Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a3a2f33322d3334203d3e20323734363437.roa
File: 323830343a393138383a3a2f33322d3334203d3e20323734363437.roa (raw, json)
Hash identifier: SzOlfsswc8GeVrjYzfe1xiVTQLZgC+4H7gy02X0ViCE=
Subject key identifier: 9C:8D:35:14:91:24:DF:8C:63:2C:05:41:72:D1:BE:ED:95:C2:C5:AC
Certificate issuer: /CN=CC28C3C1829243E5DD9053B79F04CA570C54DEEE
Certificate serial: 25BC4EF4BBD84467BB553F0545D8F0D0FF1592EE
Authority key identifier: CC:28:C3:C1:82:92:43:E5:DD:90:53:B7:9F:04:CA:57:0C:54:DE:EE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC28C3C1829243E5DD9053B79F04CA570C54DEEE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a3a2f33322d3334203d3e20323734363437.roa
Signing time: Tue 01 Oct 2024 13:34:28 +0000
ROA not before: Tue 01 Oct 2024 13:29:28 +0000
ROA not after: Tue 30 Sep 2025 13:34:28 +0000
asID: 274647
IP address blocks: 2804:9188::/32 maxlen: 34
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:bc:4e:f4:bb:d8:44:67:bb:55:3f:05:45:d8:f0:d0:ff:15:92:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC28C3C1829243E5DD9053B79F04CA570C54DEEE
Validity
Not Before: Oct 1 13:29:28 2024 GMT
Not After : Sep 30 13:34:28 2025 GMT
Subject: CN=9C8D35149124DF8C632C054172D1BEED95C2C5AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:39:94:16:5b:70:d8:71:8e:17:6d:44:85:fb:
81:0d:3f:5e:e0:d6:59:8f:22:83:20:10:c6:bb:b8:
e0:fa:02:dd:5a:43:98:8d:06:0d:be:26:5f:d4:9e:
2f:8a:5f:e2:a0:fa:0d:ae:fd:ac:e7:ca:0a:98:df:
92:65:00:d0:ca:a7:e7:8a:f4:14:70:d7:b9:57:f9:
1d:a6:05:9c:29:13:e7:d7:23:26:5b:db:00:97:9a:
bf:d1:4e:1f:46:e3:5a:b5:fc:ff:b9:72:12:7a:f8:
30:39:cc:e0:36:eb:31:5a:27:ba:9c:31:52:65:da:
9b:11:cf:94:e0:5f:67:15:d2:25:1d:3e:e0:d0:8a:
66:47:ba:75:10:75:92:79:44:69:ae:47:dd:c0:0e:
92:14:b1:fb:50:f7:03:01:db:a3:67:6e:11:88:d8:
ef:01:85:27:f5:d5:10:98:09:46:66:9a:95:5b:27:
be:2e:52:a2:4c:c3:71:f9:82:b4:9a:b9:25:c1:d6:
38:06:7c:aa:09:22:7e:8a:bc:34:56:64:5b:2a:41:
56:2f:e4:25:59:92:32:82:af:f7:5e:aa:4d:49:13:
5e:c2:f5:af:cf:1d:7a:cd:7d:ed:35:0d:c2:08:8a:
7c:07:e6:8e:17:f8:1f:47:ae:6e:5f:12:c0:47:2b:
f7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8D:35:14:91:24:DF:8C:63:2C:05:41:72:D1:BE:ED:95:C2:C5:AC
X509v3 Authority Key Identifier:
keyid:CC:28:C3:C1:82:92:43:E5:DD:90:53:B7:9F:04:CA:57:0C:54:DE:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/CC28C3C1829243E5DD9053B79F04CA570C54DEEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC28C3C1829243E5DD9053B79F04CA570C54DEEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a3a2f33322d3334203d3e20323734363437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:9188::/32
Signature Algorithm: sha256WithRSAEncryption
b9:24:89:5b:16:81:16:b4:42:c4:40:95:df:cf:da:17:d3:8e:
4e:40:c1:91:2c:50:e1:1c:a9:32:3e:30:3a:ce:bc:39:98:c8:
1c:77:0a:38:00:d1:71:4d:18:5f:aa:ce:06:db:d7:73:19:4d:
25:d7:71:b3:78:6b:6f:d4:3f:07:1e:9a:81:87:27:bf:8a:02:
63:1f:57:d8:b0:8a:c7:8a:51:24:6f:e4:91:2a:c0:65:4e:52:
f2:7a:c5:69:30:86:e4:68:c1:c6:fa:7f:7a:0e:59:7e:64:15:
18:53:28:65:2e:55:3d:90:df:47:40:89:2c:a6:96:fc:f3:15:
e5:3b:f5:82:36:75:9b:0e:85:e3:de:3a:7a:ba:bd:0f:98:f6:
e5:cc:ea:06:d4:6e:7a:2b:7e:bb:70:bd:75:c4:42:bf:7e:76:
5e:d3:0b:3b:71:ec:e5:58:4b:51:b5:53:0a:d2:0b:da:69:18:
a2:cd:ba:e5:ec:2d:93:48:ce:51:06:4e:69:d6:e6:4e:10:45:
75:76:54:55:6b:50:02:00:f2:d2:fe:ea:71:b0:0f:21:03:37:
de:f9:f0:f3:ca:53:af:09:b7:19:c3:e3:07:2b:f5:3a:71:50:
61:44:1c:6a:33:c1:d1:3b:a7:e5:29:86:27:29:9d:5b:72:0f:
bd:bd:f6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 20:02:26 2024 by rpki-client on console-ams.rpki-client.org