Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3137302e302e3136382e302f32322d3234203d3e203238313436.roa
File: 3137302e302e3136382e302f32322d3234203d3e203238313436.roa (raw, json)
Hash identifier: BkOIzJS3wC4ZM4u5zePxs0GYvT8fUSVXhq4LagtqCxE=
Subject key identifier: 2F:81:3F:F8:A3:18:80:02:FD:CB:B0:D2:74:DD:87:EB:A0:46:A5:31
Certificate issuer: /CN=B8E841EAE5880F67873DB8847269969294507789
Certificate serial: 1F2C970C4D2AD6FDFC210391DFD5687EAAE399FE
Authority key identifier: B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3137302e302e3136382e302f32322d3234203d3e203238313436.roa
Signing time: Wed 21 Dec 2022 17:16:50 +0000
ROA not before: Wed 21 Dec 2022 17:11:50 +0000
ROA not after: Wed 20 Dec 2023 17:16:50 +0000
asID: 28146
IP address blocks: 170.0.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:2c:97:0c:4d:2a:d6:fd:fc:21:03:91:df:d5:68:7e:aa:e3:99:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8E841EAE5880F67873DB8847269969294507789
Validity
Not Before: Dec 21 17:11:50 2022 GMT
Not After : Dec 20 17:16:50 2023 GMT
Subject: CN=2F813FF8A3188002FDCBB0D274DD87EBA046A531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:22:ca:70:9e:d9:98:96:5f:74:6f:7c:9d:d0:
1d:e7:2a:fd:97:88:bb:54:a9:2d:55:c8:d4:f0:10:
1e:28:59:51:bd:e4:d6:d1:d9:40:cb:aa:31:e8:2c:
e1:25:5a:3d:5a:06:8b:8f:6e:10:d8:a2:eb:5c:db:
65:1c:8e:32:d8:7e:56:8e:a2:64:70:4d:5b:c6:0c:
32:e4:ce:0f:6b:53:45:92:ba:8a:71:46:35:7d:95:
b4:7b:b8:ee:d9:17:b7:60:9e:0b:59:01:c5:cf:4d:
6a:5b:03:1d:49:61:59:a8:ed:eb:a9:99:e5:97:76:
d7:b4:64:59:06:94:b7:60:e2:f7:8b:7c:8d:ea:91:
5b:54:54:50:84:cc:11:f4:cc:e1:b6:32:f1:95:a4:
a5:14:2f:17:d4:c4:c7:0e:8c:a5:b1:f0:2c:1d:6d:
3c:ea:27:33:2d:24:b7:cc:33:b1:0b:eb:9a:94:7f:
44:2e:33:84:f4:3c:3f:bf:5d:66:11:38:5a:18:49:
5c:01:9d:66:76:bc:43:79:af:be:84:f1:f3:62:2e:
9a:a2:b5:22:d3:ff:bc:ff:0d:4f:5a:da:3d:14:df:
06:3d:a0:b0:b4:9b:11:36:59:6f:98:6d:50:06:67:
f0:77:60:eb:84:a4:aa:76:ff:31:79:1b:92:8e:b6:
18:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:81:3F:F8:A3:18:80:02:FD:CB:B0:D2:74:DD:87:EB:A0:46:A5:31
X509v3 Authority Key Identifier:
keyid:B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/B8E841EAE5880F67873DB8847269969294507789.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3137302e302e3136382e302f32322d3234203d3e203238313436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.168.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:c0:8f:61:74:7f:6c:bf:1d:bf:68:50:a8:68:62:0f:2f:98:
2d:66:78:7a:d6:ed:21:39:6e:d6:e2:70:36:12:0e:72:19:16:
3e:b2:08:67:31:10:9c:d7:36:67:dd:91:43:9b:07:7f:87:46:
d8:30:72:40:c1:3c:3d:53:18:95:27:4b:6d:d1:ca:f7:98:d5:
79:2e:3e:6d:e2:6d:ad:35:ad:de:ac:73:48:f6:d9:20:78:f9:
10:51:9c:b5:aa:93:c9:96:84:a1:14:55:54:05:f2:05:a1:88:
8a:f5:79:b9:c0:3a:bf:bc:54:85:ce:96:e0:59:57:5a:b9:1f:
4f:3d:43:7f:06:88:83:86:f5:7b:6e:73:df:b0:77:f9:38:28:
6d:8b:bc:62:df:22:6f:88:7f:03:34:cc:b0:3f:ed:f2:7c:d1:
72:8a:b5:e0:91:9d:f5:57:78:8d:11:7f:ee:75:ca:d1:8a:1b:
59:8a:c3:e4:26:a8:6a:b1:b2:ae:9c:69:3d:bb:ad:c3:f5:51:
dd:46:b1:8b:da:d8:79:82:c5:b0:b1:e4:9d:91:56:98:77:67:
2a:b1:10:6a:36:a6:09:77:4b:c2:1b:e6:fc:79:cb:90:8d:3c:
88:76:83:61:ae:f6:ec:60:e7:9b:c6:bb:ee:77:c8:35:6a:77:
cc:09:5b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org