Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/323830343a323935343a3a2f33322d3334203d3e20323634303039.roa
File: 323830343a323935343a3a2f33322d3334203d3e20323634303039.roa (raw, json)
Hash identifier: XIgcnU06sVRj39kbi0fc1zR1WBmJTfTRXPt4MI9hIr0=
Subject key identifier: 2A:8C:45:86:F9:0B:53:CB:04:75:9D:24:42:6F:7C:1E:F7:2C:26:F7
Certificate issuer: /CN=173975B1E10A2DF9D0D5CE2BD4DCF54EA9BE45E7
Certificate serial: 5EA103B2443E87E72BC03FCD9D0F14E135C8EFBB
Authority key identifier: 17:39:75:B1:E1:0A:2D:F9:D0:D5:CE:2B:D4:DC:F5:4E:A9:BE:45:E7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/173975B1E10A2DF9D0D5CE2BD4DCF54EA9BE45E7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/323830343a323935343a3a2f33322d3334203d3e20323634303039.roa
Signing time: Wed 07 Aug 2024 17:22:40 +0000
ROA not before: Wed 07 Aug 2024 17:17:40 +0000
ROA not after: Wed 06 Aug 2025 17:22:40 +0000
asID: 264009
IP address blocks: 2804:2954::/32 maxlen: 34
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:a1:03:b2:44:3e:87:e7:2b:c0:3f:cd:9d:0f:14:e1:35:c8:ef:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=173975B1E10A2DF9D0D5CE2BD4DCF54EA9BE45E7
Validity
Not Before: Aug 7 17:17:40 2024 GMT
Not After : Aug 6 17:22:40 2025 GMT
Subject: CN=2A8C4586F90B53CB04759D24426F7C1EF72C26F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6f:68:65:d2:0b:ec:0d:33:35:f3:d0:39:26:
a7:5e:10:e4:59:2c:0d:81:c8:77:91:21:13:6c:5b:
70:97:01:60:c2:81:dc:da:89:f9:f1:40:97:f3:db:
1f:b6:f5:47:8f:e8:79:1e:99:ec:7d:ba:2c:f3:75:
f3:f2:e1:da:ae:0c:72:ec:40:1d:8f:c2:94:ff:83:
ac:9f:d8:01:c9:fd:7a:c4:87:8d:4d:18:6e:93:b6:
ba:9a:35:02:d0:79:eb:5f:75:65:53:63:1f:16:0c:
d3:d2:27:84:0c:f2:3e:fb:3e:c4:c2:ab:77:c0:ab:
0b:f2:1a:25:24:81:82:7d:90:fe:f0:dd:29:31:d8:
99:60:32:84:8f:e2:e0:23:75:c1:51:84:85:a1:cd:
5f:78:8d:fb:0c:a1:92:86:fe:5e:44:32:0f:e9:46:
d1:b4:98:f2:6c:69:ca:4c:30:0e:ac:2e:20:f1:8b:
a4:0e:b4:5e:0b:8b:01:20:ac:b7:a7:cf:e9:10:36:
73:67:c9:b2:d3:be:1f:d6:ce:53:05:1f:07:ab:98:
c3:37:44:ec:fa:37:2e:7d:73:a4:2c:0c:91:43:bd:
cf:f8:2b:f7:f9:ca:df:70:6f:43:8d:cf:db:48:36:
47:57:94:7e:07:22:5f:25:9f:5e:8e:a9:ff:3e:e4:
21:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:8C:45:86:F9:0B:53:CB:04:75:9D:24:42:6F:7C:1E:F7:2C:26:F7
X509v3 Authority Key Identifier:
keyid:17:39:75:B1:E1:0A:2D:F9:D0:D5:CE:2B:D4:DC:F5:4E:A9:BE:45:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/173975B1E10A2DF9D0D5CE2BD4DCF54EA9BE45E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/173975B1E10A2DF9D0D5CE2BD4DCF54EA9BE45E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/323830343a323935343a3a2f33322d3334203d3e20323634303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2954::/32
Signature Algorithm: sha256WithRSAEncryption
96:f2:5f:92:af:12:2c:a2:94:ae:99:7b:60:50:78:12:f5:2e:
46:ed:fc:3f:df:13:5c:43:be:7a:ef:f2:c3:39:84:48:29:3d:
17:16:a0:ec:24:69:7b:b4:af:e7:3f:95:a9:8c:9b:ef:e0:a1:
10:01:5c:cd:f7:a7:79:e6:b9:5e:eb:62:e7:1e:19:14:42:00:
6e:51:b8:ff:d5:63:4b:32:77:85:a3:0a:01:fe:54:01:1f:c5:
ec:59:0c:c9:ca:39:c8:e5:27:26:66:3d:d6:c2:50:46:dc:3e:
32:29:64:9f:2c:d8:45:bd:d3:5b:c6:14:40:8b:ac:b1:85:5e:
a3:fe:c5:70:30:8f:c6:d0:97:17:40:26:48:79:72:6d:ce:2f:
1a:ab:a8:ad:a8:a9:02:0f:9e:0d:2a:c8:d3:a4:85:57:64:7a:
7d:cc:a0:b0:c2:05:a3:f0:53:c1:87:21:29:14:5d:a7:0c:f0:
19:90:4d:85:17:94:ad:b5:58:1a:0b:dc:c3:6b:d5:17:22:1c:
0e:f7:31:a3:17:92:a1:d8:33:23:e2:5d:74:eb:de:4a:1b:15:
04:33:27:cb:ce:fe:5b:84:05:ee:f8:aa:a0:ed:df:d5:e9:48:
fc:bd:1d:a1:ec:8f:60:6f:73:0f:99:be:99:ee:5e:ff:54:7b:
70:6c:d1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 07:44:27 2024 by rpki-client on console-fra.rpki-client.org