Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/3136382e3138312e36342e302f32322d3232203d3e20323635333238.roa
File: 3136382e3138312e36342e302f32322d3232203d3e20323635333238.roa (raw, json)
Hash identifier: Q0Me+MgFkGQo9UJkDfFmQ3py39+BlN6vEfBxDA77XuI=
Subject key identifier: 81:73:46:FC:B1:BF:83:A6:7F:CC:26:DE:77:7E:40:BF:DD:94:C7:9A
Certificate issuer: /CN=A5ED9321675D2DCFB96C68BC0ACBF4225D536CCF
Certificate serial: 50AB4A6A39D1155F2F5A8C562A868F58CC2235A7
Authority key identifier: A5:ED:93:21:67:5D:2D:CF:B9:6C:68:BC:0A:CB:F4:22:5D:53:6C:CF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5ED9321675D2DCFB96C68BC0ACBF4225D536CCF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/3136382e3138312e36342e302f32322d3232203d3e20323635333238.roa
Signing time: Thu 28 Nov 2024 12:43:13 +0000
ROA not before: Thu 28 Nov 2024 12:38:13 +0000
ROA not after: Thu 27 Nov 2025 12:43:13 +0000
asID: 265328
IP address blocks: 168.181.64.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:ab:4a:6a:39:d1:15:5f:2f:5a:8c:56:2a:86:8f:58:cc:22:35:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5ED9321675D2DCFB96C68BC0ACBF4225D536CCF
Validity
Not Before: Nov 28 12:38:13 2024 GMT
Not After : Nov 27 12:43:13 2025 GMT
Subject: CN=817346FCB1BF83A67FCC26DE777E40BFDD94C79A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e0:58:17:d6:a3:ba:0d:5a:09:42:31:63:40:
5a:36:9e:64:3f:d0:24:a5:75:da:ea:fa:46:50:52:
fb:7d:06:c7:c4:ae:fa:8d:37:a0:6d:85:77:59:99:
2b:c2:fd:c9:38:4e:3b:9b:4c:96:88:4a:9f:67:41:
56:c3:6d:25:17:5f:3e:d1:4c:04:39:6d:93:71:8e:
02:ca:59:2d:f7:8a:4d:c2:bf:62:f1:c6:a4:d9:62:
55:33:ba:f0:ed:6e:6e:37:d0:fe:d4:50:c2:66:5b:
9f:65:79:63:cd:5d:9b:ba:30:44:8d:24:4d:e4:07:
5b:c7:67:38:85:6e:2e:26:c3:82:f5:be:6e:5d:eb:
22:10:5c:d0:b5:0c:b6:7d:fe:f5:93:26:35:6a:f8:
7d:6c:e1:65:4f:71:93:0a:01:f4:86:5b:7b:d4:36:
40:4b:fb:44:cc:7c:f9:24:c4:09:25:d4:7c:92:fd:
0b:8f:7c:27:f7:fc:ca:cb:e5:c8:dd:3f:79:08:c5:
4c:9c:a2:8d:21:d6:2f:9c:68:c9:26:a5:31:ae:25:
79:a9:be:43:91:b5:5a:b1:b3:ba:21:97:65:e7:d8:
4b:a2:44:ab:04:e6:3a:86:b7:44:86:d4:b6:e5:66:
d3:44:fa:6a:c6:ec:77:42:d9:56:bc:74:ec:15:08:
5d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:73:46:FC:B1:BF:83:A6:7F:CC:26:DE:77:7E:40:BF:DD:94:C7:9A
X509v3 Authority Key Identifier:
keyid:A5:ED:93:21:67:5D:2D:CF:B9:6C:68:BC:0A:CB:F4:22:5D:53:6C:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/A5ED9321675D2DCFB96C68BC0ACBF4225D536CCF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5ED9321675D2DCFB96C68BC0ACBF4225D536CCF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/3136382e3138312e36342e302f32322d3232203d3e20323635333238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.181.64.0/22
Signature Algorithm: sha256WithRSAEncryption
c8:e1:ac:b2:10:50:cf:f7:fe:cb:13:b9:a4:7c:6e:bf:a5:31:
7b:8a:97:02:96:e3:65:bd:dc:28:99:d6:e1:cf:55:6e:6f:f6:
4c:03:9f:f2:bf:96:a7:b4:77:c6:e7:66:7d:27:1f:7a:3c:f0:
cb:78:fc:92:3c:47:79:3b:30:09:8a:bc:cc:f2:5a:13:34:96:
dc:a8:4c:55:20:1f:46:db:c9:67:61:3c:d1:30:24:4c:ee:78:
60:52:17:23:ed:3e:96:16:9d:0a:90:82:99:96:03:86:7e:3a:
08:16:da:1c:d8:82:55:ca:31:be:e2:e4:23:7e:ee:55:1d:19:
74:b1:6d:5c:79:02:54:cc:fb:bc:51:ad:10:2b:5d:e6:60:b7:
84:8a:f8:9a:ae:49:1e:6b:6f:db:e1:ef:e3:a9:fb:e7:f9:c8:
c5:45:2e:a1:4f:f6:d4:3d:ab:38:61:3c:1c:44:ff:d5:10:05:
7e:83:4a:23:c5:54:d5:ad:7f:d7:a5:af:53:d5:0d:0b:e9:0c:
07:e8:f5:a4:aa:a0:40:18:98:0b:56:30:bc:f8:4d:4a:f8:b0:
88:f6:7a:55:68:a4:48:21:1c:05:bc:87:d1:e6:7e:28:87:0a:
a2:24:04:46:36:23:cf:28:9a:4c:2c:e7:d8:ff:47:ea:db:75:
a2:cd:e4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 9 16:05:28 2024 by rpki-client on console.sobornost.net