Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/323830343a356363343a3a2f33322d3336203d3e20323638393239.roa
File: 323830343a356363343a3a2f33322d3336203d3e20323638393239.roa (raw, json)
Hash identifier: IZrVy3TM14oIPpr6W0GepQenh++w0rSjilI9ja3GaAw=
Subject key identifier: 35:34:9B:C2:79:25:F7:0C:B9:47:1D:F8:C3:00:1E:76:88:A2:FA:BF
Certificate issuer: /CN=28FF8EC7AF222203EE7F9D6C62AEA14C447FBC2F
Certificate serial: 2642F1041DBC640839DE66987F5DE8E9F1211A16
Authority key identifier: 28:FF:8E:C7:AF:22:22:03:EE:7F:9D:6C:62:AE:A1:4C:44:7F:BC:2F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28FF8EC7AF222203EE7F9D6C62AEA14C447FBC2F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/323830343a356363343a3a2f33322d3336203d3e20323638393239.roa
Signing time: Mon 19 Feb 2024 12:57:27 +0000
ROA not before: Mon 19 Feb 2024 12:52:27 +0000
ROA not after: Mon 17 Feb 2025 12:57:27 +0000
asID: 268929
IP address blocks: 2804:5cc4::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:42:f1:04:1d:bc:64:08:39:de:66:98:7f:5d:e8:e9:f1:21:1a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28FF8EC7AF222203EE7F9D6C62AEA14C447FBC2F
Validity
Not Before: Feb 19 12:52:27 2024 GMT
Not After : Feb 17 12:57:27 2025 GMT
Subject: CN=35349BC27925F70CB9471DF8C3001E7688A2FABF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:66:9e:be:a8:71:c6:01:02:be:af:29:fd:a7:
ad:2d:86:65:51:3d:4e:c3:38:2e:27:7e:1c:96:1b:
f3:0e:43:18:5c:f6:65:06:27:d3:f7:3a:2c:03:3a:
8f:02:e2:8b:22:fb:32:fd:f4:41:57:e9:15:2c:36:
84:f6:c5:46:16:c2:2e:37:4d:7a:f8:83:e7:97:d5:
85:60:8f:b5:fe:29:ae:d2:fe:9f:9c:7c:b0:b9:af:
f9:65:e0:ea:ad:65:d0:69:e6:aa:ac:ca:13:8f:46:
ca:7e:8d:d0:6f:c5:8e:8f:e1:e2:c9:6c:16:ea:00:
ac:61:11:48:ef:7b:66:77:14:fc:e9:ad:06:37:72:
f3:d2:bf:81:08:76:77:f8:9d:6c:5f:c2:e0:2d:ce:
ab:e4:7d:b1:cf:a5:09:72:1f:c3:08:22:14:44:34:
3e:2a:ea:a0:45:ab:18:d4:64:2c:be:09:fc:ae:cb:
10:29:15:d2:2a:92:eb:7d:35:22:f9:2c:9b:2f:8a:
e2:9b:c7:ef:9f:14:b2:d7:bc:8e:ab:7a:49:c8:d6:
e5:b8:71:33:f2:08:8b:3d:cf:3d:fa:be:8c:75:e9:
d4:ea:36:34:87:d7:92:eb:36:b7:7e:e6:be:b7:d8:
66:a3:19:12:74:d7:82:4e:26:c6:fa:dc:90:eb:a2:
8a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:34:9B:C2:79:25:F7:0C:B9:47:1D:F8:C3:00:1E:76:88:A2:FA:BF
X509v3 Authority Key Identifier:
keyid:28:FF:8E:C7:AF:22:22:03:EE:7F:9D:6C:62:AE:A1:4C:44:7F:BC:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/28FF8EC7AF222203EE7F9D6C62AEA14C447FBC2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28FF8EC7AF222203EE7F9D6C62AEA14C447FBC2F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/323830343a356363343a3a2f33322d3336203d3e20323638393239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5cc4::/32
Signature Algorithm: sha256WithRSAEncryption
1b:3b:d0:6e:ca:12:ed:66:4b:1d:28:b7:79:e5:a0:f7:d5:e2:
ca:22:3e:67:04:6f:7d:cc:0d:67:c6:4e:a3:e8:8b:c3:73:d7:
07:1b:89:d0:c5:6c:04:1e:b2:65:3b:d6:1a:24:01:87:0a:71:
56:53:6b:3f:6e:c8:09:93:13:13:bc:69:57:95:f0:6e:36:7c:
d1:e5:c4:13:78:20:6c:f8:ec:cf:e6:84:e8:38:6a:a2:bf:49:
ee:d8:d2:26:d8:5c:97:a0:9e:b3:ee:48:d7:8c:10:9d:32:bf:
77:65:60:8f:ea:71:35:a3:40:6e:ce:15:0f:33:9d:db:28:5e:
0d:a3:0a:8b:0c:c9:9f:16:37:68:ee:8e:2c:32:78:e3:50:a7:
b9:17:83:2d:64:8b:dd:ae:fd:fc:ea:d8:63:8f:d2:fa:2e:5f:
6f:b7:cb:dd:ce:d9:52:93:d9:80:b7:c2:33:ce:59:c2:59:2b:
fe:b5:8c:c5:62:99:2d:fa:3d:ed:33:6e:79:a6:d8:9f:a7:f2:
0b:f1:2d:50:17:c5:bd:00:34:f9:5a:c4:35:7d:39:47:32:be:
c8:fc:86:55:e3:99:c0:bb:b0:2e:c8:f0:12:d7:f1:12:ee:3b:
3a:5c:4f:6c:ea:b1:f3:c4:fc:53:19:d8:cb:49:9e:fa:a4:22:
a4:6e:ef:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org