Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/323830343a363432633a383030303a3a2f33342d3334203d3e20323639343131.roa
File: 323830343a363432633a383030303a3a2f33342d3334203d3e20323639343131.roa (raw, json)
Hash identifier: iRzp00w/kELwOoHq8sDjUzkz1PsmV/J7qoR1Ir5kRkM=
Subject key identifier: 1A:1B:91:73:04:18:6F:6D:BB:38:87:B9:AD:2A:CD:F9:D0:C4:34:98
Certificate issuer: /CN=701FB1ACDA2A725C57E2F229678C45E6F0B66BA9
Certificate serial: 012B288401EF823582399E57E5F5E0EB92FB4E24
Authority key identifier: 70:1F:B1:AC:DA:2A:72:5C:57:E2:F2:29:67:8C:45:E6:F0:B6:6B:A9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701FB1ACDA2A725C57E2F229678C45E6F0B66BA9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/323830343a363432633a383030303a3a2f33342d3334203d3e20323639343131.roa
Signing time: Wed 22 May 2024 14:00:27 +0000
ROA not before: Wed 22 May 2024 13:55:27 +0000
ROA not after: Wed 21 May 2025 14:00:27 +0000
asID: 269411
IP address blocks: 2804:642c:8000::/34 maxlen: 34
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:2b:28:84:01:ef:82:35:82:39:9e:57:e5:f5:e0:eb:92:fb:4e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=701FB1ACDA2A725C57E2F229678C45E6F0B66BA9
Validity
Not Before: May 22 13:55:27 2024 GMT
Not After : May 21 14:00:27 2025 GMT
Subject: CN=1A1B917304186F6DBB3887B9AD2ACDF9D0C43498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3c:6f:e4:0d:31:ed:a5:99:e8:95:f2:af:e8:
5a:fc:a9:74:d5:cf:66:b1:24:43:f8:5f:bb:ef:67:
b6:f5:bb:79:96:02:0f:9c:d7:cb:fe:2f:b1:21:5c:
34:ba:9f:16:16:c8:13:9f:d2:2a:a2:01:e7:c7:37:
16:f0:af:a1:ff:2e:96:e0:8f:cc:d3:f9:bf:ab:c8:
fd:ad:56:a5:85:fd:20:06:10:ec:1d:9d:2d:74:35:
3c:aa:32:dc:3c:05:17:88:09:a5:4f:2e:dc:ec:9d:
eb:e5:8a:33:c6:ac:74:ad:29:bd:ff:10:c5:7f:ac:
80:14:b1:3d:08:42:1b:19:72:10:c6:a4:47:f7:4f:
dd:52:ee:a9:b3:41:70:09:2c:14:51:18:ca:13:f2:
95:89:f7:0a:ee:76:f8:0a:25:ca:44:a7:85:20:76:
2f:90:a8:00:a6:a4:6a:3f:43:d3:92:85:47:5e:45:
3c:a8:7e:37:13:50:ed:b7:a4:f4:eb:94:a5:a8:e9:
61:57:8f:e3:bc:5e:46:32:2b:4c:1d:5c:fb:37:2d:
e7:92:67:53:45:84:60:13:0b:a8:9f:f4:ed:26:3e:
b8:b7:c4:a6:80:fb:ce:ed:f1:55:1c:29:aa:c0:4b:
ea:36:26:2b:d8:c7:9b:89:88:d8:da:ee:d1:c5:2c:
eb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:1B:91:73:04:18:6F:6D:BB:38:87:B9:AD:2A:CD:F9:D0:C4:34:98
X509v3 Authority Key Identifier:
keyid:70:1F:B1:AC:DA:2A:72:5C:57:E2:F2:29:67:8C:45:E6:F0:B6:6B:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/701FB1ACDA2A725C57E2F229678C45E6F0B66BA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701FB1ACDA2A725C57E2F229678C45E6F0B66BA9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/323830343a363432633a383030303a3a2f33342d3334203d3e20323639343131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:642c:8000::/34
Signature Algorithm: sha256WithRSAEncryption
d5:a7:26:c8:28:0c:65:16:a5:93:d3:5b:05:6b:c0:d1:b9:2b:
33:87:19:ca:13:66:ae:37:3a:32:17:75:1b:c7:98:a1:76:e6:
90:00:a7:d7:72:70:4e:6a:32:ef:e1:60:fc:05:7f:d6:a5:87:
f4:c3:0b:bd:db:5f:8b:f9:fd:0a:9b:f7:43:05:0b:98:ce:18:
db:72:ed:49:7c:2a:02:80:06:c0:d2:c6:fb:23:d4:26:c3:e0:
11:25:d8:72:6a:ce:d9:af:47:14:39:5e:d9:a0:d9:b6:c7:1f:
a6:78:7a:6d:a1:98:95:92:61:b7:b3:1c:3c:cb:c5:da:ae:e9:
3a:06:df:c1:cd:62:1a:01:e9:e7:93:27:93:e0:52:b7:dd:ef:
ba:67:a8:58:0e:51:62:69:90:92:29:c5:ad:0f:90:86:df:49:
43:7d:b9:85:27:c2:03:45:c4:9a:e8:90:23:de:31:de:d5:37:
b7:cc:11:d8:a8:ca:01:72:d0:43:8f:22:3b:b1:6a:6c:de:af:
13:aa:7f:f3:97:6b:ae:4c:74:90:f9:c7:e1:41:74:18:20:27:
eb:03:96:ae:18:a4:b1:c4:09:67:2b:46:fb:45:ef:af:cc:13:
96:a7:c7:40:29:c4:24:92:17:a2:b1:85:53:c4:91:07:55:99:
8b:e5:05:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 16:34:18 2024 by rpki-client on console-fra.rpki-client.org