Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GjyYAU52QoYGT2Po3nTaSeTUWhKxvkF8DetMZ9gxiV4J/0/323830343a366236633a3a2f33322d313238203d3e20323730333939.roa
File: 323830343a366236633a3a2f33322d313238203d3e20323730333939.roa (raw, json)
Hash identifier: INsHTOs5Kd0zBx5We/rze24+qukOZhsBLpkNaTFbOTM=
Subject key identifier: B3:E2:DA:78:00:22:73:5D:CD:3F:48:55:26:DC:BE:40:45:F7:A3:61
Certificate issuer: /CN=2A595312C7CDFF5A76DBAE734D50E12527241A24
Certificate serial: 40BEE3B44D672B481FBC4FFD900FA78C68E8D05C
Authority key identifier: 2A:59:53:12:C7:CD:FF:5A:76:DB:AE:73:4D:50:E1:25:27:24:1A:24
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A595312C7CDFF5A76DBAE734D50E12527241A24.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GjyYAU52QoYGT2Po3nTaSeTUWhKxvkF8DetMZ9gxiV4J/0/323830343a366236633a3a2f33322d313238203d3e20323730333939.roa
Signing time: Mon 30 Sep 2024 23:56:33 +0000
ROA not before: Mon 30 Sep 2024 23:51:33 +0000
ROA not after: Mon 29 Sep 2025 23:56:33 +0000
asID: 270399
IP address blocks: 2804:6b6c::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:be:e3:b4:4d:67:2b:48:1f:bc:4f:fd:90:0f:a7:8c:68:e8:d0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A595312C7CDFF5A76DBAE734D50E12527241A24
Validity
Not Before: Sep 30 23:51:33 2024 GMT
Not After : Sep 29 23:56:33 2025 GMT
Subject: CN=B3E2DA780022735DCD3F485526DCBE4045F7A361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9e:ca:73:ac:b7:38:84:d9:9f:28:fe:e1:0c:
0c:d8:72:7d:c5:67:3d:02:b1:fc:ae:6d:4d:0e:7b:
ac:82:dd:60:bc:71:a4:71:5f:14:b6:2c:93:91:1b:
45:f0:8d:5c:f2:b1:2a:77:d6:c4:99:dd:f1:ef:ac:
e2:3b:6b:2c:c9:86:0b:27:8f:64:d6:01:24:95:c2:
b0:7b:09:77:7a:85:b8:3a:74:a2:03:ef:f4:93:06:
a0:97:58:d7:e2:cc:c4:a7:02:46:5a:4b:f9:cc:88:
0f:d8:97:b7:c6:29:36:c3:3c:55:db:95:29:a3:99:
d2:4b:67:b0:42:16:41:68:33:d4:4d:b1:1d:38:d5:
27:63:6b:37:55:fc:cc:a0:fd:50:8e:6a:14:e6:95:
01:12:f4:50:95:3a:f9:23:5a:f7:0b:85:26:9b:b0:
96:5a:f5:fe:69:8b:f7:87:b0:49:8b:88:2a:02:bc:
77:31:87:17:4c:8c:9e:b0:48:88:4c:6e:f6:2d:e2:
a8:71:7f:50:bf:ef:f0:6f:97:76:58:c5:da:f4:c4:
c0:d4:17:ea:48:6b:01:cc:0a:9c:cc:44:9b:96:6e:
08:89:c2:91:0b:6e:98:12:d4:2c:27:b8:19:3c:83:
09:84:36:59:4e:ee:d1:b9:c1:b1:ec:0e:ca:8d:d3:
bd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E2:DA:78:00:22:73:5D:CD:3F:48:55:26:DC:BE:40:45:F7:A3:61
X509v3 Authority Key Identifier:
keyid:2A:59:53:12:C7:CD:FF:5A:76:DB:AE:73:4D:50:E1:25:27:24:1A:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GjyYAU52QoYGT2Po3nTaSeTUWhKxvkF8DetMZ9gxiV4J/0/2A595312C7CDFF5A76DBAE734D50E12527241A24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A595312C7CDFF5A76DBAE734D50E12527241A24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GjyYAU52QoYGT2Po3nTaSeTUWhKxvkF8DetMZ9gxiV4J/0/323830343a366236633a3a2f33322d313238203d3e20323730333939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6b6c::/32
Signature Algorithm: sha256WithRSAEncryption
01:73:c2:45:ad:55:36:bb:7d:7f:f2:c5:34:a0:62:44:df:5d:
fc:db:6c:0a:9f:7b:09:1a:2b:30:62:7b:62:2d:6c:5a:af:a6:
81:6c:6f:32:e7:7d:4e:52:45:6b:f7:ab:ec:cf:01:0f:cc:02:
d8:03:5a:27:d5:da:6f:40:96:66:f9:42:31:64:10:d0:97:35:
85:bd:1c:94:ee:61:8d:59:6d:fd:26:4d:1a:36:4f:ab:b0:5e:
9c:93:ad:11:03:1e:0e:f2:64:0c:94:b8:09:7b:dc:43:ac:5d:
af:4e:14:45:95:ee:53:c7:b1:da:2c:46:fe:ee:13:35:af:e9:
d1:fe:d4:2c:e0:5f:2b:7a:4b:f4:80:f2:97:89:aa:b1:ca:0c:
25:89:14:90:76:87:e7:3c:b0:77:83:15:27:46:e7:5d:fd:cd:
23:5a:4a:d2:e1:bf:a1:cf:5e:e2:b7:44:33:c2:22:f0:cf:02:
04:f4:23:9a:04:d0:b3:dc:59:f2:88:96:41:cb:27:de:3e:fa:
d2:24:70:87:8f:d2:7c:4a:3f:e8:1c:84:cc:c4:22:d5:59:77:
bf:2f:8a:6b:2c:51:d9:e3:25:fc:c2:f2:3b:d2:c1:c6:90:8b:
1f:1e:35:12:71:d1:0d:fb:8c:0a:5f:6a:8c:81:1a:b9:14:09:
44:5e:f8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:43:41 2025 by rpki-client