Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GCfjw2QpBi6qT6nAvntviGD4rhyeRfUyy2ZwooQocPTW/0/323830343a373032303a3a2f33332d3333203d3e20323730373037.roa
File: 323830343a373032303a3a2f33332d3333203d3e20323730373037.roa (raw, json)
Hash identifier: 9O9ACubfPIvoZ6CXyaiyfTPFnEVzQKg6PYJsV2pCr08=
Subject key identifier: 41:3D:8E:02:4B:A8:CD:32:31:E5:8E:68:9F:CD:FA:C7:9F:69:DE:E6
Certificate issuer: /CN=70D42EF292639D20E817DA32AA3DE2306DCD4C45
Certificate serial: 2DB6E03DE023DA9494736AEAE17E0AC323A2584D
Authority key identifier: 70:D4:2E:F2:92:63:9D:20:E8:17:DA:32:AA:3D:E2:30:6D:CD:4C:45
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70D42EF292639D20E817DA32AA3DE2306DCD4C45.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GCfjw2QpBi6qT6nAvntviGD4rhyeRfUyy2ZwooQocPTW/0/323830343a373032303a3a2f33332d3333203d3e20323730373037.roa
Signing time: Thu 01 Jun 2023 18:36:01 +0000
ROA not before: Thu 01 Jun 2023 18:31:01 +0000
ROA not after: Thu 30 May 2024 18:36:01 +0000
asID: 270707
IP address blocks: 2804:7020::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:b6:e0:3d:e0:23:da:94:94:73:6a:ea:e1:7e:0a:c3:23:a2:58:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70D42EF292639D20E817DA32AA3DE2306DCD4C45
Validity
Not Before: Jun 1 18:31:01 2023 GMT
Not After : May 30 18:36:01 2024 GMT
Subject: CN=413D8E024BA8CD3231E58E689FCDFAC79F69DEE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:fe:81:81:27:b2:26:e9:dd:76:39:55:ef:24:
5d:98:b9:0d:bf:85:17:ac:05:ec:ec:05:00:ce:0f:
83:12:30:7a:ea:71:34:1d:30:e1:f9:4c:43:d7:c5:
be:a6:17:98:96:e7:0b:a0:19:7b:eb:ec:23:92:4d:
8a:e5:b5:4f:00:7c:fc:86:64:8d:22:7f:dc:98:20:
5b:5c:1b:7d:79:28:53:fe:8e:fe:b0:ad:2d:2c:c9:
53:b2:63:ac:14:7a:97:aa:8c:d4:dd:3d:8a:44:f4:
93:ee:91:5c:10:ef:ae:20:08:3b:28:64:73:2b:f5:
86:50:f7:02:67:05:52:13:a0:01:36:d3:fe:86:04:
0a:d5:10:1e:13:2c:bd:90:47:43:c6:38:ae:ac:25:
0f:c7:99:2f:06:54:92:c4:e2:12:f6:ba:17:07:73:
a8:d3:d6:5d:70:fc:67:00:e5:00:6d:68:25:e9:41:
3e:75:6d:e6:bc:34:17:e3:88:83:7c:81:78:4c:d6:
7d:15:8b:6b:72:e6:ec:e1:09:17:fb:cb:b5:25:a6:
e9:e0:fb:d9:a6:32:04:01:b9:3f:41:49:f8:89:26:
6c:6c:66:48:c1:dd:42:a4:0b:bd:81:d7:88:45:f3:
8a:31:aa:35:df:71:a1:37:62:1f:80:6c:dc:5e:a4:
90:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3D:8E:02:4B:A8:CD:32:31:E5:8E:68:9F:CD:FA:C7:9F:69:DE:E6
X509v3 Authority Key Identifier:
keyid:70:D4:2E:F2:92:63:9D:20:E8:17:DA:32:AA:3D:E2:30:6D:CD:4C:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GCfjw2QpBi6qT6nAvntviGD4rhyeRfUyy2ZwooQocPTW/0/70D42EF292639D20E817DA32AA3DE2306DCD4C45.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70D42EF292639D20E817DA32AA3DE2306DCD4C45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GCfjw2QpBi6qT6nAvntviGD4rhyeRfUyy2ZwooQocPTW/0/323830343a373032303a3a2f33332d3333203d3e20323730373037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7020::/33
Signature Algorithm: sha256WithRSAEncryption
c2:f0:02:21:c6:be:41:0e:01:bd:c9:fa:6a:d5:aa:3d:6b:45:
df:2b:76:53:71:b0:d3:93:a7:5c:3f:52:3d:2b:99:e4:fd:1d:
5e:5f:5a:94:df:86:19:04:cc:64:88:5a:c9:97:75:52:ae:4e:
84:8b:4e:f9:81:b6:d0:13:38:10:f6:26:6c:5c:13:18:84:87:
53:f5:6a:d1:fe:df:ee:d4:7a:be:62:b1:8d:86:81:d0:2b:9d:
76:8c:30:cb:6e:ca:17:c1:c5:3d:eb:b2:5f:6b:d8:66:db:31:
83:e4:e9:4e:8a:e3:49:ec:42:93:26:ce:e9:c9:ca:da:65:e9:
0d:00:8b:ec:76:f5:2a:f1:83:9c:89:ed:b2:5c:a4:f0:8c:4f:
16:47:1b:5a:3a:09:a0:05:0e:d4:bd:90:5f:2c:60:f8:b7:4e:
af:e6:8b:2d:34:1b:4d:a6:51:ec:04:e3:da:37:d9:b2:88:ae:
82:23:b5:d0:30:96:5c:e7:18:c4:5f:2f:3d:da:2a:76:89:92:
8d:f0:a8:31:6a:05:98:40:2f:b7:d7:04:86:95:b1:02:ef:f1:
25:6b:d3:75:f3:80:87:4d:88:84:14:14:3c:c4:3d:12:cf:83:
9d:3b:f7:aa:f2:77:66:21:b1:f5:fe:a1:07:4d:8b:e3:f8:d1:
9e:16:ca:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org