Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/323830343a333033343a3a2f34342d3434203d3e20323634393336.roa
File: 323830343a333033343a3a2f34342d3434203d3e20323634393336.roa (raw, json)
Hash identifier: Ar4HzwQpeMC/L19l75OgwzjdSA7YTiQnRUsjctoSPjk=
Subject key identifier: 7C:98:69:83:C6:40:F2:AC:4D:64:DF:E6:8F:0D:7D:2E:33:F2:05:AC
Certificate issuer: /CN=AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E
Certificate serial: 3E8A67FD43529DFC01C8BBBE2AD267C15D69B4CF
Authority key identifier: AB:40:03:9B:1E:5D:05:09:C5:1C:C3:58:7B:EF:6E:D2:A0:DF:E7:3E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/323830343a333033343a3a2f34342d3434203d3e20323634393336.roa
Signing time: Thu 04 Apr 2024 18:24:02 +0000
ROA not before: Thu 04 Apr 2024 18:19:02 +0000
ROA not after: Thu 03 Apr 2025 18:24:02 +0000
asID: 264936
IP address blocks: 2804:3034::/44 maxlen: 44
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:8a:67:fd:43:52:9d:fc:01:c8:bb:be:2a:d2:67:c1:5d:69:b4:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E
Validity
Not Before: Apr 4 18:19:02 2024 GMT
Not After : Apr 3 18:24:02 2025 GMT
Subject: CN=7C986983C640F2AC4D64DFE68F0D7D2E33F205AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5a:43:fd:90:95:7b:0d:29:d2:a8:f7:66:20:
4d:f6:38:b4:c2:16:e5:49:42:7d:7a:8e:0e:62:6a:
4d:aa:e2:60:43:07:86:08:e0:03:1f:2e:22:bb:f0:
1f:bb:ae:1a:d4:c1:f4:c6:43:11:7b:34:5a:99:e3:
0b:6b:c0:42:7b:51:ef:de:6c:e2:77:e0:62:77:ff:
dc:11:38:7d:bf:86:be:a3:ff:36:e6:41:ce:26:ed:
15:1d:82:67:ad:95:6a:43:e6:1d:22:ed:2d:fb:c4:
d1:fd:c9:bb:28:09:1f:51:6c:91:6d:47:a6:ed:32:
fc:77:68:01:4e:53:87:33:ff:e6:49:ee:cf:c6:b9:
1a:8c:be:1b:4e:a0:2c:fd:0e:4e:3c:97:13:fe:cc:
33:0d:20:8b:a6:db:80:02:fc:b5:a3:b1:0e:11:4c:
a6:8a:ff:5a:28:aa:b9:67:45:ea:91:c0:ec:b8:b5:
de:25:80:28:cb:77:68:f8:f1:d7:69:e7:8a:ae:be:
fe:e0:56:f6:05:59:b6:9d:df:a1:c5:8a:3d:7f:c6:
6b:5f:24:ff:6a:50:c8:02:66:df:a4:96:19:68:3d:
12:95:9c:2d:c0:12:77:f9:b1:f0:d4:10:e7:02:f2:
ed:4e:fc:4e:b7:fc:72:9e:1a:dc:88:91:8a:c9:98:
7c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:98:69:83:C6:40:F2:AC:4D:64:DF:E6:8F:0D:7D:2E:33:F2:05:AC
X509v3 Authority Key Identifier:
keyid:AB:40:03:9B:1E:5D:05:09:C5:1C:C3:58:7B:EF:6E:D2:A0:DF:E7:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/323830343a333033343a3a2f34342d3434203d3e20323634393336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3034::/44
Signature Algorithm: sha256WithRSAEncryption
d8:a8:ec:a0:2c:bc:21:a5:f0:13:41:dc:61:45:a7:b7:e3:4b:
41:e5:56:20:6b:ab:01:8b:74:77:df:0e:c4:2d:e1:c0:56:61:
