Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235322e302f32322d3232203d3e20323633393430.roa
File: 3133382e3138352e3235322e302f32322d3232203d3e20323633393430.roa (raw, json)
Hash identifier: QOmUWm9Yt33PAm+fWG+bzZGLHOsV9CbYdLnbJXXBqUg=
Subject key identifier: 4F:5D:C0:3F:9C:A2:76:0D:0C:0E:D6:AA:1D:62:6F:43:56:A7:C1:31
Certificate issuer: /CN=1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0
Certificate serial: 77196B0489BB4B36B1C1E2ABDC794316DE21D0E1
Authority key identifier: 1C:27:36:B7:CF:C9:C7:EA:5B:9C:A9:D4:E0:02:80:39:6A:DF:13:B0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235322e302f32322d3232203d3e20323633393430.roa
Signing time: Wed 09 Apr 2025 14:26:39 +0000
ROA not before: Wed 09 Apr 2025 14:21:39 +0000
ROA not after: Wed 08 Apr 2026 14:26:39 +0000
asID: 263940
IP address blocks: 138.185.252.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:19:6b:04:89:bb:4b:36:b1:c1:e2:ab:dc:79:43:16:de:21:d0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0
Validity
Not Before: Apr 9 14:21:39 2025 GMT
Not After : Apr 8 14:26:39 2026 GMT
Subject: CN=4F5DC03F9CA2760D0C0ED6AA1D626F4356A7C131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e8:15:93:43:a9:f9:39:f2:78:24:e8:ba:54:
69:07:f9:2a:f3:9f:32:7e:ed:b8:55:c4:cf:55:3e:
45:3d:02:11:56:c0:38:b7:4d:1e:0d:d1:26:e5:6a:
4a:c8:c7:a5:59:41:67:12:50:ec:81:cd:35:b2:6c:
5b:ef:85:13:6b:86:40:35:c3:50:b6:7c:1b:b1:39:
a3:55:97:61:2b:16:11:53:7c:3f:fe:a2:79:a6:d5:
4a:6a:0f:30:9a:c9:85:d5:9d:c1:49:e8:14:01:a5:
a7:64:51:5d:09:97:d2:76:28:7e:b0:88:59:3e:e5:
5f:15:94:3d:71:96:fe:bb:8c:64:63:34:b5:fb:76:
28:74:3d:0d:9d:f7:a8:3b:4b:a0:5c:ee:6a:d1:4f:
29:9d:ff:6c:51:ed:7c:f3:25:c9:4d:c5:3f:8d:b3:
21:b4:47:c2:45:6f:f9:0f:72:b0:53:0a:49:8f:b1:
65:ce:ce:82:4c:0f:7e:08:07:3b:a4:6a:31:71:77:
db:ec:59:c7:af:73:b2:89:fe:d2:ee:30:38:d3:68:
1e:5b:ce:7f:a2:67:4c:6f:cd:87:0a:c9:5a:1e:ba:
90:25:97:ff:6b:ef:75:8f:f4:23:64:33:0c:32:b2:
eb:37:4e:e6:5f:04:23:e8:b0:0a:45:d7:8a:f2:72:
41:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5D:C0:3F:9C:A2:76:0D:0C:0E:D6:AA:1D:62:6F:43:56:A7:C1:31
X509v3 Authority Key Identifier:
keyid:1C:27:36:B7:CF:C9:C7:EA:5B:9C:A9:D4:E0:02:80:39:6A:DF:13:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235322e302f32322d3232203d3e20323633393430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.252.0/22
Signature Algorithm: sha256WithRSAEncryption
dd:9d:90:a1:6a:1e:1c:e9:bf:2b:57:09:0e:e3:11:8e:70:dd:
62:6c:88:68:82:3c:17:6e:c9:74:74:51:84:f1:7d:eb:b5:ff:
48:92:e5:7b:68:e0:50:2e:14:81:94:cd:51:d3:95:ed:b3:2c:
3f:c9:6a:7b:6f:94:ab:fb:65:53:00:cc:65:67:11:54:1d:2f:
1e:f5:02:4a:f8:b1:ad:57:26:46:75:45:25:e8:15:a3:42:ce:
02:ad:e1:d9:3d:9f:a7:cf:c7:a3:67:57:eb:77:f6:ee:d6:b6:
85:06:b9:f4:30:b3:08:fb:2a:a9:20:9e:9d:05:cb:ad:e4:92:
8c:a2:83:3a:fb:7d:c8:c7:4b:07:1d:c3:3f:a7:40:34:a4:c5:
5d:e4:c9:d1:05:3d:83:16:bb:f3:8d:c3:24:06:45:9b:d5:d6:
5b:1c:34:a3:27:1f:38:36:60:91:d1:99:2a:fe:40:22:e5:9e:
5b:a1:e0:73:7d:fa:b0:9c:f6:03:df:a1:95:cd:da:c1:8d:3e:
0b:23:91:41:2d:4e:c6:d4:7b:3c:06:76:82:4e:53:ec:bd:ce:
66:f9:13:71:9e:37:3a:c4:76:2b:82:c2:dc:d7:17:88:fa:ef:
9e:fe:61:5d:75:e5:55:e2:1e:ec:02:31:4c:e6:30:ee:91:f8:
5c:f5:e5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:13:35 2025 by rpki-client on console.sobornost.net