Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/323830343a3133383a3a2f33322d3337203d3e203131343332.roa
File: 323830343a3133383a3a2f33322d3337203d3e203131343332.roa (raw, json)
Hash identifier: iLjiZiG3ddzgl7bWD6ble9YgFY4gbegKJ20qhD5O1jA=
Subject key identifier: F3:F8:E2:D6:B8:37:2C:2A:F0:BC:26:5C:23:CE:60:B8:54:04:95:BE
Certificate issuer: /CN=D297690F68F4535C1EEA34AA4421792C2944DF34
Certificate serial: 40F306905D54373FD1C082B999BC46FA8FBBCE6A
Authority key identifier: D2:97:69:0F:68:F4:53:5C:1E:EA:34:AA:44:21:79:2C:29:44:DF:34
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D297690F68F4535C1EEA34AA4421792C2944DF34.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/323830343a3133383a3a2f33322d3337203d3e203131343332.roa
Signing time: Thu 04 Apr 2024 15:41:15 +0000
ROA not before: Thu 04 Apr 2024 15:36:15 +0000
ROA not after: Thu 03 Apr 2025 15:41:15 +0000
asID: 11432
IP address blocks: 2804:138::/32 maxlen: 37
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:f3:06:90:5d:54:37:3f:d1:c0:82:b9:99:bc:46:fa:8f:bb:ce:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D297690F68F4535C1EEA34AA4421792C2944DF34
Validity
Not Before: Apr 4 15:36:15 2024 GMT
Not After : Apr 3 15:41:15 2025 GMT
Subject: CN=F3F8E2D6B8372C2AF0BC265C23CE60B8540495BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:04:6e:26:7f:89:c7:a7:c4:2d:ac:57:28:fa:
ca:4d:76:41:0a:14:12:57:1c:44:01:42:3d:a1:95:
8b:58:5b:45:69:cd:50:c0:7b:bb:76:82:7e:d0:a9:
8a:18:59:8b:74:de:0a:09:1f:48:79:67:31:d7:71:
10:eb:bf:05:90:0b:b1:d5:63:6a:7f:b9:b3:69:7f:
44:70:0a:15:0d:a6:70:89:10:59:5d:9b:3a:84:cf:
3c:65:1c:59:0e:ae:3b:ea:60:47:e8:2a:b3:4d:e6:
64:91:9d:ab:11:8b:fe:b0:b7:3c:39:fe:0b:a9:05:
00:46:9a:9e:0c:21:23:16:5a:88:59:f9:83:5a:3f:
71:3a:d8:81:d8:91:04:fe:dd:8f:db:30:e1:5e:d1:
38:c5:06:5c:94:5e:a9:a1:3a:e3:38:1f:c9:d9:ae:
dd:f3:8d:0f:a1:ad:c0:2d:48:7f:d1:a3:35:a3:97:
84:e5:78:b1:48:4c:cb:94:75:77:11:16:e3:6b:eb:
cf:ba:21:d3:8a:55:f5:cc:5c:ca:71:00:32:08:19:
0b:ec:09:66:91:2d:d3:77:e0:88:df:3a:c7:f2:d8:
6f:1f:4d:ab:1f:b8:19:d4:cc:f7:05:80:77:7a:2f:
b6:69:3d:34:a4:d9:66:72:83:a6:bf:61:a5:0f:3f:
6e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F8:E2:D6:B8:37:2C:2A:F0:BC:26:5C:23:CE:60:B8:54:04:95:BE
X509v3 Authority Key Identifier:
keyid:D2:97:69:0F:68:F4:53:5C:1E:EA:34:AA:44:21:79:2C:29:44:DF:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/D297690F68F4535C1EEA34AA4421792C2944DF34.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D297690F68F4535C1EEA34AA4421792C2944DF34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/323830343a3133383a3a2f33322d3337203d3e203131343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:138::/32
Signature Algorithm: sha256WithRSAEncryption
0d:78:de:66:4f:3d:5a:86:73:1f:dd:0e:45:56:d4:dd:09:85:
38:e6:fe:4c:d8:9d:05:18:95:15:b2:ec:03:c7:11:09:23:a1:
6c:38:23:c3:62:a7:56:59:82:b3:d5:24:81:c4:70:ba:08:cc:
e1:fc:a6:42:6f:2c:d8:56:f2:e4:e6:40:81:54:99:19:f8:16:
85:6b:41:b5:2f:17:b7:c9:5b:b6:bc:72:95:db:1e:5f:3f:b7:
50:00:78:43:62:eb:87:82:e4:13:ef:c6:a5:b4:cf:58:62:2a:
94:43:41:b5:3b:57:33:b0:25:39:2f:cb:f7:b2:42:29:fb:37:
34:30:e2:3f:56:25:e3:98:d0:2a:66:f8:e7:8a:1b:b4:70:c3:
67:f3:93:a4:36:83:69:e1:55:21:45:50:7e:27:41:c4:50:3a:
c2:14:6d:c7:1c:c1:c1:e8:3b:5d:9e:9a:88:f7:42:c1:b1:4b:
c7:6a:f6:8e:a1:33:20:36:3d:95:ae:84:1e:d5:56:aa:02:29:
d4:47:86:48:f3:eb:3a:75:73:1c:44:c0:96:fb:4c:16:8c:c0:
52:3a:53:e8:1a:6b:13:90:7f:65:c0:ec:14:e7:4f:4c:57:74:
c8:89:5d:c8:04:74:b0:99:48:6b:1f:aa:80:c3:e6:ef:b0:ab:
19:f7:fa:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 07:37:50 2024 by rpki-client on console-ams.rpki-client.org