Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/1/323830343a323561383a3a2f33332d3333203d3e20323634323933.roa
File: 323830343a323561383a3a2f33332d3333203d3e20323634323933.roa (raw, json)
Hash identifier: B3PJ0JGyBS0KiZE+uBw5X7PyVAWMPfPciq+h/nv9m1c=
Subject key identifier: 74:DD:DA:4E:FF:22:D5:A7:26:BD:32:46:4A:70:97:8D:05:87:83:D2
Certificate issuer: /CN=29D3E0DFE7A631ED085D28B245B431803B99F625
Certificate serial: 60AAC3C549FF3EAC0C566CAB5CEA7B814B8D5166
Authority key identifier: 29:D3:E0:DF:E7:A6:31:ED:08:5D:28:B2:45:B4:31:80:3B:99:F6:25
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29D3E0DFE7A631ED085D28B245B431803B99F625.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/1/323830343a323561383a3a2f33332d3333203d3e20323634323933.roa
Signing time: Thu 04 Apr 2024 16:57:02 +0000
ROA not before: Thu 04 Apr 2024 16:52:02 +0000
ROA not after: Thu 03 Apr 2025 16:57:02 +0000
asID: 264293
IP address blocks: 2804:25a8::/33 maxlen: 33
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:aa:c3:c5:49:ff:3e:ac:0c:56:6c:ab:5c:ea:7b:81:4b:8d:51:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29D3E0DFE7A631ED085D28B245B431803B99F625
Validity
Not Before: Apr 4 16:52:02 2024 GMT
Not After : Apr 3 16:57:02 2025 GMT
Subject: CN=74DDDA4EFF22D5A726BD32464A70978D058783D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:56:be:aa:f3:ec:fd:ef:b6:93:e7:b9:3e:12:
c1:90:fb:cb:fb:44:13:d2:ba:51:72:f0:c9:60:eb:
d3:a2:70:ac:1e:73:d6:33:3e:a6:ea:84:78:4d:74:
80:a9:b3:29:54:bf:97:33:40:15:c5:77:8d:75:67:
cd:25:a5:2a:2f:5e:28:12:a2:39:86:c2:cf:03:0f:
df:21:13:05:27:12:94:a1:66:d8:2b:d0:39:0e:4d:
1a:2a:c0:24:31:d4:a2:5b:71:b7:bd:c2:57:36:7d:
46:19:d4:de:f0:76:8a:68:b1:20:35:f5:5e:7a:be:
a3:88:6a:e6:3c:6e:b0:a7:d8:fa:6d:9a:fa:1f:71:
db:07:52:7b:d3:88:03:64:b4:fc:48:36:4e:76:a2:
a7:6e:b2:f0:b1:12:7b:c9:88:fc:de:5d:86:c5:b6:
38:a1:9a:59:d7:61:56:65:ab:93:5b:9d:e9:9e:ed:
94:31:ef:3f:e0:68:83:51:8a:fb:fe:2d:02:63:15:
49:73:e3:90:c6:ce:95:63:40:c6:f5:0f:dd:b6:90:
a1:62:b3:c4:2a:0d:67:b4:64:1f:31:87:a8:70:a5:
a7:20:b8:ae:02:f3:63:52:84:84:31:3b:08:b1:5b:
f3:67:ce:73:96:ab:8e:e7:99:e0:73:8b:a1:b9:d2:
71:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DD:DA:4E:FF:22:D5:A7:26:BD:32:46:4A:70:97:8D:05:87:83:D2
X509v3 Authority Key Identifier:
keyid:29:D3:E0:DF:E7:A6:31:ED:08:5D:28:B2:45:B4:31:80:3B:99:F6:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/1/29D3E0DFE7A631ED085D28B245B431803B99F625.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29D3E0DFE7A631ED085D28B245B431803B99F625.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/1/323830343a323561383a3a2f33332d3333203d3e20323634323933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:25a8::/33
Signature Algorithm: sha256WithRSAEncryption
ac:82:58:6e:80:da:0a:d5:d3:f6:ec:4e:73:d2:cd:cd:a2:d0:
ea:5c:4d:24:a3:80:b5:24:2b:6d:93:24:63:30:2a:0d:ba:1f:
ca:46:00:34:23:66:48:3f:aa:fd:1d:02:e9:25:b1:f7:1c:71:
13:5a:ff:7c:e9:51:47:22:42:bb:6c:f6:33:6b:af:9c:c8:eb:
87:53:33:c9:df:76:d7:9d:1b:64:e3:76:43:f1:2f:14:b3:e1:
74:12:eb:b6:91:60:fb:db:51:55:73:68:84:36:6d:cf:55:9f:
4e:5a:44:7c:f3:6d:a2:ef:d0:65:47:b4:d2:7a:74:59:90:49:
fc:92:d3:de:56:bc:92:cd:87:19:49:8d:f6:5e:0d:f2:af:b8:
7e:45:ff:6c:09:30:5a:04:cd:a4:73:2b:04:f8:26:a7:4a:34:
56:5a:c1:5a:91:f0:c0:c6:c1:ce:89:01:df:a8:1d:b2:7d:0c:
d0:a5:71:7f:b9:67:a3:ce:94:36:90:cc:36:14:2c:93:09:f9:
17:1b:8f:7e:90:94:d8:ce:93:05:1a:b9:24:aa:dd:d0:6e:f6:
0b:fa:ef:e6:02:7b:1a:2f:4f:60:6d:ce:56:23:b3:66:69:b6:
c7:b8:74:be:f5:5a:20:49:3c:d5:13:6b:b2:a6:83:a9:70:99:
86:64:71:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 20:49:38 2024 by rpki-client on console-fra.rpki-client.org