Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/323830343a313162343a3a2f33342d3334203d3e20323633343333.roa
File: 323830343a313162343a3a2f33342d3334203d3e20323633343333.roa (raw, json)
Hash identifier: B+xTIOH6HKjW/d1Ulg/0yF8tOf55kVHm0HWzhkFi2RM=
Subject key identifier: C7:20:48:02:64:D2:13:DC:4B:17:B2:26:BE:0F:3E:F0:D3:7C:45:FC
Certificate issuer: /CN=67D877A4E50B3ECFE3C59259F9F24C748712CA67
Certificate serial: 48A2AF93BD7FA0DC98F51394C8C3EC7F9D7C0837
Authority key identifier: 67:D8:77:A4:E5:0B:3E:CF:E3:C5:92:59:F9:F2:4C:74:87:12:CA:67
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67D877A4E50B3ECFE3C59259F9F24C748712CA67.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/323830343a313162343a3a2f33342d3334203d3e20323633343333.roa
Signing time: Tue 25 Jun 2024 00:33:52 +0000
ROA not before: Tue 25 Jun 2024 00:28:52 +0000
ROA not after: Tue 24 Jun 2025 00:33:52 +0000
asID: 263433
IP address blocks: 2804:11b4::/34 maxlen: 34
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:a2:af:93:bd:7f:a0:dc:98:f5:13:94:c8:c3:ec:7f:9d:7c:08:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67D877A4E50B3ECFE3C59259F9F24C748712CA67
Validity
Not Before: Jun 25 00:28:52 2024 GMT
Not After : Jun 24 00:33:52 2025 GMT
Subject: CN=C720480264D213DC4B17B226BE0F3EF0D37C45FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1f:a9:fb:38:3b:aa:01:aa:be:7c:7e:8b:24:
2f:ee:a6:dc:ec:b5:c1:57:3e:fb:5a:52:ec:e2:4f:
c4:13:86:b7:7c:08:12:40:91:24:62:9e:9b:0a:98:
e5:f0:ac:bb:9a:66:44:d3:aa:93:5c:aa:dd:38:31:
10:94:b2:f8:03:7a:37:85:30:45:f8:b2:6b:54:7d:
66:15:04:cf:70:9b:68:72:84:f9:e4:00:8a:a9:4e:
a4:bc:15:59:45:24:08:89:81:49:34:0c:db:f4:48:
2c:d4:44:fa:86:00:31:7c:6c:dc:70:2d:fa:50:6e:
eb:68:9e:47:63:e2:44:9e:21:d3:97:af:ad:1d:02:
f5:22:cd:a6:f1:e9:45:0f:22:83:57:cd:ff:8e:e0:
ce:14:e3:e1:ac:cc:c2:55:8b:9d:4a:7a:10:1e:44:
f1:e1:eb:44:bf:5b:cf:25:7f:ce:25:e0:f6:9b:a3:
a0:ca:5e:95:46:f6:f8:97:d6:5b:25:7f:03:dd:c0:
17:84:82:e5:55:ac:a5:25:f2:8f:36:9d:83:fb:8d:
c5:a0:0d:24:27:f4:d3:07:3a:50:79:1a:30:46:d2:
79:12:3a:b4:b8:90:f7:39:dc:ad:75:d4:2f:38:51:
4a:19:51:aa:4a:79:ec:71:a9:db:a3:b5:ed:e3:3d:
0e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:20:48:02:64:D2:13:DC:4B:17:B2:26:BE:0F:3E:F0:D3:7C:45:FC
X509v3 Authority Key Identifier:
keyid:67:D8:77:A4:E5:0B:3E:CF:E3:C5:92:59:F9:F2:4C:74:87:12:CA:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/67D877A4E50B3ECFE3C59259F9F24C748712CA67.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67D877A4E50B3ECFE3C59259F9F24C748712CA67.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/323830343a313162343a3a2f33342d3334203d3e20323633343333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:11b4::/34
Signature Algorithm: sha256WithRSAEncryption
02:bb:d3:f1:a8:25:62:38:66:2e:e5:db:d3:da:f5:c1:7f:69:
7f:9f:09:66:99:46:dd:a8:6c:cb:5b:73:8f:8a:d0:c5:2e:61:
5b:28:f0:e0:68:d5:e1:f4:f6:af:04:4b:f8:f0:d9:10:49:d8:
65:e5:10:fa:bf:65:d0:32:dd:69:db:b2:5c:90:2e:a9:73:19:
dd:af:76:82:48:46:70:96:bb:1a:67:dc:5e:de:94:ba:18:cc:
0b:46:58:30:a8:78:c4:6a:59:88:ac:8a:69:48:8f:8d:c4:8e:
04:f3:15:8a:9f:53:38:91:91:11:c4:39:50:fb:4e:76:25:98:
c6:79:23:fe:da:12:54:5d:1e:f0:d2:27:af:e9:48:39:87:44:
a4:5f:d6:6f:3b:92:33:96:ee:6f:e9:bb:19:db:c9:aa:9e:c3:
1a:86:a0:18:5c:e0:d6:d7:d5:61:c8:d4:57:30:7b:85:b9:87:
76:ac:dc:d4:dd:02:64:3c:81:c2:f2:d1:15:11:71:dd:58:da:
27:6f:58:7a:34:37:43:40:2f:23:6f:63:78:b7:92:10:2d:eb:
5f:df:f6:8c:22:2f:b3:b7:89:0f:61:89:5c:76:ac:f7:91:e9:
25:6f:d7:c9:f5:a2:22:b9:a6:f6:43:57:10:b9:3d:8f:fc:34:
3f:15:7b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 06:46:00 2024 by rpki-client on console-fra.rpki-client.org