Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/1/3133382e3132312e3132302e302f32322d3232203d3e20323634323933.roa
File: 3133382e3132312e3132302e302f32322d3232203d3e20323634323933.roa (raw, json)
Hash identifier: qvYB0/nVoWXkwsU4uhSc30qt2+GeiGeXLv78+sgdEGs=
Subject key identifier: C3:A0:E6:99:8D:6B:C4:02:1D:F7:6C:49:85:BF:6A:17:6D:1F:EC:1D
Certificate issuer: /CN=29D3E0DFE7A631ED085D28B245B431803B99F625
Certificate serial: 4171CDBDDD8FF62F46045F96186E94CED435D27A
Authority key identifier: 29:D3:E0:DF:E7:A6:31:ED:08:5D:28:B2:45:B4:31:80:3B:99:F6:25
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29D3E0DFE7A631ED085D28B245B431803B99F625.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/1/3133382e3132312e3132302e302f32322d3232203d3e20323634323933.roa
Signing time: Thu 04 Apr 2024 16:57:02 +0000
ROA not before: Thu 04 Apr 2024 16:52:02 +0000
ROA not after: Thu 03 Apr 2025 16:57:02 +0000
asID: 264293
IP address blocks: 138.121.120.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:71:cd:bd:dd:8f:f6:2f:46:04:5f:96:18:6e:94:ce:d4:35:d2:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29D3E0DFE7A631ED085D28B245B431803B99F625
Validity
Not Before: Apr 4 16:52:02 2024 GMT
Not After : Apr 3 16:57:02 2025 GMT
Subject: CN=C3A0E6998D6BC4021DF76C4985BF6A176D1FEC1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:78:17:cb:27:1d:e5:8a:53:2c:a6:c8:5f:7a:
b4:27:ee:ca:74:4b:82:dd:f4:0e:b5:cb:dd:5c:f2:
33:27:31:37:c6:0a:d4:b3:a5:19:a1:32:d9:eb:9f:
ee:8c:53:e1:8c:7a:86:f3:10:55:b4:9d:8a:07:71:
6b:91:0b:20:b3:c5:df:da:24:99:d8:7a:e9:a8:b8:
a2:b1:e5:c5:19:54:9e:b3:73:13:73:71:e1:c9:d9:
86:1d:b3:70:d7:33:53:22:d0:9f:f4:13:ba:c3:c7:
5b:6b:44:f0:2f:23:8d:04:ad:8a:91:be:29:72:a3:
f0:ad:ac:41:ef:24:10:60:49:1f:09:b1:87:2d:2b:
8c:29:c7:50:25:f0:44:c5:bd:2e:73:ce:d4:dc:32:
b8:e6:23:16:dd:2a:3d:f3:e6:5e:19:58:86:2e:f7:
f2:43:15:07:a8:10:8d:83:3a:25:ad:37:b6:c8:6a:
bb:65:a5:a0:ed:27:3a:6d:e4:d2:cd:6e:60:b7:26:
5d:5b:81:e0:c1:eb:f8:8a:db:d0:72:c8:c5:e1:c9:
cb:bb:c0:eb:7f:1b:e3:3b:05:15:d3:2e:cd:a2:bc:
d2:1f:fc:84:d9:43:3b:46:71:29:00:54:74:ed:9b:
38:d5:f6:8e:e7:1c:47:32:1a:75:40:4f:e7:ec:e6:
4a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A0:E6:99:8D:6B:C4:02:1D:F7:6C:49:85:BF:6A:17:6D:1F:EC:1D
X509v3 Authority Key Identifier:
keyid:29:D3:E0:DF:E7:A6:31:ED:08:5D:28:B2:45:B4:31:80:3B:99:F6:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/1/29D3E0DFE7A631ED085D28B245B431803B99F625.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29D3E0DFE7A631ED085D28B245B431803B99F625.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/1/3133382e3132312e3132302e302f32322d3232203d3e20323634323933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.120.0/22
Signature Algorithm: sha256WithRSAEncryption
75:bd:54:db:99:9c:0f:52:28:95:b8:8f:54:0b:e4:33:32:9a:
53:2a:e9:61:c3:6a:eb:8f:2b:16:8c:6d:01:01:ed:56:2e:dd:
32:05:a8:c8:73:48:e3:b5:c6:5a:8a:a3:74:7d:ce:94:40:57:
76:fd:29:7d:9d:54:f3:c0:6b:ef:2d:bc:dc:ae:0f:93:22:c6:
92:c6:d1:93:3d:b5:f7:7d:f5:87:a4:69:d7:3c:fd:5b:8b:f8:
30:f4:d1:3b:b1:68:32:34:f2:76:35:f9:97:34:2e:19:e0:fb:
a5:69:0e:54:23:3e:49:52:24:b5:5c:6f:99:2e:f4:3c:19:0a:
4d:be:f8:82:1a:09:f3:85:01:c3:1a:08:b7:2a:08:b0:3a:b4:
ba:00:fe:a2:7d:e3:b4:d3:f5:6d:0c:5a:ea:bb:90:87:56:bc:
25:49:d4:50:d2:05:2f:f6:7f:0b:7d:82:fe:9f:e4:1a:05:6b:
35:b4:2d:93:82:85:ba:52:63:4c:9e:28:42:bb:be:d3:12:61:
8f:dc:23:61:61:4b:35:a1:e7:a9:f3:87:23:6e:ca:4e:69:24:
69:04:ab:d4:72:3f:1b:24:13:1b:0c:dc:86:55:e0:3a:9f:d3:
2f:4a:1d:91:e0:ee:cf:fe:7a:52:1d:db:a0:17:b7:af:33:28:
2d:79:9d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 21:45:04 2024 by rpki-client on console-ams.rpki-client.org