Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/323830343a383434633a3a2f33332d3333203d3e20323732323532.roa
File: 323830343a383434633a3a2f33332d3333203d3e20323732323532.roa (raw, json)
Hash identifier: RavdKh97i96N2zyJ3c/90O7Ifc7KrB1szErQPmkFOGM=
Subject key identifier: 8C:EB:46:D1:CD:47:09:6C:C3:E7:30:3C:09:51:7D:1A:29:8D:D8:A8
Certificate issuer: /CN=B311265851863315C392E69266B2EF149F1B2CAF
Certificate serial: 1B83830A9932B992835D0FBF6212C844BFCA80B2
Authority key identifier: B3:11:26:58:51:86:33:15:C3:92:E6:92:66:B2:EF:14:9F:1B:2C:AF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B311265851863315C392E69266B2EF149F1B2CAF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/323830343a383434633a3a2f33332d3333203d3e20323732323532.roa
Signing time: Fri 18 Oct 2024 14:54:43 +0000
ROA not before: Fri 18 Oct 2024 14:49:43 +0000
ROA not after: Fri 17 Oct 2025 14:54:43 +0000
asID: 272252
IP address blocks: 2804:844c::/33 maxlen: 33
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:83:83:0a:99:32:b9:92:83:5d:0f:bf:62:12:c8:44:bf:ca:80:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B311265851863315C392E69266B2EF149F1B2CAF
Validity
Not Before: Oct 18 14:49:43 2024 GMT
Not After : Oct 17 14:54:43 2025 GMT
Subject: CN=8CEB46D1CD47096CC3E7303C09517D1A298DD8A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f8:fc:7f:fc:53:7d:7c:3d:8f:1d:fd:c3:cc:
c8:01:1d:91:3d:6d:c6:80:91:da:34:b9:80:cd:f9:
1d:2a:fe:3c:dd:d5:90:c5:ae:fa:e7:ae:5e:a4:17:
be:54:c6:fe:2b:ca:e8:30:d5:62:d4:de:2d:0a:9f:
d9:3f:b4:88:8e:6f:74:2e:7a:1d:25:f4:13:dc:8b:
a3:e6:41:ea:01:83:31:f0:c1:ff:f0:d0:da:c2:ad:
e8:6b:f7:68:24:a4:17:77:e6:e9:be:02:1e:e2:15:
12:56:93:ac:4c:8b:4f:5b:b9:c2:7a:43:ba:61:b1:
8e:03:30:c2:d0:62:f8:13:03:6c:dd:e3:01:b1:c6:
10:ca:7c:0e:65:18:26:02:74:4a:00:8a:8d:1d:3f:
ea:d0:8d:61:13:c2:db:d6:ec:21:3e:d4:f3:8d:fd:
f7:97:d0:de:7c:c1:14:d3:59:8c:cd:09:45:a2:38:
6c:ae:83:e1:f0:8d:20:1e:d6:04:22:a0:89:78:c6:
d7:10:c8:13:71:57:a2:a2:c0:97:02:a3:32:33:a3:
fc:4c:9d:fb:8e:b1:13:3c:2f:73:aa:cd:64:32:0b:
01:df:7c:ae:c5:9d:97:e4:fa:e6:dc:85:d7:d4:8a:
21:06:02:91:86:b1:d2:8c:4c:6f:4f:c5:51:bb:0e:
ff:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EB:46:D1:CD:47:09:6C:C3:E7:30:3C:09:51:7D:1A:29:8D:D8:A8
X509v3 Authority Key Identifier:
keyid:B3:11:26:58:51:86:33:15:C3:92:E6:92:66:B2:EF:14:9F:1B:2C:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/B311265851863315C392E69266B2EF149F1B2CAF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B311265851863315C392E69266B2EF149F1B2CAF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/323830343a383434633a3a2f33332d3333203d3e20323732323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:844c::/33
Signature Algorithm: sha256WithRSAEncryption
2d:ef:74:fc:ce:5e:02:bf:76:de:c8:c8:c6:32:58:e0:18:be:
6f:28:e5:8c:b6:b4:66:36:d0:2c:c3:3c:31:a0:fe:ba:ab:51:
36:2c:0b:f6:fe:b9:a3:dc:86:ce:7c:e2:5b:db:71:11:f4:d4:
5b:cc:7d:56:bd:a8:9f:a3:7d:87:99:47:b7:2b:4f:b5:58:aa:
48:23:79:13:89:ce:75:cb:6d:9f:7e:ac:80:38:40:d3:04:c6:
9c:41:d4:8d:fd:fb:1e:2b:06:e8:da:6f:30:ce:d1:0f:cb:5b:
65:f8:dc:8f:5f:59:5c:5b:85:5e:ea:38:71:fe:31:ce:7e:4a:
19:4a:a0:f5:3e:f1:1f:19:38:e5:40:65:31:0b:2f:e3:a8:2d:
72:7b:6c:d0:1c:3f:5e:69:5b:43:65:4d:89:40:29:9d:ac:30:
8f:e5:af:c9:41:b8:69:c9:61:a5:f0:d3:a9:8b:85:15:47:fd:
3f:8c:ea:05:cf:58:48:52:f1:1e:f8:9d:68:61:c9:22:16:a1:
d1:2b:4f:a3:e9:78:6e:f9:9b:bd:ec:03:e8:f8:9c:71:23:be:
e2:2a:bb:4f:34:2e:61:3a:23:1e:14:a2:90:10:6d:fc:78:23:
7e:83:68:ae:8c:bf:07:93:bb:75:a2:d8:8d:4a:94:68:53:8a:
37:c4:e0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 06:41:09 2024 by rpki-client on console-fra.rpki-client.org