Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e352e302f32342d3234203d3e20323638333038.roa
File: 34352e3233382e352e302f32342d3234203d3e20323638333038.roa (raw, json)
Hash identifier: g04PjtaY9iB1ORZzVmgcA/EBHgU+diQrfzvSfohLDRw=
Subject key identifier: F9:11:C1:CA:56:2F:FD:35:AB:CA:C4:E2:7D:69:F8:60:06:47:62:AF
Certificate issuer: /CN=832B06F1B7DDB99E413147B2D786DA7B38425995
Certificate serial: 5C384223B939501291574925043BE8075D95A239
Authority key identifier: 83:2B:06:F1:B7:DD:B9:9E:41:31:47:B2:D7:86:DA:7B:38:42:59:95
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/832B06F1B7DDB99E413147B2D786DA7B38425995.cer
Subject info access: rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e352e302f32342d3234203d3e20323638333038.roa
Signing time: Tue 22 Apr 2025 14:28:08 +0000
ROA not before: Tue 22 Apr 2025 14:23:08 +0000
ROA not after: Tue 21 Apr 2026 14:28:08 +0000
asID: 268308
IP address blocks: 45.238.5.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:38:42:23:b9:39:50:12:91:57:49:25:04:3b:e8:07:5d:95:a2:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=832B06F1B7DDB99E413147B2D786DA7B38425995
Validity
Not Before: Apr 22 14:23:08 2025 GMT
Not After : Apr 21 14:28:08 2026 GMT
Subject: CN=F911C1CA562FFD35ABCAC4E27D69F860064762AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f2:58:e6:24:70:8b:72:e9:f8:42:90:e3:5d:
22:ac:b7:90:73:b4:d5:c3:5d:5c:5d:aa:5e:de:c5:
d1:be:05:2d:d0:01:c3:07:bd:93:a0:66:da:35:76:
e5:0d:41:cc:e2:48:ff:3f:1d:92:a3:47:5e:bf:9d:
a2:88:cf:b2:75:43:d2:8e:a6:03:57:01:1e:ae:8c:
01:13:ca:3c:e0:72:f0:90:cb:e9:bb:d7:9d:c4:a8:
60:ac:9a:89:96:b9:60:ee:44:e5:cc:e4:2c:2d:10:
84:71:ea:a9:d7:3b:a6:e6:bd:43:9c:6f:5c:10:f3:
24:5c:a9:ab:1c:51:05:77:1e:b3:30:c9:ec:cc:c6:
80:5f:f7:c8:d3:e3:38:bf:0d:47:f7:fe:00:40:d3:
b9:dd:8e:42:4e:87:98:d6:91:1f:91:aa:ea:65:ad:
2b:37:bb:4a:43:b1:6b:76:55:ad:b8:f9:ef:e7:16:
7b:22:d6:b3:d5:87:1f:4e:79:4c:32:85:1f:2c:47:
69:83:6d:cb:eb:a2:3d:f0:b3:aa:50:ad:42:72:3d:
cc:9d:a7:3c:13:a9:37:41:e7:e7:c7:4b:1f:f0:05:
b4:ad:ff:3c:d2:77:e9:11:42:a8:29:1a:ed:13:75:
cf:96:a9:fa:e6:c8:bd:c4:14:84:ad:01:24:62:c9:
6f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:11:C1:CA:56:2F:FD:35:AB:CA:C4:E2:7D:69:F8:60:06:47:62:AF
X509v3 Authority Key Identifier:
keyid:83:2B:06:F1:B7:DD:B9:9E:41:31:47:B2:D7:86:DA:7B:38:42:59:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/832B06F1B7DDB99E413147B2D786DA7B38425995.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/832B06F1B7DDB99E413147B2D786DA7B38425995.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e352e302f32342d3234203d3e20323638333038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.5.0/24
