Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/3136382e3139362e3139362e302f32322d3232203d3e20323730393830.roa
File: 3136382e3139362e3139362e302f32322d3232203d3e20323730393830.roa (raw, json)
Hash identifier: am5K9grVt7QETB+dYF0JoBhghr8FbdElTDYE+fasiR4=
Subject key identifier: 4C:1E:32:97:D5:55:05:E6:0D:2C:25:2B:17:E5:BC:94:E5:33:9D:69
Certificate issuer: /CN=E8C5040EBFAB6D8F720040E80E512CBD965591B2
Certificate serial: 32B3626F559B6CD8C8AF793EE2B6ABDB79CC5821
Authority key identifier: E8:C5:04:0E:BF:AB:6D:8F:72:00:40:E8:0E:51:2C:BD:96:55:91:B2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C5040EBFAB6D8F720040E80E512CBD965591B2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/3136382e3139362e3139362e302f32322d3232203d3e20323730393830.roa
Signing time: Mon 07 Apr 2025 21:00:21 +0000
ROA not before: Mon 07 Apr 2025 20:55:21 +0000
ROA not after: Mon 06 Apr 2026 21:00:21 +0000
asID: 270980
IP address blocks: 168.196.196.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:b3:62:6f:55:9b:6c:d8:c8:af:79:3e:e2:b6:ab:db:79:cc:58:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E8C5040EBFAB6D8F720040E80E512CBD965591B2
Validity
Not Before: Apr 7 20:55:21 2025 GMT
Not After : Apr 6 21:00:21 2026 GMT
Subject: CN=4C1E3297D55505E60D2C252B17E5BC94E5339D69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:53:8c:9e:1c:71:9d:e7:d7:6f:6e:8c:0e:e2:
f7:e5:3e:dd:11:3a:98:63:90:6b:48:85:39:22:d2:
b3:b9:21:00:ae:9c:ca:1a:2d:f7:28:9e:2d:38:0d:
70:a0:90:80:d2:ce:61:18:a6:73:a6:49:78:27:9f:
cf:b1:b2:c9:df:5f:c5:fb:f3:bc:0f:38:8b:e9:76:
c4:e6:c8:b3:93:cc:72:3a:da:1e:69:79:74:00:3a:
a8:92:88:ad:55:0e:1e:13:f7:20:dd:51:82:2b:65:
92:ac:a1:2a:55:60:97:28:b6:1e:f5:1e:ee:fb:59:
93:45:53:dd:e2:7c:98:8b:79:9e:2a:ab:f7:eb:46:
19:9b:d6:21:0a:bd:3c:31:c6:56:54:e7:00:49:e7:
49:80:b2:5c:3c:21:b7:97:b9:1a:e1:49:9d:c8:a6:
ff:f6:30:69:65:c8:ea:6e:16:8c:bd:ae:e9:6f:45:
16:b6:08:a1:02:0e:65:18:0e:47:af:fa:24:73:00:
38:6e:8b:f8:25:2a:da:eb:14:c6:88:d4:c9:d3:1d:
2f:f2:30:12:4c:4a:57:e2:9f:d3:17:df:fb:22:fd:
a9:e1:1e:66:61:60:5c:dd:dc:b1:6a:9e:96:7a:bc:
64:99:fe:a4:7e:9b:9c:08:d9:34:1e:85:7e:b9:e9:
86:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1E:32:97:D5:55:05:E6:0D:2C:25:2B:17:E5:BC:94:E5:33:9D:69
X509v3 Authority Key Identifier:
keyid:E8:C5:04:0E:BF:AB:6D:8F:72:00:40:E8:0E:51:2C:BD:96:55:91:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/E8C5040EBFAB6D8F720040E80E512CBD965591B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C5040EBFAB6D8F720040E80E512CBD965591B2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/3136382e3139362e3139362e302f32322d3232203d3e20323730393830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.196.196.0/22
Signature Algorithm: sha256WithRSAEncryption
72:ec:f1:85:77:94:37:45:f6:b4:0e:f4:31:1c:46:14:69:7f:
18:63:83:6a:a6:9a:dc:cf:35:77:1e:8f:c5:a3:56:6f:46:71:
f6:5e:69:5f:4c:af:8f:78:fa:54:c3:f1:43:ce:70:2d:91:b8:
98:b4:0d:2e:9a:c4:6e:03:ed:82:59:00:5a:1b:a0:12:e5:10:
a5:21:fb:df:8b:ec:6a:f4:c9:7d:3c:fa:01:06:0d:7c:ca:2d:
c8:b5:03:01:4c:2e:2f:7b:e2:8d:cd:e3:f6:48:18:5a:19:45:
7a:90:82:a5:b3:4c:cb:7f:ff:21:55:63:3a:f2:59:1a:b3:ef:
0f:fc:7b:c2:d6:1c:64:b1:80:4a:c6:d1:c0:0b:c5:b7:76:51:
d8:c1:30:15:5d:d0:d7:86:35:95:3a:18:84:09:cc:a2:24:90:
59:d8:78:6d:ff:55:b4:68:d2:ba:11:99:6d:7d:a6:d1:81:d7:
d0:50:12:33:ab:e7:54:ed:b2:7c:09:94:7b:ae:8e:eb:80:a3:
51:c5:b0:5c:93:9f:0f:c3:9e:93:83:52:7c:1e:d5:b8:93:60:
94:03:4b:53:71:c3:ca:29:25:44:41:14:a0:d1:fa:6b:43:af:
2e:6c:b7:78:49:a1:24:41:eb:d7:73:5e:ae:a3:b8:6e:c4:f0:
f7:52:d3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:13:35 2025 by rpki-client on console.sobornost.net