Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/323830343a313263303a3a2f33322d3334203d3e20323633343936.roa
File: 323830343a313263303a3a2f33322d3334203d3e20323633343936.roa (raw, json)
Hash identifier: gRVux0m050KwWTnqKccec1Ga7IbRQLb8ah6hHmvf/QA=
Subject key identifier: AC:9A:DF:EB:F6:02:07:E9:6C:B3:BC:7E:4A:09:54:9E:CC:A4:89:30
Certificate issuer: /CN=DE8A1F51F6DDFD334BD1480D39B12086483881D4
Certificate serial: 59DF8FA069D5FF9A2D300EEED2D2B906FC171EA1
Authority key identifier: DE:8A:1F:51:F6:DD:FD:33:4B:D1:48:0D:39:B1:20:86:48:38:81:D4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE8A1F51F6DDFD334BD1480D39B12086483881D4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/323830343a313263303a3a2f33322d3334203d3e20323633343936.roa
Signing time: Tue 07 Nov 2023 13:19:03 +0000
ROA not before: Tue 07 Nov 2023 13:14:03 +0000
ROA not after: Tue 05 Nov 2024 13:19:03 +0000
asID: 263496
IP address blocks: 2804:12c0::/32 maxlen: 34
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:df:8f:a0:69:d5:ff:9a:2d:30:0e:ee:d2:d2:b9:06:fc:17:1e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE8A1F51F6DDFD334BD1480D39B12086483881D4
Validity
Not Before: Nov 7 13:14:03 2023 GMT
Not After : Nov 5 13:19:03 2024 GMT
Subject: CN=AC9ADFEBF60207E96CB3BC7E4A09549ECCA48930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7f:3d:88:58:1d:03:90:2d:d0:09:ec:d7:6b:
18:32:3b:42:1a:1d:7e:58:c1:b2:ff:39:62:2b:5c:
62:35:05:88:e5:4c:9d:54:7f:9b:60:20:8d:8d:a5:
49:5c:0c:e6:e2:5a:47:97:87:ac:dc:be:1f:99:cf:
da:d3:39:9c:56:d2:65:b8:f1:33:15:56:5e:2f:e4:
34:b4:a0:93:03:d0:61:65:0c:0f:bd:ab:19:35:93:
58:df:d7:88:7d:45:a0:19:78:3c:f8:e0:f6:81:89:
4b:e2:e6:83:b6:7d:6c:18:30:12:04:25:48:13:4f:
b7:de:71:08:ae:2b:24:9c:6a:35:45:49:40:e0:81:
db:5f:94:7a:03:b3:a5:a9:ca:c7:ee:61:3a:64:5f:
d4:e7:3e:29:79:a4:ab:f3:56:a9:66:f6:bd:2f:72:
4a:61:7b:32:ea:5e:c8:ee:ad:73:40:26:45:9a:b5:
7c:c8:6a:4a:7c:fb:fe:57:dd:29:ee:53:01:d0:96:
b6:bc:b5:6a:6c:fb:20:62:fb:f6:55:a2:5a:4f:5b:
43:34:0d:b4:e3:57:18:68:56:94:af:c0:d7:7c:a5:
6d:28:c9:62:e7:25:f9:07:36:6a:1d:13:6f:b0:91:
40:9a:52:ea:30:f9:93:17:56:bf:8d:1b:b5:f7:e0:
d4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9A:DF:EB:F6:02:07:E9:6C:B3:BC:7E:4A:09:54:9E:CC:A4:89:30
X509v3 Authority Key Identifier:
keyid:DE:8A:1F:51:F6:DD:FD:33:4B:D1:48:0D:39:B1:20:86:48:38:81:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/DE8A1F51F6DDFD334BD1480D39B12086483881D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE8A1F51F6DDFD334BD1480D39B12086483881D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/323830343a313263303a3a2f33322d3334203d3e20323633343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:12c0::/32
Signature Algorithm: sha256WithRSAEncryption
25:7c:cd:a2:a4:c9:32:45:50:84:a2:c6:3f:c6:b9:5d:ee:63:
c3:9c:e0:ad:b5:02:2c:2c:08:7d:63:61:01:03:bb:f2:70:95:
01:1a:e7:30:13:6a:af:72:6f:bc:0f:e1:62:38:ac:4f:28:f0:
08:23:38:b1:42:bd:26:7e:c7:5e:b4:a7:0f:b1:89:4e:45:3a:
79:1f:f1:02:44:56:ee:3c:81:9e:f9:5f:89:91:f7:78:71:6b:
f8:64:1d:4e:03:3d:58:27:59:fa:b0:7f:50:03:9c:f0:0b:53:
23:da:84:cb:b1:49:cd:14:eb:6c:a8:42:38:30:19:72:70:00:
96:b7:aa:b9:55:68:f2:a6:d8:e4:19:23:7b:95:3f:5c:9d:94:
a3:1c:0f:ed:d9:5e:95:88:40:3e:28:d8:ba:c9:91:7d:a3:d8:
56:ba:f3:47:31:7f:3b:3b:72:11:fa:e8:f6:71:70:1a:76:64:
27:bb:aa:18:43:3b:b5:0a:10:c8:08:e9:a3:26:a7:34:99:06:
77:ac:ce:b1:1a:4a:50:e2:c1:56:18:b8:e9:c3:42:cf:9a:c3:
00:a0:05:70:cb:b2:a7:25:ac:7e:de:c2:d7:b9:e3:3f:82:46:
73:e1:ce:90:e7:3e:77:98:67:bc:97:18:4e:d3:78:4b:21:1c:
9a:0e:90:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 22:06:18 2024 by rpki-client on console-ams.rpki-client.org