Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/1/323830343a343033303a3a2f33322d3438203d3e20323635393433.roa
File: 323830343a343033303a3a2f33322d3438203d3e20323635393433.roa (raw, json)
Hash identifier: +2j5sqgMLauxA/u2ZJapWIAstbSyRYQ5eyjg6vEEY1s=
Subject key identifier: D2:10:63:65:87:14:19:79:D9:17:29:BB:85:09:81:8C:22:36:E9:48
Certificate issuer: /CN=04CB40BCE51610478D7DBEE2C208A3BBFCA716CB
Certificate serial: 7F99FF740546D8018761C292B9263CE539EA40AC
Authority key identifier: 04:CB:40:BC:E5:16:10:47:8D:7D:BE:E2:C2:08:A3:BB:FC:A7:16:CB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CB40BCE51610478D7DBEE2C208A3BBFCA716CB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/1/323830343a343033303a3a2f33322d3438203d3e20323635393433.roa
Signing time: Mon 29 Apr 2024 02:38:13 +0000
ROA not before: Mon 29 Apr 2024 02:33:13 +0000
ROA not after: Mon 28 Apr 2025 02:38:13 +0000
asID: 265943
IP address blocks: 2804:4030::/32 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:99:ff:74:05:46:d8:01:87:61:c2:92:b9:26:3c:e5:39:ea:40:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CB40BCE51610478D7DBEE2C208A3BBFCA716CB
Validity
Not Before: Apr 29 02:33:13 2024 GMT
Not After : Apr 28 02:38:13 2025 GMT
Subject: CN=D210636587141979D91729BB8509818C2236E948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c0:bc:11:fd:77:f5:23:8c:4c:ec:2d:05:57:
97:c2:a7:c3:99:d3:ea:0a:db:a4:22:72:50:c6:50:
6d:9a:ae:ae:56:9b:06:a8:97:3f:8f:6e:43:47:57:
64:87:70:6f:53:ae:7b:aa:f1:a1:d0:89:64:4d:a4:
e9:18:15:67:38:fa:ad:f6:bd:76:03:25:ff:cd:9c:
59:26:cf:75:f5:aa:64:25:ab:98:ae:71:a4:c8:54:
42:3b:a3:48:69:a8:67:c5:18:ff:c7:dd:b9:fd:6f:
e5:73:f6:06:3d:2b:02:d9:55:0b:bc:ee:52:5b:f7:
eb:82:36:21:cc:aa:5e:f2:55:55:55:85:4c:a5:e2:
34:f1:d8:e2:03:40:c4:04:c7:ed:b2:6d:82:c1:81:
39:ee:67:34:e5:8f:b0:0d:ec:cb:b4:5b:f3:1c:47:
19:de:bd:1f:ba:fd:b9:85:6d:f4:b9:b2:81:6e:fe:
96:0d:e9:8c:6a:4e:ea:ea:95:5f:51:e6:3f:54:32:
69:6e:f0:21:05:95:8d:3e:45:c7:4c:8f:0b:e3:e0:
f3:9b:50:f3:8d:94:56:d3:13:87:64:c2:d8:44:4d:
e5:88:47:08:71:2b:b6:1b:41:b1:32:ee:76:07:2e:
c0:77:50:e2:4e:9d:f2:12:3d:c0:38:17:14:61:94:
77:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:10:63:65:87:14:19:79:D9:17:29:BB:85:09:81:8C:22:36:E9:48
X509v3 Authority Key Identifier:
keyid:04:CB:40:BC:E5:16:10:47:8D:7D:BE:E2:C2:08:A3:BB:FC:A7:16:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/1/04CB40BCE51610478D7DBEE2C208A3BBFCA716CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CB40BCE51610478D7DBEE2C208A3BBFCA716CB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/1/323830343a343033303a3a2f33322d3438203d3e20323635393433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4030::/32
Signature Algorithm: sha256WithRSAEncryption
55:15:91:fd:79:25:5f:98:7d:dc:bc:ed:d3:47:e2:1c:f2:05:
2f:cd:1c:3d:c7:5d:48:cb:c4:dc:66:96:f9:d2:f7:c2:e1:09:
c8:c8:3e:61:29:56:84:74:e3:ae:62:63:5b:d8:29:cc:fa:5f:
2d:b7:39:25:c3:4a:ad:38:ca:fb:88:dc:aa:61:3f:c1:24:fb:
99:0c:58:b5:b6:8e:f3:ea:aa:e1:8b:46:c1:9e:e5:a1:77:69:
05:28:9b:a5:6e:2d:8c:c5:7f:01:53:6f:d0:00:8f:25:9f:db:
a2:92:b1:67:2f:39:e5:ce:7d:8c:ff:2b:e4:ce:8c:01:56:c2:
f9:77:db:5a:b1:a7:8a:09:be:8e:9f:63:ed:69:ce:d2:7c:a2:
2f:52:3c:85:22:0e:be:a1:fa:d2:d2:ab:46:32:1e:ef:31:d5:
af:86:32:ad:a5:81:45:0b:fc:c0:d1:07:a5:bb:c3:b9:11:56:
ee:2e:34:11:32:17:30:5c:29:91:3f:cf:fd:ad:74:2d:ff:ce:
3d:25:7e:f3:eb:73:28:8f:a6:47:a0:2a:49:2c:2a:69:6e:a8:
df:f2:1d:ef:83:45:8b:c8:c1:0d:29:60:a3:0e:2f:f7:16:cb:
47:60:61:75:2e:77:c6:cf:b8:76:3e:31:5c:6d:f6:70:26:a0:
31:59:10:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 22:32:25 2024 by rpki-client on console-fra.rpki-client.org