Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653430303a3a2f34302d3430203d3e20323633363132.roa
File: 323830343a6666633a653430303a3a2f34302d3430203d3e20323633363132.roa (raw, json)
Hash identifier: NWA8Js3o+JoS5eONovkG+xBZbdMtA+YqgMgEQ8yresM=
Subject key identifier: 41:A8:24:EC:0E:E0:A0:6A:86:8D:D7:1A:3D:02:E4:8D:41:9C:AB:48
Certificate issuer: /CN=4BA590AB49324CA51E7274BA95C792A99E6E54DA
Certificate serial: 09B46EE674FADF07FBA3AD353B9CB1C4C0173941
Authority key identifier: 4B:A5:90:AB:49:32:4C:A5:1E:72:74:BA:95:C7:92:A9:9E:6E:54:DA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BA590AB49324CA51E7274BA95C792A99E6E54DA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653430303a3a2f34302d3430203d3e20323633363132.roa
Signing time: Mon 01 Jan 2024 11:29:47 +0000
ROA not before: Mon 01 Jan 2024 11:24:47 +0000
ROA not after: Mon 30 Dec 2024 11:29:47 +0000
asID: 263612
IP address blocks: 2804:ffc:e400::/40 maxlen: 40
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:b4:6e:e6:74:fa:df:07:fb:a3:ad:35:3b:9c:b1:c4:c0:17:39:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BA590AB49324CA51E7274BA95C792A99E6E54DA
Validity
Not Before: Jan 1 11:24:47 2024 GMT
Not After : Dec 30 11:29:47 2024 GMT
Subject: CN=41A824EC0EE0A06A868DD71A3D02E48D419CAB48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0d:37:34:30:a5:84:43:86:95:ca:e5:97:43:
bd:ea:2b:6e:a8:cc:35:22:4b:66:8f:5d:70:b4:45:
6d:e2:a7:9d:92:b6:3f:1d:c3:7e:ee:60:f8:c1:76:
e7:00:7c:ac:41:13:12:32:62:57:ae:b2:63:7b:96:
34:bb:84:c7:0e:97:f6:4e:3a:e6:7a:cb:6a:e5:af:
60:ff:bc:6b:1b:bf:15:cd:f2:a0:e6:3b:0c:c3:80:
ec:5d:b6:37:2f:28:0e:b6:53:09:2a:46:fe:96:4b:
2d:96:d5:09:99:17:d5:6f:63:02:93:63:52:df:0e:
ee:17:3a:0f:68:04:77:25:3f:7e:4b:77:88:a9:09:
58:d1:b3:e3:94:92:07:78:7a:24:df:f5:21:f0:a5:
3a:68:57:14:a8:8b:9a:e0:73:3a:4b:b6:a9:64:b7:
d6:a4:89:ad:34:63:15:fa:e1:09:25:9e:5f:25:aa:
e7:99:81:96:dd:5a:17:d6:13:34:4f:c8:d9:9c:40:
51:7b:46:f4:0b:d3:89:07:a4:ad:6e:c3:f2:f0:f9:
b7:3c:08:4c:b4:b3:24:20:61:37:a6:1b:2e:9e:62:
58:1a:95:39:1b:00:1d:9e:99:4b:4c:ca:1f:a5:d7:
6e:2a:f8:93:65:4b:e1:fd:70:d0:bf:9d:36:7e:0b:
44:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A8:24:EC:0E:E0:A0:6A:86:8D:D7:1A:3D:02:E4:8D:41:9C:AB:48
X509v3 Authority Key Identifier:
keyid:4B:A5:90:AB:49:32:4C:A5:1E:72:74:BA:95:C7:92:A9:9E:6E:54:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/4BA590AB49324CA51E7274BA95C792A99E6E54DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BA590AB49324CA51E7274BA95C792A99E6E54DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653430303a3a2f34302d3430203d3e20323633363132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:ffc:e400::/40
Signature Algorithm: sha256WithRSAEncryption
3b:d1:dd:b6:9b:26:dc:18:d3:73:92:22:d8:87:6a:36:7b:9d:
77:5d:16:0a:2c:16:0c:bc:8e:75:1c:11:43:bb:59:78:f6:9a:
24:4a:76:8e:3d:a2:50:8a:b3:64:54:a3:df:98:0b:d8:7f:4f:
40:31:a2:99:e0:2f:16:b3:18:69:19:ea:3c:5a:ed:34:e8:0c:
08:5c:ed:d1:83:a7:f8:e4:26:ff:93:73:df:97:28:6d:dd:f1:
83:54:a9:d4:73:29:22:f9:03:3c:67:90:87:b0:af:d9:79:0f:
82:6c:08:2c:a7:00:7b:d2:fe:e2:af:fe:b3:11:87:52:42:2d:
21:04:64:bf:64:0d:40:a9:6f:c3:47:9a:96:c0:0a:f9:50:f9:
e1:12:0c:4e:de:79:de:c2:bb:d7:5d:f0:70:19:be:0f:3f:4e:
7c:36:ee:78:70:7a:bb:dc:59:4b:3e:09:e1:4c:0e:54:e6:f1:
ac:59:9b:ce:61:e4:d5:79:c4:4a:5e:69:6f:d4:6f:fe:87:6a:
c9:27:b5:eb:1b:46:a4:42:0e:89:41:83:55:87:4e:85:88:38:
a2:72:9a:9c:7d:66:68:81:99:52:04:fa:1b:61:33:f7:0c:cb:
61:04:0c:4d:da:ca:c9:0c:6a:90:02:74:34:a9:71:b2:fe:90:
ec:a2:85:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 19:00:50 2024 by rpki-client on console-fra.rpki-client.org