Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/2/323830343a3337633a3a2f33322d3634203d3e203532393831.roa
File: 323830343a3337633a3a2f33322d3634203d3e203532393831.roa (raw, json)
Hash identifier: yIfhszphOkfx7llcaMHpTDzGXnk2bFNkj//udQRimME=
Subject key identifier: 71:F9:77:A0:FC:42:8B:08:92:68:E9:54:0E:B3:A8:54:19:EC:2F:09
Certificate issuer: /CN=0BEDBC9F25C3978554ED91AA9D925E7498F260D9
Certificate serial: 078DB6A929FC97912E5292605DC648D61CD26F92
Authority key identifier: 0B:ED:BC:9F:25:C3:97:85:54:ED:91:AA:9D:92:5E:74:98:F2:60:D9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BEDBC9F25C3978554ED91AA9D925E7498F260D9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/2/323830343a3337633a3a2f33322d3634203d3e203532393831.roa
Signing time: Sat 11 May 2024 22:42:00 +0000
ROA not before: Sat 11 May 2024 22:37:00 +0000
ROA not after: Sat 10 May 2025 22:42:00 +0000
asID: 52981
IP address blocks: 2804:37c::/32 maxlen: 64
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:8d:b6:a9:29:fc:97:91:2e:52:92:60:5d:c6:48:d6:1c:d2:6f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0BEDBC9F25C3978554ED91AA9D925E7498F260D9
Validity
Not Before: May 11 22:37:00 2024 GMT
Not After : May 10 22:42:00 2025 GMT
Subject: CN=71F977A0FC428B089268E9540EB3A85419EC2F09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5e:7c:e5:e0:ea:50:56:79:3c:b1:0f:21:4d:
65:a7:f0:24:41:d4:74:d1:c0:10:b2:df:39:dc:45:
ba:f0:c0:25:a4:fb:44:1f:ed:bc:62:e4:eb:93:d5:
0f:ce:92:1c:83:31:82:ae:10:65:e4:d0:4a:16:d5:
2e:76:b6:a9:4d:69:63:4f:57:32:be:e3:72:7f:c4:
c6:c9:e7:6a:3c:c9:ca:2f:7d:11:07:b9:c5:c1:51:
fd:4b:e6:2d:1a:ee:6e:17:ec:fc:e9:b1:86:4b:a0:
08:18:10:ab:e5:aa:77:1f:c1:2b:cf:bc:24:bf:72:
2b:14:e5:d2:76:3d:c1:4e:3c:a3:d4:df:b3:21:d8:
38:ee:3a:8b:03:e4:f1:e2:52:f6:96:06:a8:1c:78:
64:0a:e3:3b:1f:c7:35:0e:0c:16:55:df:e1:17:ca:
cc:b3:aa:25:da:a6:a6:26:9e:23:52:aa:c1:0b:93:
fa:75:ff:72:7f:89:32:73:80:7f:37:d7:9f:3c:f4:
24:37:08:d4:0c:2a:6c:0e:af:f2:ad:7d:08:17:57:
e6:59:35:a5:d5:e7:36:23:9e:10:db:7d:13:07:3d:
3f:67:a8:dc:44:cc:2c:d4:72:3a:8b:2f:39:2f:f0:
e6:97:24:f4:88:00:f6:1b:56:b7:07:56:ba:14:f5:
1a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F9:77:A0:FC:42:8B:08:92:68:E9:54:0E:B3:A8:54:19:EC:2F:09
X509v3 Authority Key Identifier:
keyid:0B:ED:BC:9F:25:C3:97:85:54:ED:91:AA:9D:92:5E:74:98:F2:60:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/2/0BEDBC9F25C3978554ED91AA9D925E7498F260D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BEDBC9F25C3978554ED91AA9D925E7498F260D9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/2/323830343a3337633a3a2f33322d3634203d3e203532393831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:37c::/32
Signature Algorithm: sha256WithRSAEncryption
7d:42:af:0c:42:5d:8b:07:c1:fa:c1:7e:3d:bd:49:18:b7:4c:
95:d3:9a:03:a0:db:87:2f:a1:3f:78:c6:be:bd:df:35:a8:13:
21:7a:fb:0e:98:67:a1:16:a4:9e:ec:31:e4:61:38:67:1b:70:
39:89:9f:54:41:6b:3c:b3:95:61:bd:1a:da:b4:86:d1:0d:3d:
e1:68:ea:b0:27:be:2b:7b:7c:da:99:51:3a:c5:c8:9c:91:18:
94:5c:f7:2b:d6:75:42:1c:22:ee:11:f7:7c:0e:4b:5a:72:97:
f8:0d:1c:3f:10:e5:f9:61:8f:64:3d:cc:76:79:b9:29:93:7d:
c0:44:26:a3:5c:2e:eb:e3:e2:af:51:dd:11:25:cd:b1:77:14:
b5:cc:e4:ad:6f:ed:c3:54:10:8c:db:82:57:4e:d0:02:e6:d0:
13:b6:49:d1:62:07:a8:a0:0d:3f:a6:fa:c4:c7:f9:4c:ce:3f:
0b:f4:2e:f9:5f:a2:9f:a8:db:f8:4c:ce:d7:12:b4:e7:52:da:
b4:1a:31:06:7d:9c:50:4d:f6:d4:7b:52:93:69:7f:f3:00:2d:
cc:24:1b:ab:7e:78:40:25:30:a0:6f:85:56:f4:2c:7c:57:96:
2a:63:78:ac:00:e7:24:b8:d4:03:76:77:b6:74:90:02:9f:61:
ab:96:b8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 13:20:47 2024 by rpki-client on console-fra.rpki-client.org