Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/323830343a343863303a3a2f33322d3438203d3e20323637313432.roa
File: 323830343a343863303a3a2f33322d3438203d3e20323637313432.roa (raw, json)
Hash identifier: frr6sksXLn0/mPGEXYJP3ryByRfNyrvLL2TjdY8ujDs=
Subject key identifier: B5:84:DF:A4:A3:28:0A:AE:D7:E0:E4:C2:AD:15:C8:8D:00:9C:C1:F8
Certificate issuer: /CN=AA30F78DE6E9B080AAF8A4AB042FF1BD2C8B61EE
Certificate serial: 4154745140E856791AA9C70795A169D2E4BF08EA
Authority key identifier: AA:30:F7:8D:E6:E9:B0:80:AA:F8:A4:AB:04:2F:F1:BD:2C:8B:61:EE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA30F78DE6E9B080AAF8A4AB042FF1BD2C8B61EE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/323830343a343863303a3a2f33322d3438203d3e20323637313432.roa
Signing time: Mon 09 Sep 2024 23:42:40 +0000
ROA not before: Mon 09 Sep 2024 23:37:40 +0000
ROA not after: Mon 08 Sep 2025 23:42:40 +0000
asID: 267142
IP address blocks: 2804:48c0::/32 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:54:74:51:40:e8:56:79:1a:a9:c7:07:95:a1:69:d2:e4:bf:08:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA30F78DE6E9B080AAF8A4AB042FF1BD2C8B61EE
Validity
Not Before: Sep 9 23:37:40 2024 GMT
Not After : Sep 8 23:42:40 2025 GMT
Subject: CN=B584DFA4A3280AAED7E0E4C2AD15C88D009CC1F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c8:90:f2:4e:1c:1d:64:a9:47:48:bb:14:f2:
3f:66:69:46:b3:61:5f:ae:f3:5b:4a:c4:2d:37:6e:
46:09:3b:ca:0b:b5:e5:29:93:e2:a2:65:72:71:e4:
b5:b6:a2:90:63:0b:32:5a:63:78:00:94:05:5e:22:
28:41:35:f8:41:b8:ad:d5:7f:e5:8f:22:96:e9:69:
b1:7e:25:19:de:17:4a:c4:48:78:71:cd:65:7a:3d:
16:80:89:fb:c3:3c:d3:58:1e:b8:4f:b9:c8:c0:74:
93:af:8e:d1:f2:b0:ed:f1:16:de:f5:2d:e8:57:89:
a1:5f:15:d4:e8:f9:1c:a1:ce:80:55:38:b0:dc:58:
f4:24:5c:42:84:f1:51:ad:f9:bd:c1:95:d1:27:fa:
ec:55:f4:ea:e8:39:25:a8:78:d7:8c:2e:07:62:bf:
a3:1c:e5:75:58:f0:5d:5b:d7:b4:0f:dc:d3:d9:9f:
89:bc:fe:d2:0b:4e:2e:69:74:41:3c:60:c3:55:f9:
fc:13:04:f8:12:f1:dd:94:27:7c:06:a4:96:fe:a4:
7a:be:e3:50:15:dc:94:27:2e:a9:f3:b2:54:35:4f:
c8:64:05:82:06:45:15:6c:88:f1:05:f4:e1:e6:c2:
89:c5:c0:02:85:e5:ba:34:18:82:3d:5b:34:00:1f:
7b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:84:DF:A4:A3:28:0A:AE:D7:E0:E4:C2:AD:15:C8:8D:00:9C:C1:F8
X509v3 Authority Key Identifier:
keyid:AA:30:F7:8D:E6:E9:B0:80:AA:F8:A4:AB:04:2F:F1:BD:2C:8B:61:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AA30F78DE6E9B080AAF8A4AB042FF1BD2C8B61EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA30F78DE6E9B080AAF8A4AB042FF1BD2C8B61EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/323830343a343863303a3a2f33322d3438203d3e20323637313432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:48c0::/32
Signature Algorithm: sha256WithRSAEncryption
2a:65:6d:82:52:46:ce:55:f7:8f:6f:c9:d7:ae:2c:5b:23:c0:
ab:74:fa:41:7e:a9:3b:02:32:c2:f4:e4:9d:61:57:ed:32:12:
4b:0d:ee:4a:58:92:1e:2e:7b:74:d5:41:c9:7c:51:63:c6:fc:
d5:cf:5d:f5:3c:14:e4:d9:46:ae:b5:6c:8c:a8:6c:37:a4:23:
29:68:29:5f:77:2e:b0:3d:f5:d9:b8:3d:e0:a7:2c:8b:89:dc:
ab:9c:71:c3:63:b0:13:35:fb:97:a8:20:ef:a2:ca:9c:15:72:
1c:53:a7:a4:79:c0:a9:1d:a5:20:43:f7:7f:1f:0c:de:f5:5b:
2f:28:d8:cd:6a:10:f4:de:9e:57:8f:b5:5e:cf:02:5d:34:28:
da:a0:23:4b:89:91:1e:38:af:13:b8:0e:91:89:a3:ae:de:4e:
25:04:80:f2:f7:02:ad:10:30:25:e6:8a:ed:75:72:a4:90:f7:
b5:c2:59:f2:2f:3d:f8:10:9f:0d:d0:0b:aa:0e:f4:a0:07:3a:
70:09:a4:1b:29:bd:d5:c1:1d:a2:66:1a:3b:5d:86:9e:72:7a:
6f:d8:68:fb:c8:53:87:27:68:e7:25:09:62:f3:56:fc:35:20:
22:56:0c:a7:99:7a:8f:32:94:14:d3:53:f7:73:f6:b9:ab:39:
a4:6c:42:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 18 09:59:25 2024 by rpki-client on console-fra.rpki-client.org