Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/1/323830343a353661303a3a2f33322d3333203d3e20323638303133.roa
File: 323830343a353661303a3a2f33322d3333203d3e20323638303133.roa (raw, json)
Hash identifier: sxiS+yIQD4w5L+ry58j4TevER4BBHwF5WhM699xzvfQ=
Subject key identifier: BC:57:98:4E:C7:06:9C:AD:18:84:15:2E:2E:0F:30:13:55:AF:E1:EB
Certificate issuer: /CN=21577B6E627140A920C4D60B9BF6B91498176045
Certificate serial: 1D05D05624C9B4F0953DC5BB30BB7E62603F7613
Authority key identifier: 21:57:7B:6E:62:71:40:A9:20:C4:D6:0B:9B:F6:B9:14:98:17:60:45
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21577B6E627140A920C4D60B9BF6B91498176045.cer
Subject info access: rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/1/323830343a353661303a3a2f33322d3333203d3e20323638303133.roa
Signing time: Wed 03 Apr 2024 21:38:48 +0000
ROA not before: Wed 03 Apr 2024 21:33:48 +0000
ROA not after: Wed 02 Apr 2025 21:38:48 +0000
asID: 268013
IP address blocks: 2804:56a0::/32 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:05:d0:56:24:c9:b4:f0:95:3d:c5:bb:30:bb:7e:62:60:3f:76:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21577B6E627140A920C4D60B9BF6B91498176045
Validity
Not Before: Apr 3 21:33:48 2024 GMT
Not After : Apr 2 21:38:48 2025 GMT
Subject: CN=BC57984EC7069CAD1884152E2E0F301355AFE1EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:99:b1:71:df:6f:64:37:02:60:d4:cd:3f:7d:
70:63:21:eb:c4:e4:56:0a:2d:2d:a7:c5:a0:12:d4:
6b:f1:af:ba:e6:04:d9:6a:a7:8a:c1:39:25:5a:48:
f4:68:c7:da:0f:d2:7a:36:22:fc:5c:e2:2b:7d:3a:
48:4d:d2:f2:4f:d1:13:ef:00:7e:ed:01:3a:3c:8d:
09:7d:fb:5c:1e:80:28:31:57:7a:23:0b:6b:8a:16:
7f:a9:c9:93:36:2f:e5:21:16:65:2e:0a:68:e3:20:
de:1e:2a:e4:48:99:70:a3:e8:44:47:79:dd:98:20:
d3:4f:8f:b9:6b:72:9c:36:92:6c:da:6d:a5:99:79:
f2:b1:fb:a9:8b:0b:e4:4c:ca:5b:38:bd:55:d8:ad:
2c:96:d8:80:c1:a9:fe:3c:20:7e:21:ea:e8:7f:2f:
c1:91:9e:02:60:64:54:be:52:cb:c8:08:04:95:4d:
49:68:5c:25:df:d4:51:b3:04:48:29:15:30:5e:f9:
fa:6f:01:8a:dc:83:81:42:f5:c7:53:b0:da:f1:a0:
63:f2:e1:99:82:38:1b:fd:9c:aa:f8:b4:f1:59:2d:
8f:b5:64:e2:a3:65:69:9e:f2:42:f2:d5:3b:88:4a:
7a:a1:6f:fc:1d:9d:21:2d:1e:34:e3:8d:3a:9b:f9:
77:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:57:98:4E:C7:06:9C:AD:18:84:15:2E:2E:0F:30:13:55:AF:E1:EB
X509v3 Authority Key Identifier:
keyid:21:57:7B:6E:62:71:40:A9:20:C4:D6:0B:9B:F6:B9:14:98:17:60:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/1/21577B6E627140A920C4D60B9BF6B91498176045.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21577B6E627140A920C4D60B9BF6B91498176045.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/1/323830343a353661303a3a2f33322d3333203d3e20323638303133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:56a0::/32
Signature Algorithm: sha256WithRSAEncryption
68:ee:5a:cb:12:12:4b:04:4d:f0:de:5c:e1:9e:7e:40:59:01:
c1:fc:dd:74:ec:e9:2f:05:f2:44:fc:c0:c3:5c:14:00:34:48:
6b:f6:2a:d9:3d:58:b0:02:ef:b0:99:46:17:8e:74:d3:62:d5:
75:1a:d1:e6:a2:ca:1c:99:d3:72:81:94:65:d8:2f:0f:48:77:
1f:45:87:c8:2f:3a:47:38:01:5e:2c:b7:62:21:59:45:fb:81:
c6:9d:54:6e:4a:7b:64:92:0d:02:87:05:b7:50:7d:e6:c6:92:
97:f6:2b:8d:4d:fb:1f:3d:ac:6c:64:0b:1c:6f:2c:72:33:76:
c7:59:4a:3e:db:ae:8f:5d:60:2f:fe:e2:c0:1e:cf:2e:57:e8:
03:9d:33:2b:1c:bc:39:76:fb:f8:28:8d:08:7e:f7:2e:a7:54:
22:d9:0e:64:1b:5e:24:62:9e:f0:2d:eb:91:3b:5f:bb:cf:ca:
f0:30:f2:0d:51:14:e7:fe:b1:bf:50:8a:7b:40:e8:97:00:4f:
d6:d4:b5:35:96:89:87:f4:30:c5:02:0c:4d:aa:df:87:4a:23:
eb:4c:0f:2f:8f:25:fd:f9:b0:da:56:62:70:93:9c:fd:94:d4:
53:1b:92:e7:82:d6:1c:5a:04:13:e7:05:38:66:67:5f:68:7c:
92:fb:f4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 19:01:16 2024 by rpki-client on console-fra.rpki-client.org