Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/3139312e33372e3133382e302f32332d3233203d3e20323633333630.roa
File: 3139312e33372e3133382e302f32332d3233203d3e20323633333630.roa (raw, json)
Hash identifier: NwD0G0rgplWyrGiOrzXWZWFLYkyREYNRb+fWbiZnN6A=
Subject key identifier: E7:AB:22:5C:29:57:AD:C1:BE:6B:4B:E7:54:F5:BF:EA:85:75:CA:12
Certificate issuer: /CN=D26416E9EEE100EE9626BC59BFAC84F0BC9F6B29
Certificate serial: 7558BC237AEFD9670B5344AD2EFDA7D2457FB2DE
Authority key identifier: D2:64:16:E9:EE:E1:00:EE:96:26:BC:59:BF:AC:84:F0:BC:9F:6B:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D26416E9EEE100EE9626BC59BFAC84F0BC9F6B29.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/3139312e33372e3133382e302f32332d3233203d3e20323633333630.roa
Signing time: Mon 07 Apr 2025 20:20:23 +0000
ROA not before: Mon 07 Apr 2025 20:15:23 +0000
ROA not after: Mon 06 Apr 2026 20:20:23 +0000
asID: 263360
IP address blocks: 191.37.138.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:58:bc:23:7a:ef:d9:67:0b:53:44:ad:2e:fd:a7:d2:45:7f:b2:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D26416E9EEE100EE9626BC59BFAC84F0BC9F6B29
Validity
Not Before: Apr 7 20:15:23 2025 GMT
Not After : Apr 6 20:20:23 2026 GMT
Subject: CN=E7AB225C2957ADC1BE6B4BE754F5BFEA8575CA12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:13:18:db:9d:69:e4:67:6a:77:52:82:1d:7e:
b1:94:b7:2c:f1:b5:7a:10:5f:68:1e:dd:16:07:31:
77:29:59:f3:f2:09:31:83:72:98:b6:4e:3b:fb:f5:
ce:62:2b:6f:1f:b3:8c:0f:c7:cf:57:81:d3:71:0d:
28:f6:c2:bc:b4:ca:69:e1:52:41:c4:1a:f8:72:3e:
12:3f:f9:67:28:df:c4:6a:fd:4a:1a:80:ce:38:1c:
a9:b6:01:bc:db:c4:d3:51:2a:5a:6b:89:84:4f:08:
ff:df:f3:95:a1:52:ae:d7:de:67:f8:2a:7d:b5:e2:
40:10:a3:46:4f:57:79:b3:e2:97:4b:2a:26:64:45:
6f:40:25:d4:e2:46:35:c6:09:33:98:8a:d1:63:2c:
cd:23:e4:b1:77:43:5e:9b:ec:d8:ae:a3:0e:5e:e4:
c6:a8:70:9e:a6:e0:99:49:d4:37:c4:59:b0:34:26:
ce:d0:37:0e:e7:61:cd:32:6d:99:20:9f:71:d5:60:
11:f1:c4:d1:42:e5:1b:23:96:88:08:cd:87:a0:5f:
2d:58:98:f6:26:5d:2d:ef:3b:cd:95:75:06:c4:85:
bc:fe:c2:9b:a9:fb:b8:e1:85:b8:ed:a3:27:9a:e9:
ea:30:a1:9f:d0:62:59:c3:d0:f4:aa:74:e0:9c:1d:
e6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AB:22:5C:29:57:AD:C1:BE:6B:4B:E7:54:F5:BF:EA:85:75:CA:12
X509v3 Authority Key Identifier:
keyid:D2:64:16:E9:EE:E1:00:EE:96:26:BC:59:BF:AC:84:F0:BC:9F:6B:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/D26416E9EEE100EE9626BC59BFAC84F0BC9F6B29.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D26416E9EEE100EE9626BC59BFAC84F0BC9F6B29.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/3139312e33372e3133382e302f32332d3233203d3e20323633333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.37.138.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:3d:bc:32:e4:a8:55:b1:b6:38:1c:fc:af:70:ab:12:5a:94:
