Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/323830343a323435383a3a2f33322d3430203d3e20323634323136.roa
File: 323830343a323435383a3a2f33322d3430203d3e20323634323136.roa (raw, json)
Hash identifier: byHrNpnwxsAw98a4pcVFPf0JrIwf7PA7IAy5cjY92OA=
Subject key identifier: F8:34:4B:8A:F2:61:4D:BB:AC:C6:7F:00:B6:6C:D7:1C:63:2C:30:B6
Certificate issuer: /CN=9CD7A42DB88BCBC28213A8DEEBF9492B2A41D331
Certificate serial: 22C6D0E792B178E29073B20B758D59D7E2B60543
Authority key identifier: 9C:D7:A4:2D:B8:8B:CB:C2:82:13:A8:DE:EB:F9:49:2B:2A:41:D3:31
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CD7A42DB88BCBC28213A8DEEBF9492B2A41D331.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/323830343a323435383a3a2f33322d3430203d3e20323634323136.roa
Signing time: Wed 22 May 2024 14:21:46 +0000
ROA not before: Wed 22 May 2024 14:16:46 +0000
ROA not after: Wed 21 May 2025 14:21:46 +0000
asID: 264216
IP address blocks: 2804:2458::/32 maxlen: 40
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:c6:d0:e7:92:b1:78:e2:90:73:b2:0b:75:8d:59:d7:e2:b6:05:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CD7A42DB88BCBC28213A8DEEBF9492B2A41D331
Validity
Not Before: May 22 14:16:46 2024 GMT
Not After : May 21 14:21:46 2025 GMT
Subject: CN=F8344B8AF2614DBBACC67F00B66CD71C632C30B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:33:69:e3:51:b0:85:9a:fc:66:1c:b7:25:77:
b0:9d:a7:c9:e5:37:ba:88:44:52:45:ab:68:9d:b5:
13:aa:29:44:6e:27:2f:c4:57:43:35:07:6c:36:84:
26:0e:9b:b8:44:eb:1c:a2:86:cc:62:b5:73:ed:3d:
f4:54:22:d3:51:c7:67:cc:01:b0:1e:d8:33:62:d1:
a4:bf:de:22:4f:d4:04:14:bf:88:c4:15:9b:71:4f:
af:0f:18:a1:05:55:52:c5:ca:00:87:15:db:df:35:
93:fd:b4:42:b9:45:b8:8c:4a:34:17:89:78:ea:19:
b3:6a:7d:30:11:95:b1:02:68:d7:cf:f1:b7:7f:c1:
a9:d7:a4:6c:02:9d:30:8b:6c:54:f3:4e:5b:37:27:
c9:5d:26:0f:49:ce:af:b9:22:c2:56:f8:b0:37:12:
f3:e9:d8:d6:74:cd:5d:ae:f6:18:88:70:7a:e4:c5:
22:b6:f4:51:de:6a:0b:66:d7:5d:48:06:8c:76:21:
1a:9b:78:31:af:f2:19:56:fa:5d:44:96:5c:ef:0e:
d6:fa:bf:c9:e0:86:92:97:80:b8:96:6b:b3:3b:aa:
33:77:3c:13:54:df:ae:50:7e:9c:96:ea:54:5f:3a:
4f:7b:53:e5:2c:58:d1:88:fe:69:7d:30:38:5e:af:
68:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:34:4B:8A:F2:61:4D:BB:AC:C6:7F:00:B6:6C:D7:1C:63:2C:30:B6
X509v3 Authority Key Identifier:
keyid:9C:D7:A4:2D:B8:8B:CB:C2:82:13:A8:DE:EB:F9:49:2B:2A:41:D3:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/9CD7A42DB88BCBC28213A8DEEBF9492B2A41D331.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CD7A42DB88BCBC28213A8DEEBF9492B2A41D331.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/323830343a323435383a3a2f33322d3430203d3e20323634323136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2458::/32
Signature Algorithm: sha256WithRSAEncryption
2b:1e:3c:7f:f2:10:4c:fc:cf:d3:d1:ae:e9:d1:1b:a4:aa:62:
be:b7:92:ec:e5:ca:07:fb:5e:0b:17:2c:8a:5e:f9:82:89:c6:
b6:2c:22:9c:37:5d:ea:f7:1e:93:b0:1c:05:36:fa:7a:75:7b:
da:98:b5:58:d1:58:bb:04:29:5f:e9:ce:e2:9a:12:6d:66:dd:
92:5d:fa:14:aa:7f:6b:d4:69:54:40:da:93:6e:8d:76:1c:1c:
4f:ff:c7:3b:d0:99:79:4b:12:4b:dd:2e:d2:1b:16:71:f9:88:
f7:75:28:4b:86:c5:56:d7:ea:ea:79:de:37:e3:2d:3c:95:90:
48:0f:65:c4:76:ad:d0:32:98:d7:f4:cc:2b:95:e9:95:6d:ec:
e7:66:d6:23:f3:d0:41:2c:13:1b:1f:b1:17:15:7c:69:bb:77:
97:82:cc:42:e9:9f:c8:4a:b8:62:9b:d7:a9:dc:26:c9:5e:18:
3e:e2:10:28:45:8c:04:b6:6f:f9:98:3e:e8:9f:51:06:39:6d:
3a:77:48:3f:34:3a:99:93:fe:77:5b:6a:ee:6e:26:0d:f4:d8:
d1:ba:8d:a6:bd:57:a8:25:d1:af:2f:3b:c7:25:6d:e3:f7:4f:
0d:65:e0:a4:9f:16:c5:5f:3c:98:49:81:1e:c9:fa:5e:80:fe:
04:e0:28:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 17:22:25 2024 by rpki-client on console-fra.rpki-client.org