Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/323830343a373638303a3a2f33322d3332203d3e20323731313136.roa
File: 323830343a373638303a3a2f33322d3332203d3e20323731313136.roa (raw, json)
Hash identifier: vfoJt8fvHXahPapi2b4HHRY+0gPVDrHod6gOR1mI6ao=
Subject key identifier: 9F:28:95:94:D5:8B:F3:09:32:03:F5:97:65:AC:64:74:6A:FA:02:BD
Certificate issuer: /CN=BFA24157A827C97984C7CAFBEA2076F6E728252D
Certificate serial: 2240A4BDE701E54FA1269F3CDCEE81E70249F94D
Authority key identifier: BF:A2:41:57:A8:27:C9:79:84:C7:CA:FB:EA:20:76:F6:E7:28:25:2D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFA24157A827C97984C7CAFBEA2076F6E728252D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/323830343a373638303a3a2f33322d3332203d3e20323731313136.roa
Signing time: Tue 21 May 2024 17:12:52 +0000
ROA not before: Tue 21 May 2024 17:07:52 +0000
ROA not after: Tue 20 May 2025 17:12:52 +0000
asID: 271116
IP address blocks: 2804:7680::/32 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:40:a4:bd:e7:01:e5:4f:a1:26:9f:3c:dc:ee:81:e7:02:49:f9:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFA24157A827C97984C7CAFBEA2076F6E728252D
Validity
Not Before: May 21 17:07:52 2024 GMT
Not After : May 20 17:12:52 2025 GMT
Subject: CN=9F289594D58BF3093203F59765AC64746AFA02BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:58:18:cd:fd:bd:b8:6e:6a:bd:3b:21:2f:72:
14:22:32:34:c6:74:00:28:ad:59:bf:09:71:d3:95:
bf:8e:db:c0:ec:83:f7:1d:8c:f3:32:a6:14:6e:8e:
d2:96:c6:f8:4a:0d:4f:9f:1d:d6:b2:18:73:f8:98:
36:46:4f:ee:50:75:3f:9d:19:22:2e:a4:61:ea:8b:
ee:78:bd:52:a8:5b:46:8a:36:53:e5:36:8a:6f:15:
7e:42:a6:db:6c:8e:be:05:32:6f:99:33:7a:93:9e:
19:cc:ed:e4:07:c8:c6:7b:0b:10:3e:57:7f:d2:0c:
ac:8a:04:2d:5f:86:e7:97:91:d4:66:97:a6:dc:0b:
25:46:fb:d2:90:85:0c:8a:6b:4a:1c:f1:86:9c:89:
ac:ba:03:5f:cc:34:0b:d2:70:8f:23:d8:47:14:cc:
31:c3:df:b5:51:e9:92:e7:c3:a3:04:b0:b2:f4:ce:
78:d1:41:b6:95:82:56:64:7b:8d:81:0e:bc:c6:27:
2d:4d:5b:61:60:21:aa:c7:dc:48:65:7c:7c:bb:8f:
bd:d9:87:38:aa:bc:32:10:16:bc:9b:f4:23:0a:31:
d1:ef:30:dc:83:51:d1:a8:cb:e0:a7:7a:a9:5e:6d:
cd:29:fb:22:9b:3d:24:bc:91:93:33:f2:58:46:e0:
de:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:28:95:94:D5:8B:F3:09:32:03:F5:97:65:AC:64:74:6A:FA:02:BD
X509v3 Authority Key Identifier:
keyid:BF:A2:41:57:A8:27:C9:79:84:C7:CA:FB:EA:20:76:F6:E7:28:25:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/BFA24157A827C97984C7CAFBEA2076F6E728252D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFA24157A827C97984C7CAFBEA2076F6E728252D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/323830343a373638303a3a2f33322d3332203d3e20323731313136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7680::/32
Signature Algorithm: sha256WithRSAEncryption
64:08:91:65:5c:0e:2c:72:19:ae:60:16:c0:50:8b:d2:c3:dd:
2a:f3:68:89:ab:1f:bc:33:12:dc:43:bc:7d:69:69:21:5c:6d:
12:d6:da:02:dd:d9:a0:cb:10:f2:ba:e8:29:8a:88:ed:c4:51:
85:6c:87:95:ec:63:e6:f8:fb:10:0b:ab:8d:7c:4b:ce:ec:61:
89:d4:e4:70:c5:2c:98:51:fb:f8:31:6d:3c:00:4b:a4:01:1e:
65:88:87:4c:56:2e:af:4b:8f:63:0d:2b:a3:06:ea:03:71:3a:
9e:92:4a:0c:8e:0e:f8:cc:ee:12:35:33:5c:53:5d:09:5e:6d:
97:8f:ef:27:93:d7:85:75:ef:93:1a:3c:bc:65:9a:db:42:8e:
8d:a7:6e:17:3f:ce:02:21:be:89:db:f4:d4:6d:18:3f:bc:a1:
99:e2:0f:7f:76:46:1f:dd:d6:50:e4:fe:72:71:57:c3:c8:bf:
f8:86:56:45:74:d6:f9:a5:05:96:91:29:4d:25:42:31:21:78:
3d:72:9b:bf:69:6c:dd:9a:15:5a:89:d4:c0:70:e3:32:6f:05:
53:f9:06:4f:fa:2a:68:da:98:65:21:34:1b:fc:ec:73:a6:09:
d1:51:29:a1:b7:bc:0b:62:aa:b8:58:8c:ec:e9:2b:05:a6:a7:
26:9d:91:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 18:20:14 2024 by rpki-client on console-ams.rpki-client.org