Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/323830343a336261383a3a2f33332d3333203d3e20323636313633.roa
File: 323830343a336261383a3a2f33332d3333203d3e20323636313633.roa (raw, json)
Hash identifier: 82imZE+KlN3HPwqC4ek53/W1MHGvlf4jFY5lcdX3IpY=
Subject key identifier: 38:92:35:8D:13:D9:2F:1B:33:EC:2C:74:5B:B9:86:1A:44:24:FA:B8
Certificate issuer: /CN=2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87
Certificate serial: 027BF8126CA36C858976FA3007F8BC3F40039A0D
Authority key identifier: 2B:AF:E0:86:77:92:E7:C6:6C:D4:11:36:79:F3:E9:B7:AD:5F:1E:87
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/323830343a336261383a3a2f33332d3333203d3e20323636313633.roa
Signing time: Fri 20 Dec 2024 21:17:06 +0000
ROA not before: Fri 20 Dec 2024 21:12:06 +0000
ROA not after: Fri 19 Dec 2025 21:17:06 +0000
asID: 266163
IP address blocks: 2804:3ba8::/33 maxlen: 33
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:7b:f8:12:6c:a3:6c:85:89:76:fa:30:07:f8:bc:3f:40:03:9a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87
Validity
Not Before: Dec 20 21:12:06 2024 GMT
Not After : Dec 19 21:17:06 2025 GMT
Subject: CN=3892358D13D92F1B33EC2C745BB9861A4424FAB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cc:c2:81:e7:eb:ea:06:49:31:b6:fe:fa:1d:
64:1f:e4:e5:73:e1:12:d7:b4:5b:1a:b1:4a:5b:1a:
42:40:73:61:73:af:23:dc:2c:71:80:a5:98:16:b6:
d9:14:57:8a:e1:04:e5:56:c6:af:9f:81:bb:e9:4c:
07:06:22:62:7e:c5:b8:8c:47:f1:b3:a8:d4:56:0b:
fc:46:27:2c:cf:15:ce:c3:a7:23:cf:2b:2f:28:e6:
4d:d3:14:81:12:1f:7b:a4:21:25:8f:a1:fe:2b:17:
de:9d:fd:48:f2:45:4a:a4:02:0f:0d:1f:8a:da:20:
3d:64:72:d0:61:4d:63:84:5f:1e:6b:a4:92:4b:01:
dc:80:49:8d:30:25:86:de:5a:fa:03:68:6c:11:a4:
85:08:ff:f7:46:1e:30:f2:fb:eb:03:44:2b:04:84:
fe:f5:89:d5:c0:95:db:ec:d0:65:1b:74:c1:b9:d1:
3e:98:ce:ee:25:f0:02:c1:d6:60:3f:a9:21:06:71:
60:32:09:5f:7e:41:2e:10:b3:6b:10:5f:94:83:ad:
f1:66:38:ea:b8:30:55:33:6e:6e:50:6f:60:78:6e:
00:d0:5b:0c:51:6f:35:fa:9b:6a:bb:d8:87:bf:fc:
77:d0:20:ab:00:a0:16:4c:36:2e:16:8e:dc:ba:11:
2f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:92:35:8D:13:D9:2F:1B:33:EC:2C:74:5B:B9:86:1A:44:24:FA:B8
X509v3 Authority Key Identifier:
keyid:2B:AF:E0:86:77:92:E7:C6:6C:D4:11:36:79:F3:E9:B7:AD:5F:1E:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/323830343a336261383a3a2f33332d3333203d3e20323636313633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3ba8::/33
Signature Algorithm: sha256WithRSAEncryption
3d:d4:85:d7:6c:84:a6:02:b4:c3:14:11:bf:83:92:5a:0b:4b:
52:d5:f0:71:04:5d:58:66:3f:2b:dc:f3:00:1e:2e:48:3a:e6:
6c:e5:14:99:47:67:8d:a1:03:e5:b5:03:db:f8:11:3d:78:05:
3c:64:54:70:f7:7e:35:4a:67:71:ee:f7:61:7e:a3:78:0c:16:
30:2f:f7:db:63:c6:74:77:f3:d3:e5:b1:08:1d:66:0d:e0:3d:
8d:f6:66:c4:c7:44:90:28:7a:96:7c:3c:01:bb:c7:d7:f0:9b:
e1:40:9f:7e:1a:54:5d:2f:22:61:ba:4d:2e:93:f1:b6:a8:94:
38:41:e8:41:ea:25:2e:5b:05:94:c3:20:33:ae:40:40:6c:8c:
35:7d:f5:db:d7:81:4b:f4:00:a5:e6:77:e6:42:27:34:e1:ba:
62:61:73:19:ee:6a:ae:b5:72:92:ef:6b:9b:0c:cf:76:a0:89:
b1:a7:9b:d6:4d:fa:1d:27:40:d1:62:85:dc:41:ed:db:d8:4c:
83:9e:5e:92:04:a5:30:45:26:f9:2b:c9:ca:a7:38:3c:8d:32:
10:e4:12:8a:71:3b:c2:e0:46:ac:40:8f:49:10:03:47:8c:5f:
f1:f3:c5:16:3c:ed:47:e3:75:d5:91:ee:55:4f:8f:8b:c9:6d:
c5:14:85:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 14:51:02 2025 by rpki-client on console.sobornost.net