Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/1/323830343a326432303a3a2f33322d3634203d3e20323635323633.roa
File: 323830343a326432303a3a2f33322d3634203d3e20323635323633.roa (raw, json)
Hash identifier: fQRMRVpxeRiLftffAYJZFOZTNxVUGMDzVfdsVSCajpk=
Subject key identifier: E6:89:06:BF:36:0C:6D:36:EA:4F:06:A4:D7:C4:89:51:89:F3:E4:AB
Certificate issuer: /CN=1CFDA235DDB3686865DF5323375DC9670B22BEBE
Certificate serial: 6848EBC4BC8B57125D7A207BA28B3EBB86B87CFB
Authority key identifier: 1C:FD:A2:35:DD:B3:68:68:65:DF:53:23:37:5D:C9:67:0B:22:BE:BE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CFDA235DDB3686865DF5323375DC9670B22BEBE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/1/323830343a326432303a3a2f33322d3634203d3e20323635323633.roa
Signing time: Thu 08 Jun 2023 15:52:47 +0000
ROA not before: Thu 08 Jun 2023 15:47:47 +0000
ROA not after: Thu 06 Jun 2024 15:52:47 +0000
asID: 265263
IP address blocks: 2804:2d20::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:48:eb:c4:bc:8b:57:12:5d:7a:20:7b:a2:8b:3e:bb:86:b8:7c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1CFDA235DDB3686865DF5323375DC9670B22BEBE
Validity
Not Before: Jun 8 15:47:47 2023 GMT
Not After : Jun 6 15:52:47 2024 GMT
Subject: CN=E68906BF360C6D36EA4F06A4D7C4895189F3E4AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9a:80:be:55:db:2c:3b:42:fa:24:7a:c7:a6:
73:3e:39:f6:9f:4e:cc:7c:9a:db:8c:7e:28:d4:d5:
4e:2e:6e:f7:2a:3d:e3:0c:e5:ea:16:36:fb:a2:99:
9c:d8:16:c3:f8:e0:d1:e7:9a:38:80:17:3b:a7:11:
e2:0c:83:6d:40:54:55:52:29:f6:4f:ab:05:a6:cc:
44:3d:56:f0:9a:4d:0a:bb:32:bc:43:fb:30:93:b4:
28:df:d8:9f:7e:6a:fe:d8:c7:ae:46:3f:17:ca:23:
89:82:58:0a:fe:7d:8f:aa:1f:cf:d8:a2:70:c4:5c:
2a:db:ce:27:27:73:e3:07:34:99:0a:8b:94:ec:dd:
fd:4c:58:1d:ff:72:e8:9c:b5:f6:b8:ba:19:9b:86:
eb:5e:32:2a:88:d8:d0:74:a8:8c:eb:d6:47:dc:23:
f3:0b:54:68:b0:b3:cc:13:2c:f6:c9:5f:47:b0:d6:
f8:a4:4f:5f:e7:64:21:79:16:0f:6d:1c:5a:e4:05:
9b:ac:ff:c8:4a:4b:e4:9c:75:a7:c5:db:67:e5:1b:
2e:b4:bb:1b:4e:8f:a9:6a:0c:f2:ac:ba:c9:61:cf:
d2:d4:24:97:55:b1:e2:b7:a5:ea:0e:d3:c5:0f:a4:
0f:54:d3:9d:11:3f:12:37:7c:b1:b9:86:5b:be:f2:
a6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:89:06:BF:36:0C:6D:36:EA:4F:06:A4:D7:C4:89:51:89:F3:E4:AB
X509v3 Authority Key Identifier:
keyid:1C:FD:A2:35:DD:B3:68:68:65:DF:53:23:37:5D:C9:67:0B:22:BE:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/1/1CFDA235DDB3686865DF5323375DC9670B22BEBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CFDA235DDB3686865DF5323375DC9670B22BEBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/1/323830343a326432303a3a2f33322d3634203d3e20323635323633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2d20::/32
Signature Algorithm: sha256WithRSAEncryption
1d:14:6b:c1:6c:05:a9:9a:e9:8e:56:31:26:37:c6:99:c0:47:
aa:48:f8:56:1f:e2:9a:af:a8:9b:5d:16:99:6e:81:1f:56:76:
bf:26:1e:81:5f:b4:ee:2e:b4:10:15:8f:df:ea:32:ac:8d:1e:
8b:71:9f:74:44:62:be:dc:48:ca:3f:ae:e2:2e:3e:44:c0:22:
8c:78:38:a3:20:2a:20:2a:61:5e:b4:3a:e9:0e:d8:f9:69:83:
7a:02:0f:68:88:37:00:07:b4:46:94:ea:cd:8a:97:ab:8c:cf:
7f:68:cb:a0:67:e4:4c:ba:49:77:40:a8:4e:0a:6b:3f:cb:58:
b6:e1:1f:a1:85:e2:5a:ab:9c:0b:27:56:20:02:f2:4c:11:27:
11:93:01:66:55:76:1f:f1:a0:0e:3f:36:b2:53:27:9d:09:23:
ee:73:07:a4:ce:5f:ae:b2:8f:8f:b3:58:83:e0:90:61:1a:4a:
cc:fc:70:11:a3:17:50:10:f3:cf:b0:03:8a:42:d6:cb:ed:f3:
e1:b9:bf:e2:19:7c:96:19:41:37:ce:74:6c:c4:0f:93:27:2d:
94:3f:70:78:50:bd:ab:c1:93:c0:4a:61:1e:a2:c8:f6:c0:6a:
22:05:84:da:8d:4e:74:25:52:4c:cc:b0:3b:7c:d9:0f:45:de:
99:ab:e9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:38 2023 by rpki-client on console.sobornost.net