Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8px2w9Vu6W2uDDJotin9CPdL87jSUmNY6tmgx7aCLYak/1/323830343a373761633a3a2f33322d3438203d3e20323731313932.roa
File: 323830343a373761633a3a2f33322d3438203d3e20323731313932.roa (raw, json)
Hash identifier: dRmcEIS1J6Ajbykd7oBqnlJai69GboRwMTWfeAM13/I=
Subject key identifier: B2:16:D3:2D:D3:A1:B3:22:C1:7A:23:98:06:C7:6B:C1:A4:64:78:52
Certificate issuer: /CN=7F2A99A171605802A009376BC3AD8E1CA8B57C2C
Certificate serial: 2595C28732A7945C9F464B25ECD690B454BB31DF
Authority key identifier: 7F:2A:99:A1:71:60:58:02:A0:09:37:6B:C3:AD:8E:1C:A8:B5:7C:2C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F2A99A171605802A009376BC3AD8E1CA8B57C2C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8px2w9Vu6W2uDDJotin9CPdL87jSUmNY6tmgx7aCLYak/1/323830343a373761633a3a2f33322d3438203d3e20323731313932.roa
Signing time: Thu 04 Apr 2024 03:03:07 +0000
ROA not before: Thu 04 Apr 2024 02:58:07 +0000
ROA not after: Thu 03 Apr 2025 03:03:07 +0000
asID: 271192
IP address blocks: 2804:77ac::/32 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:95:c2:87:32:a7:94:5c:9f:46:4b:25:ec:d6:90:b4:54:bb:31:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F2A99A171605802A009376BC3AD8E1CA8B57C2C
Validity
Not Before: Apr 4 02:58:07 2024 GMT
Not After : Apr 3 03:03:07 2025 GMT
Subject: CN=B216D32DD3A1B322C17A239806C76BC1A4647852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:35:61:44:92:95:aa:86:2c:cf:ef:ba:9e:ba:
75:2a:f4:c4:76:02:37:aa:a4:7c:bc:4f:11:e7:21:
c8:57:8e:07:95:23:ef:6a:84:85:3c:9e:22:89:58:
1b:6e:9e:d9:55:c1:03:e2:1b:c6:3d:0b:fb:a3:2e:
9b:da:d4:cf:97:f7:68:2d:e8:6c:6f:26:d0:0c:24:
60:71:38:12:e8:21:a5:e7:64:b0:7e:da:d3:f9:e7:
6a:bf:c8:9e:2d:7b:b7:2f:cd:d6:67:e9:03:e7:dc:
cc:55:84:39:5d:e3:1a:7b:96:99:b8:24:c2:ff:38:
8c:74:9b:c4:f8:bd:7f:20:34:e3:9b:c1:13:3b:25:
a0:70:19:60:41:35:6a:dd:a5:20:19:14:ea:2b:cc:
9a:9e:3b:60:68:eb:89:9d:2c:7b:2b:05:6f:eb:a0:
59:97:84:86:54:25:79:59:7d:e6:dc:c4:21:7d:4e:
eb:f9:05:4e:8b:09:fd:85:fb:42:c6:3e:f3:73:7c:
40:dc:09:9c:80:fd:6d:18:91:c6:f0:18:c5:b1:4a:
7e:27:79:25:06:d5:24:e2:d7:46:a1:f3:80:25:85:
22:50:51:ca:c0:61:ac:b0:38:0d:c0:6a:02:bb:bc:
ee:01:22:c6:1e:ff:a4:28:fd:ec:7e:aa:5e:65:af:
9d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:16:D3:2D:D3:A1:B3:22:C1:7A:23:98:06:C7:6B:C1:A4:64:78:52
X509v3 Authority Key Identifier:
keyid:7F:2A:99:A1:71:60:58:02:A0:09:37:6B:C3:AD:8E:1C:A8:B5:7C:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8px2w9Vu6W2uDDJotin9CPdL87jSUmNY6tmgx7aCLYak/1/7F2A99A171605802A009376BC3AD8E1CA8B57C2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F2A99A171605802A009376BC3AD8E1CA8B57C2C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8px2w9Vu6W2uDDJotin9CPdL87jSUmNY6tmgx7aCLYak/1/323830343a373761633a3a2f33322d3438203d3e20323731313932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:77ac::/32
Signature Algorithm: sha256WithRSAEncryption
59:d1:b5:ed:8b:b2:dd:bc:ed:8f:ea:6a:29:4f:f2:91:70:ee:
c4:6b:83:73:d0:5a:11:e7:52:82:1f:c2:16:6a:74:6c:c1:be:
06:75:f9:f9:64:8e:33:e1:fa:0c:f3:e3:bd:72:a7:32:d5:21:
b4:67:8a:d2:ad:29:50:1e:bd:73:04:a6:6d:b7:0a:f4:9d:0c:
30:43:92:cf:51:65:ce:01:11:9a:93:1f:bd:b5:15:cf:da:79:
44:7c:6d:1f:c1:b0:dd:a7:50:ee:7d:da:48:37:b0:1f:03:0e:
92:e8:42:95:c3:2d:07:81:4b:f1:22:f7:a2:4b:4d:ba:db:b5:
40:7e:1d:e4:87:65:8c:fe:85:e1:ae:12:ee:f9:81:55:38:83:
f2:c3:99:53:a6:09:21:54:0f:2b:54:13:7c:c5:11:2b:51:43:
e9:e1:d9:e1:98:da:b7:53:1a:3e:27:90:44:07:81:de:7f:31:
e5:75:af:01:24:64:6f:23:28:f0:4f:27:2b:3e:77:8b:b3:43:
6f:25:c3:ac:f1:a8:2d:4c:b9:a8:0c:31:3c:c8:1f:b9:58:5a:
8d:ab:f3:aa:25:b4:9e:9b:2e:bf:2a:a8:4d:b7:2f:90:0e:1e:
4f:33:d8:57:52:15:8b:3a:f2:24:7f:18:06:0a:31:52:78:a4:
a1:c8:39:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 02:21:58 2024 by rpki-client on console-ams.rpki-client.org