Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/323830343a386362343a383030303a3a2f33342d3334203d3e20323733383136.roa
File: 323830343a386362343a383030303a3a2f33342d3334203d3e20323733383136.roa (raw, json)
Hash identifier: X3MORxJ0y3SkOCrVkt6Ew+CgrJIO1gyP7n/2/sAaD3M=
Subject key identifier: 12:60:63:C7:9C:70:11:67:9B:DC:D8:AE:5B:58:4E:C7:E3:E3:CD:5F
Certificate issuer: /CN=BAF68C193144B8DD53B0312AA8ACCD5BB59350E0
Certificate serial: 752378BAEB61F336F05F1D25D76E5E6E50C910DB
Authority key identifier: BA:F6:8C:19:31:44:B8:DD:53:B0:31:2A:A8:AC:CD:5B:B5:93:50:E0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAF68C193144B8DD53B0312AA8ACCD5BB59350E0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/323830343a386362343a383030303a3a2f33342d3334203d3e20323733383136.roa
Signing time: Mon 09 Dec 2024 14:34:21 +0000
ROA not before: Mon 09 Dec 2024 14:29:21 +0000
ROA not after: Mon 08 Dec 2025 14:34:21 +0000
asID: 273816
IP address blocks: 2804:8cb4:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:23:78:ba:eb:61:f3:36:f0:5f:1d:25:d7:6e:5e:6e:50:c9:10:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BAF68C193144B8DD53B0312AA8ACCD5BB59350E0
Validity
Not Before: Dec 9 14:29:21 2024 GMT
Not After : Dec 8 14:34:21 2025 GMT
Subject: CN=126063C79C7011679BDCD8AE5B584EC7E3E3CD5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:57:45:12:1e:c2:08:af:64:2a:e5:b5:03:66:
65:71:75:54:5d:39:43:56:6e:6d:95:77:f7:d2:93:
7c:df:e1:9b:d1:e6:13:11:2c:98:49:28:f8:96:a5:
47:bb:e4:39:f5:c4:14:e1:95:34:c8:92:69:9f:61:
64:62:66:45:9a:5e:0e:8b:73:3f:18:df:fb:62:d8:
f3:d7:1f:d1:f9:b6:75:65:8c:ce:98:47:9e:fc:73:
a8:0a:26:2c:72:31:d3:46:5c:5d:ee:47:60:98:36:
e3:f4:6a:56:7f:f2:44:5d:a8:2a:d4:4c:59:07:9f:
3a:4f:4d:2f:7e:ff:cf:8d:da:0f:31:cc:d4:48:3b:
36:79:76:58:32:77:c5:52:02:c6:4c:d8:b3:e3:e9:
ab:40:a9:31:3e:7d:f0:96:95:21:a9:3a:93:55:77:
4c:fd:c7:cc:88:20:71:ea:c4:c3:52:24:b0:0c:7f:
23:6b:be:5d:35:41:ac:7e:99:34:1d:46:2f:87:3e:
ca:6c:50:1a:de:8c:63:40:33:07:37:a8:cc:51:88:
d9:d2:de:3f:af:a7:02:bc:e1:2c:c2:02:59:12:c2:
74:1d:a6:01:b0:29:f4:00:8e:c3:5a:2d:67:fc:4b:
27:74:46:f1:73:cd:48:5a:a3:ae:84:ab:6b:d0:ec:
60:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:60:63:C7:9C:70:11:67:9B:DC:D8:AE:5B:58:4E:C7:E3:E3:CD:5F
X509v3 Authority Key Identifier:
keyid:BA:F6:8C:19:31:44:B8:DD:53:B0:31:2A:A8:AC:CD:5B:B5:93:50:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/BAF68C193144B8DD53B0312AA8ACCD5BB59350E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAF68C193144B8DD53B0312AA8ACCD5BB59350E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/323830343a386362343a383030303a3a2f33342d3334203d3e20323733383136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8cb4:8000::/34
Signature Algorithm: sha256WithRSAEncryption
ca:92:ca:38:b8:a8:79:9f:fe:51:cf:d8:71:b9:26:ea:ae:80:
7e:a8:bf:3e:bc:d5:22:40:d8:8a:82:53:74:44:5f:ba:f7:db:
04:97:a2:94:e0:27:ca:99:14:56:49:3b:8a:07:bd:7a:1b:3b:
ce:76:91:17:9a:31:ee:60:1e:d8:54:47:53:11:e1:34:72:03:
d4:df:bb:23:ef:ee:00:3d:27:00:07:dc:60:0a:2d:ac:37:54:
92:6e:b8:9a:d6:c3:9d:7b:51:fa:f3:1e:52:cc:93:0e:ca:a6:
14:23:fa:d0:c9:ad:3d:c5:6f:ee:a2:df:9b:c8:08:60:a3:81:
53:d7:e6:cb:b8:84:fd:1f:1d:d0:26:37:b2:36:03:1e:81:c6:
ad:a2:26:be:77:ac:7b:ba:39:ec:7c:48:4e:33:3e:0b:44:c6:
94:db:57:e0:16:a1:61:38:b4:13:a9:cc:61:9a:a1:2c:3d:d3:
16:27:0f:ec:d8:56:da:e8:e3:24:a2:ce:5c:8b:5a:de:d8:f4:
88:9f:50:fe:60:86:f1:2d:c7:a7:54:ec:f2:d6:13:16:56:52:
e0:9f:7b:9e:c0:ad:1c:68:f9:71:8b:87:91:ad:9d:a9:aa:69:
69:c1:1d:d0:7b:0a:d9:ff:5e:79:79:2f:bb:f1:c4:af:62:aa:
34:36:28:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:47:41 2025 by rpki-client on console.sobornost.net