Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/1/323830343a3564633a3a2f33322d3438203d3e203533303139.roa
File: 323830343a3564633a3a2f33322d3438203d3e203533303139.roa (raw, json)
Hash identifier: GJ/JUCY4RCH62PAZDMkFH7c/j2rtLGA+IK+3TbU0lZo=
Subject key identifier: 13:66:F3:44:6A:15:AC:D3:BB:DE:6B:2B:6E:D2:7A:E1:DD:A8:29:43
Certificate issuer: /CN=313A191B06B02446EDEBC87D42685A96816A487A
Certificate serial: 7DE93FA37CC1055BA79A0ED5C991748161840DC8
Authority key identifier: 31:3A:19:1B:06:B0:24:46:ED:EB:C8:7D:42:68:5A:96:81:6A:48:7A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/313A191B06B02446EDEBC87D42685A96816A487A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/1/323830343a3564633a3a2f33322d3438203d3e203533303139.roa
Signing time: Thu 04 Apr 2024 02:05:07 +0000
ROA not before: Thu 04 Apr 2024 02:00:07 +0000
ROA not after: Thu 03 Apr 2025 02:05:07 +0000
asID: 53019
IP address blocks: 2804:5dc::/32 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:e9:3f:a3:7c:c1:05:5b:a7:9a:0e:d5:c9:91:74:81:61:84:0d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=313A191B06B02446EDEBC87D42685A96816A487A
Validity
Not Before: Apr 4 02:00:07 2024 GMT
Not After : Apr 3 02:05:07 2025 GMT
Subject: CN=1366F3446A15ACD3BBDE6B2B6ED27AE1DDA82943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7f:cb:7d:79:04:42:3f:84:b8:2d:a1:78:e8:
53:9e:e2:3b:62:ec:28:4c:64:fa:f6:b6:4e:11:03:
a2:39:f6:ab:48:7c:6b:78:7e:a8:bc:95:dc:cf:d9:
49:36:6b:c1:20:fe:1d:6a:a9:fc:62:cc:0b:5d:e7:
73:f3:c1:46:5c:e4:98:de:67:0b:36:53:ef:23:7d:
74:2d:b4:9e:05:33:6b:f9:85:9e:a3:4e:a8:3f:a9:
df:a6:64:85:fe:21:85:5c:3b:da:c1:c8:0c:5b:88:
cc:f8:64:34:a6:21:1f:c1:93:6a:7f:27:d6:29:0e:
9c:c4:44:c1:f0:33:a3:c7:af:d7:39:7b:3d:d0:e9:
9c:9d:0c:f3:01:de:e0:44:22:79:cc:92:06:eb:aa:
df:2f:ef:b8:f2:a3:ca:ba:3a:52:83:9d:45:e6:1d:
c0:65:d0:02:ea:5f:41:90:0a:60:e1:05:84:f0:f9:
3c:c5:62:eb:c6:3a:e3:c5:80:d4:4f:c3:61:4d:ed:
ef:05:3d:77:40:a7:14:0d:f8:92:fd:c3:5b:be:21:
65:10:74:24:6e:26:83:a0:94:15:b8:28:5d:ae:96:
2f:5d:1b:ce:00:80:a5:5b:30:76:fc:c9:57:38:4c:
4e:0e:d7:cf:81:e3:83:02:ed:22:8c:90:e5:4d:c6:
93:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:66:F3:44:6A:15:AC:D3:BB:DE:6B:2B:6E:D2:7A:E1:DD:A8:29:43
X509v3 Authority Key Identifier:
keyid:31:3A:19:1B:06:B0:24:46:ED:EB:C8:7D:42:68:5A:96:81:6A:48:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/1/313A191B06B02446EDEBC87D42685A96816A487A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/313A191B06B02446EDEBC87D42685A96816A487A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/1/323830343a3564633a3a2f33322d3438203d3e203533303139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5dc::/32
Signature Algorithm: sha256WithRSAEncryption
bc:31:0b:d7:7b:4b:b4:fb:29:0f:e2:81:a5:83:ae:55:d8:c2:
a9:e2:b5:3d:5d:28:d7:06:d8:39:06:01:23:60:3a:f8:6e:66:
9d:eb:3b:2d:d5:c9:da:9d:7d:71:d7:a7:7c:11:db:10:44:04:
fc:3a:aa:4c:7e:5e:c8:2f:79:14:82:6e:54:38:dd:ed:d5:23:
f4:65:9a:6f:33:5b:3c:43:4f:4a:ff:86:3a:e9:58:cf:af:8e:
07:52:a9:02:a6:ad:24:fe:14:df:6c:bc:87:35:4c:8f:f0:46:
69:85:11:8e:98:9e:bd:42:97:0e:16:ac:01:b7:80:3e:af:ce:
e5:41:96:e3:3f:d8:40:86:12:2a:06:bd:7d:73:c8:61:38:1a:
68:5e:f1:ed:e9:b2:12:80:1f:a7:fd:e1:59:ae:ce:51:3e:98:
af:06:15:61:71:b4:f3:e9:34:b2:b9:5d:b8:10:93:d0:c9:8d:
f6:40:a8:76:b7:10:eb:a4:e9:58:1e:ca:7a:60:d7:5e:08:67:
90:49:f1:fe:bf:f1:2a:97:70:a0:fd:97:5a:58:18:3b:b7:ac:
81:38:ad:50:ed:6b:9c:f3:31:39:01:77:ed:ea:12:04:62:82:
e1:ec:ed:36:d5:b1:b5:70:93:69:48:de:29:d7:f5:6e:2f:1f:
e3:da:a9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 13:41:07 2024 by rpki-client on console-fra.rpki-client.org