Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/323830343a363432633a343030303a3a2f33342d3334203d3e20323639343131.roa
File: 323830343a363432633a343030303a3a2f33342d3334203d3e20323639343131.roa (raw, json)
Hash identifier: aBtMVPBoQzW3jryaxFFJeeFtV+sC1I//ioKkdVXu94c=
Subject key identifier: BB:96:C7:45:78:E8:F9:B2:D0:8F:01:4A:B7:BD:AE:6A:18:17:73:8F
Certificate issuer: /CN=701FB1ACDA2A725C57E2F229678C45E6F0B66BA9
Certificate serial: 667ECBF5A629C290BA0BBEBF6ADA69F708C9B42D
Authority key identifier: 70:1F:B1:AC:DA:2A:72:5C:57:E2:F2:29:67:8C:45:E6:F0:B6:6B:A9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701FB1ACDA2A725C57E2F229678C45E6F0B66BA9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/323830343a363432633a343030303a3a2f33342d3334203d3e20323639343131.roa
Signing time: Wed 22 May 2024 14:00:29 +0000
ROA not before: Wed 22 May 2024 13:55:29 +0000
ROA not after: Wed 21 May 2025 14:00:29 +0000
asID: 269411
IP address blocks: 2804:642c:4000::/34 maxlen: 34
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:7e:cb:f5:a6:29:c2:90:ba:0b:be:bf:6a:da:69:f7:08:c9:b4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=701FB1ACDA2A725C57E2F229678C45E6F0B66BA9
Validity
Not Before: May 22 13:55:29 2024 GMT
Not After : May 21 14:00:29 2025 GMT
Subject: CN=BB96C74578E8F9B2D08F014AB7BDAE6A1817738F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:05:a6:99:8d:a2:1a:38:09:81:a7:71:20:82:
a0:3b:df:cb:df:47:b2:29:46:1c:1c:42:7d:a6:bc:
d8:f5:43:c8:39:85:17:af:ff:e9:5d:39:3b:0e:37:
b2:75:a2:6f:27:22:ab:94:ee:80:f0:2b:5c:c9:d7:
00:19:2c:28:0c:d9:e5:1d:bd:89:ed:79:48:70:86:
db:65:0e:90:22:c3:c2:0d:44:31:19:29:c1:93:43:
9e:5d:91:50:e9:a4:15:19:f5:a1:79:3f:4f:b5:c1:
06:f6:0b:86:c5:fb:77:de:c4:d6:0f:a7:7f:d9:6d:
f4:2e:be:cd:18:7a:f0:24:e1:a7:0c:9e:d5:e8:c5:
5e:1e:f6:17:ee:4a:94:b5:a4:58:1c:1f:f9:91:bf:
64:30:8e:31:8b:de:ee:0d:f2:5e:3f:ad:58:35:47:
a0:c3:ba:86:e3:bc:06:5f:63:1d:c8:b2:08:1b:cf:
7b:29:85:e9:35:c0:41:ac:9e:c7:d6:44:09:37:e9:
47:38:ec:5f:2e:1a:5e:ce:59:56:d6:16:e3:d7:6d:
99:a6:24:85:d6:d4:fe:54:f9:c3:ec:de:6e:ad:e7:
d7:c9:c8:ae:ea:ef:3d:e6:2e:b5:e4:50:82:66:77:
ae:94:8f:6c:c5:fe:56:1b:db:ca:c7:80:b0:bc:ea:
5b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:96:C7:45:78:E8:F9:B2:D0:8F:01:4A:B7:BD:AE:6A:18:17:73:8F
X509v3 Authority Key Identifier:
keyid:70:1F:B1:AC:DA:2A:72:5C:57:E2:F2:29:67:8C:45:E6:F0:B6:6B:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/701FB1ACDA2A725C57E2F229678C45E6F0B66BA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701FB1ACDA2A725C57E2F229678C45E6F0B66BA9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/323830343a363432633a343030303a3a2f33342d3334203d3e20323639343131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:642c:4000::/34
Signature Algorithm: sha256WithRSAEncryption
b5:63:6a:e3:af:38:8e:17:3c:d8:cb:be:a7:da:cd:46:94:0f:
7b:71:40:cc:a0:11:79:5b:4e:a9:91:a8:07:bf:24:ec:43:a8:
7c:8b:0e:11:b1:10:c8:ef:21:ee:7e:46:65:8c:8d:9a:0f:60:
10:f4:9d:6e:e5:c1:28:9f:0e:73:38:1b:c6:5e:73:4d:51:6c:
34:95:57:e2:5f:8a:ff:69:29:1b:5f:0a:37:d7:ce:aa:8d:f7:
e9:39:23:dd:12:53:e3:d8:3b:06:06:e0:d9:fc:c3:3d:d7:02:
dc:dd:5e:b9:de:62:ef:07:1c:68:65:85:2f:59:c4:b9:6a:08:
c5:8d:56:b0:2a:c5:3c:2c:db:eb:f8:b5:d1:a3:fe:c4:a1:00:
b8:6f:36:4c:12:29:7e:e5:b9:52:19:b9:0e:5a:94:ba:20:92:
1f:b0:ea:b0:02:7c:9e:85:35:32:d9:a6:fd:24:49:19:fd:72:
48:d2:a1:36:9a:69:dd:f2:36:29:4d:73:2d:54:e0:c3:3f:5a:
32:97:fd:43:5c:ed:06:79:e2:87:c2:a7:9d:d1:e3:90:2a:f2:
8b:25:18:d0:d3:33:c4:76:de:6c:22:cc:32:c8:a4:1c:17:0c:
11:38:f7:d8:62:97:78:52:76:65:7f:bc:82:a2:b3:05:4f:7e:
65:83:09:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 16:34:18 2024 by rpki-client on console-fra.rpki-client.org