Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a323430303a3a2f34302d3430203d3e20323637343538.roa
File: 323830343a343164303a323430303a3a2f34302d3430203d3e20323637343538.roa (raw, json)
Hash identifier: BVc99eRHTSQ/bJ6mpQAy1jEwtLQi1MJ3N3FJxnApt4w=
Subject key identifier: 1C:F5:A7:41:F2:78:28:FF:6F:17:E4:B2:5C:FD:90:C4:2F:B0:65:F9
Certificate issuer: /CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
Certificate serial: 70709DE3A2680840B169F7D18219FD2089D84119
Authority key identifier: B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a323430303a3a2f34302d3430203d3e20323637343538.roa
Signing time: Thu 04 Apr 2024 02:07:14 +0000
ROA not before: Thu 04 Apr 2024 02:02:14 +0000
ROA not after: Thu 03 Apr 2025 02:07:14 +0000
asID: 267458
IP address blocks: 2804:41d0:2400::/40 maxlen: 40
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:70:9d:e3:a2:68:08:40:b1:69:f7:d1:82:19:fd:20:89:d8:41:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
Validity
Not Before: Apr 4 02:02:14 2024 GMT
Not After : Apr 3 02:07:14 2025 GMT
Subject: CN=1CF5A741F27828FF6F17E4B25CFD90C42FB065F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:07:bd:40:b2:94:01:c4:33:88:f3:08:13:ce:
23:d9:f7:ac:f3:2d:db:0e:60:64:41:6a:42:92:ac:
4a:1b:f5:05:e1:68:0f:78:a6:50:80:3f:f5:ad:32:
a9:7a:cd:9c:3f:c3:5c:df:2e:42:2d:42:61:e7:ac:
84:ee:b6:98:a2:36:9c:53:9f:bd:8e:92:10:fd:ce:
fc:00:29:ec:ca:ae:79:60:e8:63:53:e4:31:34:07:
06:3b:95:98:aa:0a:41:fe:82:a8:89:d4:05:69:3c:
51:f4:51:cc:7f:de:38:36:bc:8d:c1:69:91:b7:0a:
cc:89:84:6d:15:c9:d4:f1:c1:20:9c:b5:9d:5b:cb:
29:f6:2a:53:c2:5f:c8:d4:14:94:12:cb:27:ba:ea:
77:bc:df:50:0f:32:d8:f7:51:77:c9:f4:66:b1:17:
c3:33:9b:97:89:0e:81:fb:3d:2d:be:90:54:c9:39:
ef:04:1b:65:e5:9b:71:10:10:23:83:1e:52:01:72:
26:c7:a2:b2:22:92:86:93:b9:27:26:35:01:81:54:
16:e3:26:86:25:0e:5c:cb:82:f8:f8:e2:52:65:3d:
5c:1f:72:be:44:41:12:51:2d:e0:dd:e9:65:89:29:
0a:ce:a7:3b:cc:b5:0b:e8:1c:89:96:a6:50:cb:d3:
56:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F5:A7:41:F2:78:28:FF:6F:17:E4:B2:5C:FD:90:C4:2F:B0:65:F9
X509v3 Authority Key Identifier:
keyid:B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a323430303a3a2f34302d3430203d3e20323637343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:41d0:2400::/40
Signature Algorithm: sha256WithRSAEncryption
4d:39:9c:b5:c5:07:40:e0:ec:0c:6b:ce:15:3b:ee:0f:b7:13:
c7:08:a4:42:a8:b9:41:8c:9f:95:32:78:02:9e:32:5e:3f:8a:
a7:bf:6f:6d:fe:6c:68:7f:ff:6a:9c:c1:8e:6e:fd:8f:db:e0:
5c:d6:d3:1c:4f:94:56:44:4d:5e:ae:4e:d2:09:99:fe:3f:67:
f4:c4:73:d2:19:e9:96:e5:78:e5:2e:4d:c7:ea:04:a9:99:fc:
82:60:96:e1:3d:05:65:64:f0:93:66:2e:ba:ab:ab:2a:42:ec:
e1:59:7b:88:7c:85:93:8c:a8:ef:48:f6:60:4d:09:88:d9:0e:
9c:c1:fb:52:44:02:48:8f:c3:bf:a2:ee:b0:17:9f:ab:f9:05:
3a:78:af:59:3b:6b:61:62:b5:89:78:7e:71:83:0b:b8:95:79:
bc:4b:c9:52:c7:bb:47:5e:af:e3:71:da:07:03:b1:56:f0:56:
a9:6e:89:64:df:85:be:e5:d7:b8:03:8a:0a:1d:8b:02:96:da:
79:1c:1d:f2:8e:9c:d2:95:a3:13:9f:9d:87:db:ba:5d:75:8a:
39:15:25:ae:cd:98:c5:12:75:5c:9c:af:53:a6:15:c4:62:bf:
08:36:87:4c:f5:c1:7c:d5:bf:23:3b:59:3e:21:24:5a:aa:3d:
59:c2:bc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 20:23:13 2024 by rpki-client on console-fra.rpki-client.org