Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/xADS5SdBptqHvhfb6m9tDRULHvMbuEktE7GQ5Nbxsre/0/323830343a373937633a3a2f33322d313238203d3e20323731333038.roa
File: 323830343a373937633a3a2f33322d313238203d3e20323731333038.roa (raw, json)
Hash identifier: k16NTEvkAn7CR2ZW56IknOfnalR5GW49xzPlRjnIWbg=
Subject key identifier: 2A:74:04:BA:DC:FE:63:22:03:49:AC:F7:83:D6:9D:1D:02:A6:93:DF
Certificate issuer: /CN=CE5AFAF91877392AB78A95A77E48B4731F1D8B95
Certificate serial: 2E74B01FFD4F587D0E8C6150A7C77B33F92C26CA
Authority key identifier: CE:5A:FA:F9:18:77:39:2A:B7:8A:95:A7:7E:48:B4:73:1F:1D:8B:95
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE5AFAF91877392AB78A95A77E48B4731F1D8B95.cer
Subject info access: rsync://rpki-repo.registro.br/repo/xADS5SdBptqHvhfb6m9tDRULHvMbuEktE7GQ5Nbxsre/0/323830343a373937633a3a2f33322d313238203d3e20323731333038.roa
Signing time: Wed 06 Nov 2024 18:13:04 +0000
ROA not before: Wed 06 Nov 2024 18:08:04 +0000
ROA not after: Wed 05 Nov 2025 18:13:04 +0000
asID: 271308
IP address blocks: 2804:797c::/32 maxlen: 128
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:74:b0:1f:fd:4f:58:7d:0e:8c:61:50:a7:c7:7b:33:f9:2c:26:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE5AFAF91877392AB78A95A77E48B4731F1D8B95
Validity
Not Before: Nov 6 18:08:04 2024 GMT
Not After : Nov 5 18:13:04 2025 GMT
Subject: CN=2A7404BADCFE63220349ACF783D69D1D02A693DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cc:19:5d:23:4c:02:f1:2e:e7:68:53:2e:d3:
c2:c3:43:60:fe:04:55:a2:8f:80:06:23:f6:f3:89:
e4:a9:53:c3:a1:85:cb:8a:4a:ff:fc:34:43:8d:22:
7d:b3:45:de:69:d8:17:05:c0:d4:d5:66:d7:ff:53:
12:e4:9e:d9:91:47:c8:13:c0:8c:10:c3:9b:2c:2e:
84:64:11:1c:70:59:da:7a:9c:e3:26:ef:d6:d4:40:
ea:87:79:d0:b9:ec:05:bf:e4:1f:0c:92:f6:42:ec:
55:84:35:f9:e1:c3:d6:e0:70:d6:a9:84:0d:b9:71:
62:55:c7:e5:36:ed:6c:3c:06:cb:3c:38:d5:68:d2:
d1:b4:1f:e4:67:64:ed:5f:33:19:e6:44:d9:a3:b9:
01:dd:6d:3a:74:73:8e:0a:11:91:54:09:7a:85:8b:
97:0d:76:cf:3c:01:75:ca:6a:26:cc:ff:3e:da:88:
a2:93:c9:53:e7:25:21:f2:4b:d5:e1:d5:ce:f6:d2:
7a:8e:ba:8e:e5:ef:e9:fe:5f:21:8b:74:e7:54:42:
22:04:c3:5b:a5:1e:96:80:ce:3b:ae:dd:86:23:c7:
30:00:a3:4f:0d:a3:d8:68:72:2c:3a:6f:ee:f7:31:
9a:f3:17:21:a6:73:33:5c:34:e8:ab:60:61:c2:f1:
e3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:74:04:BA:DC:FE:63:22:03:49:AC:F7:83:D6:9D:1D:02:A6:93:DF
X509v3 Authority Key Identifier:
keyid:CE:5A:FA:F9:18:77:39:2A:B7:8A:95:A7:7E:48:B4:73:1F:1D:8B:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/xADS5SdBptqHvhfb6m9tDRULHvMbuEktE7GQ5Nbxsre/0/CE5AFAF91877392AB78A95A77E48B4731F1D8B95.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE5AFAF91877392AB78A95A77E48B4731F1D8B95.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/xADS5SdBptqHvhfb6m9tDRULHvMbuEktE7GQ5Nbxsre/0/323830343a373937633a3a2f33322d313238203d3e20323731333038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:797c::/32
Signature Algorithm: sha256WithRSAEncryption
1f:71:c2:55:a7:76:04:89:db:5b:8f:d9:48:c8:42:d6:2d:9e:
ce:57:32:53:40:2b:1f:a0:33:da:75:89:b2:96:3a:5a:fe:40:
fd:34:9d:13:01:23:9b:16:7f:65:91:29:6c:a0:7c:d1:d9:e4:
d1:2d:3c:ed:db:e6:79:b9:38:4e:f1:5e:27:f7:fb:41:69:ef:
f2:11:2c:69:bb:7c:10:1e:85:38:66:4e:16:87:55:79:de:7d:
6c:27:05:71:3e:1f:58:f5:fd:a4:1d:cc:8b:62:95:8f:7b:05:
9e:98:02:bb:ff:19:34:bb:da:53:a4:1d:d3:b2:00:6b:39:43:
e5:28:e7:43:01:15:c4:f3:0e:fe:67:d6:9c:d5:b0:7a:c0:e4:
ac:89:88:c1:02:66:b1:87:55:3d:ab:f3:8a:7d:06:a1:93:90:
bc:79:36:4e:b7:d3:95:ad:f0:7a:47:8a:65:3d:49:a3:a9:96:
db:a7:c5:a2:33:50:eb:1d:58:3a:89:5b:1c:f6:44:0c:ae:25:
be:90:61:02:89:08:07:73:56:18:e0:02:2f:94:85:59:96:3c:
be:5d:b9:b1:ef:16:b7:8f:13:45:47:67:0d:3e:18:3c:fa:81:
e9:8b:47:a1:52:ec:e5:25:1b:5e:83:81:0c:9d:92:36:57:c2:
1f:6d:02:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 13:35:55 2024 by rpki-client on console-fra.rpki-client.org