Signature Algorithm: sha256WithRSAEncryption
72:97:9d:ce:eb:0b:28:41:99:8d:10:f2:ad:a3:14:f7:79:49:
a1:10:84:3f:e0:3d:85:c5:34:26:2a:50:aa:90:0e:6c:0c:26:
60:81:b3:ad:b7:91:37:ba:a2:9c:b2:b9:1f:0d:2e:a6:35:57:
24:34:cc:2e:4e:d7:16:87:ad:09:d1:f8:f6:56:a5:9e:71:68:
0c:f7:50:09:a5:9d:c7:89:73:05:40:49:c8:84:14:13:2c:31:
72:aa:23:68:95:06:2c:9c:38:ef:09:45:6e:6f:cf:23:7e:84:
d0:73:fd:ee:0c:d2:68:22:5e:b8:20:16:4e:e7:a2:83:30:fd:
d0:42:36:31:3b:1a:1d:ca:3b:6c:46:66:86:0c:11:25:6e:fa:
60:ab:14:55:58:ef:ea:4f:53:47:55:7d:66:57:87:a1:5b:35:
ee:d2:06:c4:38:13:dc:4d:9c:6c:6d:a2:09:2c:f3:15:01:07:
83:ad:64:65:92:94:af:79:22:77:f7:3d:ea:4f:6e:63:1b:e3:
df:d8:3e:19:09:07:2a:da:0b:c1:13:98:b9:7a:98:56:59:86:
a2:34:21:21:2f:6c:4f:ff:17:da:c3:c8:41:45:71:9e:04:72:
6e:56:44:07:2c:81:3c:68:94:7d:3a:a9:b3:44:36:46:0b:0a:
2e:56:4a:8f
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUXDhCI7k5UBKRV0klBDvoB12VojkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODMyQjA2RjFCN0REQjk5RTQxMzE0N0IyRDc4NkRBN0Iz
ODQyNTk5NTAeFw0yNTA0MjIxNDIzMDhaFw0yNjA0MjExNDI4MDhaMDMxMTAvBgNV
BAMTKEY5MTFDMUNBNTYyRkZEMzVBQkNBQzRFMjdENjlGODYwMDY0NzYyQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC68ljmJHCLcun4QpDjXSKst5Bz
tNXDXVxdql7exdG+BS3QAcMHvZOgZto1duUNQcziSP8/HZKjR16/naKIz7J1Q9KO
pgNXAR6ujAETyjzgcvCQy+m7153EqGCsmomWuWDuROXM5CwtEIRx6qnXO6bmvUOc
b1wQ8yRcqascUQV3HrMwyezMxoBf98jT4zi/DUf3/gBA07ndjkJOh5jWkR+Rqupl
rSs3u0pDsWt2Va24+e/nFnsi1rPVhx9OeUwyhR8sR2mDbcvroj3ws6pQrUJyPcyd
pzwTqTdB5+fHSx/wBbSt/zzSd+kRQqgpGu0Tdc+WqfrmyL3EFIStASRiyW8pAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU+RHBylYv/TWrysTifWn4YAZHYq8wHwYDVR0j
BBgwFoAUgysG8bfduZ5BMUey14baezhCWZUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzI1REU4VnVDMUxFdHk1SERQQm9mZWlFUkNUQzlLMzh1OFVQNlNiaDV3
OW0vMC84MzJCMDZGMUI3RERCOTlFNDEzMTQ3QjJENzg2REE3QjM4NDI1OTk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgzMkIwNkYxQjdEREI5OUU0
MTMxNDdCMkQ3ODZEQTdCMzg0MjU5OTUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzcyNURFOFZ1QzFMRXR5NUhEUEJvZmVpRVJDVEM5SzM4dThVUDZTYmg1dzltLzAv
MzQzNTJlMzIzMzM4MmUzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzODMz
MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC3uBTANBgkqhkiG9w0BAQsFAAOCAQEAcpedzusLKEGZ
jRDyraMU93lJoRCEP+A9hcU0JipQqpAObAwmYIGzrbeRN7qinLK5Hw0upjVXJDTM
Lk7XFoetCdH49lalnnFoDPdQCaWdx4lzBUBJyIQUEywxcqojaJUGLJw47wlFbm/P
I36E0HP97gzSaCJeuCAWTueigzD90EI2MTsaHco7bEZmhgwRJW76YKsUVVjv6k9T
R1V9ZleHoVs17tIGxDgT3E2cbG2iCSzzFQEHg61kZZKUr3kid/c96k9uYxvj39g+
GQkHKtoLwROYuXqYVlmGojQhIS9sT/8X2sPIQUVxngRyblZEByyBPGiUfTqps0Q2
RgsKLlZKjw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:25:03 2025 by rpki-client on console.sobornost.net