Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/323830343a326532383a383030303a3a2f33332d3333203d3e20323635333238.roa
File: 323830343a326532383a383030303a3a2f33332d3333203d3e20323635333238.roa (raw, json)
Hash identifier: ZqPoQAcRtJzd4d3tB72wMmA6if+lyPtj7DN2N7jI7zE=
Subject key identifier: 92:4E:A6:06:65:67:13:94:44:D5:A6:61:7E:58:6C:1C:26:3A:64:61
Certificate issuer: /CN=A5ED9321675D2DCFB96C68BC0ACBF4225D536CCF
Certificate serial: 1AE5B48DB47B916753FFD3C3CE4BBF05B1B34163
Authority key identifier: A5:ED:93:21:67:5D:2D:CF:B9:6C:68:BC:0A:CB:F4:22:5D:53:6C:CF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5ED9321675D2DCFB96C68BC0ACBF4225D536CCF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/323830343a326532383a383030303a3a2f33332d3333203d3e20323635333238.roa
Signing time: Thu 28 Nov 2024 12:43:17 +0000
ROA not before: Thu 28 Nov 2024 12:38:17 +0000
ROA not after: Thu 27 Nov 2025 12:43:17 +0000
asID: 265328
IP address blocks: 2804:2e28:8000::/33 maxlen: 33
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:e5:b4:8d:b4:7b:91:67:53:ff:d3:c3:ce:4b:bf:05:b1:b3:41:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5ED9321675D2DCFB96C68BC0ACBF4225D536CCF
Validity
Not Before: Nov 28 12:38:17 2024 GMT
Not After : Nov 27 12:43:17 2025 GMT
Subject: CN=924EA6066567139444D5A6617E586C1C263A6461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2a:89:4e:9c:01:05:05:d3:f0:ed:db:99:13:
e2:64:81:cb:64:13:3d:c7:75:8a:6c:29:92:a2:af:
54:1e:ff:71:13:49:b2:92:0b:ac:21:70:f2:59:84:
e0:18:4b:e6:fb:1b:01:92:23:21:c9:cb:34:67:6f:
c4:bb:e2:40:28:58:c7:f4:02:31:b0:3a:5e:32:b3:
b2:31:8b:43:6f:77:23:7c:3e:59:df:87:59:b4:aa:
02:b1:c7:0b:21:74:63:e3:7c:9d:4e:c1:9d:ab:a8:
95:68:da:1d:43:9d:01:a0:b0:03:fd:cc:f2:52:6b:
fe:14:60:97:e9:29:c7:f0:ab:ba:2b:f8:96:3a:db:
9d:ba:3a:0b:aa:ff:1d:f0:b3:25:f5:73:5d:8e:72:
87:36:43:3b:70:35:51:e0:d7:a9:42:58:b7:02:0a:
37:4c:7d:8b:41:04:ea:8b:d8:0b:ad:57:0d:b3:47:
46:95:89:c2:44:a3:b5:4b:98:8f:a7:39:0d:2e:d4:
32:42:c7:d9:82:2a:ed:45:f8:4b:cf:a9:d1:37:9b:
41:a0:dd:9c:44:f5:d4:f6:27:43:79:22:c5:69:48:
f0:2c:e7:e4:41:7e:11:e0:a8:c7:07:34:ff:78:1f:
f4:e3:c0:8c:70:7d:f4:02:7d:64:c6:d9:e5:16:78:
5e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4E:A6:06:65:67:13:94:44:D5:A6:61:7E:58:6C:1C:26:3A:64:61
X509v3 Authority Key Identifier:
keyid:A5:ED:93:21:67:5D:2D:CF:B9:6C:68:BC:0A:CB:F4:22:5D:53:6C:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/A5ED9321675D2DCFB96C68BC0ACBF4225D536CCF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5ED9321675D2DCFB96C68BC0ACBF4225D536CCF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/323830343a326532383a383030303a3a2f33332d3333203d3e20323635333238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2e28:8000::/33
Signature Algorithm: sha256WithRSAEncryption
c0:8f:fa:40:e1:12:b7:e4:70:2a:72:c3:7b:5c:2d:38:3c:25:
cf:3b:b5:f6:9b:c6:59:2e:d1:fb:d7:48:6b:6e:93:05:90:b2:
ca:d4:50:c9:ca:44:ea:92:af:eb:40:85:b0:73:be:fc:95:be:
4a:46:38:53:41:f8:59:69:89:7f:a9:f2:dc:6e:80:a0:59:80:
fd:29:e5:bf:9d:49:41:d4:14:e6:31:2b:b7:0b:a7:61:82:66:
b0:95:f5:c4:d6:95:ad:4b:53:4c:18:21:af:d1:8a:29:1e:72:
41:a0:1a:f0:d3:c4:25:32:2a:51:7f:c3:ba:db:b7:e5:2d:80:
98:cd:8c:60:0b:2c:3a:3d:44:32:37:a7:f3:38:89:3b:d1:2f:
df:41:c6:d1:6f:5c:32:ed:d3:21:37:4f:44:38:08:35:7d:44:
41:54:98:7c:52:4f:96:dc:46:30:28:2e:2c:ba:39:04:0c:ac:
45:da:dc:b0:cc:2f:d7:f5:3d:07:a2:8d:a8:e1:d4:c3:89:41:
83:ca:5d:94:f6:0d:b1:8a:04:71:4a:e7:83:b4:1a:0e:72:63:
25:d8:9a:a0:1c:9b:de:a5:da:77:91:a7:aa:07:3a:7f:1b:1f:
31:89:78:ef:6d:d1:54:dc:4d:a8:02:8d:3d:9c:48:fe:71:d6:
fb:3b:f8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 9 16:05:28 2024 by rpki-client on console.sobornost.net