Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/323830343a383261633a3a2f33332d3333203d3e20323732353333.roa
File: 323830343a383261633a3a2f33332d3333203d3e20323732353333.roa (raw, json)
Hash identifier: v4+nD3stgMS4f3LHURJNBIS07D1cf0gSzZOPstHgkUM=
Subject key identifier: ED:45:AA:7F:90:5C:93:A5:32:43:8C:66:4B:64:25:8D:3C:1A:E4:B3
Certificate issuer: /CN=CDA348A4B2FEFD9E13C7F0750538DDEAA587DB22
Certificate serial: 3105C6D422F2C028ED216CDA12534F873A46D422
Authority key identifier: CD:A3:48:A4:B2:FE:FD:9E:13:C7:F0:75:05:38:DD:EA:A5:87:DB:22
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDA348A4B2FEFD9E13C7F0750538DDEAA587DB22.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/323830343a383261633a3a2f33332d3333203d3e20323732353333.roa
Signing time: Fri 02 Aug 2024 15:58:20 +0000
ROA not before: Fri 02 Aug 2024 15:53:20 +0000
ROA not after: Fri 01 Aug 2025 15:58:20 +0000
asID: 272533
IP address blocks: 2804:82ac::/33 maxlen: 33
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:05:c6:d4:22:f2:c0:28:ed:21:6c:da:12:53:4f:87:3a:46:d4:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDA348A4B2FEFD9E13C7F0750538DDEAA587DB22
Validity
Not Before: Aug 2 15:53:20 2024 GMT
Not After : Aug 1 15:58:20 2025 GMT
Subject: CN=ED45AA7F905C93A532438C664B64258D3C1AE4B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9c:4e:98:d3:32:6a:50:e4:ab:1b:38:b3:f6:
46:d1:c4:47:2a:3b:6d:54:df:85:e0:3c:83:f6:83:
a2:3b:33:2f:20:a1:c2:c9:55:b5:f0:df:47:9c:a6:
c9:4d:9a:3a:99:ef:b2:2d:ff:2c:5c:70:57:9e:62:
75:f5:65:13:98:66:3a:17:83:e8:ed:92:24:a3:b9:
ff:44:ef:ef:a4:f3:ca:46:79:98:38:b9:64:72:e9:
88:18:24:46:2f:0b:03:1f:a6:ca:b4:94:90:e4:f6:
28:87:2f:d9:cc:6b:38:1c:70:a1:49:ac:a8:37:29:
d3:c4:69:08:fe:34:c6:05:84:3d:4c:ef:1b:88:69:
c9:54:d2:e8:7b:03:f5:2b:a7:c3:14:09:07:d7:45:
1f:5c:30:cd:45:cf:42:13:36:3a:eb:9d:48:01:22:
6d:91:ac:f8:3d:8a:ff:0d:c7:07:ef:d7:6a:4e:9e:
32:6a:f3:c8:1e:16:56:9f:73:11:cd:07:86:a4:eb:
12:f8:95:62:20:54:1d:16:46:12:98:fa:76:d8:7c:
05:a6:2b:2d:f5:19:2c:01:60:1e:61:01:0d:ee:4f:
02:6b:5b:f6:a7:63:45:fb:80:12:4c:8b:c5:89:ca:
53:d8:9c:b6:23:18:bf:13:da:fb:e0:c1:5b:cb:52:
2e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:45:AA:7F:90:5C:93:A5:32:43:8C:66:4B:64:25:8D:3C:1A:E4:B3
X509v3 Authority Key Identifier:
keyid:CD:A3:48:A4:B2:FE:FD:9E:13:C7:F0:75:05:38:DD:EA:A5:87:DB:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/CDA348A4B2FEFD9E13C7F0750538DDEAA587DB22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDA348A4B2FEFD9E13C7F0750538DDEAA587DB22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/323830343a383261633a3a2f33332d3333203d3e20323732353333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:82ac::/33
Signature Algorithm: sha256WithRSAEncryption
5e:23:cf:54:ab:a0:b0:ff:72:a9:e9:cf:27:f4:e3:da:dc:27:
97:08:8b:0e:f4:51:15:05:32:ae:4e:fa:ac:63:31:71:54:75:
d9:53:03:ee:42:6d:4f:cd:78:39:67:bb:39:81:d9:9e:3a:d4:
8d:65:fb:3c:a4:2a:c2:7c:e0:9f:1f:88:0e:53:ce:bf:27:1e:
bc:ba:5c:e8:1a:ec:42:bc:2b:63:3a:a7:01:32:2a:48:ca:ea:
3d:71:56:df:5f:52:3b:39:2b:fa:8f:b5:6d:25:4d:7a:31:8c:
1c:fd:f5:eb:06:a0:cb:55:43:94:fa:d5:b9:79:a4:ec:b5:c0:
60:5c:5d:34:7b:e3:ca:83:15:56:d2:22:ca:27:2a:b1:ef:7c:
c6:59:47:dd:c5:c2:d0:f3:ed:1a:ff:7a:e1:c4:29:30:b5:4e:
64:73:fd:67:d3:39:4f:60:e1:20:9f:6b:4a:6e:dc:64:ce:31:
17:2d:a0:5e:3c:ac:06:be:8e:33:17:47:af:ac:8c:36:8f:01:
40:96:fa:2a:d8:19:38:03:6e:15:06:b5:1a:7a:22:0a:0c:7b:
95:4b:6f:ba:3e:a9:84:44:9c:c8:bc:cb:79:92:cb:b7:df:bb:
fa:72:ff:07:c5:6a:80:f9:ee:b4:12:13:e0:e1:3d:20:71:cd:
bf:f9:ed:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 08:36:24 2024 by rpki-client on console-fra.rpki-client.org