Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/323830343a366132343a3a2f33332d3333203d3e20323730333135.roa
File: 323830343a366132343a3a2f33332d3333203d3e20323730333135.roa (raw, json)
Hash identifier: AQDlco6/fh9VCK8+/uXE8JUqLr94aeGajfr/e0s5T24=
Subject key identifier: A7:F3:3E:5E:CE:53:87:0B:0A:BC:FA:C8:6F:18:A4:3E:65:A7:22:97
Certificate issuer: /CN=E9FD3C86AF3F0C4C3D0941B8C747A4835B8A6261
Certificate serial: 0957428DCB6F908F338754A137FDC92CEFF8AEAD
Authority key identifier: E9:FD:3C:86:AF:3F:0C:4C:3D:09:41:B8:C7:47:A4:83:5B:8A:62:61
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9FD3C86AF3F0C4C3D0941B8C747A4835B8A6261.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/323830343a366132343a3a2f33332d3333203d3e20323730333135.roa
Signing time: Wed 25 Sep 2024 15:13:11 +0000
ROA not before: Wed 25 Sep 2024 15:08:11 +0000
ROA not after: Wed 24 Sep 2025 15:13:11 +0000
asID: 270315
IP address blocks: 2804:6a24::/33 maxlen: 33
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:57:42:8d:cb:6f:90:8f:33:87:54:a1:37:fd:c9:2c:ef:f8:ae:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9FD3C86AF3F0C4C3D0941B8C747A4835B8A6261
Validity
Not Before: Sep 25 15:08:11 2024 GMT
Not After : Sep 24 15:13:11 2025 GMT
Subject: CN=A7F33E5ECE53870B0ABCFAC86F18A43E65A72297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:46:1b:83:a8:7e:87:72:f3:57:5e:f6:a0:56:
d6:31:f9:29:87:30:04:c2:e9:ce:e7:57:50:49:c8:
87:90:69:ed:5d:92:8f:f9:3a:43:3c:d4:ab:23:40:
f0:6a:7c:e9:25:5f:bc:bc:96:b2:68:9d:af:1a:6c:
6e:00:7d:74:4c:ab:04:60:c5:bf:c9:08:4f:35:d5:
0b:8a:4e:a1:42:97:ac:5e:e4:91:f1:d6:db:79:a3:
29:cb:c9:c1:c1:23:40:b6:e8:9b:70:08:db:f2:ee:
cf:42:db:75:c2:2e:2e:26:5b:59:a6:e6:9d:15:80:
3f:ac:c4:e6:30:d7:22:f2:8c:87:71:bb:4c:06:dd:
d5:37:c2:42:db:89:67:77:01:1f:e0:a1:97:45:f6:
68:21:f3:b6:85:ef:c9:f9:3f:30:67:0b:47:db:0f:
53:60:ee:8d:5e:e9:a2:6a:54:60:62:84:d2:f7:49:
1b:bf:be:af:08:ba:da:6b:2e:0b:06:7f:fa:cc:34:
1f:43:50:c2:04:80:32:f4:e7:42:4b:ff:a1:76:57:
56:ec:85:13:48:23:41:5d:f9:79:25:c8:96:54:c6:
f7:85:e5:2a:03:13:58:96:e6:48:27:8b:4f:90:24:
d2:8e:56:3b:51:17:a7:ff:c8:88:50:e8:29:da:f0:
e1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F3:3E:5E:CE:53:87:0B:0A:BC:FA:C8:6F:18:A4:3E:65:A7:22:97
X509v3 Authority Key Identifier:
keyid:E9:FD:3C:86:AF:3F:0C:4C:3D:09:41:B8:C7:47:A4:83:5B:8A:62:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/E9FD3C86AF3F0C4C3D0941B8C747A4835B8A6261.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9FD3C86AF3F0C4C3D0941B8C747A4835B8A6261.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/323830343a366132343a3a2f33332d3333203d3e20323730333135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6a24::/33
Signature Algorithm: sha256WithRSAEncryption
3b:8f:e2:79:db:d6:bb:76:a0:11:dc:6c:d9:81:39:39:98:f1:
b1:8f:74:6c:d9:7e:fd:b0:e1:0d:e1:a6:cc:39:12:63:7e:84:
d6:52:28:10:55:80:43:69:fd:48:20:81:bf:2d:e5:fa:8f:f7:
b9:6f:d2:77:8e:3d:53:25:6d:c8:e9:6d:3f:ee:f0:6e:a6:7e:
65:4c:5d:9c:9e:45:37:05:96:ed:73:f0:7f:25:e2:3c:5f:86:
bc:dd:ab:39:09:c8:74:cf:4d:f4:75:fe:99:5e:73:28:b7:02:
3c:90:97:b0:3b:97:8d:7a:2b:52:5a:f6:06:d2:86:be:2d:d8:
b5:f8:b1:17:ff:c8:48:13:52:04:a0:00:02:cd:a9:02:8e:5d:
8b:ef:11:4c:43:4d:ef:26:0f:91:0b:3c:8c:9e:a4:50:64:39:
77:7b:57:d3:0a:c7:4f:82:5b:cc:33:17:3c:30:75:b8:5b:35:
f0:dd:ff:d8:a4:52:7a:23:4a:67:dc:8e:b1:1e:7e:69:a9:81:
98:59:69:2a:1f:e4:59:12:b5:45:a2:64:a2:d5:b2:80:f1:a6:
92:0e:c7:e8:75:0d:9b:05:ab:e7:94:38:82:cc:9e:99:6f:66:
c0:23:73:ca:72:7d:b7:82:85:a3:6f:82:10:3f:af:ac:ba:bc:
6c:20:2e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 13:25:51 2024 by rpki-client on console-fra.rpki-client.org