Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/323830343a346262343a3a2f33322d3332203d3e20323637333235.roa
File: 323830343a346262343a3a2f33322d3332203d3e20323637333235.roa (raw, json)
Hash identifier: wt0CzGyBjkQCg+wEFoLzsifeDB1iE8AX55P20rpaXpI=
Subject key identifier: DE:AF:50:67:1A:41:F6:FB:3D:42:AB:CA:A4:B0:A2:AB:92:DC:38:81
Certificate issuer: /CN=5FF400439781FE8490A8662BF8C3E0E5C82C89A2
Certificate serial: 33799FB222B11BBA0422069AC025C03346BA14B2
Authority key identifier: 5F:F4:00:43:97:81:FE:84:90:A8:66:2B:F8:C3:E0:E5:C8:2C:89:A2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FF400439781FE8490A8662BF8C3E0E5C82C89A2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/323830343a346262343a3a2f33322d3332203d3e20323637333235.roa
Signing time: Tue 05 Dec 2023 17:44:44 +0000
ROA not before: Tue 05 Dec 2023 17:39:44 +0000
ROA not after: Tue 03 Dec 2024 17:44:44 +0000
asID: 267325
IP address blocks: 2804:4bb4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:79:9f:b2:22:b1:1b:ba:04:22:06:9a:c0:25:c0:33:46:ba:14:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FF400439781FE8490A8662BF8C3E0E5C82C89A2
Validity
Not Before: Dec 5 17:39:44 2023 GMT
Not After : Dec 3 17:44:44 2024 GMT
Subject: CN=DEAF50671A41F6FB3D42ABCAA4B0A2AB92DC3881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a3:76:23:ed:4b:60:e7:0f:b9:ff:a1:15:a6:
40:9f:5b:84:d0:a9:80:65:53:a9:b0:d1:60:a1:b2:
67:37:b0:bb:7a:e0:bd:b8:fb:1b:72:8c:7e:93:71:
5f:a7:b9:c2:d6:0b:4c:2c:8b:5d:57:fe:71:fc:42:
a3:e5:96:b4:25:40:39:80:5e:2b:a2:8b:2d:6f:51:
f3:ec:2f:85:72:19:7e:e8:c5:8a:4f:33:4d:29:ec:
84:21:f2:74:15:23:8e:ac:58:5a:40:9a:b6:f3:30:
31:34:5a:1b:7e:0b:22:3f:a5:5d:7b:29:6a:bb:8c:
52:d9:7f:69:40:02:09:ad:3b:77:80:29:2b:a6:84:
8a:48:04:b7:d7:52:0f:4f:b5:3c:40:39:02:f3:e0:
d9:66:39:de:11:7f:08:f5:54:1c:07:b4:79:40:a3:
85:f6:0e:c0:6f:3c:58:61:c5:88:35:0a:d8:1c:2b:
de:9c:be:e1:64:71:57:d4:14:ff:72:91:b9:bf:c7:
46:ea:dd:c3:59:da:09:0d:4a:ba:55:e1:cf:87:07:
42:94:ec:d1:52:8a:6c:6a:d0:17:3a:f6:40:7d:b3:
9b:01:86:c9:50:f6:ed:2f:e9:0d:05:46:ec:c8:ba:
6b:7d:9c:22:c0:6d:3d:de:57:42:d9:8e:88:1f:e6:
96:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AF:50:67:1A:41:F6:FB:3D:42:AB:CA:A4:B0:A2:AB:92:DC:38:81
X509v3 Authority Key Identifier:
keyid:5F:F4:00:43:97:81:FE:84:90:A8:66:2B:F8:C3:E0:E5:C8:2C:89:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/5FF400439781FE8490A8662BF8C3E0E5C82C89A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FF400439781FE8490A8662BF8C3E0E5C82C89A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/323830343a346262343a3a2f33322d3332203d3e20323637333235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4bb4::/32
Signature Algorithm: sha256WithRSAEncryption
a1:17:14:96:58:11:cd:75:c0:0f:1d:a2:f8:53:f1:30:46:6f:
7a:ba:c8:44:a1:d2:64:22:a7:ae:bd:d9:2e:ad:c0:a6:14:0e:
f0:27:3e:17:ae:7d:87:74:04:03:59:8e:c5:aa:57:37:88:76:
ad:2a:1c:ca:5e:d4:90:48:6a:4d:df:29:f9:e8:f4:75:ea:18:
0d:b6:4e:8f:07:fd:a7:ba:3f:f2:b0:5a:a6:ec:a3:41:25:ec:
22:93:25:2d:76:ac:4e:be:03:ad:b4:a6:3e:3e:92:23:7a:75:
1d:ac:82:8f:ff:d8:64:a3:34:0c:60:72:38:1b:ee:4f:55:f9:
49:2a:70:ee:a1:1f:f6:6c:67:1a:a6:4d:b1:6f:fe:c7:07:d1:
7f:dd:bd:f3:58:de:8f:4a:d5:6d:e1:3e:fb:e6:3b:70:65:a9:
56:65:97:db:0d:b7:77:33:c8:c5:54:e1:27:0f:8e:c5:85:22:
36:0e:ac:7a:b4:db:5d:04:da:92:ce:7c:3b:ac:cc:d3:e7:3f:
69:43:f8:cc:8d:f0:33:22:bc:45:bd:db:7f:04:3c:49:09:0b:
5e:24:e1:3b:5c:ec:d1:d0:08:37:37:98:a6:09:f3:34:92:ea:
80:a2:1e:c6:9f:1e:2e:9e:2d:32:ef:7e:6a:96:96:d2:c9:16:
a0:ab:71:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org