Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/323830343a316564633a383030303a3a2f33332d3333203d3e20323634343530.roa
File: 323830343a316564633a383030303a3a2f33332d3333203d3e20323634343530.roa (raw, json)
Hash identifier: ydUp6edyEIDRZdlmjVaongQP61IkrDqyNGB6zT8Q++s=
Subject key identifier: BE:0F:64:68:B3:43:DF:64:41:A5:F3:B8:8E:4C:5F:5A:14:A1:80:F3
Certificate issuer: /CN=02CB202EE7C41540BCFD281A5726F4BB2FACE50F
Certificate serial: 22584A4DA54285FFF0C1DFD323A4D5EF563909DE
Authority key identifier: 02:CB:20:2E:E7:C4:15:40:BC:FD:28:1A:57:26:F4:BB:2F:AC:E5:0F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/323830343a316564633a383030303a3a2f33332d3333203d3e20323634343530.roa
Signing time: Fri 31 Jan 2025 18:08:55 +0000
ROA not before: Fri 31 Jan 2025 18:03:55 +0000
ROA not after: Fri 30 Jan 2026 18:08:55 +0000
asID: 264450
IP address blocks: 2804:1edc:8000::/33 maxlen: 33
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:58:4a:4d:a5:42:85:ff:f0:c1:df:d3:23:a4:d5:ef:56:39:09:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02CB202EE7C41540BCFD281A5726F4BB2FACE50F
Validity
Not Before: Jan 31 18:03:55 2025 GMT
Not After : Jan 30 18:08:55 2026 GMT
Subject: CN=BE0F6468B343DF6441A5F3B88E4C5F5A14A180F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:65:79:44:95:2c:73:7c:25:1e:e6:5e:ea:76:
90:6f:f1:5f:19:59:5f:c9:97:ed:fe:b3:49:d1:d6:
05:32:b8:e1:fe:45:a6:14:8d:ea:d1:4a:f8:55:a4:
10:f7:95:6c:96:0c:e5:e5:89:20:f6:df:e5:32:97:
02:7f:6a:ca:2e:c8:92:d6:dc:f9:1a:1c:ec:6a:89:
26:50:f4:72:e7:f2:ae:c4:fa:3f:02:30:17:c4:11:
71:f9:67:40:bf:58:ed:5a:c8:2d:2a:84:12:ae:b1:
d5:02:16:b4:48:23:53:ae:96:e6:87:62:99:a9:63:
01:6a:0f:5d:b1:33:0f:c1:cf:23:b1:90:1b:81:59:
b4:c9:a4:0a:d1:10:29:31:78:b6:33:a4:05:2a:71:
a3:24:28:0a:e7:54:69:52:5f:82:a2:ea:ac:69:0a:
8e:7b:d5:23:4d:69:de:a5:d8:97:2c:46:8d:a3:c4:
fe:33:94:af:5a:9e:85:7f:17:b2:5f:e8:b5:f0:fa:
28:f7:cd:e2:ac:ff:01:3e:ab:62:94:5a:2f:00:70:
94:21:e4:18:eb:5e:b4:b2:35:7c:25:32:0f:66:f7:
8d:89:db:5e:f9:c3:1a:3c:de:74:c9:6c:9d:46:ae:
9d:69:b3:f7:2d:a9:31:d7:d6:c9:c1:ed:d1:8e:21:
7f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0F:64:68:B3:43:DF:64:41:A5:F3:B8:8E:4C:5F:5A:14:A1:80:F3
X509v3 Authority Key Identifier:
keyid:02:CB:20:2E:E7:C4:15:40:BC:FD:28:1A:57:26:F4:BB:2F:AC:E5:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/323830343a316564633a383030303a3a2f33332d3333203d3e20323634343530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1edc:8000::/33
Signature Algorithm: sha256WithRSAEncryption
99:3b:07:c1:0c:72:b2:39:f2:ca:90:4d:30:73:be:2b:48:4c:
58:8c:27:6b:ce:fb:62:49:4d:aa:32:16:b6:5e:eb:58:fa:62:
b1:a1:00:91:96:3e:23:b2:19:66:15:16:02:55:44:5a:5b:45:
e8:a0:d0:40:d3:0e:2e:9e:86:f9:ab:8c:d0:a9:a9:27:76:be:
f9:58:20:09:6a:90:d7:87:62:14:24:7c:35:f9:e4:91:44:68:
b6:d8:72:1e:04:cb:27:c0:93:51:55:3e:c6:34:63:be:c3:a0:
46:1c:7a:b7:66:07:ff:69:19:7a:f1:da:78:68:51:4e:f4:3a:
72:f7:e3:8a:8c:a8:30:14:63:be:9b:88:08:2c:f4:84:fc:d6:
d9:c8:40:e5:b6:a5:ba:de:6f:3a:3f:75:d6:cc:65:d4:75:1c:
8e:06:40:0b:dd:8a:ff:5f:f6:ee:c1:27:02:0b:98:26:ec:70:
c9:05:ae:bd:18:af:25:cc:2d:20:13:cc:4f:ad:f7:04:c0:a9:
8e:d2:92:36:7d:a0:ad:b0:8b:18:69:23:3d:68:ea:c8:15:1d:
e0:4c:48:f8:f8:05:8b:71:19:8b:af:33:89:56:e6:9e:3a:6d:
2b:4c:14:19:fb:1d:cb:ea:6b:14:c5:78:5d:90:a5:c5:e5:c3:
22:de:16:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 1 22:59:35 2025 by rpki-client on console.sobornost.net