Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a383030303a3a2f33342d3334203d3e20323733363036.roa
File: 323830343a383937383a383030303a3a2f33342d3334203d3e20323733363036.roa (raw, json)
Hash identifier: WrxhYI5RcetENfD6qq+ulf+X7O/DE3+ux7FBtE9q5t0=
Subject key identifier: 99:84:9C:71:45:A7:6B:2E:2D:0F:E1:9C:EC:76:A7:75:BF:1C:63:9B
Certificate issuer: /CN=AF57D8ABF92B4526A323E0F5712CC22330A693BB
Certificate serial: 2A55E5227EEFC9F9B27865C70D3BB6C13BCB5967
Authority key identifier: AF:57:D8:AB:F9:2B:45:26:A3:23:E0:F5:71:2C:C2:23:30:A6:93:BB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF57D8ABF92B4526A323E0F5712CC22330A693BB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a383030303a3a2f33342d3334203d3e20323733363036.roa
Signing time: Sat 24 Feb 2024 03:41:53 +0000
ROA not before: Sat 24 Feb 2024 03:36:53 +0000
ROA not after: Sat 22 Feb 2025 03:41:53 +0000
asID: 273606
IP address blocks: 2804:8978:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:55:e5:22:7e:ef:c9:f9:b2:78:65:c7:0d:3b:b6:c1:3b:cb:59:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF57D8ABF92B4526A323E0F5712CC22330A693BB
Validity
Not Before: Feb 24 03:36:53 2024 GMT
Not After : Feb 22 03:41:53 2025 GMT
Subject: CN=99849C7145A76B2E2D0FE19CEC76A775BF1C639B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d0:50:2f:e6:66:e2:2a:7c:0f:3d:fe:80:c8:
06:5a:76:43:f3:7b:40:14:c1:26:b9:4c:c4:e3:46:
c5:af:3b:af:e0:31:59:1b:2c:ff:2f:f5:03:20:a0:
72:7f:99:c8:98:18:54:78:58:54:93:17:ed:b2:b7:
4f:57:f9:8b:5b:e7:c0:6f:1a:96:97:ec:5c:41:fa:
b8:6e:8b:2e:a6:e5:ff:3b:5e:c1:ed:5b:00:18:54:
29:ac:53:9d:f7:bb:74:08:a4:c8:e4:81:6a:48:bb:
13:6d:0b:c0:d9:e8:1a:bd:23:12:77:3e:5a:2b:e8:
b4:da:80:a2:de:bf:8a:70:1f:16:21:18:5f:e4:61:
2f:8b:6c:43:05:8f:8c:de:05:71:64:b8:6f:3b:da:
39:47:2c:fb:c3:82:58:83:cb:75:e6:e0:5f:0f:a4:
ba:9c:e9:62:59:f5:ae:21:8d:8c:4e:41:36:72:c7:
66:34:61:62:3f:36:41:d9:72:35:d6:42:ed:ab:6c:
a4:0f:02:b9:40:ec:41:a8:41:4c:da:4f:d2:b4:8b:
54:9c:41:49:33:00:53:35:96:4d:2b:5c:3f:db:fe:
18:2e:59:95:0d:45:f8:41:b5:d1:58:35:92:f1:9f:
35:4d:b0:2f:e3:fa:ed:96:38:d0:a2:1f:32:7b:76:
56:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:84:9C:71:45:A7:6B:2E:2D:0F:E1:9C:EC:76:A7:75:BF:1C:63:9B
X509v3 Authority Key Identifier:
keyid:AF:57:D8:AB:F9:2B:45:26:A3:23:E0:F5:71:2C:C2:23:30:A6:93:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/AF57D8ABF92B4526A323E0F5712CC22330A693BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF57D8ABF92B4526A323E0F5712CC22330A693BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a383030303a3a2f33342d3334203d3e20323733363036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8978:8000::/34
Signature Algorithm: sha256WithRSAEncryption
61:4d:41:df:56:76:bb:d2:cc:8c:40:f5:e0:7e:eb:9e:e2:60:
46:1e:7d:93:5b:47:0c:7d:76:30:aa:d3:a2:71:99:57:3c:92:
1e:2a:3b:a2:b5:79:4d:e3:13:9e:e5:65:5b:0b:ac:d1:82:25:
3d:27:6f:3b:83:8e:0d:03:28:e7:0c:11:8f:17:36:6f:0b:a8:
f6:d1:68:01:66:f9:08:30:02:99:56:af:47:9a:f6:d6:32:bd:
dc:79:6a:bb:36:d5:14:86:44:99:72:30:0d:ff:90:45:1e:62:
75:4b:f4:f0:ce:76:e7:93:20:1f:bd:58:14:01:65:b1:9b:0e:
b0:8c:40:7d:d2:d2:bd:3d:66:7c:60:2c:2c:83:32:36:f1:6d:
dc:d2:3d:4d:63:2b:0a:a7:1e:c9:c3:e5:98:b6:ca:74:bf:ee:
eb:3a:44:76:5d:3f:5d:f3:f5:21:0c:80:b0:41:bc:b6:8f:b4:
5d:7f:ff:a2:6b:cd:7a:ef:3c:7f:bb:7f:26:9b:0e:76:55:7f:
26:c8:67:21:9a:68:0d:a2:11:fd:d2:c6:46:a3:08:9a:51:eb:
52:64:06:03:54:e4:20:6b:45:4d:17:69:d8:a8:9c:e5:d1:98:
c9:13:56:2b:f0:d7:fe:53:45:6b:4c:1f:9b:7a:ce:a8:53:18:
0f:b2:e3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:22 2024 by rpki-client on console-ams.rpki-client.org