Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/0/323830343a323966343a3a2f33362d3336203d3e20323634303437.roa
File: 323830343a323966343a3a2f33362d3336203d3e20323634303437.roa (raw, json)
Hash identifier: URICJzX+SiFVqjUPptpAUBGZf+LHMdPsLqwmGQ/mV7o=
Subject key identifier: 8E:52:98:BD:9D:D8:F0:46:29:1F:CE:61:54:74:5C:B3:0A:01:DD:3A
Certificate issuer: /CN=172F46A9A851486435DD77C21C958357351450AC
Certificate serial: 086F30A83A62AA69E76F3B81E9F52917F01C5441
Authority key identifier: 17:2F:46:A9:A8:51:48:64:35:DD:77:C2:1C:95:83:57:35:14:50:AC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/172F46A9A851486435DD77C21C958357351450AC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/0/323830343a323966343a3a2f33362d3336203d3e20323634303437.roa
Signing time: Mon 20 Mar 2023 13:49:41 +0000
ROA not before: Mon 20 Mar 2023 13:44:41 +0000
ROA not after: Mon 18 Mar 2024 13:49:41 +0000
asID: 264047
IP address blocks: 2804:29f4::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:6f:30:a8:3a:62:aa:69:e7:6f:3b:81:e9:f5:29:17:f0:1c:54:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=172F46A9A851486435DD77C21C958357351450AC
Validity
Not Before: Mar 20 13:44:41 2023 GMT
Not After : Mar 18 13:49:41 2024 GMT
Subject: CN=8E5298BD9DD8F046291FCE6154745CB30A01DD3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:31:14:a0:7c:ab:3d:04:ef:07:04:b3:b9:b8:
af:dd:44:dc:4d:a1:59:ee:de:45:12:b2:7d:b1:fa:
93:90:ce:17:e7:07:48:b9:7c:a6:ca:c5:7d:f0:83:
07:0d:da:8b:19:15:71:61:0a:fd:1c:3a:c7:72:0e:
d6:58:47:bb:8b:de:d2:26:e0:d6:81:c7:b5:81:1a:
22:a7:c8:47:fb:f2:af:e4:53:21:66:c0:67:06:8d:
ef:9d:74:14:a8:f4:71:39:58:c4:2e:5b:5e:51:68:
e7:a9:1d:db:3f:1d:c0:fc:7f:fd:e1:69:ac:71:d7:
e8:63:a1:40:c4:2a:e7:48:33:00:d5:6e:4e:29:d9:
17:9d:69:89:67:b7:1c:48:64:02:09:e2:b2:db:e2:
12:22:bf:8f:5d:77:eb:e8:7e:f7:53:5c:f1:3a:fa:
ee:11:ed:3e:f8:6a:d0:5c:0e:49:ad:b5:36:e7:6f:
71:04:d5:17:04:99:08:a3:85:ba:fd:eb:f3:34:fe:
de:45:15:6f:a6:e0:5d:ab:f7:dd:66:67:26:cb:e8:
04:64:5d:a8:4a:ab:87:83:92:47:32:d4:0a:e2:54:
e6:63:00:a7:6a:a1:68:92:b3:05:5a:b5:cc:71:a4:
6b:06:46:41:a8:ba:28:be:7d:b5:75:b1:11:a9:88:
23:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:52:98:BD:9D:D8:F0:46:29:1F:CE:61:54:74:5C:B3:0A:01:DD:3A
X509v3 Authority Key Identifier:
keyid:17:2F:46:A9:A8:51:48:64:35:DD:77:C2:1C:95:83:57:35:14:50:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/0/172F46A9A851486435DD77C21C958357351450AC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/172F46A9A851486435DD77C21C958357351450AC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/0/323830343a323966343a3a2f33362d3336203d3e20323634303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:29f4::/36
Signature Algorithm: sha256WithRSAEncryption
bf:bc:b9:8a:3f:4a:59:5d:a1:49:02:8d:6a:fa:b7:02:7c:e9:
d1:35:77:27:4e:ea:73:d5:7f:79:b2:ea:34:e7:bd:82:55:05:
0c:1b:16:14:1e:29:c3:48:ac:a0:41:93:8d:bf:f1:42:d9:d1:
3b:35:61:fb:22:f1:e7:d9:39:8e:b5:64:8c:19:04:3e:33:a2:
58:08:4c:de:8e:c0:a7:1e:86:9c:8d:9a:d2:21:5c:bf:4a:5c:
e0:ef:ee:1d:58:cf:75:d2:93:cb:f9:ea:82:b9:04:28:49:c8:
00:9a:a6:14:db:eb:32:6a:d3:6b:14:1f:07:fd:02:85:ca:a4:
3b:44:36:79:cd:5f:dc:5a:ad:81:34:6c:f8:fd:f6:95:0f:ae:
2a:af:97:73:f2:51:c7:52:55:44:a5:0a:9f:b0:3d:b8:db:0b:
d7:84:5c:41:d4:23:51:27:23:48:58:da:78:04:31:ff:ed:0e:
a6:26:a8:ad:3e:e9:83:51:ef:e2:19:14:e3:a7:51:09:0f:aa:
6a:9d:ac:9e:07:0b:ee:c2:71:5b:0e:f4:24:b6:31:71:12:be:
b7:be:ad:81:69:19:e2:ec:3c:50:fe:7b:6e:fa:8b:6b:d7:82:
9b:32:82:60:2e:0e:2a:80:de:bf:71:4a:b2:f1:f0:66:b0:dc:
23:d3:1b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org