Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a633030303a3a2f33342d3334203d3e20323633303236.roa
File: 323830343a6132383a633030303a3a2f33342d3334203d3e20323633303236.roa (raw, json)
Hash identifier: bZg2iLHBz1LJXyXTxwq+ifjD0tOgiRsRE3KWvmnAXdo=
Subject key identifier: AF:61:22:4C:FC:B9:64:76:FB:6E:2B:6A:39:14:F6:7C:C3:EC:00:FB
Certificate issuer: /CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
Certificate serial: 7CA3BC86106A4C68406DF6B72C8100299F51DCFB
Authority key identifier: 8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer
Subject info access: rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a633030303a3a2f33342d3334203d3e20323633303236.roa
Signing time: Thu 30 Nov 2023 20:24:27 +0000
ROA not before: Thu 30 Nov 2023 20:19:27 +0000
ROA not after: Thu 28 Nov 2024 20:24:27 +0000
asID: 263026
IP address blocks: 2804:a28:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:a3:bc:86:10:6a:4c:68:40:6d:f6:b7:2c:81:00:29:9f:51:dc:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
Validity
Not Before: Nov 30 20:19:27 2023 GMT
Not After : Nov 28 20:24:27 2024 GMT
Subject: CN=AF61224CFCB96476FB6E2B6A3914F67CC3EC00FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3b:26:af:4b:8a:03:2a:09:15:c7:f2:9c:d8:
33:95:3b:f1:43:b0:a6:bf:e0:54:59:09:51:d1:69:
11:78:c0:c0:88:ba:28:20:28:6b:09:c7:34:0d:b5:
d8:9b:80:4e:4e:d3:de:09:ec:5d:4a:6d:e7:92:a1:
51:dc:97:35:da:05:31:2d:05:25:87:cd:15:de:d6:
e8:0b:d9:51:e4:d2:b8:71:17:d5:30:2b:29:98:2c:
a5:a5:6f:bb:e3:45:f0:b8:5d:f5:2d:e5:70:6c:82:
09:93:c1:d6:a6:83:be:f4:79:30:7e:d7:2e:26:e7:
22:84:45:6a:bf:77:29:48:e5:c4:23:6e:80:68:a5:
bc:8d:23:3e:b4:7b:af:5d:a3:a0:c8:9a:89:4f:74:
e1:3c:9d:0d:f1:8c:e5:89:f5:3b:dc:5f:7f:06:ae:
89:83:eb:3f:d1:34:f7:79:90:ef:00:8d:c1:96:2a:
23:ec:f2:88:80:d7:ca:8a:7b:e7:40:6b:84:c9:85:
06:ab:09:14:c8:a3:2b:99:65:6b:75:95:50:da:d2:
f9:04:e1:73:f7:fc:32:63:61:01:12:6a:06:fd:53:
97:34:ed:99:2e:e0:8d:bd:12:32:ce:c1:56:1e:24:
3d:f4:57:dd:c9:d5:b7:8f:8e:2e:a0:4a:90:03:0c:
b6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:61:22:4C:FC:B9:64:76:FB:6E:2B:6A:39:14:F6:7C:C3:EC:00:FB
X509v3 Authority Key Identifier:
keyid:8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a633030303a3a2f33342d3334203d3e20323633303236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:a28:c000::/34
Signature Algorithm: sha256WithRSAEncryption
1e:b5:85:ac:14:45:28:56:b1:45:88:37:75:2a:13:34:97:07:
95:b0:69:7d:8e:2d:88:bb:de:af:59:84:c6:8b:6a:c7:b8:57:
1b:c9:ed:f2:e5:88:90:8f:29:ed:4f:2f:22:42:bb:dd:9b:25:
df:d0:6b:bf:18:c8:cd:16:26:92:b6:af:45:1a:9d:76:19:5b:
86:39:dd:bd:30:c7:07:ac:21:7e:69:16:36:1f:64:4c:b4:fc:
16:f1:57:a7:46:18:34:93:6f:32:3a:d7:3c:a0:b5:b6:db:30:
c1:a0:a5:c9:05:e3:e3:66:57:a7:5f:c0:30:a2:9b:d6:db:37:
fe:e4:cd:5f:82:59:7c:e3:69:13:33:1e:a4:d8:8c:45:6c:38:
fb:f9:fb:e2:87:c8:80:62:53:a8:8e:b2:15:01:68:eb:ef:fc:
3c:1f:47:07:19:69:ef:32:ac:d8:8b:d1:23:75:b3:89:84:d5:
43:ec:07:74:a5:12:fe:3c:79:9f:2e:14:6d:ec:86:03:fd:58:
a5:99:aa:28:ff:53:c6:da:55:9e:4a:41:a2:84:69:36:05:ea:
a0:1e:08:17:b4:df:97:a6:c2:04:96:0c:8d:9d:a4:84:07:70:
10:a2:4c:9a:d5:33:b5:3a:e1:b4:15:78:74:72:e7:53:ca:61:
fb:24:27:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:19 2025 by rpki-client