Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/323830343a366130303a663830303a3a2f33372d3337203d3e20323730333035.roa
File: 323830343a366130303a663830303a3a2f33372d3337203d3e20323730333035.roa (raw, json)
Hash identifier: PjJGRnM+lCAJwTsu3h9rZ8iMpQN7p8Z2MnH1hH6M1BI=
Subject key identifier: 44:12:74:90:E8:7D:25:97:FD:BC:19:10:F2:AC:CA:E4:84:26:FB:CB
Certificate issuer: /CN=995CA671BCB4BF29859E88524A16F3FB15F9BD0C
Certificate serial: 436AD23C0B6E0508E8A38E96ECE2EC712CACBB01
Authority key identifier: 99:5C:A6:71:BC:B4:BF:29:85:9E:88:52:4A:16:F3:FB:15:F9:BD:0C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/995CA671BCB4BF29859E88524A16F3FB15F9BD0C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/323830343a366130303a663830303a3a2f33372d3337203d3e20323730333035.roa
Signing time: Tue 27 Feb 2024 17:36:19 +0000
ROA not before: Tue 27 Feb 2024 17:31:19 +0000
ROA not after: Tue 25 Feb 2025 17:36:19 +0000
asID: 270305
IP address blocks: 2804:6a00:f800::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:6a:d2:3c:0b:6e:05:08:e8:a3:8e:96:ec:e2:ec:71:2c:ac:bb:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995CA671BCB4BF29859E88524A16F3FB15F9BD0C
Validity
Not Before: Feb 27 17:31:19 2024 GMT
Not After : Feb 25 17:36:19 2025 GMT
Subject: CN=44127490E87D2597FDBC1910F2ACCAE48426FBCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ca:fd:77:ed:57:57:47:8c:21:a7:0a:dc:95:
89:7b:f0:e4:bc:74:ec:12:21:94:a7:52:26:66:77:
27:36:87:ac:c8:10:34:db:5c:6e:f5:12:11:63:79:
ae:93:ee:72:a0:f5:f4:4b:35:f6:a4:ec:1f:b9:c7:
3f:6a:1e:ac:44:b6:d6:5f:23:0b:63:22:c1:4a:1f:
b0:68:a8:e1:d2:b1:1e:68:0a:86:d2:3d:7b:6f:d7:
83:a5:90:2c:5f:b5:db:f0:dd:56:da:a9:5f:ea:04:
62:f9:03:1d:2c:f7:7b:3c:1f:54:00:3a:ad:64:13:
7a:c3:d1:31:a1:33:bd:46:0e:72:b4:b0:ed:ca:13:
9f:f6:65:82:01:3b:7b:3c:e5:d6:65:0f:21:da:5b:
f5:0d:96:85:48:a2:1f:91:8b:a0:dd:ac:0e:a2:1d:
fe:4b:d6:01:23:65:12:bf:87:b3:6b:bf:0f:17:2e:
2e:6b:95:3f:35:12:a9:67:fe:43:43:3c:f8:24:96:
6d:9b:6b:84:d8:a0:0e:37:8a:ac:df:e0:07:0c:0b:
59:09:7c:bf:cb:61:ff:76:ba:d4:f7:62:64:be:c3:
bd:9c:1f:e1:89:b2:b0:41:f9:40:65:de:20:17:a0:
70:e0:e4:c8:27:4c:36:eb:b3:52:14:89:13:b7:32:
17:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:12:74:90:E8:7D:25:97:FD:BC:19:10:F2:AC:CA:E4:84:26:FB:CB
X509v3 Authority Key Identifier:
keyid:99:5C:A6:71:BC:B4:BF:29:85:9E:88:52:4A:16:F3:FB:15:F9:BD:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/995CA671BCB4BF29859E88524A16F3FB15F9BD0C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/995CA671BCB4BF29859E88524A16F3FB15F9BD0C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/323830343a366130303a663830303a3a2f33372d3337203d3e20323730333035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6a00:f800::/37
Signature Algorithm: sha256WithRSAEncryption
80:43:f9:f1:b9:27:4b:a9:55:a5:ec:14:ef:64:14:cd:43:bb:
d2:5b:aa:d9:3d:85:40:83:6d:2e:af:53:dc:50:23:8e:23:35:
e9:fa:90:74:55:06:6e:46:65:f6:d4:ac:12:c2:4a:59:00:53:
11:b8:60:dd:79:0c:c3:c5:31:23:5d:76:b7:10:d8:60:86:53:
02:e7:cc:bc:38:4d:18:0e:37:bd:0c:2d:ec:31:e5:c2:3f:29:
19:45:cd:e1:0b:5a:72:07:2a:71:5c:4c:88:38:a3:72:c9:95:
2a:41:cc:4e:37:80:d0:b1:89:c7:ba:6d:a1:45:ea:cd:f7:2b:
5b:21:f0:f9:7a:d7:8b:03:97:3b:4f:87:b1:83:f3:78:1a:82:
b4:75:48:ee:7c:23:40:f1:cc:40:35:4d:c0:df:4c:7d:86:8c:
fe:a8:99:1b:cb:f2:bb:2c:72:e5:c4:d7:70:af:e6:04:ad:4b:
a0:53:22:88:8a:95:50:c9:4b:e9:21:86:7f:f8:34:38:94:0c:
af:92:fa:93:c6:a1:c1:42:1c:7e:7f:be:2f:08:0f:98:83:cc:
d0:d9:53:21:d3:b9:06:74:2a:1c:0a:a3:26:00:67:fe:6a:4b:
15:ed:d6:4e:34:92:71:53:3e:ee:a6:6f:7e:3d:dc:c2:df:ee:
4a:2e:de:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:02 2024 by rpki-client on console-ams.rpki-client.org