Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/323830343a343738343a3a2f33332d3333203d3e20323637303539.roa
File: 323830343a343738343a3a2f33332d3333203d3e20323637303539.roa (raw, json)
Hash identifier: +Km0jyeVjaXHSiCWq3yerTToQxEGiC2VXYZxJ0AIsw4=
Subject key identifier: 2D:4D:D5:BC:18:87:03:B6:FB:EC:4E:99:6E:65:D1:1A:24:1D:FF:77
Certificate issuer: /CN=3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C
Certificate serial: 0832B10983AE146086A6200F387FFF38D23F95F9
Authority key identifier: 3E:86:FE:3F:F2:EA:13:AF:B3:B8:C6:71:1D:D8:F4:73:1D:C4:88:4C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/323830343a343738343a3a2f33332d3333203d3e20323637303539.roa
Signing time: Mon 06 Jan 2025 18:54:00 +0000
ROA not before: Mon 06 Jan 2025 18:49:00 +0000
ROA not after: Mon 05 Jan 2026 18:54:00 +0000
asID: 267059
IP address blocks: 2804:4784::/33 maxlen: 33
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:32:b1:09:83:ae:14:60:86:a6:20:0f:38:7f:ff:38:d2:3f:95:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C
Validity
Not Before: Jan 6 18:49:00 2025 GMT
Not After : Jan 5 18:54:00 2026 GMT
Subject: CN=2D4DD5BC188703B6FBEC4E996E65D11A241DFF77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c7:96:9a:d6:ca:c8:dd:20:0b:e3:0a:6a:7f:
c9:00:e7:ae:ce:07:a3:b8:9e:f3:84:67:6a:62:bb:
dd:f1:c1:7d:31:cf:c4:fa:37:e4:ef:b3:6a:01:57:
2c:32:7d:b7:a1:02:e1:27:10:1f:a7:ab:27:7e:4f:
63:f4:63:64:ce:32:06:c8:59:03:0e:4a:37:80:0e:
7c:be:99:75:28:b2:af:71:2f:fe:2f:b3:31:14:79:
9d:ef:d1:7c:92:1f:41:a8:bc:6b:44:fa:1f:04:6c:
e0:63:ec:6f:64:ac:bc:ad:3a:6e:1c:4b:6d:36:13:
9d:74:58:bf:19:b9:eb:d9:bd:b5:af:2b:6c:07:2e:
e3:a7:08:2d:24:6e:c1:3f:8c:4b:e0:03:69:0e:d4:
85:ad:c2:a9:67:dc:31:ad:a1:e6:ba:44:be:38:21:
5b:b6:6c:c1:59:41:00:39:c6:cd:b1:bf:01:32:f5:
4c:25:ad:73:cc:99:cf:d0:6c:21:94:5d:73:a9:ec:
8d:02:24:2e:fc:bd:ee:0a:8d:d3:50:d9:2a:de:5e:
eb:c2:b1:ef:7c:ab:4d:00:65:4d:66:cc:40:97:81:
e7:d4:c2:61:28:bc:39:b0:4a:ca:f6:81:33:f6:54:
80:bd:a3:0c:44:62:3a:9a:31:a0:45:32:cc:6a:88:
b9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4D:D5:BC:18:87:03:B6:FB:EC:4E:99:6E:65:D1:1A:24:1D:FF:77
X509v3 Authority Key Identifier:
keyid:3E:86:FE:3F:F2:EA:13:AF:B3:B8:C6:71:1D:D8:F4:73:1D:C4:88:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/323830343a343738343a3a2f33332d3333203d3e20323637303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4784::/33
Signature Algorithm: sha256WithRSAEncryption
a7:ca:7a:f0:36:c3:c0:b6:98:eb:25:7a:a4:b8:5b:fb:7e:23:
61:a2:8f:37:60:17:ae:69:57:ea:d1:fb:ff:f3:76:c0:5b:24:
5f:ba:9f:ba:1b:f5:87:75:d2:fd:a5:f2:86:b1:16:df:ff:8c:
a0:11:00:71:49:e6:ef:eb:e7:9c:06:6b:0b:82:dc:d4:a1:4c:
c4:09:a4:14:66:ad:a5:6b:f5:ce:bf:40:96:1c:49:9c:db:41:
18:bf:fc:93:c1:bc:80:3c:d7:24:a9:be:cf:f8:0f:ea:c7:47:
c9:c8:33:01:78:a5:d9:e8:12:97:0b:0c:26:2e:fa:9d:fe:3e:
0f:6e:eb:8b:c6:d9:8c:a9:3b:69:af:79:8a:2f:4e:9f:69:87:
c3:3b:ef:5d:91:17:71:ae:5b:c8:a5:17:b2:0a:a4:45:c5:17:
de:9a:7f:89:32:27:47:22:e9:2b:64:21:2a:20:7e:11:8d:ad:
b7:58:b1:df:1a:94:34:f6:aa:cc:9b:79:63:c6:b7:56:16:b3:
25:bd:d7:d6:fb:15:3a:d5:25:47:68:f8:18:b5:23:74:7f:5a:
a0:f7:40:db:e4:63:d4:77:1c:d9:fe:14:f0:84:05:09:90:cb:
87:dd:f4:99:68:a2:d3:1d:05:27:99:20:1d:c3:ea:59:4a:6d:
47:d3:1e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 06:55:53 2025 by rpki-client on console.sobornost.net