Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/1/323830343a3839303a3a2f33322d3332203d3e203532383733.roa
File: 323830343a3839303a3a2f33322d3332203d3e203532383733.roa (raw, json)
Hash identifier: bTKpGdH2XqwjYT6ux7NKKTXeRAE1S2b6YnZrJEz7J+Q=
Subject key identifier: A4:42:81:58:9A:EB:E9:0A:6E:EC:D2:A9:8D:E2:C2:9D:CE:40:F7:B9
Certificate issuer: /CN=5AD99894988DD0F96A54E3B74753FF224C03A71B
Certificate serial: 40C6C8A3AC7DC072DDB56893A0733A381917E698
Authority key identifier: 5A:D9:98:94:98:8D:D0:F9:6A:54:E3:B7:47:53:FF:22:4C:03:A7:1B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AD99894988DD0F96A54E3B74753FF224C03A71B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/1/323830343a3839303a3a2f33322d3332203d3e203532383733.roa
Signing time: Thu 04 Apr 2024 16:45:58 +0000
ROA not before: Thu 04 Apr 2024 16:40:58 +0000
ROA not after: Thu 03 Apr 2025 16:45:58 +0000
asID: 52873
IP address blocks: 2804:890::/32 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:c6:c8:a3:ac:7d:c0:72:dd:b5:68:93:a0:73:3a:38:19:17:e6:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5AD99894988DD0F96A54E3B74753FF224C03A71B
Validity
Not Before: Apr 4 16:40:58 2024 GMT
Not After : Apr 3 16:45:58 2025 GMT
Subject: CN=A44281589AEBE90A6EECD2A98DE2C29DCE40F7B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:31:3c:09:e3:1c:7f:0d:84:a5:c9:cd:84:bd:
41:4b:43:fb:53:79:8f:8b:08:8f:31:52:55:53:2a:
1e:0a:d5:99:0c:ef:78:91:a3:f0:85:67:8f:07:62:
c5:7b:35:78:19:62:a8:13:f1:c2:11:e6:49:6b:6b:
f5:e2:87:49:45:64:88:f9:03:7a:4a:dd:9d:8b:6a:
6f:8d:34:47:95:b1:69:44:11:0a:96:f7:66:78:3d:
35:c2:d8:35:23:77:bc:ae:c6:2b:03:ce:8b:63:cb:
77:2d:18:d4:30:29:ed:5b:af:03:4f:5c:b4:12:39:
ea:51:1d:9c:77:3c:20:9a:4b:bb:a6:6c:7c:e1:f6:
3a:c6:43:ce:d9:f9:5b:7c:89:4a:45:81:c1:26:f5:
ee:15:f8:a2:d8:0b:c9:00:ee:7e:ad:47:5b:b4:be:
6b:9e:f8:cc:29:fa:37:db:4b:a3:af:85:4d:6c:7d:
62:f2:14:e1:ef:bb:6a:7b:ba:4f:5e:a7:b6:29:63:
92:d1:4f:e8:4d:28:df:d3:90:c7:65:02:12:53:57:
ca:0d:18:f1:55:ee:b6:8f:cc:40:84:e6:b4:c5:26:
28:21:85:25:47:b2:36:52:d3:3b:4a:96:45:5f:1b:
c9:9c:fb:01:61:c5:c4:dd:bc:ba:5d:be:34:91:54:
20:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:42:81:58:9A:EB:E9:0A:6E:EC:D2:A9:8D:E2:C2:9D:CE:40:F7:B9
X509v3 Authority Key Identifier:
keyid:5A:D9:98:94:98:8D:D0:F9:6A:54:E3:B7:47:53:FF:22:4C:03:A7:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/1/5AD99894988DD0F96A54E3B74753FF224C03A71B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AD99894988DD0F96A54E3B74753FF224C03A71B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/1/323830343a3839303a3a2f33322d3332203d3e203532383733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:890::/32
Signature Algorithm: sha256WithRSAEncryption
32:36:50:30:a4:4e:da:8b:d8:bb:2d:f3:59:5f:13:bf:d7:6b:
b1:95:71:96:bf:b1:48:b2:c4:f1:46:9d:c0:9c:fe:6b:7f:4a:
db:0b:7e:34:09:46:e6:7c:8a:05:8e:c1:35:f2:e3:7e:65:3b:
40:3f:e2:f3:30:61:da:2a:21:7d:a3:a1:27:c4:d0:38:bc:ed:
7a:a3:5f:52:01:81:1c:85:e7:6f:a9:37:50:08:d6:74:c9:fa:
d4:e1:82:1d:dd:3a:60:18:a2:6c:c1:aa:ff:9a:c2:17:35:cc:
6d:b8:7b:34:b7:0e:a6:97:1e:0a:03:b2:fc:a2:28:7b:3a:ad:
0f:1d:23:fe:3c:6f:9c:2e:78:7c:8e:c7:c4:a8:c1:1b:8f:16:
9e:87:0f:16:bf:a9:a0:20:f2:2e:c6:96:5d:66:1f:9e:b7:dc:
0a:e4:e5:4a:4a:b6:4f:7c:27:ef:ba:e3:2b:c2:08:28:36:cd:
51:9f:6f:76:3e:d6:f0:f1:df:4b:8c:1a:37:ec:f8:8e:67:44:
e2:5e:c8:e0:12:2a:b4:48:0d:66:4c:fb:a9:31:eb:d7:8e:60:
13:21:0a:45:25:33:8e:7e:ca:35:d9:9c:a4:31:b4:bb:b5:77:
0f:07:ab:fa:68:7a:87:97:98:94:5b:78:f2:60:91:df:01:7f:
33:1e:e4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 10:30:18 2024 by rpki-client on console-fra.rpki-client.org