Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/1/323830343a333239303a3a2f33342d3334203d3e20323635303835.roa
File: 323830343a333239303a3a2f33342d3334203d3e20323635303835.roa (raw, json)
Hash identifier: PZI3dTWHmH4C/jkZTs9cS5Dob/KPy1Hm8PvKM3aOfPc=
Subject key identifier: 99:8C:27:1D:E9:A3:8B:B8:2E:14:8C:FE:72:62:28:20:E1:6D:C8:08
Certificate issuer: /CN=8F68978AFBC97044175F7648CB33A2DB3E17A9DB
Certificate serial: 7048E6E2FA32CECE17AD266915CBDB67FD705E87
Authority key identifier: 8F:68:97:8A:FB:C9:70:44:17:5F:76:48:CB:33:A2:DB:3E:17:A9:DB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F68978AFBC97044175F7648CB33A2DB3E17A9DB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/1/323830343a333239303a3a2f33342d3334203d3e20323635303835.roa
Signing time: Fri 05 Apr 2024 00:27:24 +0000
ROA not before: Fri 05 Apr 2024 00:22:24 +0000
ROA not after: Fri 04 Apr 2025 00:27:24 +0000
asID: 265085
IP address blocks: 2804:3290::/34 maxlen: 34
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:48:e6:e2:fa:32:ce:ce:17:ad:26:69:15:cb:db:67:fd:70:5e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F68978AFBC97044175F7648CB33A2DB3E17A9DB
Validity
Not Before: Apr 5 00:22:24 2024 GMT
Not After : Apr 4 00:27:24 2025 GMT
Subject: CN=998C271DE9A38BB82E148CFE72622820E16DC808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ab:99:0e:98:ec:46:46:ad:28:70:f0:0b:d8:
29:66:29:60:a8:4b:18:ba:7c:90:f6:97:8a:2b:b7:
97:0a:a2:a3:2a:9b:de:83:00:d5:17:5d:88:6d:89:
99:97:63:b4:df:98:a9:b0:65:5e:ac:24:1c:c4:e1:
c9:bb:dc:2d:ce:89:1d:69:df:4d:ea:d1:5f:07:1a:
5b:e2:10:65:4f:e3:01:4d:3e:32:3b:5e:46:64:9d:
d8:0c:25:a9:fd:e1:18:ed:41:f2:8a:43:30:e5:d2:
39:06:4d:ed:6e:40:ff:af:2b:48:28:52:94:aa:4c:
0c:7f:98:f4:78:20:cb:04:c7:05:b5:51:33:5b:ed:
76:25:1c:fa:b6:2a:c8:87:7e:97:36:af:3b:e0:08:
70:46:a0:a7:79:5b:06:8c:4f:41:d7:cd:70:f4:e9:
04:76:3d:f8:66:3f:14:f2:05:d1:99:7f:bc:e9:d4:
56:80:78:2f:1b:0a:33:bd:51:98:a6:f5:36:41:f2:
e5:c2:a2:72:97:b4:c4:2a:f2:e9:ea:ca:a4:cb:96:
b6:67:9f:ae:45:ae:08:ca:83:b6:72:65:0a:52:4c:
92:ab:26:37:32:d5:d4:df:ac:64:81:ed:9e:c2:5d:
e8:2f:9c:f3:51:39:98:61:41:48:a8:1c:19:2f:ef:
b7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8C:27:1D:E9:A3:8B:B8:2E:14:8C:FE:72:62:28:20:E1:6D:C8:08
X509v3 Authority Key Identifier:
keyid:8F:68:97:8A:FB:C9:70:44:17:5F:76:48:CB:33:A2:DB:3E:17:A9:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/1/8F68978AFBC97044175F7648CB33A2DB3E17A9DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F68978AFBC97044175F7648CB33A2DB3E17A9DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/1/323830343a333239303a3a2f33342d3334203d3e20323635303835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3290::/34
Signature Algorithm: sha256WithRSAEncryption
30:76:b2:cc:ab:97:40:b9:ca:7e:1b:21:69:bf:6a:fd:00:5f:
af:e7:eb:1d:4a:16:69:f4:fb:e6:d1:c3:b5:63:a2:b9:ea:89:
88:2f:1b:06:8f:04:48:8a:db:1a:b3:2e:91:da:45:e6:85:d7:
2d:5f:20:8e:08:f1:34:c8:48:a0:34:38:49:c6:31:4f:8a:71:
d9:37:7d:9b:e2:a9:71:e2:59:d1:9d:14:c6:c1:a8:36:2e:aa:
8a:95:54:a1:fa:e8:c5:bc:61:ff:2f:05:b1:57:27:c8:19:2e:
29:be:c5:75:aa:7e:6f:19:d4:13:a3:68:be:4c:11:2a:5a:34:
cf:c8:3e:11:5e:0b:d6:6b:45:18:3c:c0:92:f4:43:bc:97:11:
b3:25:ac:1a:6f:a2:cd:c9:ed:a7:e9:57:52:18:a5:c9:93:32:
bd:61:58:03:ab:eb:d2:de:a4:d5:36:d7:6e:9f:b8:54:7f:9a:
75:0a:a1:c3:a6:f5:82:49:1c:c8:58:bf:e8:e8:41:c7:54:3a:
bd:cb:ae:af:75:2f:a1:16:d6:eb:f3:0d:c9:7c:57:b2:72:b6:
8a:70:42:41:56:0a:1a:86:f4:8a:f9:94:d1:04:f3:37:49:5a:
0e:98:49:b3:f2:00:dd:f4:26:3c:f6:80:73:40:38:c6:5b:5c:
23:1c:8e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 06:47:04 2024 by rpki-client on console-fra.rpki-client.org