Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a343030303a3a2f33342d3334203d3e20323733373238.roa
File: 323830343a386235633a343030303a3a2f33342d3334203d3e20323733373238.roa (raw, json)
Hash identifier: WIVb38/HvOK0vLAl/FvKKCesc3P+ET2pB+AXjyrPKHI=
Subject key identifier: 67:AE:C8:8C:F2:76:9B:7F:23:01:89:CF:84:7D:D2:02:07:B3:D7:DA
Certificate issuer: /CN=976D8A1BE7F7639985F6A8FAE6D3E9387646F1A5
Certificate serial: 1ED4066C1FAE932DAEC11ADD05D80B56F1680F67
Authority key identifier: 97:6D:8A:1B:E7:F7:63:99:85:F6:A8:FA:E6:D3:E9:38:76:46:F1:A5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/976D8A1BE7F7639985F6A8FAE6D3E9387646F1A5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a343030303a3a2f33342d3334203d3e20323733373238.roa
Signing time: Tue 29 Oct 2024 15:26:22 +0000
ROA not before: Tue 29 Oct 2024 15:21:22 +0000
ROA not after: Tue 28 Oct 2025 15:26:22 +0000
asID: 273728
IP address blocks: 2804:8b5c:4000::/34 maxlen: 34
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:d4:06:6c:1f:ae:93:2d:ae:c1:1a:dd:05:d8:0b:56:f1:68:0f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=976D8A1BE7F7639985F6A8FAE6D3E9387646F1A5
Validity
Not Before: Oct 29 15:21:22 2024 GMT
Not After : Oct 28 15:26:22 2025 GMT
Subject: CN=67AEC88CF2769B7F230189CF847DD20207B3D7DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d2:62:0f:9e:cf:d2:02:cc:c3:44:4c:b1:50:
50:bd:64:2c:ca:f1:40:0d:5a:bb:72:f6:71:f9:3a:
7d:67:f1:25:0b:ef:50:44:27:bd:09:51:e8:ec:f1:
25:24:ac:7f:28:d2:9d:fc:37:e4:0d:9a:e8:66:14:
49:f5:de:ae:37:95:80:8a:6a:62:b6:00:d8:c2:7e:
11:88:8e:29:97:c1:6f:24:82:34:49:2b:c9:6d:3c:
99:39:e0:56:06:64:28:27:76:4f:8f:af:59:bf:c1:
8d:01:42:43:e9:0a:19:19:f4:0c:3c:06:35:3f:a0:
60:e5:14:5f:c8:c1:bd:6e:5a:6e:eb:ff:b9:d7:ef:
10:dc:d5:c4:17:65:ff:46:2c:5f:57:4b:de:e5:6d:
9e:83:1d:4d:e4:71:28:0b:d1:1c:55:4d:7b:9d:0d:
e4:87:dd:46:9a:13:b2:b4:f3:85:f6:9a:2c:1c:f4:
66:fb:50:05:92:41:39:1b:76:ed:5f:4a:10:a1:02:
68:7d:c1:ec:03:da:4a:38:db:30:76:2c:6f:ac:c3:
18:59:6c:ea:bc:e6:45:fb:44:51:0c:4e:5e:56:47:
4f:81:40:8c:fc:c9:4e:98:79:32:53:d0:7e:a8:87:
2f:c7:ef:a1:b3:34:8f:73:5d:7e:45:be:c6:be:d1:
dd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AE:C8:8C:F2:76:9B:7F:23:01:89:CF:84:7D:D2:02:07:B3:D7:DA
X509v3 Authority Key Identifier:
keyid:97:6D:8A:1B:E7:F7:63:99:85:F6:A8:FA:E6:D3:E9:38:76:46:F1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/976D8A1BE7F7639985F6A8FAE6D3E9387646F1A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/976D8A1BE7F7639985F6A8FAE6D3E9387646F1A5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a343030303a3a2f33342d3334203d3e20323733373238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8b5c:4000::/34
Signature Algorithm: sha256WithRSAEncryption
06:9e:02:ab:76:95:0e:17:10:a7:7b:5f:b3:4d:a0:87:8b:59:
e2:4f:d7:12:e1:8e:26:ea:bc:b3:76:b0:73:d9:84:da:19:0f:
14:0d:7b:20:60:d4:c8:ea:5d:f3:b3:de:80:e8:eb:a9:63:c5:
82:b1:7b:d1:97:6c:09:ed:5c:7a:16:e5:4b:00:49:b0:5b:52:
48:91:ec:45:79:a6:65:15:74:2d:a0:e9:e4:7a:3d:94:61:03:
3c:82:74:75:8b:23:54:aa:96:ee:87:48:ff:2d:e9:b7:f2:cd:
5b:8b:08:2f:f3:2a:6c:49:5d:74:5b:40:5b:e6:91:4d:65:64:
85:24:9c:4f:1a:f6:20:ce:de:af:fc:0b:e6:8c:7b:9a:d6:89:
e6:e8:63:c5:6b:f3:48:96:b3:41:2d:38:31:da:d4:2c:c8:21:
01:df:8b:5d:ac:f4:9a:ee:80:24:60:c0:da:1d:42:56:5c:73:
77:51:b9:cb:cd:ba:8a:a8:3e:51:75:bf:23:d7:0b:0f:79:6f:
f3:ab:e0:ec:01:88:7d:24:52:d5:6c:56:6b:aa:3a:8a:a8:d7:
aa:95:d5:c3:03:b2:71:b5:4c:86:0d:9a:63:6a:25:c1:3f:22:
26:04:b6:bc:54:f4:01:4b:80:7f:65:f4:b8:eb:af:20:d6:61:
2f:2f:c5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 13:17:34 2024 by rpki-client on console-fra.rpki-client.org