Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/323830343a346632383a633030303a3a2f33342d3334203d3e20323638333038.roa
File: 323830343a346632383a633030303a3a2f33342d3334203d3e20323638333038.roa (raw, json)
Hash identifier: hJTr0WuVlugEFZLl9uF3TUtLYuCZsArMKnlRydNlufs=
Subject key identifier: AF:E0:88:19:88:E9:5C:90:B9:3E:D4:59:01:54:AA:C4:91:E2:A5:25
Certificate issuer: /CN=832B06F1B7DDB99E413147B2D786DA7B38425995
Certificate serial: 71B76B07AFA90163C711F29893D2BE8D6C82F79C
Authority key identifier: 83:2B:06:F1:B7:DD:B9:9E:41:31:47:B2:D7:86:DA:7B:38:42:59:95
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/832B06F1B7DDB99E413147B2D786DA7B38425995.cer
Subject info access: rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/323830343a346632383a633030303a3a2f33342d3334203d3e20323638333038.roa
Signing time: Tue 22 Apr 2025 14:28:09 +0000
ROA not before: Tue 22 Apr 2025 14:23:09 +0000
ROA not after: Tue 21 Apr 2026 14:28:09 +0000
asID: 268308
IP address blocks: 2804:4f28:c000::/34 maxlen: 34
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:b7:6b:07:af:a9:01:63:c7:11:f2:98:93:d2:be:8d:6c:82:f7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=832B06F1B7DDB99E413147B2D786DA7B38425995
Validity
Not Before: Apr 22 14:23:09 2025 GMT
Not After : Apr 21 14:28:09 2026 GMT
Subject: CN=AFE0881988E95C90B93ED4590154AAC491E2A525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ee:68:ca:b2:9f:9f:4f:8e:9a:73:9e:63:f5:
03:05:6c:d4:01:da:83:8c:87:00:c9:0c:a8:96:86:
d2:14:fb:de:98:db:42:ba:4f:b1:3b:d4:c6:e0:c1:
c0:aa:10:a6:5f:82:e2:a5:f8:f7:08:b2:31:21:5e:
5b:20:95:f5:06:70:50:9b:61:21:8a:47:ae:1b:9d:
3b:45:93:d3:85:db:5e:84:c1:c2:36:f2:95:20:cd:
80:b0:e6:fe:1d:83:49:33:c1:ea:42:50:57:00:06:
60:fe:9a:ae:b1:b1:5d:5d:6f:cb:ae:bd:8a:2f:2c:
f2:39:9a:db:c2:e1:4f:37:89:16:1b:0e:36:39:3b:
9c:c1:6e:1b:a6:47:65:61:4e:16:64:8c:e4:26:54:
bc:5e:b9:a4:ac:dc:b6:d1:3f:6e:3d:47:4f:e9:3e:
51:08:15:94:4b:5f:b8:93:f3:05:a2:29:b1:18:e5:
bf:e2:b3:26:71:64:82:ab:a8:aa:6e:19:99:94:cc:
1b:88:b2:3a:e5:51:19:9c:d7:14:97:2e:81:6a:1d:
4d:f2:6c:11:91:c0:7c:21:34:32:a7:a2:d8:d8:14:
2b:36:c0:eb:c4:2b:fe:f0:4e:eb:f1:90:86:3d:de:
28:8a:b7:39:0d:90:f8:b6:d6:fd:bf:c9:e7:92:c2:
5a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E0:88:19:88:E9:5C:90:B9:3E:D4:59:01:54:AA:C4:91:E2:A5:25
X509v3 Authority Key Identifier:
keyid:83:2B:06:F1:B7:DD:B9:9E:41:31:47:B2:D7:86:DA:7B:38:42:59:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/832B06F1B7DDB99E413147B2D786DA7B38425995.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/832B06F1B7DDB99E413147B2D786DA7B38425995.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/323830343a346632383a633030303a3a2f33342d3334203d3e20323638333038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4f28:c000::/34
Signature Algorithm: sha256WithRSAEncryption
8e:c7:7b:7c:e2:b7:00:61:d4:89:fd:a6:b5:16:5e:c1:9e:e2:
7b:a1:5f:08:73:23:82:40:3a:0a:6d:61:d9:95:69:48:49:1f:
54:53:8d:cc:f5:47:4b:26:d1:eb:b6:08:40:5c:7e:40:0a:8a:
95:48:ec:fa:17:34:7d:a8:87:c4:19:7b:5a:f7:85:3c:26:7b:
2a:ec:ab:f0:3a:4c:11:38:35:f3:d8:76:ae:0b:f2:97:5b:ff:
43:33:d8:2e:ce:f9:5f:8d:8d:92:93:b6:f6:c2:09:2c:24:2f:
c5:a6:5c:94:87:5a:8b:27:b1:f8:b3:07:97:8d:77:fa:9e:f8:
47:0e:15:91:01:16:a6:87:cb:4b:66:d4:7d:3f:16:3f:d4:86:
90:54:d5:c9:61:28:e3:e4:ae:0c:66:a6:8e:ba:0b:7a:cc:ea:
b0:88:55:78:0f:3c:26:44:e1:51:fe:98:5c:40:1f:d2:9a:ab:
bf:67:d8:42:c1:8b:a0:72:45:45:42:85:50:51:33:38:d5:48:
0a:0a:c2:63:9c:38:5f:b7:40:bf:08:41:f8:cd:7e:83:52:14:
38:41:6e:64:44:da:ac:30:56:37:74:ea:ab:5c:44:bc:07:4c:
37:b7:0e:3d:2e:d2:86:2a:ac:eb:39:b0:79:ee:e0:fc:d9:00:
38:90:22:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:25:03 2025 by rpki-client on console.sobornost.net