Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/323830343a353532343a633030303a3a2f33342d3334203d3e20323638363932.roa
File: 323830343a353532343a633030303a3a2f33342d3334203d3e20323638363932.roa (raw, json)
Hash identifier: clRmSZsaV8+JsT/xAWrnE6BltKU+f2R43/jUAhFlwtI=
Subject key identifier: 0F:39:74:E2:ED:92:D2:BF:F8:4E:BD:BD:2D:0B:99:EF:6F:3C:5C:E4
Certificate issuer: /CN=2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07
Certificate serial: 5E71D92346D0A7E2FA728CAB5CE6499972625D58
Authority key identifier: 2F:01:25:A1:30:8A:C4:DE:6A:3A:CC:AF:CC:3D:AD:8D:0D:C5:2E:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/323830343a353532343a633030303a3a2f33342d3334203d3e20323638363932.roa
Signing time: Fri 20 Sep 2024 18:57:37 +0000
ROA not before: Fri 20 Sep 2024 18:52:37 +0000
ROA not after: Fri 19 Sep 2025 18:57:37 +0000
asID: 268692
IP address blocks: 2804:5524:c000::/34 maxlen: 34
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:71:d9:23:46:d0:a7:e2:fa:72:8c:ab:5c:e6:49:99:72:62:5d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07
Validity
Not Before: Sep 20 18:52:37 2024 GMT
Not After : Sep 19 18:57:37 2025 GMT
Subject: CN=0F3974E2ED92D2BFF84EBDBD2D0B99EF6F3C5CE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:35:7f:42:48:1d:4c:c8:25:a4:97:00:13:a5:
00:a3:e3:44:ea:83:d1:c9:57:34:9d:cb:5e:5c:bf:
af:a3:06:6c:a6:e0:08:1d:ec:ec:d1:0e:da:d0:f5:
7d:80:81:01:48:76:d0:76:1c:9c:3b:c7:99:6a:ba:
9d:64:09:0b:85:24:fa:4e:b3:77:cf:c0:f2:cc:c0:
bc:76:69:9c:67:ce:9e:8f:b2:12:df:65:cc:a1:64:
a3:88:4f:60:6a:a0:6d:90:49:44:31:c6:5f:d5:01:
6e:eb:b7:ee:b6:55:5c:77:25:d3:c0:d2:5d:01:ce:
38:96:da:34:4d:55:7b:9d:b3:b0:3c:b8:24:17:81:
ea:2e:88:ad:25:32:44:6b:e9:06:9e:04:1d:0c:7d:
26:12:56:cc:b6:ca:e9:88:e9:73:e1:75:fd:e7:bc:
70:b6:b8:de:93:bb:62:c3:b6:81:f3:a1:3b:86:aa:
e2:de:d3:a4:29:f3:d1:42:ee:92:ac:d0:46:5e:b3:
1e:72:d1:6c:ab:d3:45:ec:69:5d:b7:89:b8:df:8c:
f2:8c:6f:d2:ed:e0:77:b9:db:29:b3:de:e0:67:87:
8c:de:be:4f:ea:80:b9:07:b3:69:b0:f8:19:6d:21:
5d:9c:37:14:c1:e4:54:86:1c:d4:4b:85:7c:82:08:
d3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:39:74:E2:ED:92:D2:BF:F8:4E:BD:BD:2D:0B:99:EF:6F:3C:5C:E4
X509v3 Authority Key Identifier:
keyid:2F:01:25:A1:30:8A:C4:DE:6A:3A:CC:AF:CC:3D:AD:8D:0D:C5:2E:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/323830343a353532343a633030303a3a2f33342d3334203d3e20323638363932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5524:c000::/34
Signature Algorithm: sha256WithRSAEncryption
57:51:8c:28:98:fa:23:81:a9:51:10:6a:ae:c6:fe:46:66:6a:
b5:60:f4:ca:07:05:77:08:c1:95:50:02:ba:e9:cc:9e:94:12:
fa:a0:1f:31:4f:07:11:aa:1b:57:47:cd:bc:dd:2a:8e:45:57:
af:f2:19:ac:bf:c3:98:c5:15:ea:de:8e:5c:13:49:4f:44:bf:
5d:b5:cb:90:a5:aa:73:dc:9b:d3:49:91:34:c0:39:82:36:59:
db:fc:24:9f:0e:37:4e:95:9d:ff:5f:b6:9f:cc:26:4d:1c:60:
1c:6e:cf:4d:4e:5e:c2:bf:cf:ce:fd:81:be:56:11:e1:b4:64:
5b:da:66:29:1a:de:10:4c:57:7f:1b:5b:a4:b8:11:63:1d:8c:
a9:fa:36:93:da:b2:3b:1c:f3:59:1e:06:98:e2:a8:a4:1b:19:
fc:28:f1:d3:6d:97:bd:fd:64:78:7d:02:d4:d2:7f:b8:c9:70:
37:07:f5:8f:4a:8a:1b:40:f4:58:5f:9d:9a:6f:c9:2d:27:c0:
7c:8f:ea:51:c3:61:df:9d:63:a8:81:09:ae:13:ff:d3:3b:b0:
6b:d3:9e:c0:cd:4c:d0:db:bc:6c:2e:64:04:4a:3b:29:8c:ad:
45:1d:b6:13:81:30:86:b4:45:6f:1c:81:1f:76:0d:79:cf:38:
60:04:6d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 13:44:38 2024 by rpki-client on console-fra.rpki-client.org