Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/323830343a6232383a3a2f33332d3333203d3e203532393434.roa
File: 323830343a6232383a3a2f33332d3333203d3e203532393434.roa (raw, json)
Hash identifier: xBHEB5YbatDT3Mq4ww97FoLv+IDbYxOgBajuP3FGwaQ=
Subject key identifier: D2:35:6E:AD:F1:52:5C:F6:D2:A8:43:CE:34:BA:65:20:C3:58:CB:E0
Certificate issuer: /CN=1733084816F181DADE66CFF006E96DDF853D8218
Certificate serial: 2E77CB048E0AE7C6669DD815E50E2201EFE9AA49
Authority key identifier: 17:33:08:48:16:F1:81:DA:DE:66:CF:F0:06:E9:6D:DF:85:3D:82:18
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1733084816F181DADE66CFF006E96DDF853D8218.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/323830343a6232383a3a2f33332d3333203d3e203532393434.roa
Signing time: Wed 04 Sep 2024 22:45:48 +0000
ROA not before: Wed 04 Sep 2024 22:40:48 +0000
ROA not after: Wed 03 Sep 2025 22:45:48 +0000
asID: 52944
IP address blocks: 2804:b28::/33 maxlen: 33
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:77:cb:04:8e:0a:e7:c6:66:9d:d8:15:e5:0e:22:01:ef:e9:aa:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1733084816F181DADE66CFF006E96DDF853D8218
Validity
Not Before: Sep 4 22:40:48 2024 GMT
Not After : Sep 3 22:45:48 2025 GMT
Subject: CN=D2356EADF1525CF6D2A843CE34BA6520C358CBE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b9:8a:90:00:b4:31:cd:34:b6:a6:82:d7:9c:
92:df:1a:cc:67:06:d4:72:ef:2d:83:23:62:ea:d2:
04:a4:23:2c:b7:66:8a:05:fe:f9:3d:07:d9:30:b8:
ff:35:4e:48:dd:d2:ae:40:1e:85:f5:67:3b:ce:4f:
f9:bb:3a:c2:df:c4:6f:85:ea:3a:06:b8:41:e5:79:
75:14:eb:b1:bd:2e:49:cb:f9:57:e5:05:6d:67:d2:
bb:f1:fe:b2:aa:83:a8:c6:2d:2b:46:93:85:56:b8:
13:ad:8c:48:33:6c:00:46:02:a6:69:24:cd:76:09:
95:4a:81:f4:e5:30:3c:7e:e1:56:ee:0a:b2:98:87:
a0:4e:61:75:14:c7:70:1d:c8:b5:20:44:c7:5e:ee:
06:9e:05:f0:c5:05:db:25:2f:81:be:11:cc:cd:74:
44:17:b3:33:9e:f1:da:80:fc:25:ca:9c:f5:f3:0f:
e1:7e:c6:8e:29:55:3c:43:ac:fd:c0:f9:3b:5d:74:
26:09:02:bd:90:2b:3e:3f:49:15:71:bf:3e:ec:08:
0f:f5:a2:35:7f:1e:2c:c9:83:a2:24:44:bd:15:96:
b0:35:d8:65:f4:5a:44:7b:f2:a8:0c:95:80:b1:c9:
2c:b1:5f:aa:e7:c8:05:12:7a:7c:d6:69:2b:cf:35:
13:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:35:6E:AD:F1:52:5C:F6:D2:A8:43:CE:34:BA:65:20:C3:58:CB:E0
X509v3 Authority Key Identifier:
keyid:17:33:08:48:16:F1:81:DA:DE:66:CF:F0:06:E9:6D:DF:85:3D:82:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/1733084816F181DADE66CFF006E96DDF853D8218.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1733084816F181DADE66CFF006E96DDF853D8218.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/323830343a6232383a3a2f33332d3333203d3e203532393434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:b28::/33
Signature Algorithm: sha256WithRSAEncryption
9e:3e:e5:d3:b4:2e:2f:57:19:18:9e:c4:41:7e:87:86:fc:db:
b5:bb:e0:ca:d5:1e:07:2c:61:35:f0:a9:50:fc:cb:8e:ac:c9:
9a:3f:7a:3f:3b:e9:b3:71:76:76:bd:ee:63:2b:79:be:ad:9d:
56:9e:c9:41:60:8f:f7:17:ce:9f:e6:15:02:86:2d:66:ee:0a:
c0:81:cd:df:54:bf:6e:6b:de:a3:cf:27:0c:de:da:4f:c2:90:
1d:bc:d4:3a:f2:5b:b5:18:61:c9:c2:6a:15:91:ae:c7:d0:5d:
7f:e5:8e:fd:49:2d:84:1d:43:95:64:62:e7:92:ce:4a:5f:5f:
3a:dc:19:50:5a:72:11:88:58:13:2e:83:1d:3e:e5:2e:3b:4a:
75:3b:b4:29:aa:37:0d:db:f2:80:e2:e2:ef:82:ea:b7:08:f9:
32:b4:e8:10:ac:18:1b:71:c4:da:47:4a:a2:f4:76:90:b3:8e:
ca:1e:85:81:d9:9c:08:ed:4f:0e:70:ba:c9:ea:a3:ed:10:fb:
08:02:92:7d:d9:d5:5a:06:df:9f:98:3f:ba:7a:7b:8d:97:ba:
f4:c0:e2:83:45:c5:a8:0c:64:95:0f:54:59:26:6e:04:2a:31:
89:37:80:7a:7a:d6:39:43:3f:0c:b6:ab:c7:45:36:1c:f7:0c:
07:2c:7b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 22 21:49:37 2024 by rpki-client on console.sobornost.net