Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CVoeMCMQBdgLMQNz9ckEmvyDVRbB92sgE2fvtLGwYjfd/1/323830343a383261303a3a2f33322d3332203d3e20323732353330.roa
File: 323830343a383261303a3a2f33322d3332203d3e20323732353330.roa (raw, json)
Hash identifier: ftSHPezzcKd75a1SslnnHYsH8gLP68vOiy2qUWdikFM=
Subject key identifier: AB:58:0F:B4:38:57:72:3C:02:00:6D:CA:87:F7:87:A2:5D:B1:64:94
Certificate issuer: /CN=D17CD76D646C5E120D6691B8AAA433295A71EB1E
Certificate serial: 3C1F06F621B19E53AFFAEAAA4729351515181A92
Authority key identifier: D1:7C:D7:6D:64:6C:5E:12:0D:66:91:B8:AA:A4:33:29:5A:71:EB:1E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D17CD76D646C5E120D6691B8AAA433295A71EB1E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CVoeMCMQBdgLMQNz9ckEmvyDVRbB92sgE2fvtLGwYjfd/1/323830343a383261303a3a2f33322d3332203d3e20323732353330.roa
Signing time: Thu 04 Apr 2024 12:17:24 +0000
ROA not before: Thu 04 Apr 2024 12:12:24 +0000
ROA not after: Thu 03 Apr 2025 12:17:24 +0000
asID: 272530
IP address blocks: 2804:82a0::/32 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:1f:06:f6:21:b1:9e:53:af:fa:ea:aa:47:29:35:15:15:18:1a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D17CD76D646C5E120D6691B8AAA433295A71EB1E
Validity
Not Before: Apr 4 12:12:24 2024 GMT
Not After : Apr 3 12:17:24 2025 GMT
Subject: CN=AB580FB43857723C02006DCA87F787A25DB16494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:72:31:2b:8e:2e:3f:06:c2:48:b2:c8:61:9e:
f7:87:75:22:bb:ab:9c:95:37:a5:57:aa:14:2a:28:
e3:56:78:8d:72:0a:e1:f3:b5:a2:09:24:71:35:92:
77:68:fd:36:69:89:eb:19:0f:5b:4e:b2:44:19:9d:
13:4f:7e:1e:7e:68:bb:43:c8:88:b6:61:d4:7c:f2:
26:e0:47:19:40:31:5f:3f:ca:a2:1d:d6:b5:32:af:
35:83:e3:8c:a0:2e:eb:a0:1d:84:3e:d7:02:26:f4:
f1:79:b9:52:8e:c9:2a:9f:04:6e:80:a2:da:1d:de:
0b:6e:8f:e2:0f:09:14:5f:c5:79:91:53:ff:db:0a:
7e:41:b4:9a:a8:73:68:a8:4a:4c:1c:81:58:24:48:
78:71:1e:85:3e:b4:60:f3:4f:fa:90:27:65:00:98:
b7:21:f4:af:da:9b:fb:c7:d6:d5:ed:dd:8a:0b:b3:
0a:d3:79:0d:c3:fd:6c:8b:ef:35:00:37:5f:a8:25:
3e:87:81:2b:a1:9c:32:55:68:b4:71:0e:ae:b6:16:
5e:03:8b:07:7a:6b:4d:c8:ff:74:8a:9a:dc:c0:80:
6e:4e:db:fb:85:08:51:fb:e0:c9:9d:22:18:89:1c:
e0:04:7d:8f:56:e3:4f:01:63:87:8f:97:b2:03:73:
ad:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:58:0F:B4:38:57:72:3C:02:00:6D:CA:87:F7:87:A2:5D:B1:64:94
X509v3 Authority Key Identifier:
keyid:D1:7C:D7:6D:64:6C:5E:12:0D:66:91:B8:AA:A4:33:29:5A:71:EB:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CVoeMCMQBdgLMQNz9ckEmvyDVRbB92sgE2fvtLGwYjfd/1/D17CD76D646C5E120D6691B8AAA433295A71EB1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D17CD76D646C5E120D6691B8AAA433295A71EB1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CVoeMCMQBdgLMQNz9ckEmvyDVRbB92sgE2fvtLGwYjfd/1/323830343a383261303a3a2f33322d3332203d3e20323732353330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:82a0::/32
Signature Algorithm: sha256WithRSAEncryption
1a:f1:c6:d9:3f:17:91:be:b3:5f:e6:04:cf:bc:be:9d:c9:d8:
26:ec:92:73:de:9e:be:b5:66:3b:f3:1d:90:49:91:e2:9d:13:
79:51:ee:9f:62:0a:9e:4c:d4:00:69:80:4b:cf:cf:12:f7:3e:
ca:92:5b:29:33:92:89:b4:ee:2c:ca:cd:47:70:34:cf:e5:c2:
30:b8:26:53:ae:cc:6a:16:c5:4c:c8:65:ce:a2:16:35:f2:f9:
b2:a3:3b:4e:c2:98:c4:57:96:ea:d5:41:b5:e1:c0:5f:5f:8a:
e0:e1:a9:35:fa:f0:23:6a:8f:b5:2f:a5:b6:00:1e:84:1f:24:
c0:c5:3f:e0:0e:de:67:f5:8a:fa:e2:88:39:5f:24:05:2c:31:
88:6d:b5:c7:67:fc:26:bb:f3:ce:91:26:7c:12:6e:ef:7d:6d:
91:c4:43:01:9d:8d:e5:65:92:c2:b9:74:45:14:c3:bd:29:77:
94:c6:e8:fa:e8:50:02:f6:bf:81:e5:c6:1c:92:85:ae:23:65:
93:4c:c0:c1:9c:82:fc:35:bc:e0:fb:ec:3b:c0:b3:42:14:57:
ed:b7:aa:14:c0:d0:f9:08:64:ef:09:20:de:47:54:15:0f:48:
55:18:a8:ee:75:bf:22:fb:d6:74:cf:d6:ef:ea:78:e9:22:a1:
1b:e2:d0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 21:18:52 2024 by rpki-client on console-ams.rpki-client.org