Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/2/323830343a363862633a3a2f33322d3332203d3e20323639373132.roa
File: 323830343a363862633a3a2f33322d3332203d3e20323639373132.roa (raw, json)
Hash identifier: nISZBgjJXVYwxNnXnRZ1oZdVQuwGbrGbuFiROlJLvN8=
Subject key identifier: 01:10:78:AF:36:3A:72:1B:18:B8:98:48:8C:95:40:61:75:B2:30:34
Certificate issuer: /CN=8FCC118E9F86EF9EF1FF0708589C3C428A30BBFD
Certificate serial: 207D042059869149700EBEFB1353A394F96AEF4D
Authority key identifier: 8F:CC:11:8E:9F:86:EF:9E:F1:FF:07:08:58:9C:3C:42:8A:30:BB:FD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FCC118E9F86EF9EF1FF0708589C3C428A30BBFD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/2/323830343a363862633a3a2f33322d3332203d3e20323639373132.roa
Signing time: Wed 22 May 2024 18:13:18 +0000
ROA not before: Wed 22 May 2024 18:08:18 +0000
ROA not after: Wed 21 May 2025 18:13:18 +0000
asID: 269712
IP address blocks: 2804:68bc::/32 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:7d:04:20:59:86:91:49:70:0e:be:fb:13:53:a3:94:f9:6a:ef:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FCC118E9F86EF9EF1FF0708589C3C428A30BBFD
Validity
Not Before: May 22 18:08:18 2024 GMT
Not After : May 21 18:13:18 2025 GMT
Subject: CN=011078AF363A721B18B898488C95406175B23034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:80:23:b1:a5:06:3f:fb:76:73:36:c6:6b:7b:
aa:b1:17:32:58:f2:43:10:5c:2c:50:89:ba:1a:11:
8e:68:68:bf:83:03:8f:06:b4:e0:a9:2d:69:bc:c7:
6a:63:76:b7:6a:fa:c1:1d:8b:e6:bd:9e:44:0c:b9:
b7:8e:17:4e:e4:e6:77:12:b4:94:fd:96:99:40:f5:
55:27:15:9a:c4:32:27:a4:09:de:5b:31:6c:71:1a:
3a:3d:8c:df:ed:42:b6:58:d8:e8:b2:01:2f:cf:6e:
7e:53:37:bd:cf:e4:a9:79:c2:da:92:53:d6:a9:ef:
a3:38:f9:df:d5:f7:04:ac:b7:5b:94:e7:f2:11:76:
d0:b7:90:b5:23:13:c4:75:aa:fb:f8:b6:35:bb:61:
13:1c:9b:9b:d9:89:9e:b8:cd:8e:31:35:b9:13:fa:
88:85:bf:ee:30:63:22:78:b3:d4:4e:e2:d2:19:ef:
21:78:de:b9:96:5b:a7:93:24:21:5f:7d:f4:3a:88:
c7:50:bc:cc:ac:6c:3d:2e:9d:26:fc:08:2b:68:44:
d4:b8:f1:a3:e9:e1:0b:20:89:59:81:0a:d2:2c:18:
18:c2:21:c1:15:3c:8c:71:f9:de:d7:f4:6e:80:9a:
5b:45:b7:2b:5b:35:06:fc:84:12:cb:d8:75:eb:b2:
b5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:10:78:AF:36:3A:72:1B:18:B8:98:48:8C:95:40:61:75:B2:30:34
X509v3 Authority Key Identifier:
keyid:8F:CC:11:8E:9F:86:EF:9E:F1:FF:07:08:58:9C:3C:42:8A:30:BB:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/2/8FCC118E9F86EF9EF1FF0708589C3C428A30BBFD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FCC118E9F86EF9EF1FF0708589C3C428A30BBFD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/2/323830343a363862633a3a2f33322d3332203d3e20323639373132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:68bc::/32
Signature Algorithm: sha256WithRSAEncryption
2b:59:fd:36:27:af:a3:18:d8:47:1a:95:81:8b:de:ca:d3:28:
0d:bd:50:f3:3a:3f:4c:ea:ba:b1:c5:64:bc:d3:55:7b:5d:02:
20:c7:47:27:71:ea:7e:c3:23:2f:9a:75:b2:39:4a:5d:7e:fe:
ec:a4:80:b5:9d:0b:fd:dd:7d:56:e2:e4:7a:35:f0:f0:fe:6e:
2e:a4:7b:fe:08:5f:64:7f:81:da:fe:70:8f:fa:aa:f4:53:a0:
49:9b:13:8f:fe:6e:91:fc:51:4b:0e:41:df:82:2d:29:22:1b:
b9:50:0d:52:5e:72:88:59:7f:50:cd:c2:30:cb:1e:87:7f:dd:
39:41:b4:1e:c5:c9:28:2c:3c:69:c6:f6:18:f5:e0:ea:1c:2a:
79:14:72:7a:34:4e:88:4c:35:9b:7f:31:fa:df:95:42:18:6d:
41:e4:76:4a:fe:87:53:94:a3:50:1b:73:6b:a2:3f:59:7b:87:
4d:28:ac:a8:59:66:5d:1d:a4:9b:88:c8:55:4d:12:5b:21:d8:
9d:6f:02:92:b6:72:1b:e9:8f:c9:14:da:c9:87:78:09:16:7a:
7c:6a:2d:a4:1a:76:d8:90:4d:c8:c5:ed:54:e7:04:46:53:4b:
86:af:43:61:65:b6:fb:b7:f7:a6:c9:4b:d0:18:c9:77:90:0a:
be:f9:cc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 06:09:55 2024 by rpki-client on console-fra.rpki-client.org