Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a653834303a3a2f34342d3434203d3e203238323630.roa
File: 323830343a323865343a653834303a3a2f34342d3434203d3e203238323630.roa (raw, json)
Hash identifier: GAEmNFk7O4UlEzUOczJPCoiCFD69nmM1kD7UYrhz78s=
Subject key identifier: 34:75:6D:8E:9B:8A:11:B7:2F:D3:21:F1:FB:2F:68:1B:76:06:7D:51
Certificate issuer: /CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Certificate serial: 21AF9A8CD8C5F8CEE42AFA116EC3653CC280370D
Authority key identifier: A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a653834303a3a2f34342d3434203d3e203238323630.roa
Signing time: Thu 09 Mar 2023 20:17:55 +0000
ROA not before: Thu 09 Mar 2023 20:12:55 +0000
ROA not after: Thu 07 Mar 2024 20:17:55 +0000
asID: 28260
IP address blocks: 2804:28e4:e840::/44 maxlen: 44
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:af:9a:8c:d8:c5:f8:ce:e4:2a:fa:11:6e:c3:65:3c:c2:80:37:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Validity
Not Before: Mar 9 20:12:55 2023 GMT
Not After : Mar 7 20:17:55 2024 GMT
Subject: CN=34756D8E9B8A11B72FD321F1FB2F681B76067D51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fe:64:20:b6:4f:ba:1c:9e:96:66:0b:e1:19:
6b:9e:18:86:13:ce:9b:82:df:e5:00:b4:0f:c0:38:
a1:0f:b1:3e:f7:8d:de:d3:e2:cb:59:7c:48:71:0d:
28:8b:d5:6c:d2:14:58:f6:51:3f:a5:d1:77:0f:fe:
bd:48:26:60:b9:f7:02:8f:05:da:99:3f:9a:fc:d0:
dd:ed:c9:61:b4:00:67:a6:e2:7c:25:17:c2:75:3d:
9e:7f:79:6c:6f:bd:f2:ab:14:01:e9:e9:c2:9f:9e:
96:4a:f2:81:5f:31:77:4c:93:d4:5c:dd:c3:f9:42:
dd:bf:2c:9d:53:82:ca:5a:b3:1d:dd:e7:fd:39:80:
64:39:c9:f6:b3:5e:2f:f7:be:ca:12:d8:00:10:13:
ff:56:ed:67:46:05:c6:7a:c9:fc:39:58:70:13:0f:
84:e5:c6:06:6f:bc:f6:45:e5:ab:21:fe:4e:73:83:
03:83:cc:e1:3f:9a:78:3e:1f:ae:6c:93:a8:f4:ad:
73:85:95:be:b4:7d:7a:59:0f:3b:84:2d:e6:34:f1:
c9:ea:1f:4f:5a:e5:fb:21:9a:97:79:12:6e:5c:83:
9a:9e:72:c0:e4:1f:5a:5f:91:72:ed:d8:00:70:54:
a5:62:1d:bd:9d:ef:5a:a5:c2:48:42:6b:08:3b:e1:
c9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:75:6D:8E:9B:8A:11:B7:2F:D3:21:F1:FB:2F:68:1B:76:06:7D:51
X509v3 Authority Key Identifier:
keyid:A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a653834303a3a2f34342d3434203d3e203238323630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:28e4:e840::/44
Signature Algorithm: sha256WithRSAEncryption
24:48:8f:c7:1b:eb:66:bd:d2:28:41:29:0d:50:77:1e:4c:80:
1b:04:e5:8a:c9:b3:18:84:77:b3:45:4f:f0:d5:f0:73:a3:03:
d1:ce:5e:31:3c:4d:58:c0:09:ea:e0:bd:a7:5d:d3:c6:92:2e:
f6:5f:83:78:28:c3:3d:0f:f6:24:3b:05:b2:a2:40:a0:c8:c7:
05:61:6b:df:f9:44:d2:5e:f2:86:c5:38:6a:18:57:29:f0:56:
37:cb:16:be:5a:52:de:ba:95:ed:bf:31:66:0e:42:00:5a:ff:
7d:5e:aa:46:e2:dd:d5:dd:10:31:c1:8c:69:fb:31:f9:c3:7d:
9e:7a:e5:59:a9:eb:e2:e9:d4:5d:9b:f5:2e:57:6e:20:48:a5:
f3:51:eb:f8:52:fa:68:b3:27:50:7e:d1:af:f2:c8:4b:d5:2b:
40:39:b7:14:2d:1e:ea:04:f2:d5:72:16:88:e6:74:64:bb:b7:
9a:d7:f5:97:12:df:13:e4:06:61:61:7e:33:8f:89:9f:d1:89:
7b:31:33:1d:de:33:b4:e8:10:23:35:85:e3:c0:54:b6:09:b4:
23:83:44:40:fd:c2:eb:2d:e4:0d:12:18:11:b8:66:ec:32:61:
b9:9b:64:81:ed:00:66:54:49:78:e0:b9:fc:e0:fd:25:25:30:
e9:91:6e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 14:32:51 2024 by rpki-client on console-ams.rpki-client.org