Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/323830343a376139343a323030303a3a2f34302d3430203d3e20323731333830.roa
File: 323830343a376139343a323030303a3a2f34302d3430203d3e20323731333830.roa (raw, json)
Hash identifier: AKCc4xmGTv+Dz0CYLSjhk28mUjEjMkzbUHJIvsASNyU=
Subject key identifier: 31:34:21:D5:9B:1A:A8:28:17:AE:32:20:74:A0:CC:89:BA:DD:D9:BB
Certificate issuer: /CN=CED693561B18E1F15DE112114489E7324E327A34
Certificate serial: 71B67D05CAD58EA6ED07FB6FF08896B2B0FDB65A
Authority key identifier: CE:D6:93:56:1B:18:E1:F1:5D:E1:12:11:44:89:E7:32:4E:32:7A:34
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CED693561B18E1F15DE112114489E7324E327A34.cer
Subject info access: rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/323830343a376139343a323030303a3a2f34302d3430203d3e20323731333830.roa
Signing time: Tue 28 Nov 2023 19:41:43 +0000
ROA not before: Tue 28 Nov 2023 19:36:43 +0000
ROA not after: Tue 26 Nov 2024 19:41:43 +0000
asID: 271380
IP address blocks: 2804:7a94:2000::/40 maxlen: 40
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:b6:7d:05:ca:d5:8e:a6:ed:07:fb:6f:f0:88:96:b2:b0:fd:b6:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CED693561B18E1F15DE112114489E7324E327A34
Validity
Not Before: Nov 28 19:36:43 2023 GMT
Not After : Nov 26 19:41:43 2024 GMT
Subject: CN=313421D59B1AA82817AE322074A0CC89BADDD9BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fa:ed:a9:20:64:0c:13:c7:0a:c8:60:1e:82:
52:8d:1d:0b:aa:33:1d:81:de:0a:38:53:9c:8a:44:
ac:8d:74:12:a1:70:4a:55:ba:97:3c:ec:74:26:7e:
47:05:23:19:9e:0b:40:f0:5c:03:b4:33:ec:5e:20:
e3:2a:96:a2:af:14:70:d5:3d:2a:c2:e9:11:0e:11:
30:30:3a:b4:28:63:e4:11:43:c1:5d:8a:d2:cf:c2:
94:c5:90:5f:28:1c:b6:c2:4f:bf:dd:7a:b6:05:af:
e4:73:8d:8b:03:55:79:9d:fb:46:3e:69:06:72:ab:
fb:39:f7:0b:43:39:80:95:7c:e5:ac:02:86:87:98:
ef:a3:74:31:6a:6d:b5:01:b4:c3:1b:fc:02:a1:75:
d9:9c:b2:bb:01:0a:33:d1:f6:56:56:6f:0e:ab:cd:
c6:79:3e:c0:86:b5:3e:88:76:6b:26:a2:ed:f0:ff:
7d:65:96:57:fe:f7:04:f1:1a:e6:93:5a:b4:ea:e3:
ff:de:7e:12:ca:d6:56:c1:a5:e1:20:10:4a:e0:52:
be:5c:af:a7:87:79:ad:13:ff:3a:62:69:85:64:40:
29:7d:f5:af:d6:27:8b:ed:bb:3c:93:b3:eb:f9:af:
fb:6c:bb:98:77:45:0d:e8:c8:a2:c4:a4:40:e8:e9:
ec:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:34:21:D5:9B:1A:A8:28:17:AE:32:20:74:A0:CC:89:BA:DD:D9:BB
X509v3 Authority Key Identifier:
keyid:CE:D6:93:56:1B:18:E1:F1:5D:E1:12:11:44:89:E7:32:4E:32:7A:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/CED693561B18E1F15DE112114489E7324E327A34.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CED693561B18E1F15DE112114489E7324E327A34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/323830343a376139343a323030303a3a2f34302d3430203d3e20323731333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7a94:2000::/40
Signature Algorithm: sha256WithRSAEncryption
98:eb:67:bb:ee:cf:67:b7:67:e1:10:86:f9:5b:94:6f:c8:c3:
14:79:9b:cc:80:77:25:50:c0:a8:b0:16:02:1e:ab:ab:2f:f8:
31:50:78:0f:eb:73:35:40:9a:a0:31:39:90:44:1f:03:31:10:
97:10:ea:a8:1f:e0:b9:a2:ba:fc:8b:33:dd:07:d4:60:23:b2:
b9:73:da:22:81:88:c8:3a:12:f8:c1:7c:fb:50:8d:d1:99:c0:
b8:84:e7:ac:3c:12:9c:fe:39:7f:2b:cb:79:d3:30:dd:4c:db:
22:03:a7:ab:71:7d:d3:32:2d:b4:d1:54:71:3e:68:37:c5:4b:
6a:ca:9c:c1:f8:d3:4c:44:cc:44:7d:49:e8:8d:26:0c:f5:15:
d7:1e:fe:6b:6e:be:00:46:1c:fa:38:a8:e0:f2:ab:98:9d:fb:
43:2b:0d:83:1e:d4:82:32:cb:41:7f:1b:73:f5:59:c4:95:cf:
b4:9d:5c:fe:10:28:cd:0c:66:ab:d5:af:b4:93:ff:63:55:e7:
b3:3a:c7:8e:36:f7:67:fa:17:5d:c6:3e:3c:1f:21:21:e7:74:
e3:5a:df:d8:4c:9e:00:57:2e:1c:73:f6:bf:0c:a3:e7:7a:13:
fc:56:69:58:13:0f:8b:28:2a:d3:d7:08:c3:89:ab:cf:f4:88:
76:12:04:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 19 00:54:48 2024 by rpki-client on console-fra.rpki-client.org