Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CJD43UUo7J3CWcW6cayovEHEr4PMSECf5XmTsJCbNFDm/0/323830343a363864343a3a2f33332d3333203d3e20323639373139.roa
File: 323830343a363864343a3a2f33332d3333203d3e20323639373139.roa (raw, json)
Hash identifier: EB1/n3zTfOpH5gktG2CQjhppZuNgYCB6mt9aQqkrGjk=
Subject key identifier: 58:4E:37:65:BB:9C:2B:5D:EF:0D:BA:6C:7A:61:F3:40:41:5D:2E:A5
Certificate issuer: /CN=0C7EB3E60D6F46F7F596B6D0E99E86B92C7B3463
Certificate serial: 08900F80648A14EFE6263437A9AFACD6614A161A
Authority key identifier: 0C:7E:B3:E6:0D:6F:46:F7:F5:96:B6:D0:E9:9E:86:B9:2C:7B:34:63
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C7EB3E60D6F46F7F596B6D0E99E86B92C7B3463.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CJD43UUo7J3CWcW6cayovEHEr4PMSECf5XmTsJCbNFDm/0/323830343a363864343a3a2f33332d3333203d3e20323639373139.roa
Signing time: Fri 23 Aug 2024 15:24:22 +0000
ROA not before: Fri 23 Aug 2024 15:19:22 +0000
ROA not after: Fri 22 Aug 2025 15:24:22 +0000
asID: 269719
IP address blocks: 2804:68d4::/33 maxlen: 33
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:90:0f:80:64:8a:14:ef:e6:26:34:37:a9:af:ac:d6:61:4a:16:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C7EB3E60D6F46F7F596B6D0E99E86B92C7B3463
Validity
Not Before: Aug 23 15:19:22 2024 GMT
Not After : Aug 22 15:24:22 2025 GMT
Subject: CN=584E3765BB9C2B5DEF0DBA6C7A61F340415D2EA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a8:f9:fe:ac:3f:0f:61:f6:d4:ad:cc:ae:b7:
3f:68:94:18:20:fe:74:76:12:a2:60:71:97:d5:0f:
aa:32:62:1f:f7:e0:72:ff:36:f5:1d:6f:66:e7:fb:
d2:0b:56:e0:aa:67:ca:92:b3:50:78:cb:5e:89:17:
f1:40:3b:19:cc:c6:67:7d:7d:56:c6:55:7a:5b:a8:
a2:9a:99:a5:d7:0d:43:a4:7a:64:2f:a6:77:ba:4c:
d4:ca:59:4d:6a:a8:ea:61:39:ca:fb:d0:7f:99:7b:
b6:80:ac:c9:1d:fb:e5:0b:54:72:01:ec:6a:0a:5c:
47:fa:99:6b:b7:ee:53:b2:d8:ce:8e:3e:56:c7:e3:
be:22:99:72:ff:a5:6f:1b:1e:5a:62:7c:bf:ba:90:
fe:39:07:4f:cf:0b:50:13:e7:65:54:51:ba:a6:2c:
f3:d7:35:0d:18:d9:96:be:0a:e5:e5:5d:96:71:b0:
da:cb:13:88:92:07:6f:a2:8d:e1:63:60:c5:79:9e:
90:19:a4:12:e8:e9:d2:fc:dd:71:2f:11:73:06:54:
b9:05:d8:a7:b3:6c:d1:6b:10:c9:90:ea:55:a2:b0:
6a:49:c1:0d:70:01:a3:a0:1d:f7:0c:66:00:07:ad:
00:02:5e:58:b2:cb:3f:8f:83:91:a3:a7:81:78:e8:
cf:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4E:37:65:BB:9C:2B:5D:EF:0D:BA:6C:7A:61:F3:40:41:5D:2E:A5
X509v3 Authority Key Identifier:
keyid:0C:7E:B3:E6:0D:6F:46:F7:F5:96:B6:D0:E9:9E:86:B9:2C:7B:34:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CJD43UUo7J3CWcW6cayovEHEr4PMSECf5XmTsJCbNFDm/0/0C7EB3E60D6F46F7F596B6D0E99E86B92C7B3463.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C7EB3E60D6F46F7F596B6D0E99E86B92C7B3463.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJD43UUo7J3CWcW6cayovEHEr4PMSECf5XmTsJCbNFDm/0/323830343a363864343a3a2f33332d3333203d3e20323639373139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:68d4::/33
Signature Algorithm: sha256WithRSAEncryption
8a:04:a8:9b:7b:a6:8c:b8:db:5b:11:76:76:fb:a4:a2:1e:eb:
41:3f:e7:fe:2f:ed:5c:3a:df:63:07:a7:e7:6a:43:e7:0b:b1:
0e:a0:de:09:95:fd:a4:84:34:bd:55:bc:47:a4:61:74:87:79:
46:75:bb:88:98:de:65:5b:a6:1b:5e:be:29:76:2a:da:84:70:
25:0e:0d:85:da:ab:6b:c0:9c:ba:aa:9d:38:ab:42:39:70:eb:
cb:fa:2a:df:83:8e:fc:f0:ee:71:85:d3:de:e5:88:fb:63:64:
c8:20:eb:cd:a3:fb:c9:52:64:e4:09:86:09:61:73:f1:f7:78:
d6:47:e7:40:dd:ce:b0:fb:7f:1d:e9:ea:72:b7:c9:22:74:38:
0c:65:6a:92:47:f0:77:12:f2:35:61:ef:94:34:1b:d9:15:96:
99:ac:cf:8e:88:f0:88:c8:4a:5f:69:87:6b:8f:3c:18:18:9c:
50:63:d8:dc:07:01:e5:9a:8c:e7:99:5c:38:da:fb:ff:61:61:
69:9f:fa:5b:b5:da:42:1e:0d:12:5f:34:ed:7b:df:3e:7c:7f:
eb:4d:c2:dc:be:ad:d6:cd:9c:88:c4:31:fd:b6:ed:61:12:d3:
89:2b:2c:d3:48:73:a8:7e:f2:ab:ab:41:44:c7:4f:23:f2:5d:
dc:6c:c8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 13:03:13 2024 by rpki-client on console-fra.rpki-client.org