:8c:1c:e2:ea:6d:80:39:26:77:39:10:4e:be:42:6e:
ad:43:0a:84:01:82:73:b7:a6:29:ec:4a:40:53:e2:e8:69:4b:
65:69:3b:ff:93:3b:8c:2b:17:56:25:05:47:40:df:73:97:89:
83:cc:09:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org