Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/323830343a373232303a3a2f33322d3334203d3e20323730383334.roa
File: 323830343a373232303a3a2f33322d3334203d3e20323730383334.roa (raw, json)
Hash identifier: RTyybsQ+h6Hmf4Y+BIfxpve3imU313RM5iYY2k7yIjg=
Subject key identifier: 88:EC:B4:25:C4:59:65:52:51:07:7E:C3:C1:85:00:89:FC:7A:57:26
Certificate issuer: /CN=36D61D661FEA96A158F222B958FBA78F7B0DB49A
Certificate serial: 1892B9BFA9E33768D66B3891178E829DEBF37045
Authority key identifier: 36:D6:1D:66:1F:EA:96:A1:58:F2:22:B9:58:FB:A7:8F:7B:0D:B4:9A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36D61D661FEA96A158F222B958FBA78F7B0DB49A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/323830343a373232303a3a2f33322d3334203d3e20323730383334.roa
Signing time: Sat 22 Jul 2023 21:11:24 +0000
ROA not before: Sat 22 Jul 2023 21:06:24 +0000
ROA not after: Sat 20 Jul 2024 21:11:24 +0000
asID: 270834
IP address blocks: 2804:7220::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:92:b9:bf:a9:e3:37:68:d6:6b:38:91:17:8e:82:9d:eb:f3:70:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36D61D661FEA96A158F222B958FBA78F7B0DB49A
Validity
Not Before: Jul 22 21:06:24 2023 GMT
Not After : Jul 20 21:11:24 2024 GMT
Subject: CN=88ECB425C459655251077EC3C1850089FC7A5726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d1:24:ff:13:73:2f:73:ae:ed:30:8d:31:98:
d3:3c:25:7f:bc:d6:09:a7:fd:40:b4:0a:33:f2:f4:
cf:30:ae:12:17:54:ea:6b:23:17:43:f1:6e:12:ed:
fa:63:54:f0:39:bb:96:36:64:b4:b8:0d:d6:a5:82:
2b:aa:35:ad:e9:fe:fd:4f:ef:17:eb:3f:27:60:21:
4c:a3:73:40:49:57:c9:fe:80:fe:6d:5d:fc:c2:4b:
02:99:36:c6:e4:a7:af:09:54:38:ec:56:a2:a7:6f:
ad:5d:e0:f0:18:ca:2d:aa:9f:93:53:f4:14:4a:16:
e3:c5:96:6b:2d:90:4c:0d:be:7f:bc:49:33:64:bc:
75:cc:67:98:be:38:35:90:50:67:57:65:d9:5f:f0:
31:ba:fa:da:4c:7e:46:11:f4:75:f7:1f:04:ca:b0:
13:bb:5b:a0:0c:5a:64:e5:76:8e:ae:ab:f7:fb:cd:
44:fb:d2:1d:4b:59:54:1f:e6:f6:85:0e:12:eb:5e:
4f:4e:9a:25:fa:66:07:1c:1d:61:cd:e5:55:81:ef:
2a:75:98:fc:68:20:00:d5:1a:99:a0:e5:84:b8:c2:
24:b7:65:78:82:62:eb:ae:1f:93:d7:41:0f:99:0e:
e4:6c:8b:23:30:3c:66:ab:7e:c6:fd:0e:eb:1a:2b:
ef:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:EC:B4:25:C4:59:65:52:51:07:7E:C3:C1:85:00:89:FC:7A:57:26
X509v3 Authority Key Identifier:
keyid:36:D6:1D:66:1F:EA:96:A1:58:F2:22:B9:58:FB:A7:8F:7B:0D:B4:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/36D61D661FEA96A158F222B958FBA78F7B0DB49A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36D61D661FEA96A158F222B958FBA78F7B0DB49A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/0/323830343a373232303a3a2f33322d3334203d3e20323730383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7220::/32
Signature Algorithm: sha256WithRSAEncryption
15:74:29:9d:17:a4:79:95:b2:e9:c9:db:50:ec:7f:ee:72:54:
a7:f5:45:5f:b2:2e:a7:35:2e:1c:ea:06:75:c5:22:af:37:3b:
4a:8e:f9:e0:1a:dc:83:da:f8:ab:9d:60:ef:f3:b1:b2:ee:42:
c5:7f:a4:96:50:18:fe:fe:50:db:1d:95:23:95:a9:6b:b3:d5:
52:e4:7f:9e:8c:72:9b:89:d5:5c:8e:5e:e9:f3:5c:3a:be:52:
ae:88:a2:b9:be:2f:6b:23:e7:29:2d:99:1b:d2:7e:80:40:f7:
fa:a7:23:3d:31:81:20:81:0d:a7:58:f9:56:41:c1:6f:ce:de:
39:71:7b:82:9d:4f:95:19:3f:f8:96:2a:47:74:03:4a:be:86:
de:30:15:fd:73:6a:0f:3c:bb:1b:1b:a0:1b:cd:a3:b0:54:76:
72:78:4b:b5:9f:7f:db:20:5c:b8:fa:ed:64:79:e9:66:70:0f:
02:a8:8c:d4:9d:6a:52:c9:fa:4b:32:28:a7:bb:0d:13:6f:3b:
97:83:22:57:84:7c:36:d8:26:6c:69:c5:03:32:99:33:b2:c1:
d8:60:50:89:1d:4a:6e:e8:9f:d2:2e:f8:66:8f:95:1e:16:cb:
a8:d1:83:f7:20:83:04:18:6d:3f:82:5c:09:98:82:04:09:07:
cc:c4:c7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org