Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/1/323830343a326364343a3a2f33322d3438203d3e20323635323436.roa
File: 323830343a326364343a3a2f33322d3438203d3e20323635323436.roa (raw, json)
Hash identifier: tP8G7C/yXY7Bgi+d3kYpBX5TCu+NmJYbAOzoaQPSch0=
Subject key identifier: 02:AF:8A:88:65:10:D6:3A:CE:88:88:21:4E:0B:F4:3A:8B:AE:3E:A0
Certificate issuer: /CN=08E27FA181C10E30D23F9259B9BC195FB3FBABD2
Certificate serial: 3218B0D3148E4AC853E490946C8EC62C1D52769D
Authority key identifier: 08:E2:7F:A1:81:C1:0E:30:D2:3F:92:59:B9:BC:19:5F:B3:FB:AB:D2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08E27FA181C10E30D23F9259B9BC195FB3FBABD2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/1/323830343a326364343a3a2f33322d3438203d3e20323635323436.roa
Signing time: Thu 04 Apr 2024 12:40:35 +0000
ROA not before: Thu 04 Apr 2024 12:35:35 +0000
ROA not after: Thu 03 Apr 2025 12:40:35 +0000
asID: 265246
IP address blocks: 2804:2cd4::/32 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:18:b0:d3:14:8e:4a:c8:53:e4:90:94:6c:8e:c6:2c:1d:52:76:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08E27FA181C10E30D23F9259B9BC195FB3FBABD2
Validity
Not Before: Apr 4 12:35:35 2024 GMT
Not After : Apr 3 12:40:35 2025 GMT
Subject: CN=02AF8A886510D63ACE8888214E0BF43A8BAE3EA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6c:cb:07:80:1f:84:80:bb:cf:ef:55:0f:9f:
89:d3:89:5c:1a:4c:24:d6:ee:3f:4f:98:fc:6c:1a:
ef:1e:9d:10:4a:13:e9:fe:d8:ea:24:3f:21:37:a0:
70:30:1b:6c:04:4e:56:26:1b:87:d3:25:08:4b:b4:
8f:03:9c:c7:1e:3a:98:ed:a4:76:5b:2c:70:78:72:
23:ec:c9:df:27:92:03:31:5f:ce:2c:c1:64:24:f1:
e5:73:f4:e7:88:b2:8d:99:ed:1e:2d:f7:71:85:38:
0a:93:03:19:73:8e:d2:ba:42:ec:0a:7e:41:5b:07:
18:89:ed:2f:fd:2a:90:7d:d0:1a:df:8c:d5:32:94:
61:73:c7:11:fb:ab:50:be:f6:14:2a:2a:e8:1f:ad:
f7:3a:54:8b:de:a9:7f:e1:fd:4b:a5:18:76:5a:e8:
c5:c4:cd:b4:ca:2c:0d:e6:e8:7f:8c:d8:c5:92:e8:
4a:02:c8:0d:48:95:b8:bf:5f:1e:d3:11:d5:fe:90:
ef:72:0d:29:41:f0:f2:86:a6:17:55:32:57:21:e3:
62:28:f4:a9:b4:1a:52:35:50:0f:ac:af:c0:52:8c:
b0:d6:de:87:fa:c8:1f:30:ba:71:81:f4:6e:e0:f4:
f4:2a:c0:be:88:cd:1c:74:97:7e:84:fe:37:00:75:
b3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AF:8A:88:65:10:D6:3A:CE:88:88:21:4E:0B:F4:3A:8B:AE:3E:A0
X509v3 Authority Key Identifier:
keyid:08:E2:7F:A1:81:C1:0E:30:D2:3F:92:59:B9:BC:19:5F:B3:FB:AB:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/1/08E27FA181C10E30D23F9259B9BC195FB3FBABD2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08E27FA181C10E30D23F9259B9BC195FB3FBABD2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/1/323830343a326364343a3a2f33322d3438203d3e20323635323436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2cd4::/32
Signature Algorithm: sha256WithRSAEncryption
09:ab:3c:6a:6b:e0:0a:8f:b1:40:e1:ca:a3:82:91:b4:c7:70:
87:77:ea:f9:ad:92:51:b9:fd:cb:87:a0:11:12:ad:f7:c0:ae:
62:ef:82:3a:e0:02:c9:b2:12:ae:02:f2:78:74:7c:5e:94:f9:
bb:1e:04:42:a5:d5:34:09:33:68:84:9c:93:e9:f8:5b:77:d3:
85:fa:6d:ee:45:a9:11:88:86:84:91:43:f7:22:9f:fe:ca:9b:
db:b2:55:cc:c5:26:bb:39:eb:35:1a:5d:1b:05:76:51:64:8d:
61:57:2c:14:fd:c2:58:04:03:ae:d4:b4:c3:3b:e9:90:9c:62:
36:c5:2a:33:69:96:a1:30:0c:9b:74:e8:07:0a:14:73:43:87:
7c:9b:53:d9:d6:ac:33:fc:e4:24:d2:ff:78:88:e0:71:98:b5:
e2:e4:62:2a:d9:20:58:db:06:8b:be:89:2f:ba:57:6b:f2:e8:
f2:f2:17:c8:a1:87:2d:f8:4c:fd:c7:c6:bf:9f:53:57:c4:55:
eb:b2:16:a8:f6:4a:60:ad:1e:9f:3c:f5:78:0f:3a:b8:fd:ba:
33:a2:e4:a1:30:27:5e:f3:85:e9:6a:51:67:2f:5c:6c:39:c5:
3f:e0:f1:28:95:e1:c6:b9:7b:a7:b6:4a:2c:03:02:de:77:0f:
ca:2a:8a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 24 09:28:41 2024 by rpki-client on console-fra.rpki-client.org