Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/323830343a363432633a3a2f33342d3334203d3e20323639343131.roa
File: 323830343a363432633a3a2f33342d3334203d3e20323639343131.roa (raw, json)
Hash identifier: dHBwjh15Ol2ssaLsCUygEQty6ylPKI3xMkc9G8xaVsY=
Subject key identifier: A5:B6:9A:10:57:A6:C4:3C:C4:AC:81:0C:DE:2D:FB:60:12:AC:59:C3
Certificate issuer: /CN=701FB1ACDA2A725C57E2F229678C45E6F0B66BA9
Certificate serial: 0E08AE8D4A132B445364E2DD1A3B600103AA4784
Authority key identifier: 70:1F:B1:AC:DA:2A:72:5C:57:E2:F2:29:67:8C:45:E6:F0:B6:6B:A9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701FB1ACDA2A725C57E2F229678C45E6F0B66BA9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/323830343a363432633a3a2f33342d3334203d3e20323639343131.roa
Signing time: Wed 22 May 2024 14:00:32 +0000
ROA not before: Wed 22 May 2024 13:55:32 +0000
ROA not after: Wed 21 May 2025 14:00:32 +0000
asID: 269411
IP address blocks: 2804:642c::/34 maxlen: 34
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:08:ae:8d:4a:13:2b:44:53:64:e2:dd:1a:3b:60:01:03:aa:47:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=701FB1ACDA2A725C57E2F229678C45E6F0B66BA9
Validity
Not Before: May 22 13:55:32 2024 GMT
Not After : May 21 14:00:32 2025 GMT
Subject: CN=A5B69A1057A6C43CC4AC810CDE2DFB6012AC59C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8f:64:ac:d2:6c:df:3f:9f:02:30:64:aa:14:
e9:7b:f9:e2:3c:91:85:7c:b8:95:57:40:38:db:f1:
e8:c0:05:78:1b:66:f0:d1:49:d3:c9:b0:2b:96:08:
bd:53:6e:ac:f6:b7:f0:13:99:72:fa:9b:78:6a:04:
c3:0f:7d:7b:9f:fd:cc:bb:b3:bb:ee:3d:7c:da:35:
5b:43:3f:32:c8:49:45:6d:c3:4b:34:af:90:f2:b0:
be:ca:18:47:28:83:6d:ae:38:9e:d3:de:4d:e5:a5:
2d:cc:f1:53:45:3d:ff:60:e8:5f:12:9a:32:47:74:
fb:f8:45:8f:6c:5c:93:75:dd:cb:6a:67:ee:e8:2c:
d0:6b:a9:b9:af:92:71:ce:e0:ea:2f:35:7d:31:8a:
f1:d5:a3:d3:b3:9d:64:b6:49:73:7a:11:bd:5e:7c:
f5:9c:fd:c4:54:44:0c:38:4b:20:4f:ba:7a:98:5b:
24:1b:42:28:d2:e0:7a:1f:cf:f0:d1:fb:c4:0c:ca:
a9:cc:7d:da:3b:ea:05:84:5c:59:1b:f3:00:75:44:
78:e1:41:e8:c5:cc:80:c3:17:05:0d:3e:ac:ae:94:
8a:46:dc:c7:08:44:9f:18:f6:f0:64:a5:c8:db:56:
4c:2e:c2:59:85:81:71:19:bc:03:d9:ad:01:8a:c9:
08:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B6:9A:10:57:A6:C4:3C:C4:AC:81:0C:DE:2D:FB:60:12:AC:59:C3
X509v3 Authority Key Identifier:
keyid:70:1F:B1:AC:DA:2A:72:5C:57:E2:F2:29:67:8C:45:E6:F0:B6:6B:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/701FB1ACDA2A725C57E2F229678C45E6F0B66BA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701FB1ACDA2A725C57E2F229678C45E6F0B66BA9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/323830343a363432633a3a2f33342d3334203d3e20323639343131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:642c::/34
Signature Algorithm: sha256WithRSAEncryption
ad:ed:09:c6:c2:f6:b9:0c:98:f7:13:d6:31:b6:f0:03:13:73:
ba:8b:23:3f:a4:fe:b7:05:09:52:a8:11:62:6a:c3:32:b6:f4:
f1:0b:a4:9b:ac:da:e7:39:f4:f6:81:02:20:8b:aa:4a:03:3a:
1b:4c:86:97:1a:27:93:0e:96:bb:51:9b:c3:b6:d3:8a:95:00:
61:8e:de:d3:f6:7e:e2:56:db:ad:96:19:ed:9d:fe:96:4b:55:
45:2d:89:db:33:e9:5a:51:5f:52:09:39:11:da:2e:fb:04:7c:
b2:29:b9:62:52:3a:da:47:91:30:f7:04:3f:84:ec:97:41:b3:
d8:dd:a9:4b:ae:43:ed:5e:d3:f1:72:df:f0:bf:dd:14:95:44:
02:65:4d:65:f2:07:e2:82:93:ef:84:2e:66:c9:27:7b:83:b1:
c9:a4:85:e4:95:ec:77:7f:bd:e1:d4:46:18:e7:fa:ad:bc:20:
6a:4d:d0:53:49:b6:64:b7:8f:8d:42:0a:4d:11:1c:9b:b8:3b:
0a:35:9d:c1:e9:2e:82:ef:3e:7a:f2:62:11:37:0b:0c:94:c9:
5c:ac:0b:99:38:2a:9c:3d:f9:85:fe:5d:18:31:2a:a2:d6:1e:
b0:77:d8:f6:dc:1b:c5:7c:1b:40:49:0f:4c:fd:74:0e:ee:59:
da:51:8a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 16:36:45 2024 by rpki-client on console-ams.rpki-client.org