91:69:34:f1:f9:23:c6:28:7e:09:ee:2b:43:a8:43:41:03:79:
30:17:88:b5:ea:34:18:2a:ab:df:c0:65:d7:f9:c0:ff:8f:b5:
a7:dc:a6:c3:74:02:23:d5:dc:70:f4:17:89:3d:4e:c8:f0:40:
6a:ff:4c:81:d8:e6:87:49:43:f2:90:4c:2e:80:72:26:b0:32:
c0:70:fc:c7:59:ef:fd:16:a5:f1:de:34:cc:ee:75:5d:50:7a:
0a:73:64:75:58:9e:fd:a9:78:e2:1b:e7:a2:4b:1d:06:84:cc:
32:37:8c:11:5a:e8:22:5c:81:a9:1c:cc:0d:fa:6e:e6:8e:07:
23:01:e2:bc:d5:d5:21:66:ad:b2:78:53:38:84:91:e5:ea:b1:
63:ba:28:37:16:fd:f4:da:88:a0:42:9c:a0:cc:dc:1e:0c:7d:
80:ed:7d:a5:04:01:c3:d3:89:eb:2f:0c:3d:0c:e9:39:df:54:
3a:03:8f:b1:18:cb:bb:a3:c9:aa:1b:ae:d3:06:2f:70:a0:5c:
a4:85:dc:95:76:0f:79:19:f5:c8:7e:ae:2e:d9:d9:f5:25:90:
f7:cd:dd:e2
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUPopn/UNSnfwByLu+KtJnwV1ptM8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUI0MDAzOUIxRTVEMDUwOUM1MUNDMzU4N0JFRjZFRDJB
MERGRTczRTAeFw0yNDA0MDQxODE5MDJaFw0yNTA0MDMxODI0MDJaMDMxMTAvBgNV
BAMTKDdDOTg2OTgzQzY0MEYyQUM0RDY0REZFNjhGMEQ3RDJFMzNGMjA1QUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSWkP9kJV7DSnSqPdmIE32OLTC
FuVJQn16jg5iak2q4mBDB4YI4AMfLiK78B+7rhrUwfTGQxF7NFqZ4wtrwEJ7Ue/e
bOJ34GJ3/9wROH2/hr6j/zbmQc4m7RUdgmetlWpD5h0i7S37xNH9ybsoCR9RbJFt
R6btMvx3aAFOU4cz/+ZJ7s/GuRqMvhtOoCz9Dk48lxP+zDMNIIum24AC/LWjsQ4R
TKaK/1ooqrlnReqRwOy4td4lgCjLd2j48ddp54quvv7gVvYFWbad36HFij1/xmtf
JP9qUMgCZt+klhloPRKVnC3AEnf5sfDUEOcC8u1O/E63/HKeGtyIkYrJmHx/AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUfJhpg8ZA8qxNZN/mjw19LjPyBawwHwYDVR0j
BBgwFoAUq0ADmx5dBQnFHMNYe+9u0qDf5z4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDNyNUh0TnVhQnRmcUNEM0xiVmdHb2F3dmlyaXdWNk5YWXlwYmEzcmFX
UG4vMS9BQjQwMDM5QjFFNUQwNTA5QzUxQ0MzNTg3QkVGNkVEMkEwREZFNzNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FCNDAwMzlCMUU1RDA1MDlD
NTFDQzM1ODdCRUY2RUQyQTBERkU3M0UuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQzcjVIdE51YUJ0ZnFDRDNMYlZnR29hd3Zpcml3VjZOWFl5cGJhM3JhV1BuLzEv
MzIzODMwMzQzYTMzMzAzMzM0M2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIzNjM0
MzkzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcEKAQwNAAAMA0GCSqGSIb3DQEBCwUAA4IBAQDYqOyg
LLwhpfATQdxhRae340tB5VYga6sBi3R33w7ELeHAVmGRaTTx+SPGKH4J7itDqENB
A3kwF4i16jQYKqvfwGXX+cD/j7Wn3KbDdAIj1dxw9BeJPU7I8EBq/0yB2OaHSUPy
kEwugHImsDLAcPzHWe/9FqXx3jTM7nVdUHoKc2R1WJ79qXjiG+eiSx0GhMwyN4wR
WugiXIGpHMwN+m7mjgcjAeK81dUhZq2yeFM4hJHl6rFjuig3Fv302oigQpygzNwe
DH2A7X2lBAHD04nrLww9DOk531Q6A4+xGMu7o8mqG67TBi9woFykhdyVdg95GfXI
fq4u2dn1JZD3zd3i
-----END CERTIFICATE-----
Generated at Sat Oct 5 08:09:25 2024 by rpki-client on console-ams.rpki-client.org