Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a383a3a2f34382d3438203d3e203238323630.roa
File: 323830343a323865343a383a3a2f34382d3438203d3e203238323630.roa (raw, json)
Hash identifier: S9Gb58kexvkGq1m1x1Wj49skv3k7B7KC9YUJlAJItfw=
Subject key identifier: D8:8E:D8:E5:AD:9A:27:64:74:66:50:F9:87:A1:58:71:12:8F:5E:C9
Certificate issuer: /CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Certificate serial: 331629DDDD8ABF288220CDFCCCC88C0ECA59CF81
Authority key identifier: A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a383a3a2f34382d3438203d3e203238323630.roa
Signing time: Thu 09 Mar 2023 20:17:55 +0000
ROA not before: Thu 09 Mar 2023 20:12:55 +0000
ROA not after: Thu 07 Mar 2024 20:17:55 +0000
asID: 28260
IP address blocks: 2804:28e4:8::/48 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:16:29:dd:dd:8a:bf:28:82:20:cd:fc:cc:c8:8c:0e:ca:59:cf:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Validity
Not Before: Mar 9 20:12:55 2023 GMT
Not After : Mar 7 20:17:55 2024 GMT
Subject: CN=D88ED8E5AD9A2764746650F987A15871128F5EC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ba:ef:23:44:eb:92:44:f1:f2:41:76:84:c8:
9a:b7:61:73:e4:e7:5f:59:be:bf:51:b1:3c:03:2f:
58:cf:59:50:2b:2f:0a:64:d8:4a:30:6f:b8:ad:29:
85:52:b5:27:ff:67:8b:cf:1f:e8:74:93:bd:79:57:
23:63:9c:c7:2a:59:50:7f:ff:b8:24:a2:71:e2:85:
d6:cc:f1:5c:48:b6:dc:cb:8d:0c:c2:a9:ff:8d:b3:
a1:27:7b:60:48:86:9b:e8:bb:22:f9:df:5b:63:c8:
e3:9b:0e:81:75:f5:ff:3a:23:dc:ed:5e:71:d6:c7:
fb:ed:ad:c4:ab:5e:96:b4:61:fa:3e:fc:2d:e5:e4:
7d:db:b2:8e:da:6f:60:d5:5f:18:0b:0e:8a:b0:91:
57:e0:f1:28:96:90:6c:1f:00:b2:5b:7f:ca:06:98:
65:f3:58:d8:64:70:3b:d0:40:23:40:0d:b2:43:d0:
09:2f:6d:8d:94:54:47:90:a8:dd:50:59:fc:7c:ed:
70:96:ad:9c:10:74:c9:06:84:85:a9:81:be:35:64:
d1:f9:63:e7:46:f9:5c:ba:df:48:bd:37:96:49:bc:
2a:f2:c8:67:a3:78:e4:1b:6e:b5:0a:80:65:3f:93:
36:64:06:35:94:d6:64:2d:37:81:5e:bb:ef:32:cb:
bf:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:8E:D8:E5:AD:9A:27:64:74:66:50:F9:87:A1:58:71:12:8F:5E:C9
X509v3 Authority Key Identifier:
keyid:A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a383a3a2f34382d3438203d3e203238323630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:28e4:8::/48
Signature Algorithm: sha256WithRSAEncryption
1d:6e:32:eb:7b:a0:da:98:7b:98:be:b3:fc:e1:30:70:a0:e6:
c6:8b:cc:6a:dc:10:cc:0e:af:14:db:bb:45:e0:6d:9a:7c:53:
31:71:b3:c5:da:db:7a:67:0b:4f:b5:2f:3f:a4:2b:53:b0:33:
4e:80:10:40:8e:38:79:df:8b:23:fe:4d:5a:1d:40:55:86:ef:
f4:43:85:eb:68:97:be:bf:cb:a3:23:87:db:a5:2f:83:ac:be:
a0:5e:72:2c:8f:95:10:a2:e7:63:1b:62:82:48:86:b8:01:2a:
65:2c:c9:88:88:d0:5f:1d:1d:dd:5b:39:74:0f:41:37:a8:2b:
b9:a9:22:1d:6d:c3:90:60:9f:e6:1b:6e:d0:a3:75:ed:92:fe:
b6:63:89:14:2c:a4:da:96:51:ad:81:67:50:15:03:25:fa:9f:
b1:14:75:5f:ba:9c:20:02:5a:d2:41:dc:00:1a:f2:8b:41:4c:
4e:85:16:7b:f2:ee:b5:4a:05:90:ef:6a:c6:1a:91:95:69:76:
5e:d1:fe:45:3c:66:8c:85:5e:03:70:31:c7:49:0c:62:bf:54:
c9:3f:cb:ec:3a:dd:f2:d6:bb:ef:e1:94:5b:99:81:22:e2:8d:
83:46:35:cb:95:84:c3:7c:cd:6a:09:32:0a:60:16:35:c7:73:
ce:09:22:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 14:32:51 2024 by rpki-client on console-ams.rpki-client.org