Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/323830343a333934303a3a2f33322d3332203d3e20323636303231.roa
File: 323830343a333934303a3a2f33322d3332203d3e20323636303231.roa (raw, json)
Hash identifier: UCD2b2ErRvOEf/jjFb8hif7dfJGk490CUqM9PCunq/E=
Subject key identifier: 08:C7:22:05:95:EF:2A:11:93:06:C3:90:AF:A3:A6:5A:50:C1:A9:90
Certificate issuer: /CN=D5CA974E91942554F8F7F25C9792A1BCDEB3758C
Certificate serial: 4543FD34C41C5822A81C32D6217B6B590AF40A1A
Authority key identifier: D5:CA:97:4E:91:94:25:54:F8:F7:F2:5C:97:92:A1:BC:DE:B3:75:8C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5CA974E91942554F8F7F25C9792A1BCDEB3758C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/323830343a333934303a3a2f33322d3332203d3e20323636303231.roa
Signing time: Wed 24 Apr 2024 16:08:34 +0000
ROA not before: Wed 24 Apr 2024 16:03:34 +0000
ROA not after: Wed 23 Apr 2025 16:08:34 +0000
asID: 266021
IP address blocks: 2804:3940::/32 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:43:fd:34:c4:1c:58:22:a8:1c:32:d6:21:7b:6b:59:0a:f4:0a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5CA974E91942554F8F7F25C9792A1BCDEB3758C
Validity
Not Before: Apr 24 16:03:34 2024 GMT
Not After : Apr 23 16:08:34 2025 GMT
Subject: CN=08C7220595EF2A119306C390AFA3A65A50C1A990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:eb:1e:85:4c:17:27:a8:e7:c7:ab:07:fd:ae:
84:c1:f3:01:1f:e7:9c:0d:38:7e:af:3e:29:8c:21:
f0:51:a2:27:15:fe:53:1d:95:83:cf:b6:6b:cb:a1:
fa:31:e3:2a:44:49:32:d2:49:e6:d2:7c:5b:b1:ff:
9a:7e:5e:ec:e5:42:47:c7:22:c2:5d:68:c8:73:9d:
79:63:0a:77:f1:c0:2a:3e:d5:f9:db:8c:c8:48:4d:
77:95:77:35:b7:17:2b:af:cb:a8:b4:1c:cc:c1:ab:
e6:90:dd:4e:8a:7a:e6:31:5c:39:ca:e7:e8:90:2b:
40:cb:2e:ca:3d:a1:d2:2f:18:58:c4:89:a8:b8:53:
4b:d9:7a:f9:5c:34:0c:02:b9:bf:79:2d:02:68:1c:
52:60:49:eb:2a:4a:51:5e:dc:87:15:a7:2b:df:85:
63:1b:7b:3c:3a:38:61:58:ab:64:e3:0b:34:45:c7:
ca:bf:3a:7f:c3:5b:55:ae:ea:13:04:fb:1e:0b:22:
4c:47:32:6a:90:c0:b7:12:e1:28:b2:05:50:14:0a:
ed:ec:d9:ca:e9:4b:43:0a:b9:be:e8:e2:70:b4:5c:
54:1f:2f:fe:09:35:34:3d:f3:f1:c8:7d:8e:a0:f4:
b7:b6:be:f7:c5:8a:a3:d0:36:48:11:5c:28:c3:34:
72:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C7:22:05:95:EF:2A:11:93:06:C3:90:AF:A3:A6:5A:50:C1:A9:90
X509v3 Authority Key Identifier:
keyid:D5:CA:97:4E:91:94:25:54:F8:F7:F2:5C:97:92:A1:BC:DE:B3:75:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/D5CA974E91942554F8F7F25C9792A1BCDEB3758C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5CA974E91942554F8F7F25C9792A1BCDEB3758C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/323830343a333934303a3a2f33322d3332203d3e20323636303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3940::/32
Signature Algorithm: sha256WithRSAEncryption
3f:c7:ef:7c:6a:17:16:a5:90:92:7e:6e:dc:7c:32:3f:9d:03:
23:83:eb:be:2a:a5:f3:b9:80:a8:ac:55:4e:4f:62:d5:c6:c9:
3d:c5:e6:f0:54:28:28:e4:e8:c2:bd:69:b6:29:8c:19:93:6b:
77:47:48:7e:05:c8:35:1e:d6:b3:98:73:e0:ea:42:58:35:d5:
4d:a9:b3:95:f4:1d:79:19:c2:b7:cd:f9:09:2f:7f:2e:ac:1e:
61:8a:df:16:73:8a:63:9d:46:1b:a5:e8:a9:2c:9f:b4:6f:aa:
a6:32:75:aa:bb:4d:e3:03:5f:97:31:48:a9:e6:ca:a4:22:12:
6e:1e:45:18:56:f9:07:61:6b:28:e4:2a:fb:f5:64:f1:8f:19:
79:fb:9a:24:52:0a:b5:5b:86:60:f9:fc:8c:6b:3e:a8:82:e7:
16:48:05:08:8b:06:9d:8b:bb:02:43:05:8a:c3:5e:1f:cc:40:
f0:c2:e3:a5:c0:94:d3:69:47:09:13:04:d6:e0:e4:10:41:68:
44:fb:76:39:3c:49:6c:70:5a:b1:0a:44:5c:1a:c6:1c:b9:f8:
4d:70:83:d4:d8:42:38:3c:8c:c0:31:82:5d:03:d7:44:43:36:
59:91:28:9f:15:54:0f:08:cd:ce:9d:7b:93:7e:aa:f0:c5:01:
22:6c:02:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 11:40:20 2024 by rpki-client on console-ams.rpki-client.org