Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a3a2f33322d3332203d3e203631383332.roa
File: 323830343a316130343a3a2f33322d3332203d3e203631383332.roa (raw, json)
Hash identifier: cBZV5Y52uEGBqjeZzP8NaYjCSrYHV+UJ43479PgDJGM=
Subject key identifier: DA:C5:34:F1:9D:9B:E4:A0:95:DD:0D:40:02:4A:D0:02:66:1A:38:FD
Certificate issuer: /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial: FB5EBE26B7289D90F52B78463B054FC671AB32
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a3a2f33322d3332203d3e203631383332.roa
Signing time: Thu 05 Oct 2023 17:51:49 +0000
ROA not before: Thu 05 Oct 2023 17:46:49 +0000
ROA not after: Thu 03 Oct 2024 17:51:49 +0000
asID: 61832
IP address blocks: 2804:1a04::/32 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
fb:5e:be:26:b7:28:9d:90:f5:2b:78:46:3b:05:4f:c6:71:ab:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Validity
Not Before: Oct 5 17:46:49 2023 GMT
Not After : Oct 3 17:51:49 2024 GMT
Subject: CN=DAC534F19D9BE4A095DD0D40024AD002661A38FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:33:b6:66:e4:99:26:45:e4:44:fa:74:f5:1f:
ba:c1:30:9c:b1:4c:99:a9:08:a2:9a:0c:bf:d6:19:
cf:35:1f:95:31:37:cf:48:3b:52:bb:2b:4c:cd:15:
28:94:63:f5:75:21:52:e4:2e:0f:d4:e8:d2:d0:5f:
e4:fb:1c:39:44:30:46:3f:7f:4c:b7:f5:00:32:5b:
7a:5f:7d:36:28:7d:f2:13:91:54:cd:94:3f:9d:ab:
de:ed:62:e4:3c:16:71:17:fb:7e:57:03:ab:80:6c:
85:23:a9:3b:5c:66:a2:98:f2:93:5f:3a:a5:4f:fe:
8d:dc:1d:7c:4a:43:6a:33:3e:5b:93:7e:a7:b1:f5:
9c:ce:52:94:21:33:5c:78:9b:58:75:f8:77:f4:73:
87:f5:63:e2:47:b6:d7:42:a4:da:8a:ae:42:b1:cc:
bf:7e:80:da:c5:eb:25:eb:08:40:fe:f2:2c:3b:86:
8f:a8:d4:d1:76:80:18:3e:ca:0c:c6:c8:3b:eb:e2:
87:cd:3a:ec:27:67:48:a6:f0:88:a8:18:77:e0:83:
1b:c0:a6:6e:06:ed:60:5a:ce:af:54:3d:df:a9:c7:
11:ab:45:b9:45:18:d8:3f:c7:6a:ca:55:5d:93:18:
b4:c6:20:70:1a:1e:bd:8a:15:7d:e9:92:70:8d:1b:
02:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C5:34:F1:9D:9B:E4:A0:95:DD:0D:40:02:4A:D0:02:66:1A:38:FD
X509v3 Authority Key Identifier:
keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a3a2f33322d3332203d3e203631383332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1a04::/32
Signature Algorithm: sha256WithRSAEncryption
4a:f5:2c:a4:76:c1:4d:9a:ec:19:c6:9e:d5:d5:94:d1:97:5c:
41:f0:7a:4f:76:7d:fd:0c:fb:f5:78:97:20:aa:e6:44:d7:fd:
b4:8f:ca:d2:79:2f:63:d0:f7:d4:dc:3c:21:d2:e6:6d:27:5e:
dd:e2:8e:72:3c:a0:38:61:d1:d2:29:04:ec:2e:58:56:68:f8:
26:e0:6c:06:1c:c6:30:f0:e0:ba:ad:7e:a2:df:d8:d7:ca:3c:
d0:14:b1:6e:b6:78:2e:e1:d3:bc:0b:61:39:12:17:9e:f4:09:
1a:fc:69:e2:e1:fe:c2:e8:00:4c:df:32:67:5f:4c:3e:f9:13:
10:c9:e4:95:d7:43:c2:8a:8a:8c:7a:d6:95:66:6e:df:d0:5c:
3b:b8:35:77:83:59:35:16:45:07:50:09:57:15:6c:e4:7d:bb:
ea:50:bf:c8:ba:18:46:42:00:7e:09:cd:80:66:e4:ee:6e:9f:
f2:70:a1:cd:f4:85:d5:6b:0b:ae:75:c9:cc:38:c2:f0:5b:c5:
00:b6:45:01:43:08:fe:5d:c7:68:d2:89:79:19:e2:9b:ba:93:
ac:1d:7f:43:53:20:dc:65:40:85:cb:f1:bc:a5:44:64:96:48:
9b:24:33:d3:2b:a8:41:3f:f0:2e:0d:d0:44:ae:b9:34:09:03:
98:3c:f0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 15 18:54:17 2024 by rpki-client on console-fra.rpki-client.org