Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/323830343a363538633a3a2f33342d3334203d3e20323639343939.roa
File: 323830343a363538633a3a2f33342d3334203d3e20323639343939.roa (raw, json)
Hash identifier: jmQtcDNmO/bSdYl3VmDnZ7XXboyIrOb8eYr+MFKfGww=
Subject key identifier: 0F:98:14:67:BA:2C:7F:E2:DA:30:4A:5D:9C:DF:88:59:16:88:85:6A
Certificate issuer: /CN=21F66D4308816E7B47F6912EBBE7513585A59B9D
Certificate serial: 2EEE4949B503C7C3DE3C1354D43D51729C5BFD41
Authority key identifier: 21:F6:6D:43:08:81:6E:7B:47:F6:91:2E:BB:E7:51:35:85:A5:9B:9D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F66D4308816E7B47F6912EBBE7513585A59B9D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/323830343a363538633a3a2f33342d3334203d3e20323639343939.roa
Signing time: Thu 05 Sep 2024 19:37:12 +0000
ROA not before: Thu 05 Sep 2024 19:32:12 +0000
ROA not after: Thu 04 Sep 2025 19:37:12 +0000
asID: 269499
IP address blocks: 2804:658c::/34 maxlen: 34
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:ee:49:49:b5:03:c7:c3:de:3c:13:54:d4:3d:51:72:9c:5b:fd:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21F66D4308816E7B47F6912EBBE7513585A59B9D
Validity
Not Before: Sep 5 19:32:12 2024 GMT
Not After : Sep 4 19:37:12 2025 GMT
Subject: CN=0F981467BA2C7FE2DA304A5D9CDF88591688856A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:e2:c9:a4:b0:aa:df:cc:48:35:09:ff:52:bd:
ca:d3:6e:9d:82:40:c6:36:38:9b:b4:d5:15:88:d3:
13:90:4d:a6:82:52:91:9d:fd:e4:45:6f:56:8b:da:
02:ac:d3:6d:99:69:bd:cf:b8:0f:a0:6d:03:a8:cc:
d8:b7:c1:77:7e:0e:c3:f3:88:63:53:da:28:09:87:
82:fa:f5:9c:9d:72:76:53:40:17:1d:41:f4:66:e5:
b5:9e:b3:ed:6f:4e:8e:4e:57:b8:65:5f:7b:d9:6c:
f7:eb:0b:22:ba:90:4e:0f:1b:5b:0d:43:6b:42:8f:
c6:f1:3d:64:af:c4:a4:e2:c0:b7:d1:b8:84:26:98:
48:87:f0:48:3e:64:73:47:3f:35:fa:da:e9:c8:ed:
fa:f9:8e:8c:80:e7:28:0b:39:a1:b8:58:a5:43:46:
6c:1b:57:45:5e:e2:ff:20:3f:b1:21:7d:e4:39:ff:
db:34:78:20:d6:59:39:3b:05:f9:ca:b8:bc:ab:bc:
3b:95:35:7c:66:0d:d7:e5:cc:36:0f:2f:0d:cf:a2:
1b:36:f8:79:f2:07:0c:ba:f1:1b:af:05:cd:88:3e:
5b:7c:a9:05:a2:c3:56:c3:a0:eb:92:bf:d4:7e:ed:
2a:df:17:6b:ae:09:34:a4:7b:ce:45:a9:92:c8:d2:
fa:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:98:14:67:BA:2C:7F:E2:DA:30:4A:5D:9C:DF:88:59:16:88:85:6A
X509v3 Authority Key Identifier:
keyid:21:F6:6D:43:08:81:6E:7B:47:F6:91:2E:BB:E7:51:35:85:A5:9B:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/21F66D4308816E7B47F6912EBBE7513585A59B9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F66D4308816E7B47F6912EBBE7513585A59B9D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/323830343a363538633a3a2f33342d3334203d3e20323639343939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:658c::/34
Signature Algorithm: sha256WithRSAEncryption
39:2a:12:e7:52:42:f0:6a:73:60:95:70:a2:40:6d:7a:16:18:
01:a1:ed:ef:a6:d6:39:61:b7:84:1e:08:7b:25:62:11:f5:2f:
ba:d3:46:17:f3:ee:42:3a:89:b8:38:38:8f:e8:5b:d4:40:65:
51:f1:ec:a7:a0:ae:d6:8f:12:06:3f:c2:56:76:f1:55:f5:c5:
7f:a3:2e:3d:20:81:2e:a6:71:03:52:da:d5:eb:52:ef:70:c4:
c4:5a:07:7b:5e:da:51:95:08:b4:27:67:97:46:85:de:8b:37:
ee:32:52:4c:6b:54:02:07:14:62:e5:86:1a:99:6a:00:f9:a4:
d0:92:dd:73:08:1a:47:95:e5:45:92:f4:33:74:0d:df:bc:9f:
2c:23:2f:bb:9b:08:76:90:41:53:8f:48:12:98:83:1a:9c:4d:
a4:d8:79:10:1d:78:9c:a6:3f:b9:c0:9a:da:6f:ed:fe:44:dd:
49:d9:1a:63:10:84:5e:d6:25:55:75:64:79:90:ba:36:f0:75:
ba:94:77:67:6a:ac:7d:2e:f7:0f:3e:eb:70:96:28:be:d5:3e:
c6:94:57:c8:50:3e:11:f9:de:e9:67:74:bd:e4:55:23:75:8d:
00:9b:cd:41:e2:7c:aa:5f:10:f6:b6:70:47:5e:de:3f:76:38:
4d:f1:96:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 16:41:12 2024 by rpki-client on console-fra.rpki-client.org