5e:57:52:0a:d1:c4:10:d2:82:ad:91:77:d8:04:9c:b0:a2:be:
a5:22:b6:13:28:60:3f:7a:4a:5e:00:57:de:f2:2a:1f:ca:d7:
87:df:c2:92:d2:9c:c0:e7:1d:6f:e3:65:63:9e:45:b1:fb:3e:
7e:d8:59:fc:a1:5d:04:b2:0e:c6:76:d5:7a:7e:77:85:6a:e8:
af:e1:0b:cb:ab:18:b4:df:08:f2:01:f3:9f:9f:9b:fd:30:93:
d0:e2:fa:c0:38:82:a5:4d:03:ec:51:d1:29:0f:ac:bd:1f:19:
58:8e:96:9c:87:0d:7f:3b:f3:ad:53:bf:a9:d6:aa:91:5b:b5:
19:d8:95:c1:39:29:d4:49:76:c9:4d:d7:a6:6f:b2:74:bd:a8:
b9:34:db:42:48:4f:aa:1d:bb:88:ad:6e:2f:59:81:2f:b8:ec:
7f:84:42:8a:ba:20:77:40:06:52:02:24:7f:32:17:e9:0d:84:
ca:29:ee:3c:f1:7a:9c:77:4a:d8:b3:61:4e:7c:e3:80:0b:10:
28:98:c0:61:22:de:05:48:94:95:6f:03:41:5e:1e:0a:89:14:
fa:b2:dc:da:b9:b0:f1:c6:9b:44:80:a2:4c:72:53:c3:72:f3:
c0:95:c8:48
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdVi8I3rv2WcLU0StLv2n0kV/st4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDI2NDE2RTlFRUUxMDBFRTk2MjZCQzU5QkZBQzg0RjBC
QzlGNkIyOTAeFw0yNTA0MDcyMDE1MjNaFw0yNjA0MDYyMDIwMjNaMDMxMTAvBgNV
BAMTKEU3QUIyMjVDMjk1N0FEQzFCRTZCNEJFNzU0RjVCRkVBODU3NUNBMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrExjbnWnkZ2p3UoIdfrGUtyzx
tXoQX2ge3RYHMXcpWfPyCTGDcpi2Tjv79c5iK28fs4wPx89XgdNxDSj2wry0ymnh
UkHEGvhyPhI/+Wco38Rq/UoagM44HKm2AbzbxNNRKlpriYRPCP/f85WhUq7X3mf4
Kn214kAQo0ZPV3mz4pdLKiZkRW9AJdTiRjXGCTOYitFjLM0j5LF3Q16b7Niuow5e
5MaocJ6m4JlJ1DfEWbA0Js7QNw7nYc0ybZkgn3HVYBHxxNFC5RsjlogIzYegXy1Y
mPYmXS3vO82VdQbEhbz+wpup+7jhhbjtoyea6eowoZ/QYlnD0PSqdOCcHeZRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU56siXClXrcG+a0vnVPW/6oV1yhIwHwYDVR0j
BBgwFoAU0mQW6e7hAO6WJrxZv6yE8LyfaykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHBKM296eFpIZ1R0V3RYTUpZRUZoOTVmRjd0enAxU0RHdWkyS2FETWhm
RXkvMC9EMjY0MTZFOUVFRTEwMEVFOTYyNkJDNTlCRkFDODRGMEJDOUY2QjI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyNjQxNkU5RUVFMTAwRUU5
NjI2QkM1OUJGQUM4NEYwQkM5RjZCMjkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhwSjNvenhaSGdUdFd0WE1KWUVGaDk1ZkY3dHpwMVNER3VpMkthRE1oZkV5LzAv
MzEzOTMxMmUzMzM3MmUzMTMzMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzMzMzM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG/JYowDQYJKoZIhvcNAQELBQADggEBAGs9vDLk
qFWxtjgc/K9wqxJalF5XUgrRxBDSgq2Rd9gEnLCivqUithMoYD96Sl4AV97yKh/K
14ffwpLSnMDnHW/jZWOeRbH7Pn7YWfyhXQSyDsZ21Xp+d4Vq6K/hC8urGLTfCPIB
85+fm/0wk9Di+sA4gqVNA+xR0SkPrL0fGViOlpyHDX87861Tv6nWqpFbtRnYlcE5
KdRJdslN16ZvsnS9qLk020JIT6odu4itbi9ZgS+47H+EQoq6IHdABlICJH8yF+kN
hMop7jzxepx3StizYU5844ALECiYwGEi3gVIlJVvA0FeHgqJFPqy3Nq5sPHGm0SA
okxyU8Ny88CVyEg=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:13:35 2025 by rpki-client on console.sobornost.net