Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/1/323830343a353461383a3a2f33322d3336203d3e20323638363633.roa
File: 323830343a353461383a3a2f33322d3336203d3e20323638363633.roa (raw, json)
Hash identifier: uF7ffjz129UB5VBZntwTXmpfUcb5+4qJDGiswZTM+m4=
Subject key identifier: F1:6D:84:FE:C1:B7:07:78:8F:2F:74:26:BA:07:95:B7:D7:1A:58:F5
Certificate issuer: /CN=4342F208064EBCB011C73985AA522F27EF39E196
Certificate serial: 4E914B043B872810887BC9D9E8CB2A7D9B24C9BA
Authority key identifier: 43:42:F2:08:06:4E:BC:B0:11:C7:39:85:AA:52:2F:27:EF:39:E1:96
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4342F208064EBCB011C73985AA522F27EF39E196.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/1/323830343a353461383a3a2f33322d3336203d3e20323638363633.roa
Signing time: Thu 04 Apr 2024 08:38:00 +0000
ROA not before: Thu 04 Apr 2024 08:33:00 +0000
ROA not after: Thu 03 Apr 2025 08:38:00 +0000
asID: 268663
IP address blocks: 2804:54a8::/32 maxlen: 36
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:91:4b:04:3b:87:28:10:88:7b:c9:d9:e8:cb:2a:7d:9b:24:c9:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4342F208064EBCB011C73985AA522F27EF39E196
Validity
Not Before: Apr 4 08:33:00 2024 GMT
Not After : Apr 3 08:38:00 2025 GMT
Subject: CN=F16D84FEC1B707788F2F7426BA0795B7D71A58F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:80:06:35:34:4d:29:f8:ca:d7:fc:45:be:11:
42:9a:4b:01:c1:6d:29:f2:67:6f:be:81:f2:e4:42:
21:03:32:35:dd:e4:44:9a:6d:a8:a1:27:66:3e:ce:
a9:91:e9:16:ad:2d:c9:22:81:03:3b:47:0f:0e:f5:
27:a9:65:f5:39:5f:5d:5d:ab:53:e4:9c:af:85:71:
6b:1f:f3:f0:1d:1c:35:bc:a0:da:bd:ab:2a:ef:56:
94:a2:ce:19:1f:e2:cf:d1:f6:dc:56:76:e3:8e:8c:
31:d7:64:7f:c5:59:7a:0c:db:b2:2a:75:1c:55:9b:
48:ab:1e:49:40:6d:ad:09:fd:9b:c0:2c:67:3a:13:
45:30:e4:81:43:8d:0d:e2:ed:11:39:c9:14:6c:11:
69:40:dd:ba:7d:9b:5f:bd:00:36:42:08:91:87:27:
2a:f5:7e:f2:de:fb:55:76:6f:5f:e5:8c:1b:46:b2:
64:6d:ec:56:00:d0:22:b2:dd:50:2f:b3:21:39:9e:
be:af:00:2c:42:ac:dc:21:4f:af:6f:4c:9d:cf:33:
29:90:98:f8:5b:1b:05:59:68:c4:f7:94:d2:8b:d2:
02:f7:a9:d1:6d:98:3a:ba:80:4c:47:a1:54:ca:1b:
ab:36:3e:c7:3f:e8:75:ce:0c:ef:b5:c5:50:9e:3b:
33:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6D:84:FE:C1:B7:07:78:8F:2F:74:26:BA:07:95:B7:D7:1A:58:F5
X509v3 Authority Key Identifier:
keyid:43:42:F2:08:06:4E:BC:B0:11:C7:39:85:AA:52:2F:27:EF:39:E1:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/1/4342F208064EBCB011C73985AA522F27EF39E196.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4342F208064EBCB011C73985AA522F27EF39E196.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/1/323830343a353461383a3a2f33322d3336203d3e20323638363633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:54a8::/32
Signature Algorithm: sha256WithRSAEncryption
60:89:40:2c:b0:20:85:1d:7a:f0:2c:d2:2a:64:98:4f:df:7e:
fd:a5:a8:7b:e4:bc:f8:c2:6d:6c:d5:d2:9f:99:85:ba:36:3d:
41:ae:81:0f:a5:90:47:53:0e:ae:78:e7:e3:64:4e:20:30:48:
ad:f8:67:06:02:bc:a3:5a:4d:64:a5:2c:32:fc:18:8f:94:30:
77:51:13:e6:6c:68:c7:fd:cc:61:b7:67:00:6c:07:2a:50:1f:
ee:13:1b:9d:82:c8:84:ee:5e:07:5a:f7:41:2f:e9:d3:8c:bd:
98:89:af:b7:60:96:20:05:81:d6:a9:03:26:93:e1:cf:1f:9e:
b8:31:68:42:27:0c:eb:f6:f7:d5:9d:af:31:0e:a8:ef:db:4a:
40:c6:0c:79:85:5b:c6:86:ab:e4:f9:65:54:8f:b7:e5:85:66:
ff:db:fb:ae:4c:8c:48:bc:0b:c5:87:74:54:25:7b:e1:b8:8b:
85:88:ec:20:23:b5:39:c3:84:0e:16:17:8f:2d:a3:e6:60:9b:
8b:18:ca:19:56:40:f2:f0:dd:35:6b:4e:97:17:7a:aa:d3:31:
e9:ac:8b:ae:1d:30:50:a6:1d:05:c9:62:e3:28:ec:ad:b9:cf:
c2:76:27:4f:07:9a:1c:b0:50:12:38:46:3e:0c:60:dd:c9:fa:
50:6e:d1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 06:04:20 2024 by rpki-client on console-fra.rpki-client.org