Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CZzVeKnHhndpX8K5GLwScBqafav2Z5mL9vc44MdtQAq5/0/323830343a346533383a3a2f33322d3634203d3e20323638323437.roa
File: 323830343a346533383a3a2f33322d3634203d3e20323638323437.roa (raw, json)
Hash identifier: C0beF4wQYZMS6wge7v2CksBJbYHHR3RB5OCkdqGpcZw=
Subject key identifier: 5B:DB:F6:9A:8D:83:FE:25:BC:96:E7:04:94:7D:23:19:50:C6:BA:81
Certificate issuer: /CN=850B9B1F006AF477CB0A41524901057E62779AF9
Certificate serial: 133C1DFED7DC5A355B97C73A2FF26BC766B6E1C0
Authority key identifier: 85:0B:9B:1F:00:6A:F4:77:CB:0A:41:52:49:01:05:7E:62:77:9A:F9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/850B9B1F006AF477CB0A41524901057E62779AF9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CZzVeKnHhndpX8K5GLwScBqafav2Z5mL9vc44MdtQAq5/0/323830343a346533383a3a2f33322d3634203d3e20323638323437.roa
Signing time: Mon 21 Oct 2024 18:11:29 +0000
ROA not before: Mon 21 Oct 2024 18:06:29 +0000
ROA not after: Mon 20 Oct 2025 18:11:29 +0000
asID: 268247
IP address blocks: 2804:4e38::/32 maxlen: 64
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:3c:1d:fe:d7:dc:5a:35:5b:97:c7:3a:2f:f2:6b:c7:66:b6:e1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=850B9B1F006AF477CB0A41524901057E62779AF9
Validity
Not Before: Oct 21 18:06:29 2024 GMT
Not After : Oct 20 18:11:29 2025 GMT
Subject: CN=5BDBF69A8D83FE25BC96E704947D231950C6BA81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ec:d3:5b:3b:20:c1:fd:d4:3e:e2:75:53:ad:
c7:07:73:7b:34:46:c0:4d:0f:cc:aa:88:cb:2e:1a:
1b:30:a6:33:92:71:90:94:99:4e:9c:88:f7:91:b3:
f6:34:30:f0:ea:67:06:c7:68:89:55:25:90:d3:04:
70:3f:76:f7:7d:8c:70:27:ed:54:eb:90:f0:89:b6:
aa:65:1c:ab:69:3c:29:91:6e:5a:a3:97:28:c8:65:
5a:2d:51:45:44:c3:32:94:1a:7a:db:cd:25:14:94:
7f:1d:81:25:d4:4a:c5:8f:61:36:88:0b:eb:52:e3:
ee:40:e2:17:84:91:c9:eb:14:80:dd:47:9f:af:83:
12:8f:40:5d:dc:f6:25:d5:4e:de:ba:25:23:e9:f3:
fb:25:b3:6f:3f:63:0c:99:3b:6d:80:7b:41:04:84:
c0:f0:9e:44:8d:d5:53:db:05:56:f7:e0:05:93:6d:
53:9f:be:5d:a9:c2:19:19:bc:bd:3f:14:40:9d:16:
6f:eb:36:a5:5d:e9:59:12:02:e5:0c:f6:1b:38:d4:
a2:ed:83:bb:77:46:d1:14:d4:30:73:c4:da:1a:c6:
b8:4d:64:4e:09:84:6a:ea:97:28:64:80:16:93:72:
f7:c1:7a:a4:f2:02:4d:36:2a:ee:66:82:63:5e:7c:
e8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DB:F6:9A:8D:83:FE:25:BC:96:E7:04:94:7D:23:19:50:C6:BA:81
X509v3 Authority Key Identifier:
keyid:85:0B:9B:1F:00:6A:F4:77:CB:0A:41:52:49:01:05:7E:62:77:9A:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CZzVeKnHhndpX8K5GLwScBqafav2Z5mL9vc44MdtQAq5/0/850B9B1F006AF477CB0A41524901057E62779AF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/850B9B1F006AF477CB0A41524901057E62779AF9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZzVeKnHhndpX8K5GLwScBqafav2Z5mL9vc44MdtQAq5/0/323830343a346533383a3a2f33322d3634203d3e20323638323437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4e38::/32
Signature Algorithm: sha256WithRSAEncryption
11:f6:b0:4d:be:ac:e0:b6:48:02:df:b2:a4:26:4b:3e:b3:cf:
04:b9:04:31:da:70:9c:16:d3:c3:fe:25:f2:7c:73:5b:13:c8:
97:73:46:2b:f4:cd:49:3c:cb:f1:40:e0:3b:05:c1:05:de:d9:
4c:64:b6:cc:ed:99:cb:3a:9b:c0:7b:ac:d4:4d:58:b6:1b:3b:
62:46:1f:bd:96:ae:f4:57:14:d6:4c:b7:e2:40:1e:72:8d:d9:
de:1a:63:3c:12:27:ab:c2:05:23:44:fd:66:99:29:e0:d8:cc:
a5:12:88:6d:ad:02:98:8b:c9:3f:27:fc:b8:3d:89:8d:1e:52:
37:6a:fe:7e:0a:4d:8b:7e:69:17:27:ac:4d:38:7f:4f:e8:d7:
15:86:02:b1:2a:54:df:2f:66:bc:ba:8d:af:e8:43:09:dd:3a:
38:0e:4d:1f:f6:11:2c:12:70:a8:22:31:8b:64:a1:06:e0:f0:
84:e6:6d:5d:df:28:ed:fc:c2:73:a7:1a:d2:8e:3b:d4:d2:41:
7b:3c:33:f2:8d:91:ea:dd:fe:fe:9c:e9:d1:57:bd:27:29:7f:
e4:16:3d:bc:22:e3:3e:71:e2:d2:30:9f:0c:f7:4d:fc:74:00:
53:78:a2:6f:a6:74:34:76:77:b3:dc:b6:ac:68:af:45:0c:d9:
84:9d:26:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 27 08:27:39 2024 by rpki-client on console-fra.rpki-client.org