Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a373233333a3a2f34382d3438203d3e20323638343731.roa
File: 323830343a353162343a373233333a3a2f34382d3438203d3e20323638343731.roa (raw, json)
Hash identifier: QJzSUk2n8OZMzzFf89N/q+f9Y08j3CZdbrTp9OJsnEA=
Subject key identifier: E2:81:11:31:F7:F1:1D:DE:53:54:DA:AA:60:00:9E:24:B8:D0:66:B4
Certificate issuer: /CN=3AA25D1A66959674425740B0D69389FFFDDE91CB
Certificate serial: 7D05F1D266A4F6A079B3F7B6ECC3A414BB18E71E
Authority key identifier: 3A:A2:5D:1A:66:95:96:74:42:57:40:B0:D6:93:89:FF:FD:DE:91:CB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AA25D1A66959674425740B0D69389FFFDDE91CB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a373233333a3a2f34382d3438203d3e20323638343731.roa
Signing time: Wed 08 Mar 2023 13:40:11 +0000
ROA not before: Wed 08 Mar 2023 13:35:11 +0000
ROA not after: Wed 06 Mar 2024 13:40:11 +0000
asID: 268471
IP address blocks: 2804:51b4:7233::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:05:f1:d2:66:a4:f6:a0:79:b3:f7:b6:ec:c3:a4:14:bb:18:e7:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3AA25D1A66959674425740B0D69389FFFDDE91CB
Validity
Not Before: Mar 8 13:35:11 2023 GMT
Not After : Mar 6 13:40:11 2024 GMT
Subject: CN=E2811131F7F11DDE5354DAAA60009E24B8D066B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ef:23:bd:7c:58:62:82:98:ea:b9:ba:26:fc:
08:15:73:b5:c0:4b:16:d9:56:52:28:05:53:27:c1:
f3:2a:af:54:6a:68:e0:28:46:58:54:9e:4d:7f:c5:
20:1c:0b:88:ea:ce:d5:9e:7e:7d:bd:75:2f:d8:b7:
18:d7:2b:53:bf:e0:2a:38:c6:cc:7e:e9:5e:8f:d9:
9e:53:55:98:a5:7a:fe:d6:5c:fe:ff:03:4e:67:89:
ba:f5:a5:d2:aa:e4:fe:a8:36:19:d3:01:32:28:63:
b2:80:81:3f:ff:40:6f:85:68:09:0e:f6:ce:83:7d:
e5:e9:fb:06:6a:02:75:35:0c:09:ae:58:de:4c:fb:
4f:59:63:ef:a5:f6:95:fb:cb:0d:5c:42:8c:a9:5d:
91:e1:ac:2a:12:77:07:0a:0a:4e:27:63:73:53:41:
e8:c3:23:1c:42:1a:31:ad:34:a4:ad:c7:92:fa:47:
7b:4d:1d:05:94:a5:28:d4:f6:95:db:4d:8b:d4:d4:
62:a9:9a:db:e3:5e:22:d3:85:b2:f2:ea:c9:12:b0:
20:20:0b:00:0b:42:6e:62:79:f4:f2:ec:e5:2d:d6:
20:ac:44:2c:77:9b:98:81:bd:cc:f1:40:71:bf:64:
dd:df:13:56:16:9e:4f:0b:20:93:9a:92:73:52:48:
a8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:81:11:31:F7:F1:1D:DE:53:54:DA:AA:60:00:9E:24:B8:D0:66:B4
X509v3 Authority Key Identifier:
keyid:3A:A2:5D:1A:66:95:96:74:42:57:40:B0:D6:93:89:FF:FD:DE:91:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/3AA25D1A66959674425740B0D69389FFFDDE91CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AA25D1A66959674425740B0D69389FFFDDE91CB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a373233333a3a2f34382d3438203d3e20323638343731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:51b4:7233::/48
Signature Algorithm: sha256WithRSAEncryption
3d:2b:a6:cc:fd:46:6a:37:3c:d0:53:76:01:f2:43:9d:59:68:
52:89:eb:65:df:19:ce:bc:c6:fb:c6:d6:a8:1a:0a:63:f1:ac:
b0:98:42:d0:60:ce:6c:48:40:77:de:fd:6c:8d:1b:9f:91:05:
f1:0e:bd:7b:d3:54:1a:c9:53:f2:c9:15:6d:75:f4:f6:fc:93:
e3:69:64:e7:da:d9:d2:6f:21:89:a1:c4:05:6e:7e:66:4e:15:
9a:fb:69:c1:2f:3a:4c:8e:04:85:92:24:35:df:70:53:2d:d0:
28:f6:96:1b:01:85:a0:13:65:2b:fd:0d:9a:48:f6:8f:87:3b:
8b:66:f3:4f:f0:64:ba:4a:5c:25:28:89:5e:3d:59:fa:22:fc:
b4:12:cf:8f:1f:d8:13:4a:5e:0d:18:7f:b9:2a:ef:88:4c:ba:
e8:eb:9a:4e:70:f0:78:c6:d3:70:e4:90:03:e7:3f:49:b0:45:
7f:c5:bd:61:08:f2:7a:2b:4b:4b:d5:96:6b:c9:7f:ca:03:ad:
50:5d:78:02:cd:61:1a:cf:fa:b4:95:00:c2:8f:a2:58:c1:a3:
11:c1:18:3f:34:17:8d:5b:2f:9a:86:bf:93:61:12:8c:4d:20:
b1:a4:39:33:00:38:29:82:4d:bc:7f:6f:b3:8f:52:bc:e2:eb:
ce:ae:52:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:08 2024 by rpki-client on console-ams.rpki-client.org