Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3K7adNY6QLXq8CAHJyRfhBJmVC93XWBnvkcHP2smgFkT/1/323830343a343137343a3a2f33322d3332203d3e20323637343334.roa
File: 323830343a343137343a3a2f33322d3332203d3e20323637343334.roa (raw, json)
Hash identifier: X3CMzFlgacO2tw9Ad9/NqVZ3IRYAhQmSxf5Uh1tRFiY=
Subject key identifier: FF:CE:62:96:1F:78:48:A4:73:2E:E9:DD:5E:F4:41:35:6C:77:4F:BF
Certificate issuer: /CN=0FC1691CE2723B06910C8870A43212BD77573423
Certificate serial: 0991CD64820BDB70391EA47CF0625D39E1EE7518
Authority key identifier: 0F:C1:69:1C:E2:72:3B:06:91:0C:88:70:A4:32:12:BD:77:57:34:23
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FC1691CE2723B06910C8870A43212BD77573423.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3K7adNY6QLXq8CAHJyRfhBJmVC93XWBnvkcHP2smgFkT/1/323830343a343137343a3a2f33322d3332203d3e20323637343334.roa
Signing time: Wed 03 Apr 2024 23:39:32 +0000
ROA not before: Wed 03 Apr 2024 23:34:32 +0000
ROA not after: Wed 02 Apr 2025 23:39:32 +0000
asID: 267434
IP address blocks: 2804:4174::/32 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:91:cd:64:82:0b:db:70:39:1e:a4:7c:f0:62:5d:39:e1:ee:75:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FC1691CE2723B06910C8870A43212BD77573423
Validity
Not Before: Apr 3 23:34:32 2024 GMT
Not After : Apr 2 23:39:32 2025 GMT
Subject: CN=FFCE62961F7848A4732EE9DD5EF441356C774FBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:27:f2:13:2d:35:08:82:fd:ce:eb:32:66:58:
a4:8e:85:7e:2e:94:d5:d9:8f:e0:3a:ed:cd:23:dc:
ba:e4:03:b0:ef:f3:07:f9:9c:39:d8:b9:d4:5d:cd:
8c:5f:a8:09:9e:2f:0d:36:39:4e:c3:41:f9:3c:89:
ec:fd:1d:47:2b:72:2b:0d:74:7e:bc:7f:46:0c:0c:
cb:39:42:b7:6c:af:cf:a0:a5:62:38:27:fb:ac:8d:
88:92:28:73:f8:fd:e5:8e:49:b9:db:c9:52:92:3f:
49:b7:54:55:f8:be:50:58:da:5d:6a:21:b2:53:40:
95:ef:dd:f2:a2:99:0c:1b:37:99:33:ee:39:64:2e:
d1:38:86:52:18:d7:dd:24:1d:de:02:21:04:1e:ae:
1b:70:9f:30:1f:0d:fc:de:48:46:af:7a:27:b2:ac:
2e:62:e2:8c:6c:1e:73:67:74:cf:7f:6b:c0:44:cf:
a2:d9:fc:ff:ed:ee:54:c0:f7:20:28:ae:f7:fb:69:
08:df:55:fb:33:f4:5e:80:53:c4:fd:6a:05:6f:46:
f4:ac:7e:02:ba:7e:34:48:08:3e:ce:26:2a:6a:e8:
c2:7d:d0:85:c7:4c:db:a3:1e:47:1f:92:2b:6f:6f:
91:29:b5:da:40:03:ce:b4:b3:ed:09:e6:6d:dd:82:
2f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CE:62:96:1F:78:48:A4:73:2E:E9:DD:5E:F4:41:35:6C:77:4F:BF
X509v3 Authority Key Identifier:
keyid:0F:C1:69:1C:E2:72:3B:06:91:0C:88:70:A4:32:12:BD:77:57:34:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3K7adNY6QLXq8CAHJyRfhBJmVC93XWBnvkcHP2smgFkT/1/0FC1691CE2723B06910C8870A43212BD77573423.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FC1691CE2723B06910C8870A43212BD77573423.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3K7adNY6QLXq8CAHJyRfhBJmVC93XWBnvkcHP2smgFkT/1/323830343a343137343a3a2f33322d3332203d3e20323637343334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4174::/32
Signature Algorithm: sha256WithRSAEncryption
7d:cc:bc:f6:bd:5e:d9:95:96:1c:a4:a1:30:94:48:6b:9c:2f:
e1:d7:92:18:d8:3c:41:c5:46:a3:a8:ce:bf:48:00:8a:32:16:
99:1e:f9:63:8e:f3:ee:18:79:53:48:1b:81:da:19:ec:8d:85:
62:fe:49:02:52:0c:84:56:1d:d5:26:81:2d:cf:d9:28:de:3a:
85:d4:ae:fd:32:12:00:65:78:35:4c:23:d0:0e:19:2b:22:21:
de:16:4c:32:50:63:21:29:e7:fa:64:f1:7f:b1:8b:7b:d1:8f:
f1:a0:a8:85:95:80:28:df:7f:ab:e5:6b:68:d6:af:77:e1:5e:
36:f6:d1:9b:32:4e:04:5b:e1:a1:81:3d:54:57:3f:88:34:aa:
81:27:1d:ca:f4:64:fc:74:0e:e5:b7:46:7b:4d:da:f0:98:67:
1c:e3:c4:90:5b:77:64:45:78:ad:47:e3:51:fb:5a:7f:98:9f:
75:45:f8:c4:33:3c:ec:e8:cc:e8:9d:80:a8:cf:4e:01:4a:96:
2c:f4:a1:2f:e9:e4:d4:49:d1:35:be:56:93:e1:80:a0:de:e7:
00:2b:18:d2:39:c2:5c:48:4f:23:78:e1:69:22:03:18:64:ce:
4e:b1:e7:a9:ec:65:0f:84:99:b7:d6:ee:1d:07:c1:28:42:d6:
4c:3f:50:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 5 19:37:23 2024 by rpki-client on console-fra.rpki-client.org