Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/1/323830343a326233343a663830303a3a2f34302d3430203d3e20323635313430.roa
File: 323830343a326233343a663830303a3a2f34302d3430203d3e20323635313430.roa (raw, json)
Hash identifier: EFlPjyr9JmwtFtE5v4u6ZxhOD2tNL9aUA05eH1RtY6U=
Subject key identifier: 9F:25:7C:1D:D2:B6:F2:38:8D:80:1E:F0:DC:4C:70:D2:E3:78:48:AD
Certificate issuer: /CN=AB74D1409E020E9FC44ACD2821DE9138F94DD415
Certificate serial: 0EEA05B1B3629C7DDEEC0B1FBDB100B80EFF595D
Authority key identifier: AB:74:D1:40:9E:02:0E:9F:C4:4A:CD:28:21:DE:91:38:F9:4D:D4:15
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB74D1409E020E9FC44ACD2821DE9138F94DD415.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/1/323830343a326233343a663830303a3a2f34302d3430203d3e20323635313430.roa
Signing time: Thu 04 Apr 2024 15:20:51 +0000
ROA not before: Thu 04 Apr 2024 15:15:51 +0000
ROA not after: Thu 03 Apr 2025 15:20:51 +0000
asID: 265140
IP address blocks: 2804:2b34:f800::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:ea:05:b1:b3:62:9c:7d:de:ec:0b:1f:bd:b1:00:b8:0e:ff:59:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB74D1409E020E9FC44ACD2821DE9138F94DD415
Validity
Not Before: Apr 4 15:15:51 2024 GMT
Not After : Apr 3 15:20:51 2025 GMT
Subject: CN=9F257C1DD2B6F2388D801EF0DC4C70D2E37848AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c7:68:76:5e:7e:34:67:dc:6d:f6:02:1f:9d:
d4:18:e4:ae:a1:f9:ec:bd:7d:bd:69:41:3d:d7:ed:
86:25:4a:03:86:7f:d9:10:da:74:d7:95:e1:74:74:
ef:a5:e3:77:a1:10:8d:dd:d4:f6:d5:44:60:c5:5d:
b8:90:1f:bc:e6:d1:35:e9:37:67:15:36:ad:85:a6:
62:35:6e:ec:f2:37:2f:d0:53:32:71:9e:99:94:36:
40:e3:ee:df:48:a1:1f:32:4f:be:c4:b5:5a:a8:f3:
70:e4:d7:03:74:88:e8:76:85:9d:2c:73:12:bb:3c:
bb:14:02:80:1f:28:de:65:f6:d2:03:26:93:27:8f:
cf:3b:1d:76:6d:a5:54:a6:84:96:f0:a3:c0:f7:86:
85:50:7d:93:df:5f:92:d6:08:5b:72:87:63:e1:a4:
f1:0a:28:bf:89:21:d8:dc:90:a2:b9:45:77:58:3c:
d4:a5:00:50:87:2a:6b:f1:5b:02:f6:c3:ac:ec:f3:
b3:12:16:16:bc:a4:49:17:6c:70:ef:66:f8:ea:59:
ba:1c:a9:ce:1c:0e:1a:0d:4e:79:28:9b:6a:a8:78:
e6:ad:be:9c:32:61:7a:c2:f3:3c:44:05:81:6d:99:
cc:aa:dc:79:c1:b7:3e:4e:23:f7:b8:b3:67:fc:04:
77:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:25:7C:1D:D2:B6:F2:38:8D:80:1E:F0:DC:4C:70:D2:E3:78:48:AD
X509v3 Authority Key Identifier:
keyid:AB:74:D1:40:9E:02:0E:9F:C4:4A:CD:28:21:DE:91:38:F9:4D:D4:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/1/AB74D1409E020E9FC44ACD2821DE9138F94DD415.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB74D1409E020E9FC44ACD2821DE9138F94DD415.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/1/323830343a326233343a663830303a3a2f34302d3430203d3e20323635313430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2b34:f800::/40
Signature Algorithm: sha256WithRSAEncryption
02:bd:87:40:b5:66:bd:7f:ff:cd:38:a6:b4:cf:e9:64:9d:e9:
39:03:3d:f2:6b:c4:dd:55:c1:a0:4f:d0:dd:93:8b:03:a3:11:
01:ff:d2:85:1d:a6:91:33:30:31:51:39:8b:77:9d:0a:b0:48:
a1:5a:8a:cb:84:13:da:aa:a1:6d:9b:0f:91:71:d9:d6:b2:f5:
94:13:60:92:55:46:5d:e3:c9:a7:88:e1:46:e9:79:7b:d3:f8:
6c:e1:a0:ff:51:e3:0e:96:29:ac:c4:02:26:f2:ed:27:49:c7:
ce:8f:0c:1f:95:e6:c9:58:af:21:68:71:8c:24:cf:b3:86:0f:
af:a0:fd:05:0a:a8:24:5d:15:53:f0:75:b7:f8:3f:b3:d9:6a:
74:1a:2c:ad:87:93:66:b9:87:d4:27:e4:9f:cd:ef:b6:b9:34:
aa:ba:39:09:4d:71:cd:d8:2d:69:24:5b:43:96:56:78:58:ca:
ec:2c:47:01:2f:7c:d8:72:16:f1:93:e2:eb:d4:0d:08:98:7d:
15:e6:c4:d7:f7:ec:07:71:41:d9:72:cf:49:ac:f9:8b:03:b1:
a6:69:f0:0d:56:e9:8c:49:fc:af:a6:24:91:23:97:f8:d3:7d:
86:93:00:ce:58:49:d5:e4:e2:04:f0:30:ac:72:84:d4:d1:34:
25:bf:3f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org