Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/323830343a31343a633030303a3a2f33342d3334203d3e203238333630.roa
File: 323830343a31343a633030303a3a2f33342d3334203d3e203238333630.roa (raw, json)
Hash identifier: T8LhSEXYD0H0u2RMglinS7mdhqPlOPa0sMA5jYAPt7Y=
Subject key identifier: 5E:B2:2B:91:32:06:C6:9B:62:5E:30:B3:90:13:18:FB:4C:39:6E:34
Certificate issuer: /CN=43DB836C2077B43ED881A065A4DC216114503CEE
Certificate serial: 192AD269D83A861BFCC75AE4895D77B19ECFBD0C
Authority key identifier: 43:DB:83:6C:20:77:B4:3E:D8:81:A0:65:A4:DC:21:61:14:50:3C:EE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43DB836C2077B43ED881A065A4DC216114503CEE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/323830343a31343a633030303a3a2f33342d3334203d3e203238333630.roa
Signing time: Sat 06 Apr 2024 02:46:19 +0000
ROA not before: Sat 06 Apr 2024 02:41:19 +0000
ROA not after: Sat 05 Apr 2025 02:46:19 +0000
asID: 28360
IP address blocks: 2804:14:c000::/34 maxlen: 34
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:2a:d2:69:d8:3a:86:1b:fc:c7:5a:e4:89:5d:77:b1:9e:cf:bd:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43DB836C2077B43ED881A065A4DC216114503CEE
Validity
Not Before: Apr 6 02:41:19 2024 GMT
Not After : Apr 5 02:46:19 2025 GMT
Subject: CN=5EB22B913206C69B625E30B3901318FB4C396E34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e2:94:c6:64:0b:d3:0d:c2:db:58:8b:a6:78:
1e:9c:5e:04:f9:d6:00:40:0a:af:1f:3d:e6:f6:7f:
de:4f:49:25:51:21:90:d6:c5:40:d4:1a:0c:1f:66:
68:55:58:9e:cf:31:48:e1:9c:4f:47:25:ee:16:9f:
eb:0b:da:cb:2f:d4:29:60:4b:a7:32:1f:fb:ce:64:
d2:04:a5:d0:ec:25:e1:fd:70:55:0a:89:0a:75:0c:
ba:c8:e3:4f:3e:32:25:10:48:25:dd:45:12:f4:c1:
f5:b9:88:18:0e:de:ea:84:e0:9c:79:cd:3b:1a:5d:
93:2a:a3:20:84:11:59:80:cd:37:52:6c:da:50:e3:
32:7c:0e:08:4e:db:75:94:66:16:60:f1:94:b9:85:
7a:36:a5:7a:0c:9a:1c:dc:c4:76:af:62:d1:bc:c7:
7f:5f:61:05:ed:fd:20:26:d2:b0:dd:4a:cf:2d:e4:
45:a5:76:16:46:a0:7c:bd:d9:46:58:d3:01:00:32:
89:a7:d8:19:17:74:dd:4c:4e:3a:1e:b1:3b:a1:87:
dc:87:27:ab:17:a0:1b:f1:74:ca:cd:ed:f3:85:30:
df:07:a6:39:d0:c2:9b:dc:b0:8d:77:e6:15:68:49:
10:f4:74:8f:25:53:55:0e:5f:62:db:4b:98:8e:2d:
f9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B2:2B:91:32:06:C6:9B:62:5E:30:B3:90:13:18:FB:4C:39:6E:34
X509v3 Authority Key Identifier:
keyid:43:DB:83:6C:20:77:B4:3E:D8:81:A0:65:A4:DC:21:61:14:50:3C:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/43DB836C2077B43ED881A065A4DC216114503CEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43DB836C2077B43ED881A065A4DC216114503CEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/323830343a31343a633030303a3a2f33342d3334203d3e203238333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:14:c000::/34
Signature Algorithm: sha256WithRSAEncryption
69:88:fe:a7:08:1c:27:00:ab:c7:34:b7:ac:4e:25:0a:9b:82:
1a:fd:24:be:98:b3:13:68:d3:f5:db:24:1d:d7:0b:a4:0e:43:
29:c8:1d:12:84:42:cb:9d:d2:52:5d:3e:b6:82:ee:17:12:f8:
45:7d:bb:43:1e:32:8f:e0:c9:b5:a3:3b:21:b8:3c:ea:b8:1e:
db:c3:37:69:a9:fb:86:76:d1:3e:5c:fe:71:26:4c:da:31:72:
ad:f6:1a:c5:4d:ef:8e:b5:3b:90:0f:fb:c9:e3:81:1c:2b:74:
58:03:31:5b:74:90:2c:67:a9:f4:e5:8e:55:23:85:e5:3e:58:
2d:4f:bc:5e:a6:4b:49:12:5e:10:18:26:12:0c:e6:b8:f2:2e:
5d:e4:b1:e9:aa:89:7e:9f:2c:02:7f:fe:2c:32:07:72:d2:ad:
b8:37:ea:a7:f1:6f:50:78:50:b7:4f:60:67:5b:5b:e1:27:d1:
ac:7e:08:8e:24:c3:cb:27:6d:40:77:5d:9d:42:0e:29:0b:d8:
0b:fe:27:33:2d:6a:1c:08:37:9c:ea:d3:45:d3:19:88:c0:4d:
22:29:0a:3e:38:cf:b2:79:3b:ca:15:8a:0b:1d:b5:73:01:23:
ad:32:d4:bf:62:56:7a:d0:cc:1f:1b:f8:7b:5e:e8:7a:e5:4b:
27:f0:86:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 16:07:11 2024 by rpki-client on console-ams.rpki-client.org