Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/323830343a363336383a3a2f33322d3438203d3e20323032.roa
File: 323830343a363336383a3a2f33322d3438203d3e20323032.roa (raw, json)
Hash identifier: LKe5XqnSSf3LXJ2zpt2IXhxfu2PENjSw26IabNYkRZQ=
Subject key identifier: 38:F6:91:3F:8A:FF:2B:09:D0:9C:31:B4:BB:EF:86:DD:2F:67:9C:DE
Certificate issuer: /CN=EA076A5314557BEDD4FA84612D12ED1A33EC7D8A
Certificate serial: 6BC33EF4B8096320A6B8AC667EDD31539BC33A2C
Authority key identifier: EA:07:6A:53:14:55:7B:ED:D4:FA:84:61:2D:12:ED:1A:33:EC:7D:8A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA076A5314557BEDD4FA84612D12ED1A33EC7D8A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/323830343a363336383a3a2f33322d3438203d3e20323032.roa
Signing time: Thu 22 Feb 2024 01:08:30 +0000
ROA not before: Thu 22 Feb 2024 01:03:30 +0000
ROA not after: Thu 20 Feb 2025 01:08:30 +0000
asID: 202
IP address blocks: 2804:6368::/32 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:c3:3e:f4:b8:09:63:20:a6:b8:ac:66:7e:dd:31:53:9b:c3:3a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA076A5314557BEDD4FA84612D12ED1A33EC7D8A
Validity
Not Before: Feb 22 01:03:30 2024 GMT
Not After : Feb 20 01:08:30 2025 GMT
Subject: CN=38F6913F8AFF2B09D09C31B4BBEF86DD2F679CDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ad:42:c5:b5:eb:95:a9:29:56:2f:6b:5b:47:
5a:d2:4e:0b:93:d2:d2:dd:96:1e:39:af:bb:9d:a2:
ab:02:8b:93:94:2e:62:59:5f:56:3e:46:4e:18:bc:
84:08:9c:2a:86:ae:11:3f:72:de:7b:ec:51:90:95:
97:f2:02:78:a3:1e:08:98:69:7a:d9:01:8f:de:cc:
12:5a:d9:75:8a:96:50:cd:07:01:45:58:1b:89:25:
18:a2:89:6b:55:fb:3f:91:e7:c1:9a:a6:c1:68:70:
5e:66:93:d8:77:57:14:70:7b:c5:24:94:0f:62:c0:
9d:73:7b:1e:f5:ca:2b:27:c9:47:fe:78:78:6c:22:
ff:76:34:fe:78:82:d9:74:b9:33:23:65:96:49:03:
08:6a:49:d7:b2:36:1c:37:85:78:38:d2:71:ab:37:
4e:d7:e5:96:a9:94:32:1b:80:04:77:6d:7e:1c:13:
97:6a:04:67:81:68:ea:d7:be:91:57:12:e2:ee:92:
11:91:2a:43:09:35:a0:6d:1e:34:7c:8b:31:7d:67:
46:3d:c0:66:e3:a3:bc:71:bc:90:2c:8b:bb:d2:54:
fa:c3:ab:fc:b2:88:43:7f:6f:49:f4:ea:72:37:db:
b1:12:18:a7:4b:ac:f8:a0:1c:9d:82:22:8b:f9:55:
2e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F6:91:3F:8A:FF:2B:09:D0:9C:31:B4:BB:EF:86:DD:2F:67:9C:DE
X509v3 Authority Key Identifier:
keyid:EA:07:6A:53:14:55:7B:ED:D4:FA:84:61:2D:12:ED:1A:33:EC:7D:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/EA076A5314557BEDD4FA84612D12ED1A33EC7D8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA076A5314557BEDD4FA84612D12ED1A33EC7D8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/323830343a363336383a3a2f33322d3438203d3e20323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6368::/32
Signature Algorithm: sha256WithRSAEncryption
5d:ca:ec:75:fb:0a:49:81:6b:0c:1b:89:7a:dc:6f:41:4f:5e:
a9:f2:47:85:c5:f8:15:d8:24:29:50:29:1b:5c:f1:5b:3b:00:
c6:26:f9:df:c7:3a:e6:c0:94:b6:47:a0:3f:cd:80:09:6f:89:
19:13:7e:7b:19:fe:eb:7d:e7:74:fe:2f:43:1a:2a:61:c2:2c:
ca:6b:6a:5a:d2:f0:c4:8b:1a:8f:b5:0b:44:48:dc:8d:be:67:
a5:be:c8:f3:ab:84:c1:73:51:4d:a2:e3:a2:c2:ed:d5:df:83:
14:d1:89:7d:6a:e3:bc:6b:52:14:78:23:52:86:4b:4a:d9:fc:
10:27:04:4d:eb:ae:5f:c6:4b:49:4b:e5:0f:ec:e3:0b:fa:f8:
13:5f:d0:79:18:99:42:37:16:6f:40:b7:07:2d:fc:7d:57:b4:
1e:ac:9a:63:ed:b4:4d:18:e0:02:a3:b7:d4:99:40:2e:5c:7a:
9d:37:54:29:47:73:ff:c6:57:c4:6c:04:c5:fd:f7:68:a9:3d:
a0:f8:c2:48:9a:47:92:db:51:14:e9:9c:da:08:cf:a3:99:16:
c7:20:32:11:2e:f6:cc:92:26:2a:2a:1e:f8:d3:cd:45:61:3d:
da:bc:b2:e4:aa:f4:46:ea:00:a6:d0:e5:23:0f:c3:0c:fa:3c:
ad:8f:b5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 24 14:50:50 2024 by rpki-client on console-ams.rpki-client.org