Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/323830343a3632633a3a2f33322d3332203d3e20323632353639.roa
File: 323830343a3632633a3a2f33322d3332203d3e20323632353639.roa (raw, json)
Hash identifier: tLAOqkz9HVNeCNXQX6MGb3ZLVDx3fCsl7TWe2DVP5s4=
Subject key identifier: 38:AC:49:D4:0E:42:C1:7C:2B:93:12:F2:9F:DC:A6:17:B2:F6:3D:0B
Certificate issuer: /CN=22191C91C699626F1DF3C3B76D44F235C4976110
Certificate serial: 464C9428CA9EF41AED9C637951D3F00B73CF074D
Authority key identifier: 22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer
Subject info access: rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/323830343a3632633a3a2f33322d3332203d3e20323632353639.roa
Signing time: Thu 04 Apr 2024 07:20:42 +0000
ROA not before: Thu 04 Apr 2024 07:15:42 +0000
ROA not after: Thu 03 Apr 2025 07:20:42 +0000
asID: 262569
IP address blocks: 2804:62c::/32 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:4c:94:28:ca:9e:f4:1a:ed:9c:63:79:51:d3:f0:0b:73:cf:07:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22191C91C699626F1DF3C3B76D44F235C4976110
Validity
Not Before: Apr 4 07:15:42 2024 GMT
Not After : Apr 3 07:20:42 2025 GMT
Subject: CN=38AC49D40E42C17C2B9312F29FDCA617B2F63D0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fd:24:5a:76:55:e9:a9:d5:bd:77:f1:2f:ce:
62:8b:79:10:01:21:a5:85:39:2a:e5:44:76:7b:32:
b4:c6:45:0f:37:88:30:9f:b0:f7:91:a1:36:24:6b:
0c:12:f2:b6:7f:d5:5b:d4:ec:00:c7:11:93:1b:ea:
3b:9f:26:40:f1:fe:75:53:e0:e4:bd:13:d2:cd:d4:
c9:a4:31:70:a2:82:84:a0:9f:15:ba:4d:da:c8:97:
de:43:21:b7:c8:d5:da:eb:93:98:a5:c6:d2:de:e2:
ee:d0:76:87:5c:e4:79:fd:a8:17:46:bc:f8:9d:69:
a1:8c:b5:ef:dc:27:68:1b:1f:1a:b3:d1:f9:5f:c4:
dd:3b:f4:aa:d5:5b:d9:09:32:fa:9f:e4:29:49:dc:
ac:4f:79:d0:7c:57:be:ff:8f:29:3a:f7:ab:50:d4:
56:cd:18:7f:09:bb:38:f4:b7:8f:c9:e4:cb:92:32:
bf:cf:33:ad:dd:a5:6d:c3:e1:e4:4d:d6:a3:9b:db:
77:9c:c5:9e:03:01:8a:55:11:70:ed:f9:c9:8a:6c:
05:18:99:f8:1d:8c:dc:af:05:0a:2a:33:23:60:b4:
c5:a2:23:da:db:ba:c5:cc:a3:eb:3e:a2:eb:dc:12:
af:8b:4c:1f:21:70:94:0b:98:b1:de:3e:af:ac:d4:
eb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AC:49:D4:0E:42:C1:7C:2B:93:12:F2:9F:DC:A6:17:B2:F6:3D:0B
X509v3 Authority Key Identifier:
keyid:22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/22191C91C699626F1DF3C3B76D44F235C4976110.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/323830343a3632633a3a2f33322d3332203d3e20323632353639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:62c::/32
Signature Algorithm: sha256WithRSAEncryption
26:94:4c:d5:ce:44:0a:d6:0f:a4:fa:78:c9:ad:de:56:e8:4f:
82:32:6e:c1:3b:6f:4d:2b:ed:3a:e8:41:e0:dd:2f:fa:c4:35:
07:4c:86:67:aa:6d:dc:b2:74:5c:c1:a9:cc:79:0e:aa:aa:c9:
5b:e6:cd:99:0c:c2:54:c4:11:32:30:12:f5:08:5e:c1:3f:42:
54:42:25:90:e5:c2:4a:cf:29:41:c2:99:97:e2:76:53:b8:27:
cc:e2:43:71:82:e5:a1:25:c6:bd:0e:1d:c5:c8:44:7a:8c:aa:
39:cd:bc:fa:16:3e:63:6e:74:00:7d:c0:17:5f:2f:9f:ed:8b:
f2:8e:1d:cd:fa:5a:9a:27:cb:e1:f6:ed:00:f1:ad:9a:14:72:
59:9d:3e:77:be:a5:ac:c3:63:eb:f5:48:58:47:e1:bf:08:63:
c8:b1:5e:e4:73:1d:ea:59:73:f1:5b:44:df:ae:92:92:a6:27:
68:0f:7b:c6:ee:fc:e7:1a:5d:54:44:60:eb:64:e1:9a:38:b2:
9c:a9:0f:23:a0:c8:c6:f6:b4:8b:92:21:ee:77:1f:95:59:47:
fe:32:e8:26:c0:23:2c:62:7d:18:a2:32:3c:db:bd:06:47:e1:
06:88:20:92:45:83:b4:0f:12:60:7d:29:d2:bb:51:db:f5:03:
09:e9:dc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 12:21:38 2024 by rpki-client on console-fra.rpki-client.org