Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/323830343a313239303a3a2f33322d3334203d3e20323633343834.roa
File: 323830343a313239303a3a2f33322d3334203d3e20323633343834.roa (raw, json)
Hash identifier: +5HjlLV141zth6ekpGOsk59K/EiXPefi/fdIcoNzeQw=
Subject key identifier: 4E:85:9C:43:10:93:C9:9D:43:F5:54:14:85:BE:7B:1E:07:06:40:D3
Certificate issuer: /CN=B7D95016B720FE7ECA7F19DD5EAE4BBA4BFB5E1B
Certificate serial: 7164A321DC86309A16176A16C0CCCC0BD5092D03
Authority key identifier: B7:D9:50:16:B7:20:FE:7E:CA:7F:19:DD:5E:AE:4B:BA:4B:FB:5E:1B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7D95016B720FE7ECA7F19DD5EAE4BBA4BFB5E1B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/323830343a313239303a3a2f33322d3334203d3e20323633343834.roa
Signing time: Wed 22 May 2024 17:00:24 +0000
ROA not before: Wed 22 May 2024 16:55:24 +0000
ROA not after: Wed 21 May 2025 17:00:24 +0000
asID: 263484
IP address blocks: 2804:1290::/32 maxlen: 34
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:64:a3:21:dc:86:30:9a:16:17:6a:16:c0:cc:cc:0b:d5:09:2d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7D95016B720FE7ECA7F19DD5EAE4BBA4BFB5E1B
Validity
Not Before: May 22 16:55:24 2024 GMT
Not After : May 21 17:00:24 2025 GMT
Subject: CN=4E859C431093C99D43F5541485BE7B1E070640D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:60:ec:df:c6:fd:2e:4c:2a:f7:39:56:b9:8a:
39:67:b8:e2:cd:27:9a:30:e7:c7:6c:00:0c:83:8f:
3d:b9:b8:77:6b:59:6e:1e:11:8e:3f:b6:ea:01:c1:
47:8a:4f:26:5b:83:cf:d8:aa:3a:d8:f6:12:ff:53:
88:4e:0f:46:d8:51:a3:43:89:ac:df:15:ff:09:27:
dc:e6:7a:31:d8:f4:7b:ed:09:bd:7a:ee:83:72:6b:
ab:80:40:c9:53:87:84:a3:ef:0d:dd:69:6e:d4:f9:
8d:c5:a7:f1:c4:8c:9d:c7:a1:cf:9c:e8:64:9f:4b:
29:33:6a:ad:38:88:e2:8c:3d:ec:e2:17:03:ca:59:
b0:e9:cf:f1:d2:c1:79:a0:a1:75:71:11:ab:18:40:
33:7c:53:28:f2:72:ee:0d:62:ea:08:de:88:1f:2b:
dc:3a:68:83:4e:b8:52:73:86:7e:e6:15:5c:d4:0e:
6c:60:5e:b5:bb:94:8f:f2:e4:52:b4:c6:bd:89:33:
5a:2a:6f:c6:d5:d8:b8:25:b1:83:91:d9:7d:23:02:
56:21:58:fe:54:f2:60:55:14:95:f4:48:94:d2:46:
d1:ab:19:99:fb:5a:99:28:cf:d6:35:04:b6:70:56:
c5:44:f7:c6:88:19:60:66:2d:28:31:56:bc:7e:46:
9c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:85:9C:43:10:93:C9:9D:43:F5:54:14:85:BE:7B:1E:07:06:40:D3
X509v3 Authority Key Identifier:
keyid:B7:D9:50:16:B7:20:FE:7E:CA:7F:19:DD:5E:AE:4B:BA:4B:FB:5E:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/B7D95016B720FE7ECA7F19DD5EAE4BBA4BFB5E1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7D95016B720FE7ECA7F19DD5EAE4BBA4BFB5E1B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/323830343a313239303a3a2f33322d3334203d3e20323633343834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1290::/32
Signature Algorithm: sha256WithRSAEncryption
26:6e:ae:d8:f3:67:96:51:1a:79:0c:6b:d4:5f:27:0b:69:2e:
e2:4c:5e:8a:9a:5a:d5:f8:dc:1e:ac:05:08:5a:c7:70:4b:c7:
af:09:8e:a8:ee:a7:50:66:99:c9:08:c6:cc:28:4e:8a:cf:68:
15:4e:49:1d:a3:99:a0:73:4f:b5:45:ae:f3:14:1c:d0:b6:e4:
2a:9e:5a:78:cf:df:a9:1a:25:ca:e8:85:29:42:6e:18:18:ca:
15:8a:f0:91:50:8e:cb:b1:e7:42:39:4b:44:d0:88:49:2f:73:
10:8b:6f:25:1b:11:ec:71:76:49:60:09:4a:5e:26:db:04:64:
8c:bc:12:dd:5d:27:83:c7:a3:86:e1:02:26:98:9b:5b:68:17:
69:0a:6d:fe:29:e0:97:84:1b:0a:89:16:31:3f:9e:6e:76:25:
50:06:fe:49:90:64:0d:37:76:66:5f:1d:ae:04:41:10:6a:79:
6f:ae:16:9e:6e:94:36:b9:6a:df:51:7a:ef:b1:37:76:77:f9:
22:24:83:41:d3:08:5b:36:25:c6:10:c5:25:74:cd:be:f1:d1:
bc:6d:3d:49:e0:33:9b:ba:4a:da:d7:a6:6c:1f:2a:0a:17:bb:
75:9d:29:50:28:f4:b5:f2:5d:17:7a:bc:da:92:80:f7:a0:06:
9b:db:fd:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 13:01:33 2024 by rpki-client on console-fra.rpki-client.org