Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/3133382e3132312e34382e302f32322d3234203d3e20323634323738.roa
File: 3133382e3132312e34382e302f32322d3234203d3e20323634323738.roa (raw, json)
Hash identifier: liepcxCvkjbCDzQ0YMEWTI1bYmZJYvKkWRO32cJjMok=
Subject key identifier: E9:EA:A2:A5:1D:18:10:52:00:83:1A:FE:F8:F8:98:82:20:BE:DE:EC
Certificate issuer: /CN=E501E8B7D257D1E26AF1E28413D4F5DD19579534
Certificate serial: 21FC53E5CC685D2E95D40D2AF8CA250870AA383F
Authority key identifier: E5:01:E8:B7:D2:57:D1:E2:6A:F1:E2:84:13:D4:F5:DD:19:57:95:34
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E501E8B7D257D1E26AF1E28413D4F5DD19579534.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/3133382e3132312e34382e302f32322d3234203d3e20323634323738.roa
Signing time: Fri 21 Mar 2025 15:57:10 +0000
ROA not before: Fri 21 Mar 2025 15:52:10 +0000
ROA not after: Fri 20 Mar 2026 15:57:10 +0000
asID: 264278
IP address blocks: 138.121.48.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:fc:53:e5:cc:68:5d:2e:95:d4:0d:2a:f8:ca:25:08:70:aa:38:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E501E8B7D257D1E26AF1E28413D4F5DD19579534
Validity
Not Before: Mar 21 15:52:10 2025 GMT
Not After : Mar 20 15:57:10 2026 GMT
Subject: CN=E9EAA2A51D18105200831AFEF8F8988220BEDEEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:8b:7c:a3:db:0e:38:a3:32:d3:8f:f3:08:3f:
61:9c:b5:34:97:82:50:c5:36:f1:70:6e:6d:e3:2a:
52:51:c7:40:f3:5a:fa:c9:02:d3:d8:6a:82:bc:05:
32:e3:b9:ff:e8:da:c3:a6:3a:e4:5f:bc:c9:18:28:
ee:21:79:47:37:a8:3c:6b:72:90:de:3d:b5:2d:ea:
f2:ac:c0:98:ef:a9:c0:fe:78:34:de:60:9f:f6:85:
41:0e:ca:10:6c:f3:62:1d:3b:9b:df:92:d7:c4:4b:
b3:fa:3e:34:fe:4f:19:83:55:26:67:9e:33:63:02:
8c:3b:5b:1d:21:90:af:b9:43:28:fa:4d:28:ba:13:
c1:f0:7e:11:ad:5a:be:a9:9b:9f:34:f2:c3:39:3a:
a4:3d:42:3a:d0:96:09:ac:7c:77:80:e0:8c:59:a4:
43:31:6f:4e:97:0e:c2:fb:0c:3b:bd:9a:5a:1d:4f:
02:cd:a1:38:63:fd:4b:50:a7:63:47:0d:61:ea:a3:
9a:df:0f:67:7d:f1:a5:0d:6a:39:3b:d1:fb:4c:1b:
a8:9d:05:66:fe:e0:30:f6:f7:c1:ca:70:56:46:bb:
bf:ac:f0:b4:3f:c4:92:40:ca:0e:9e:5b:82:cd:22:
b8:e0:26:be:1f:6a:5c:88:91:50:a6:3d:e4:78:02:
92:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:EA:A2:A5:1D:18:10:52:00:83:1A:FE:F8:F8:98:82:20:BE:DE:EC
X509v3 Authority Key Identifier:
keyid:E5:01:E8:B7:D2:57:D1:E2:6A:F1:E2:84:13:D4:F5:DD:19:57:95:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/E501E8B7D257D1E26AF1E28413D4F5DD19579534.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E501E8B7D257D1E26AF1E28413D4F5DD19579534.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/3133382e3132312e34382e302f32322d3234203d3e20323634323738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.48.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:3e:bd:5a:ba:50:1c:68:12:12:05:ae:b1:e2:2a:5a:2f:2a:
97:c4:8d:e2:12:e4:02:2b:45:4a:80:3f:04:c3:6d:54:33:a0:
77:e1:bc:02:ea:2b:7f:c0:05:07:d2:07:c1:ca:2c:2e:72:39:
a3:96:eb:f9:d1:43:8b:d8:3d:df:07:48:92:0f:3d:50:58:2b:
ba:c1:f7:ec:53:c8:8b:fb:6e:d2:96:d2:95:cc:2b:b5:44:81:
a3:35:8b:3c:b2:ee:1e:8a:a8:13:6f:f7:c4:8a:ca:28:2c:48:
62:20:b3:75:fe:52:53:cb:ea:31:d7:41:1c:ca:bb:89:b0:a4:
11:19:f8:34:9f:ec:6e:9f:a2:73:2b:83:41:e5:61:91:e9:41:
8d:fa:1c:5e:20:6f:2e:3b:a5:d6:4b:c7:8f:d6:62:e0:ae:e0:
cf:4a:25:57:08:59:2c:02:39:15:80:83:70:43:0f:84:82:d8:
ea:c5:00:d5:0e:47:fc:7b:09:e8:3a:f6:b6:1c:6e:75:7e:31:
f3:5a:0c:ac:39:1b:b9:90:66:78:f9:29:7f:8b:34:fa:b0:88:
ed:36:0d:ba:be:99:6e:76:29:d0:83:b6:5b:ce:ab:66:57:2e:
a3:e6:6f:ea:7a:0b:e7:08:92:8b:ce:1a:4d:6c:31:d5:85:76:
2e:69:65:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:39:53 2025 by rpki-client on console.sobornost.net