Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/34352e3137342e32382e302f32322d3332203d3e20323638383336.roa
File: 34352e3137342e32382e302f32322d3332203d3e20323638383336.roa (raw, json)
Hash identifier: QWwj/khsAVt/TMAvKxQt7dGK4qFkqgl4U/ydEBZJPcA=
Subject key identifier: 6D:62:4D:E2:C7:86:20:63:7D:A2:7F:35:F6:25:67:1F:CD:50:98:C1
Certificate issuer: /CN=60AB403170A672D3B6135E0C4A876F7657048DF0
Certificate serial: 19ACB29A639753BA26683636F88B568143B920FA
Authority key identifier: 60:AB:40:31:70:A6:72:D3:B6:13:5E:0C:4A:87:6F:76:57:04:8D:F0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60AB403170A672D3B6135E0C4A876F7657048DF0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/34352e3137342e32382e302f32322d3332203d3e20323638383336.roa
Signing time: Thu 20 Mar 2025 20:39:23 +0000
ROA not before: Thu 20 Mar 2025 20:34:23 +0000
ROA not after: Thu 19 Mar 2026 20:39:23 +0000
asID: 268836
IP address blocks: 45.174.28.0/22 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:ac:b2:9a:63:97:53:ba:26:68:36:36:f8:8b:56:81:43:b9:20:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60AB403170A672D3B6135E0C4A876F7657048DF0
Validity
Not Before: Mar 20 20:34:23 2025 GMT
Not After : Mar 19 20:39:23 2026 GMT
Subject: CN=6D624DE2C78620637DA27F35F625671FCD5098C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4a:79:d2:b6:b9:b0:bc:27:1f:e7:d3:a4:90:
c1:1f:e2:49:21:05:86:30:51:9e:db:c2:1d:dc:d7:
f9:d3:27:73:65:45:bb:94:08:32:66:5c:cc:24:fb:
85:bf:24:f3:e6:2a:4c:0a:9f:c0:d2:70:f5:9b:0f:
46:d5:f1:ba:62:71:cf:d5:fd:57:de:7c:7e:a9:b0:
8f:40:44:74:e1:0a:14:ff:af:20:f6:12:29:e7:c1:
8d:d7:ee:f9:c5:29:85:6c:7d:5c:10:47:bb:c0:4b:
97:da:54:7f:1a:d7:6a:b1:70:a9:3b:4e:2a:63:98:
a6:16:7f:b0:c9:20:f3:3f:58:3d:41:9b:62:e7:6b:
d1:92:23:ae:6b:84:01:42:4b:0e:39:99:1e:a7:d2:
ff:0b:7f:c3:a2:e2:db:e3:e1:c3:f7:94:0e:9f:bf:
7a:32:2a:bb:5f:cb:49:e3:6a:2e:b8:04:b4:da:b8:
48:c7:fa:9a:a1:be:28:1a:c6:be:bd:ce:ce:7f:eb:
c9:e4:33:06:b3:1e:2a:de:e1:40:c3:a0:d2:84:de:
6d:9a:fb:95:5d:da:ef:ac:71:fe:9b:5c:ab:0b:8c:
50:77:44:22:61:52:e4:7c:49:c8:4e:11:12:a3:8b:
6c:3e:c1:d4:9b:dc:a6:2c:da:41:d3:1f:a5:33:01:
c6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:62:4D:E2:C7:86:20:63:7D:A2:7F:35:F6:25:67:1F:CD:50:98:C1
X509v3 Authority Key Identifier:
keyid:60:AB:40:31:70:A6:72:D3:B6:13:5E:0C:4A:87:6F:76:57:04:8D:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/60AB403170A672D3B6135E0C4A876F7657048DF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60AB403170A672D3B6135E0C4A876F7657048DF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/34352e3137342e32382e302f32322d3332203d3e20323638383336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.174.28.0/22
Signature Algorithm: sha256WithRSAEncryption
84:db:95:8c:c9:0d:81:8a:71:2c:b1:d7:ef:0f:14:95:4f:be:
e2:db:00:0d:62:25:86:5d:9e:bc:e4:49:6e:dd:8a:dc:e1:46:
d5:80:ab:5a:3f:08:c1:41:e9:17:57:11:88:e0:f7:28:cd:6a:
e7:33:aa:b9:9f:73:ac:62:35:90:45:e6:c6:b0:e5:0c:95:ba:
59:79:13:0f:22:68:35:ba:63:73:2c:2a:b7:91:f6:77:01:0a:
06:12:e2:20:af:f2:75:e8:2b:aa:72:8e:7b:fa:c4:19:a6:ff:
9d:db:26:5e:8b:22:f5:9d:eb:35:65:5b:69:c4:ad:e3:38:4d:
c8:e9:79:f0:1f:2d:98:e8:1e:b6:3c:60:71:62:ca:ca:93:81:
a7:24:cd:e2:44:db:5b:ac:78:dd:aa:bc:e2:84:e9:69:9d:5e:
fe:33:62:08:17:86:74:85:f4:12:ab:7a:10:d3:57:e2:5d:ee:
b6:13:a8:12:f4:15:28:6e:31:cd:ec:c0:dc:71:8a:43:fe:d1:
7f:f7:e5:eb:68:9c:41:4e:a8:f7:3d:81:86:d2:b3:27:7d:9f:
b6:ab:75:aa:9d:d7:12:32:8c:9b:ac:20:2b:c4:38:cb:cc:fe:
4f:d8:9a:e4:5a:e6:6d:81:9e:bf:39:68:16:0c:9f:8d:27:a2:
7c:e4:09:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 04:02:05 2025 by rpki-client on console.sobornost.net