Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/323830343a316165343a3a2f33322d3334203d3e203631363937.roa
File: 323830343a316165343a3a2f33322d3334203d3e203631363937.roa (raw, json)
Hash identifier: MMh2bCQfdUahMO/5GfeZs4gvRMm+X4GUraNnpmcDyYs=
Subject key identifier: B7:4A:56:3B:68:74:AE:32:F1:22:91:8E:FE:72:A6:ED:6B:79:79:42
Certificate issuer: /CN=B29355F34D84FEFB940F79B0B63F241ED834BDD3
Certificate serial: 4684E91DA488329035722994921CBA07AFE030CC
Authority key identifier: B2:93:55:F3:4D:84:FE:FB:94:0F:79:B0:B6:3F:24:1E:D8:34:BD:D3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B29355F34D84FEFB940F79B0B63F241ED834BDD3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/323830343a316165343a3a2f33322d3334203d3e203631363937.roa
Signing time: Fri 27 Oct 2023 18:32:49 +0000
ROA not before: Fri 27 Oct 2023 18:27:49 +0000
ROA not after: Fri 25 Oct 2024 18:32:49 +0000
asID: 61697
IP address blocks: 2804:1ae4::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:84:e9:1d:a4:88:32:90:35:72:29:94:92:1c:ba:07:af:e0:30:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B29355F34D84FEFB940F79B0B63F241ED834BDD3
Validity
Not Before: Oct 27 18:27:49 2023 GMT
Not After : Oct 25 18:32:49 2024 GMT
Subject: CN=B74A563B6874AE32F122918EFE72A6ED6B797942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2f:4f:16:51:ad:13:1e:63:0f:64:22:dd:ff:
d2:fc:60:dc:8c:65:91:aa:5d:ea:02:6a:5f:47:40:
00:71:40:cf:49:f8:a0:5c:68:11:73:91:39:0b:a6:
d8:e7:17:06:6b:13:83:78:92:a0:16:ea:0e:3b:96:
d8:eb:c6:65:d8:2e:eb:26:32:20:e4:ca:13:6b:7e:
cd:de:86:4a:b6:ac:73:87:0c:28:d6:f8:ea:8d:59:
c9:26:9b:99:47:d7:3f:b2:90:d4:9b:35:04:90:eb:
7a:d4:13:58:90:6e:ae:bd:09:6a:c1:25:6b:5f:39:
6c:0b:d4:d9:2f:69:1f:71:15:a5:9c:cc:80:d6:da:
40:38:76:3f:57:5d:b9:a1:37:30:d9:f6:4c:b9:08:
83:fa:99:ba:50:5d:86:9b:99:af:fb:bb:c6:96:63:
15:31:65:11:46:97:5c:fb:73:e2:7a:aa:1f:60:3a:
c0:a5:2f:fe:0d:c3:10:8b:98:cf:82:03:f3:38:58:
8e:7e:90:13:0d:0b:56:ae:7d:d4:83:de:3e:86:f2:
b2:2b:01:ec:2a:af:e8:cf:b0:60:30:fe:4e:00:4d:
fd:d8:bf:b3:aa:8d:3a:de:05:fb:e1:02:df:17:f8:
cf:c5:41:fb:62:87:29:41:d0:98:e5:e8:c8:7c:b6:
6a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4A:56:3B:68:74:AE:32:F1:22:91:8E:FE:72:A6:ED:6B:79:79:42
X509v3 Authority Key Identifier:
keyid:B2:93:55:F3:4D:84:FE:FB:94:0F:79:B0:B6:3F:24:1E:D8:34:BD:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/B29355F34D84FEFB940F79B0B63F241ED834BDD3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B29355F34D84FEFB940F79B0B63F241ED834BDD3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/323830343a316165343a3a2f33322d3334203d3e203631363937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1ae4::/32
Signature Algorithm: sha256WithRSAEncryption
25:8b:6c:7b:84:ac:ce:57:35:22:4e:7d:92:85:5a:b7:37:74:
a5:5c:43:46:56:2e:85:fb:1d:84:10:b6:3b:2e:af:03:43:09:
04:7b:b5:cb:0f:a4:f2:f5:42:3e:bc:74:ae:35:75:cc:60:6e:
97:73:7d:25:07:63:80:0c:63:e0:e9:6e:eb:8e:14:60:65:e3:
8a:49:c5:00:83:32:0b:59:6c:41:ef:04:48:2d:3c:15:6f:e4:
34:d9:ed:e5:29:7c:ff:14:11:85:79:96:53:66:29:09:d7:ea:
36:a8:aa:b6:86:3d:69:87:86:56:1e:83:9b:74:91:56:d6:59:
2f:9c:56:cc:53:c1:03:ec:f5:bf:98:a8:7e:c9:97:d2:61:cd:
75:36:12:3a:51:95:95:f0:67:c0:64:96:ca:99:53:12:c1:85:
da:3b:21:d2:82:b4:ee:e9:e3:e3:1f:2d:d3:b3:39:1e:f9:4e:
92:8d:df:df:5c:22:fd:84:0e:0b:4c:9e:56:5f:90:05:41:17:
4d:6a:01:84:af:30:9b:43:3e:7a:3c:30:71:63:86:29:f8:36:
2d:3a:45:be:27:b2:a2:2e:ce:6f:30:56:f8:f0:a3:2f:ab:51:
0e:bc:9f:bd:ad:d2:f7:b1:87:df:e6:3a:41:df:06:9a:7f:cb:
bc:40:8d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org