Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EmQF7LdXHDMkEwsvsomego24xJArotwrxfd4rvyGYGQY/0/323830343a383831343a3a2f33322d3438203d3e20323732373530.roa
File: 323830343a383831343a3a2f33322d3438203d3e20323732373530.roa (raw, json)
Hash identifier: fKWNBdhBHB/otoYTeAqbY3qSUXDiiItVv5CH08NsE3Q=
Subject key identifier: 3A:37:03:33:D7:C7:3D:04:C4:8A:50:B9:80:A7:38:56:3B:27:E5:63
Certificate issuer: /CN=77FFD52ED5FC858764B864C9CC2498F407AC3AB2
Certificate serial: 70CCCACA632C3C58DF6AA2FE5490E83884C32243
Authority key identifier: 77:FF:D5:2E:D5:FC:85:87:64:B8:64:C9:CC:24:98:F4:07:AC:3A:B2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77FFD52ED5FC858764B864C9CC2498F407AC3AB2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EmQF7LdXHDMkEwsvsomego24xJArotwrxfd4rvyGYGQY/0/323830343a383831343a3a2f33322d3438203d3e20323732373530.roa
Signing time: Thu 21 Nov 2024 14:07:40 +0000
ROA not before: Thu 21 Nov 2024 14:02:40 +0000
ROA not after: Thu 20 Nov 2025 14:07:40 +0000
asID: 272750
IP address blocks: 2804:8814::/32 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:cc:ca:ca:63:2c:3c:58:df:6a:a2:fe:54:90:e8:38:84:c3:22:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77FFD52ED5FC858764B864C9CC2498F407AC3AB2
Validity
Not Before: Nov 21 14:02:40 2024 GMT
Not After : Nov 20 14:07:40 2025 GMT
Subject: CN=3A370333D7C73D04C48A50B980A738563B27E563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b6:ad:f1:8f:04:e7:ee:8f:8b:f2:1b:67:b1:
c2:e9:c3:c5:0a:4e:91:f5:67:d7:6b:59:47:59:4b:
a5:a7:0f:e1:ad:8b:1e:77:70:f6:96:a5:17:1d:6b:
2b:9c:9f:44:bf:d2:08:76:83:fc:0f:6d:31:d5:de:
05:cb:45:bd:63:56:95:a8:f7:1c:5e:8c:9a:52:31:
0e:6a:48:9b:72:a5:dd:9f:73:69:d3:c2:e8:f2:d6:
ce:04:5a:85:5c:75:70:57:23:c3:3d:36:73:1e:3e:
dd:8b:e2:7b:25:ec:41:59:c6:1f:19:83:c4:85:e3:
0c:e3:40:ba:89:d3:39:f1:b3:17:13:6a:87:b5:4c:
02:a0:16:5c:8c:88:5a:ab:81:1b:7c:fe:2f:b5:17:
4a:84:b7:59:04:ee:f6:5d:fc:4e:42:1b:97:43:7b:
7e:a5:23:91:e9:4a:13:92:3e:02:8e:e1:85:4c:83:
99:48:53:8b:1a:99:9f:63:08:94:89:fb:ba:80:ce:
d4:85:ba:fb:60:17:a3:88:fc:18:9f:7a:24:7d:30:
39:61:73:af:8a:de:7f:fd:3f:4c:b0:f4:d0:0c:dc:
4b:d1:fe:ec:2b:02:00:41:28:e4:88:aa:93:24:bb:
7d:0c:37:2f:8f:47:a2:77:42:68:3c:5f:4c:c0:1e:
73:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:37:03:33:D7:C7:3D:04:C4:8A:50:B9:80:A7:38:56:3B:27:E5:63
X509v3 Authority Key Identifier:
keyid:77:FF:D5:2E:D5:FC:85:87:64:B8:64:C9:CC:24:98:F4:07:AC:3A:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EmQF7LdXHDMkEwsvsomego24xJArotwrxfd4rvyGYGQY/0/77FFD52ED5FC858764B864C9CC2498F407AC3AB2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77FFD52ED5FC858764B864C9CC2498F407AC3AB2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmQF7LdXHDMkEwsvsomego24xJArotwrxfd4rvyGYGQY/0/323830343a383831343a3a2f33322d3438203d3e20323732373530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8814::/32
Signature Algorithm: sha256WithRSAEncryption
12:fb:b1:f4:1f:83:0a:8b:f8:28:80:f0:cb:4d:c8:cc:aa:9a:
e1:ae:f0:31:dc:9b:58:f8:56:d9:fb:7d:04:6c:5e:bb:7b:e8:
d0:0e:4f:a9:e8:c3:ab:fe:79:b1:5a:14:79:2c:a8:55:69:7d:
aa:f5:88:b9:8d:3e:ed:ad:31:41:3e:fd:0a:ec:24:2d:89:da:
2e:af:66:07:b6:ed:ce:33:b1:4a:64:1d:5a:a3:b3:3c:8d:9b:
6e:29:2d:3d:8f:60:03:02:83:44:69:f0:51:35:71:23:31:56:
8d:28:e8:c0:c3:39:19:37:fc:16:c4:5c:ee:7d:2b:45:77:19:
9d:a7:9b:dd:a3:5c:71:d2:6c:2d:41:c1:1f:6d:be:f8:90:1d:
fc:8c:79:c5:eb:63:02:24:11:a9:65:4c:fa:10:00:a6:00:ee:
1d:ef:4b:ef:33:9e:32:87:7a:97:ce:cf:07:7d:05:44:b6:3b:
7d:46:f2:65:c3:82:fc:f8:a8:0c:d1:42:f6:01:c7:35:b6:c7:
6d:f7:76:e1:90:1f:30:99:76:c8:21:5b:c6:e6:35:31:e0:db:
84:03:11:b9:88:6b:1b:57:28:d9:88:19:0f:8f:d2:01:4c:75:
38:bb:65:7d:59:f3:b6:16:ec:78:cb:ed:90:aa:58:6f:3c:76:
d3:21:58:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 28 19:37:08 2024 by rpki-client on console-ams.rpki-client.org