Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/0/323830343a3136383a3a2f33322d3438203d3e203238323739.roa
File: 323830343a3136383a3a2f33322d3438203d3e203238323739.roa (raw, json)
Hash identifier: XUVcojOzqu/oxShVjZDv7d1OFZWjheRYjqblou285bQ=
Subject key identifier: 78:E6:84:91:ED:9E:0B:AB:C6:90:EF:9B:BC:73:24:28:CC:AB:63:FC
Certificate issuer: /CN=3B650AE130217DC191EA44A022BABF2EECE6BA37
Certificate serial: 5944DEE358ACEF1EA1384AA72BE49577FDB8155C
Authority key identifier: 3B:65:0A:E1:30:21:7D:C1:91:EA:44:A0:22:BA:BF:2E:EC:E6:BA:37
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B650AE130217DC191EA44A022BABF2EECE6BA37.cer
Subject info access: rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/0/323830343a3136383a3a2f33322d3438203d3e203238323739.roa
Signing time: Sat 24 Feb 2024 13:02:40 +0000
ROA not before: Sat 24 Feb 2024 12:57:40 +0000
ROA not after: Sat 22 Feb 2025 13:02:40 +0000
asID: 28279
IP address blocks: 2804:168::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:44:de:e3:58:ac:ef:1e:a1:38:4a:a7:2b:e4:95:77:fd:b8:15:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B650AE130217DC191EA44A022BABF2EECE6BA37
Validity
Not Before: Feb 24 12:57:40 2024 GMT
Not After : Feb 22 13:02:40 2025 GMT
Subject: CN=78E68491ED9E0BABC690EF9BBC732428CCAB63FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:17:30:0c:e6:a7:98:0b:56:25:18:0d:83:b1:
58:25:14:2b:1f:69:7f:9d:c7:46:b0:89:49:66:45:
4c:4a:71:66:72:71:50:d2:d2:e5:4c:31:b8:3a:1d:
fd:41:41:56:d9:46:e8:6b:91:e6:a6:78:a5:e7:10:
3b:6d:f6:7a:a5:82:93:48:87:f0:c0:c0:de:94:19:
e5:3b:1e:ff:2d:89:45:f8:38:fe:c8:79:26:32:89:
c9:c1:29:64:b0:34:0b:aa:04:1f:77:38:d4:54:b2:
24:da:45:ee:dc:c3:25:e4:93:fd:c7:df:eb:c7:e7:
36:73:e7:cf:5a:bd:fa:a9:da:30:d7:14:8c:f6:d6:
d9:cc:0a:33:fd:e5:47:d0:70:1b:c6:27:f2:b9:23:
d0:fb:89:5a:0e:71:cc:c8:39:e8:8a:5b:6b:63:88:
94:05:fa:9b:87:cb:40:bd:5e:0e:9f:15:bf:e4:f5:
d4:ed:0a:41:ea:b9:c8:92:1b:0b:56:ef:7f:bf:35:
9a:b9:8b:c4:61:00:cd:28:27:96:f5:20:00:4c:be:
53:92:1e:28:b1:4d:d2:0c:1c:34:e6:d4:b6:56:25:
67:41:44:d7:72:83:f0:0e:fb:d8:c2:dd:25:60:3d:
00:20:29:08:1a:b6:e4:c1:8f:5d:a3:d9:1b:99:df:
d1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E6:84:91:ED:9E:0B:AB:C6:90:EF:9B:BC:73:24:28:CC:AB:63:FC
X509v3 Authority Key Identifier:
keyid:3B:65:0A:E1:30:21:7D:C1:91:EA:44:A0:22:BA:BF:2E:EC:E6:BA:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/0/3B650AE130217DC191EA44A022BABF2EECE6BA37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B650AE130217DC191EA44A022BABF2EECE6BA37.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/0/323830343a3136383a3a2f33322d3438203d3e203238323739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:168::/32
Signature Algorithm: sha256WithRSAEncryption
61:0d:2c:c7:c0:cc:35:64:3e:cf:76:56:ca:20:87:0c:13:9d:
12:79:50:7d:91:2b:8d:84:46:9e:94:42:09:86:77:67:33:3d:
3c:c7:42:c7:a9:51:1e:ea:0b:f2:d7:c5:22:e2:ca:db:de:1f:
9e:68:6e:8e:a6:ff:d5:21:f8:c6:86:6c:70:4b:f6:06:81:34:
36:30:8c:83:6b:d4:f5:d6:ec:c3:45:8d:8b:8d:28:dd:e6:d4:
35:9e:68:bc:af:52:d7:06:d8:18:ee:7c:8a:f8:23:4c:c2:d9:
07:d2:dc:2c:fe:d2:80:d0:a6:47:1f:d0:f5:31:4e:ef:b3:83:
a3:3f:c7:6d:9c:68:e2:35:0c:e2:57:3a:0d:97:3e:79:b8:3f:
c4:5d:5a:fd:74:88:99:98:2c:e8:9a:f0:d2:53:63:14:89:09:
a6:b8:fc:c6:f7:52:12:ba:3e:00:9d:c3:5f:c2:b0:90:de:8a:
e0:4e:bd:e8:fe:d7:85:be:a2:b3:92:8c:5b:24:7a:97:16:1d:
2b:c5:1e:d7:8e:90:69:44:97:46:0d:59:c4:c4:dd:89:7a:4c:
2e:de:1e:a7:43:4b:12:45:1b:06:68:54:49:4a:4c:df:84:9b:
2a:8b:ea:08:d8:49:1e:c0:b9:e7:24:af:cb:28:b9:8e:80:07:
53:a6:e1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org