Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/323830343a313336383a3a2f33322d3438203d3e20323632383038.roa
File: 323830343a313336383a3a2f33322d3438203d3e20323632383038.roa (raw, json)
Hash identifier: +sQx7dgxQSC43Gz37Mb/5q+bout5P7IpmPmgaI8tzp0=
Subject key identifier: F0:5C:46:E6:38:B7:EB:67:6E:CF:C8:FB:7B:FC:27:7B:EB:86:68:CB
Certificate issuer: /CN=5229C7B75FB4FCE3853F8B9C79AE6749168F4DE2
Certificate serial: 180BEA321668DF99807F2BE6ED72281A9D7F15D5
Authority key identifier: 52:29:C7:B7:5F:B4:FC:E3:85:3F:8B:9C:79:AE:67:49:16:8F:4D:E2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5229C7B75FB4FCE3853F8B9C79AE6749168F4DE2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/323830343a313336383a3a2f33322d3438203d3e20323632383038.roa
Signing time: Tue 02 Jul 2024 13:27:56 +0000
ROA not before: Tue 02 Jul 2024 13:22:56 +0000
ROA not after: Tue 01 Jul 2025 13:27:56 +0000
asID: 262808
IP address blocks: 2804:1368::/32 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:0b:ea:32:16:68:df:99:80:7f:2b:e6:ed:72:28:1a:9d:7f:15:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5229C7B75FB4FCE3853F8B9C79AE6749168F4DE2
Validity
Not Before: Jul 2 13:22:56 2024 GMT
Not After : Jul 1 13:27:56 2025 GMT
Subject: CN=F05C46E638B7EB676ECFC8FB7BFC277BEB8668CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:52:01:d6:5c:89:27:21:b9:84:03:10:cf:d2:
72:97:cb:4a:d4:0d:68:de:f9:d6:ec:d7:c6:45:f6:
04:64:cf:42:f8:1d:85:0a:8b:41:5b:e0:b2:cd:21:
a6:0a:f2:f2:e3:c0:22:d1:43:47:f5:ce:e2:12:cd:
b7:06:e0:0b:18:d7:cd:ee:d0:08:58:94:f0:a2:6d:
be:e3:55:fb:fd:9e:e9:f4:5f:29:9f:82:bb:02:ce:
4f:c5:e4:12:66:14:f8:c5:1d:91:6b:e9:40:ad:34:
76:7a:17:f6:ae:8b:60:16:ad:a0:99:5a:98:cf:53:
95:78:29:68:7e:ff:7f:75:fe:64:04:a2:e6:8a:32:
8b:ee:9b:5f:e3:37:43:b4:a9:b1:f8:fe:39:79:01:
f7:c8:e6:6f:9e:5d:3b:a2:e7:a3:a1:4a:33:f7:7b:
8e:1d:5e:44:54:c8:90:95:c3:f9:cd:1c:f2:bc:79:
41:5a:ca:33:70:fd:14:62:ba:ca:a7:95:32:e3:25:
94:4b:3f:1a:8b:c5:92:5b:f9:ee:fa:37:65:e1:34:
18:57:05:c6:20:66:20:b0:65:83:46:c1:87:bd:6c:
95:af:2d:b0:b5:1b:48:25:6b:91:43:f2:64:a1:cb:
45:fc:fd:04:c3:ca:95:53:f8:95:73:e2:e8:db:7c:
77:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5C:46:E6:38:B7:EB:67:6E:CF:C8:FB:7B:FC:27:7B:EB:86:68:CB
X509v3 Authority Key Identifier:
keyid:52:29:C7:B7:5F:B4:FC:E3:85:3F:8B:9C:79:AE:67:49:16:8F:4D:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/5229C7B75FB4FCE3853F8B9C79AE6749168F4DE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5229C7B75FB4FCE3853F8B9C79AE6749168F4DE2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/323830343a313336383a3a2f33322d3438203d3e20323632383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1368::/32
Signature Algorithm: sha256WithRSAEncryption
2b:9b:ce:80:80:d4:09:fb:89:b0:7a:52:2e:69:e8:31:e2:14:
a4:21:99:82:40:3d:10:e5:8b:cc:39:d3:57:f5:36:df:62:93:
4e:d8:ce:45:6b:d6:09:88:9d:80:7e:57:be:e0:ba:76:bc:66:
43:66:c5:2c:10:04:54:5f:48:34:fa:5f:52:a5:a0:bb:4e:5d:
db:26:cd:d9:f7:98:c4:a9:bd:68:7c:40:e0:d8:d1:1f:e2:b2:
06:9c:5c:9e:55:2b:31:ed:14:dc:11:ce:0c:a9:6f:d3:78:72:
51:0e:8a:5b:c6:15:f2:ce:28:3f:b1:a6:67:b0:0f:25:24:2a:
ab:12:48:20:16:0b:45:e6:21:0e:ca:3a:84:28:25:25:63:4b:
83:ac:e4:b5:f1:f3:a4:33:49:24:45:9e:d9:41:b5:25:cb:6b:
3c:b5:39:f4:23:e8:df:9d:5f:10:b4:b2:b9:01:6c:9d:b6:c4:
36:6b:73:71:b0:30:54:fb:3c:92:58:39:bd:e0:68:dc:63:84:
0c:48:11:32:8a:82:15:33:6f:13:86:d5:30:9b:c7:5c:25:54:
05:44:12:65:c2:90:df:a7:5c:fb:bd:0e:97:15:d9:de:13:2d:
15:45:1b:ec:60:f2:9a:bc:c1:99:66:7b:1c:81:18:f1:d5:d2:
c7:fd:dd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 9 09:19:11 2025 by rpki-client on console.sobornost.net