Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/323830343a343738343a3a2f33322d3332203d3e20323637303539.roa
File: 323830343a343738343a3a2f33322d3332203d3e20323637303539.roa (raw, json)
Hash identifier: Ig0DRutDWDW2k5qGb7iapNyXGAsLsKCea7YoH6IkWlg=
Subject key identifier: 85:2D:FB:B0:F7:E2:C0:03:82:A7:FB:C7:77:2F:3C:E9:21:70:2B:BC
Certificate issuer: /CN=3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C
Certificate serial: 1D34FA67839358A459B00EB2D04682C6EB8AC4A4
Authority key identifier: 3E:86:FE:3F:F2:EA:13:AF:B3:B8:C6:71:1D:D8:F4:73:1D:C4:88:4C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/323830343a343738343a3a2f33322d3332203d3e20323637303539.roa
Signing time: Mon 06 Jan 2025 18:53:58 +0000
ROA not before: Mon 06 Jan 2025 18:48:58 +0000
ROA not after: Mon 05 Jan 2026 18:53:58 +0000
asID: 267059
IP address blocks: 2804:4784::/32 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:34:fa:67:83:93:58:a4:59:b0:0e:b2:d0:46:82:c6:eb:8a:c4:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C
Validity
Not Before: Jan 6 18:48:58 2025 GMT
Not After : Jan 5 18:53:58 2026 GMT
Subject: CN=852DFBB0F7E2C00382A7FBC7772F3CE921702BBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:cb:dc:d5:ef:1c:2f:60:50:9c:c5:c7:b3:ff:
c0:5a:90:ed:81:c3:31:50:6d:18:83:5f:7b:5d:8e:
a7:e1:40:10:0c:60:0a:3a:3a:b5:68:76:43:55:85:
31:ce:23:0a:65:9d:b3:56:31:91:4b:34:d3:04:b4:
f9:74:31:34:4d:fc:56:72:9f:41:eb:06:cc:db:9b:
ac:f5:53:fa:25:13:5a:2f:3d:7c:0e:74:b6:01:48:
ea:1c:c9:3f:17:03:e2:f4:1b:4b:5a:b9:f6:4b:36:
07:4f:f6:af:79:84:e6:75:64:09:02:b0:61:a1:b8:
a3:f8:cd:44:90:69:3a:3d:14:2d:ef:83:7f:66:49:
de:5e:fe:e6:ca:fe:08:84:c4:4c:88:62:76:e5:92:
4f:20:d4:cd:c0:51:07:2e:e5:6d:2d:3d:ba:c0:a0:
dd:1e:97:e7:5a:47:bd:3c:5a:17:41:03:8f:8a:2b:
15:8a:5f:92:fc:32:d0:fb:6f:ae:1d:37:ad:1b:9c:
37:fc:d9:09:45:8e:b4:08:8f:97:bd:84:1e:cb:cf:
df:4b:48:18:ab:6b:5c:f0:dd:fd:e8:47:0b:a3:37:
a1:5c:5f:ed:b0:4a:1a:dc:46:85:98:d9:df:d0:45:
ee:03:7b:f6:66:00:6e:dd:b5:da:97:d9:10:a4:5f:
ca:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2D:FB:B0:F7:E2:C0:03:82:A7:FB:C7:77:2F:3C:E9:21:70:2B:BC
X509v3 Authority Key Identifier:
keyid:3E:86:FE:3F:F2:EA:13:AF:B3:B8:C6:71:1D:D8:F4:73:1D:C4:88:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/323830343a343738343a3a2f33322d3332203d3e20323637303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4784::/32
Signature Algorithm: sha256WithRSAEncryption
28:b3:e9:74:a6:30:b8:b9:01:a3:4a:55:dd:13:a0:59:90:bf:
71:d2:d8:5c:b0:ac:ff:79:16:b5:0f:eb:5a:f6:d8:a0:79:05:
ee:a1:c3:2d:37:e3:0c:ea:70:54:db:bc:a7:4c:68:ca:14:ca:
be:3f:72:fc:64:d7:15:67:4a:a5:66:49:b7:1d:6b:13:80:29:
69:2f:1e:71:27:e0:fa:dc:71:7f:58:46:43:63:ef:10:5b:7f:
62:17:af:7e:25:74:a2:c0:d0:3b:1f:52:38:ac:cd:be:cf:5b:
34:e3:a9:39:c3:66:cf:ef:d6:4c:79:2c:11:78:76:26:b3:cf:
fe:cb:c3:5f:5b:72:85:66:bb:be:d6:94:6b:c0:62:94:39:96:
1b:35:7b:bb:83:c2:ca:72:12:84:c6:a5:a5:bb:85:12:52:11:
a9:fd:3e:02:de:40:28:3c:6f:fd:1b:fd:ef:0b:58:5a:81:a7:
3e:02:57:22:01:00:f9:71:4b:49:bb:71:0b:28:ee:28:86:98:
a0:7b:a3:98:ea:97:25:0f:84:ee:45:b5:b3:96:95:f7:d5:93:
3d:61:44:be:10:fa:ab:2a:6d:e2:cc:cb:5f:f8:a8:f4:f3:98:
47:be:f9:0f:3d:92:bd:ff:43:29:92:e9:ad:7f:04:d2:16:ea:
3e:bc:62:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 06:55:53 2025 by rpki-client on console.sobornost.net