Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/323830343a6139633a3a2f33322d3332203d3e203532383938.roa
File: 323830343a6139633a3a2f33322d3332203d3e203532383938.roa (raw, json)
Hash identifier: hNV6szXMYNC5TDuzxmYXE20hlw0d9QMCCSrYnlNzMSc=
Subject key identifier: 5E:85:D9:A7:8B:E6:E1:6F:F8:51:8E:FF:C1:60:69:EC:68:DE:94:1E
Certificate issuer: /CN=D84003289183B3DF8458686396FD00BFCE74A0DA
Certificate serial: 55FB924DA66384525BDEDE530AD0662E22A69D07
Authority key identifier: D8:40:03:28:91:83:B3:DF:84:58:68:63:96:FD:00:BF:CE:74:A0:DA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D84003289183B3DF8458686396FD00BFCE74A0DA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/323830343a6139633a3a2f33322d3332203d3e203532383938.roa
Signing time: Tue 29 Oct 2024 12:23:51 +0000
ROA not before: Tue 29 Oct 2024 12:18:51 +0000
ROA not after: Tue 28 Oct 2025 12:23:51 +0000
asID: 52898
IP address blocks: 2804:a9c::/32 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:fb:92:4d:a6:63:84:52:5b:de:de:53:0a:d0:66:2e:22:a6:9d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D84003289183B3DF8458686396FD00BFCE74A0DA
Validity
Not Before: Oct 29 12:18:51 2024 GMT
Not After : Oct 28 12:23:51 2025 GMT
Subject: CN=5E85D9A78BE6E16FF8518EFFC16069EC68DE941E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cd:6d:93:b0:c3:4d:22:7d:c3:80:f3:f8:5f:
bc:6e:d2:be:3e:b4:18:7a:e1:83:86:b4:1e:4b:bb:
3f:aa:1f:e8:c4:2b:60:81:07:be:99:33:13:d5:c7:
9b:84:1b:d7:93:44:b0:7b:09:8e:c9:7b:64:b0:40:
fd:22:b5:49:89:01:dd:59:cf:bd:36:32:a4:db:73:
fc:3a:2c:31:25:e6:60:48:94:17:60:b9:75:28:39:
70:a6:a6:a7:51:c1:64:1e:44:79:a3:d4:f7:82:0b:
ec:07:5a:0e:b4:15:35:c4:67:c5:6c:55:e4:3b:f1:
8e:2b:16:ae:31:ec:1f:ba:e7:57:d8:f6:6c:e9:8d:
0a:7e:53:78:b9:1c:7d:14:ab:31:e6:a4:05:16:5d:
55:6d:f5:36:ae:e9:07:d6:61:44:ae:48:cc:24:09:
2e:85:62:cd:1d:c2:fb:cd:21:cb:b7:9a:2a:c5:ee:
71:9d:05:4f:f3:1e:62:aa:92:98:ab:83:45:d1:1e:
dd:4c:be:9c:64:8a:d5:62:ab:7f:61:c8:cd:0d:78:
20:bd:38:e4:48:47:2c:38:30:9c:1c:2c:19:10:58:
cb:92:ff:a0:35:31:b0:da:aa:74:5e:70:41:63:96:
e0:48:95:ce:24:6c:ba:25:eb:32:4a:00:fd:2b:f3:
1d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:85:D9:A7:8B:E6:E1:6F:F8:51:8E:FF:C1:60:69:EC:68:DE:94:1E
X509v3 Authority Key Identifier:
keyid:D8:40:03:28:91:83:B3:DF:84:58:68:63:96:FD:00:BF:CE:74:A0:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/D84003289183B3DF8458686396FD00BFCE74A0DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D84003289183B3DF8458686396FD00BFCE74A0DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/323830343a6139633a3a2f33322d3332203d3e203532383938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:a9c::/32
Signature Algorithm: sha256WithRSAEncryption
6a:b1:6d:d9:30:11:35:ff:e6:47:59:ef:4c:cc:f3:ea:a4:f0:
54:66:98:1a:0f:57:3a:63:82:d9:6a:73:83:33:15:da:3f:53:
36:cc:97:e0:68:3f:da:d3:60:a8:0e:61:d9:3f:dc:c1:b0:12:
c6:e6:ce:ea:a0:61:f3:13:62:b7:8a:05:ec:8b:2f:d6:28:5b:
c8:5c:6c:31:ba:b7:5b:6a:34:33:6d:eb:3f:5f:97:73:2c:28:
fa:e4:cd:7a:7d:7d:ef:6e:f8:5d:6e:63:2e:04:5a:50:4d:3a:
fa:3c:42:8e:fa:f7:e5:7b:2c:de:42:72:38:1c:e5:4c:05:b8:
35:dc:53:74:65:a7:2b:c1:0c:75:67:0f:42:1e:21:16:52:62:
ac:30:41:07:0f:97:c4:9e:c5:a3:b0:39:d8:2f:f1:70:cc:d9:
d0:d3:f8:1a:05:0f:66:a5:88:d1:db:29:56:0f:88:ed:d1:d0:
e0:69:f6:89:e0:2e:20:19:79:ba:8a:9c:2e:17:cd:69:84:bb:
21:04:fc:c1:b3:12:0d:8d:4e:ab:fe:b9:4e:0d:96:fe:dc:28:
58:6e:81:f2:d4:21:36:26:6b:d8:c1:28:42:d8:08:21:29:67:
db:47:d8:d6:45:29:47:d8:d3:44:83:d1:2e:55:b8:cd:a6:62:
aa:72:19:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 11:39:19 2024 by rpki-client on console-fra.rpki-client.org