Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/323830343a353532343a343030303a3a2f33342d3334203d3e20323638363932.roa
File: 323830343a353532343a343030303a3a2f33342d3334203d3e20323638363932.roa (raw, json)
Hash identifier: 8S9oyYePWJwzP2XcOZO7HQe9XlOqTASgIX/zayJ5VBk=
Subject key identifier: 9A:74:4B:EA:6E:1B:56:98:43:08:28:1B:88:25:B9:68:B7:71:6E:35
Certificate issuer: /CN=2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07
Certificate serial: 43E397EB633D8D2EAA1F39ED0E9A10E84B2C3834
Authority key identifier: 2F:01:25:A1:30:8A:C4:DE:6A:3A:CC:AF:CC:3D:AD:8D:0D:C5:2E:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/323830343a353532343a343030303a3a2f33342d3334203d3e20323638363932.roa
Signing time: Fri 20 Sep 2024 18:57:36 +0000
ROA not before: Fri 20 Sep 2024 18:52:36 +0000
ROA not after: Fri 19 Sep 2025 18:57:36 +0000
asID: 268692
IP address blocks: 2804:5524:4000::/34 maxlen: 34
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:e3:97:eb:63:3d:8d:2e:aa:1f:39:ed:0e:9a:10:e8:4b:2c:38:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07
Validity
Not Before: Sep 20 18:52:36 2024 GMT
Not After : Sep 19 18:57:36 2025 GMT
Subject: CN=9A744BEA6E1B56984308281B8825B968B7716E35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f4:2f:2f:0e:07:33:0a:eb:d5:09:fc:ac:52:
00:e9:03:0b:09:a4:b7:c9:ec:21:ed:42:48:cb:d7:
6b:aa:38:b0:c2:c4:9b:cc:59:6f:d1:07:49:6f:50:
92:d0:de:6e:49:14:a3:c8:c1:a7:dd:3d:35:70:0a:
02:ba:01:9d:3f:fc:e1:11:48:b5:a6:fb:20:5b:fe:
74:37:67:8e:9a:f4:2f:00:bc:b8:8b:2b:c7:f0:17:
9e:ec:4f:14:85:5a:ca:59:8b:b3:92:78:28:07:5b:
c4:0a:f4:de:83:11:9a:bd:1f:6a:64:54:a6:32:50:
3e:41:ab:7f:6d:85:38:7b:09:77:d7:e0:51:f5:41:
02:f7:18:62:e3:d5:9b:42:53:8f:1c:f4:1e:c5:2a:
fb:4d:64:3d:c6:78:16:de:57:55:06:3d:9d:ba:15:
f4:ce:6c:70:73:8e:b3:19:a9:fb:a5:58:4a:c1:ec:
8d:d0:0d:f5:ac:ac:e6:76:8f:3c:e9:43:78:06:5d:
5e:bc:3d:5c:ba:2a:b1:ae:e7:20:07:9a:02:fc:42:
05:dd:e4:38:0e:7d:32:3f:fa:0e:ee:af:8a:aa:41:
0f:57:ac:57:e7:a5:c8:68:8a:87:97:21:6b:c2:db:
45:4a:69:a1:40:2c:66:03:f0:b6:7a:72:22:dc:43:
1f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:74:4B:EA:6E:1B:56:98:43:08:28:1B:88:25:B9:68:B7:71:6E:35
X509v3 Authority Key Identifier:
keyid:2F:01:25:A1:30:8A:C4:DE:6A:3A:CC:AF:CC:3D:AD:8D:0D:C5:2E:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/323830343a353532343a343030303a3a2f33342d3334203d3e20323638363932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5524:4000::/34
Signature Algorithm: sha256WithRSAEncryption
58:65:30:7a:7d:6c:d1:7c:93:15:60:98:e6:31:15:f4:d0:60:
b3:fc:4d:a3:a3:4a:ed:2c:2b:ff:90:10:7a:1c:23:13:41:d8:
29:5f:ed:fd:4f:54:08:cd:20:5e:85:dd:95:e3:2d:80:6b:12:
35:27:fc:bd:2c:88:b9:03:50:23:45:2d:cf:98:3a:ae:8f:09:
8f:a2:90:cd:58:41:39:11:16:bf:48:cd:5e:bd:44:6f:6a:56:
8e:11:52:46:ba:74:a0:66:f1:94:72:fa:e7:68:87:91:5b:64:
90:ab:99:47:6c:31:2b:bb:50:98:a7:08:13:bc:7c:4b:ce:6d:
19:8d:6d:79:17:82:82:61:d2:0d:43:0b:e5:9b:56:db:75:f3:
9b:7f:8d:5d:57:3a:b1:e3:2b:6d:6a:2c:14:98:c3:d4:3d:f9:
72:d5:77:b0:ba:b5:b2:73:08:de:6e:1f:8b:30:5e:04:0b:82:
fc:ca:6e:1d:48:23:29:dc:1e:7f:ef:67:ca:36:15:2a:48:11:
15:6b:18:34:87:4b:f1:38:69:e2:ae:0b:37:31:55:f6:8b:8a:
a1:eb:ed:fe:43:93:92:66:80:19:d3:9f:fa:60:60:b9:7d:e4:
6f:a7:ef:09:90:92:ba:99:de:d5:9f:d6:ef:9f:3c:4e:2b:f0:
9b:8a:29:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 13:21:09 2024 by rpki-client on console-ams.rpki-client.org