Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Bu7gL29tZj8GwX8KDWYb3cmuuSm3TkJCAs4ojfbaQcBE/0/323830343a353165633a3a2f33322d3334203d3e20323638343835.roa
File: 323830343a353165633a3a2f33322d3334203d3e20323638343835.roa (raw, json)
Hash identifier: i6mNAgeh5sqYDpvn87Q0G6XDjIwLTMPFgoqiSc45sfg=
Subject key identifier: E1:5C:68:A6:24:90:02:6C:CA:55:3A:8E:55:1F:6A:66:9D:72:CA:33
Certificate issuer: /CN=79AAE3955BE77C83AE4C95C5E68F2E975AB0B8E2
Certificate serial: 4EC8F3C002529D3A4E7DDAC1CB0E37B389DC9389
Authority key identifier: 79:AA:E3:95:5B:E7:7C:83:AE:4C:95:C5:E6:8F:2E:97:5A:B0:B8:E2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79AAE3955BE77C83AE4C95C5E68F2E975AB0B8E2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Bu7gL29tZj8GwX8KDWYb3cmuuSm3TkJCAs4ojfbaQcBE/0/323830343a353165633a3a2f33322d3334203d3e20323638343835.roa
Signing time: Mon 13 Nov 2023 17:32:06 +0000
ROA not before: Mon 13 Nov 2023 17:27:06 +0000
ROA not after: Mon 11 Nov 2024 17:32:06 +0000
asID: 268485
IP address blocks: 2804:51ec::/32 maxlen: 34
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:c8:f3:c0:02:52:9d:3a:4e:7d:da:c1:cb:0e:37:b3:89:dc:93:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79AAE3955BE77C83AE4C95C5E68F2E975AB0B8E2
Validity
Not Before: Nov 13 17:27:06 2023 GMT
Not After : Nov 11 17:32:06 2024 GMT
Subject: CN=E15C68A62490026CCA553A8E551F6A669D72CA33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c3:c3:55:20:a9:7f:c3:ad:d6:79:e2:15:52:
5c:4a:63:4b:81:af:45:e4:52:2d:b5:71:04:cb:9e:
bc:b2:63:12:34:67:da:a9:ba:6e:c8:03:16:ee:77:
52:b2:53:7c:77:68:13:21:1e:fa:ac:ac:1a:88:de:
b3:97:3c:32:84:b2:59:a8:1a:a0:ba:36:3c:f8:31:
fb:41:75:99:4d:21:7c:19:b7:b7:2b:01:90:4b:46:
13:df:fa:67:d8:65:bc:74:e0:a4:c3:3b:a0:0d:71:
1a:a7:19:6a:07:64:97:17:8f:b7:66:25:64:8a:49:
e0:77:25:66:77:15:5e:f9:04:78:de:d4:bb:ad:b6:
95:b6:3a:56:28:56:5f:be:3c:46:5a:5c:de:0e:ec:
ee:91:8f:43:fe:e3:a8:7a:35:09:e3:7f:51:4a:e9:
d9:5b:17:b8:cd:a4:40:76:37:d2:fa:65:a7:81:04:
c4:22:29:de:b4:60:da:3a:9a:f1:d0:84:f9:49:fd:
45:e7:95:af:c3:02:6e:38:dd:29:56:ab:2f:f9:1d:
79:b8:f4:5c:a6:8b:77:0a:a1:9a:f4:a1:ee:98:3d:
24:be:33:a5:31:1d:6d:de:e5:72:a5:b1:13:31:3c:
9b:a6:2f:e2:ab:f1:cd:5e:91:c9:00:a2:6f:12:7c:
ef:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5C:68:A6:24:90:02:6C:CA:55:3A:8E:55:1F:6A:66:9D:72:CA:33
X509v3 Authority Key Identifier:
keyid:79:AA:E3:95:5B:E7:7C:83:AE:4C:95:C5:E6:8F:2E:97:5A:B0:B8:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Bu7gL29tZj8GwX8KDWYb3cmuuSm3TkJCAs4ojfbaQcBE/0/79AAE3955BE77C83AE4C95C5E68F2E975AB0B8E2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79AAE3955BE77C83AE4C95C5E68F2E975AB0B8E2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bu7gL29tZj8GwX8KDWYb3cmuuSm3TkJCAs4ojfbaQcBE/0/323830343a353165633a3a2f33322d3334203d3e20323638343835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:51ec::/32
Signature Algorithm: sha256WithRSAEncryption
05:58:8c:fd:50:6b:67:cd:42:c8:cd:e5:f9:03:d0:70:6c:f9:
5e:0c:27:88:72:9c:ee:4d:06:20:8b:b4:0a:6c:86:60:59:4e:
7e:dd:b7:3d:55:8c:01:4c:36:75:82:02:c5:3e:99:b6:b1:12:
2b:06:e4:e0:45:1a:74:ad:52:92:fb:05:38:81:03:4b:19:c6:
0a:c5:be:b6:5c:31:3e:98:71:04:45:e2:4d:dd:05:37:5a:ae:
9e:50:2e:28:79:8b:43:a4:ba:51:96:43:93:fb:c2:0e:26:00:
47:00:80:69:f4:d7:01:60:ed:7f:69:4f:e1:6a:ce:a8:9f:d4:
83:71:17:60:ee:ce:e3:8b:94:54:16:63:00:f8:eb:ab:47:fa:
dd:cb:e1:d0:f4:92:3f:a6:b9:b4:9d:89:89:9f:8f:3c:11:10:
ed:63:e2:e5:9e:73:a2:54:96:e9:cc:3d:54:2c:76:95:b4:c5:
11:a3:ee:f3:c1:ab:7b:9e:49:df:25:92:fe:54:7d:42:91:dd:
c4:e7:fe:5e:ca:1c:22:c4:f6:43:ea:c1:5b:97:dd:da:35:63:
50:cc:dc:30:f1:ec:e6:51:93:c9:94:b2:5e:4c:8d:13:a1:37:
a6:4b:f4:ab:c5:c4:09:9b:2b:40:df:84:01:62:9d:a0:69:e7:
0d:e3:78:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 19 09:16:35 2023 by rpki-client on console-fra.rpki-client.org