Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235322e302f32342d3234203d3e20323633393430.roa
File: 3133382e3138352e3235322e302f32342d3234203d3e20323633393430.roa (raw, json)
Hash identifier: kcjCvRazvFCDuiQh3FYBh6BGqBJvemQTOFpcE1yLSZg=
Subject key identifier: 19:F1:8C:8E:63:EC:F4:CA:F9:7D:27:8E:13:36:D9:27:8A:0E:96:EF
Certificate issuer: /CN=1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0
Certificate serial: 38B2DD1970C0EF20B8911B2247E55A57B5930A1E
Authority key identifier: 1C:27:36:B7:CF:C9:C7:EA:5B:9C:A9:D4:E0:02:80:39:6A:DF:13:B0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235322e302f32342d3234203d3e20323633393430.roa
Signing time: Wed 09 Apr 2025 14:26:38 +0000
ROA not before: Wed 09 Apr 2025 14:21:38 +0000
ROA not after: Wed 08 Apr 2026 14:26:38 +0000
asID: 263940
IP address blocks: 138.185.252.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:b2:dd:19:70:c0:ef:20:b8:91:1b:22:47:e5:5a:57:b5:93:0a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0
Validity
Not Before: Apr 9 14:21:38 2025 GMT
Not After : Apr 8 14:26:38 2026 GMT
Subject: CN=19F18C8E63ECF4CAF97D278E1336D9278A0E96EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:19:76:f3:97:48:e4:d6:25:53:c1:8f:6a:66:
c5:63:58:4a:6a:50:b8:f6:5b:ba:b8:5f:e3:93:0e:
75:45:59:d7:33:68:87:44:0e:95:26:21:00:ab:70:
22:c6:6c:bf:29:05:52:e1:d2:22:99:19:62:4c:ee:
f7:fd:65:37:c8:67:1c:73:e5:f1:9f:94:c7:2b:e6:
1f:4d:ca:89:98:f4:c8:25:2e:77:16:d3:7f:7b:4c:
fb:12:8f:bd:e5:2e:9b:74:da:e1:89:61:a2:be:8a:
b9:f0:55:4c:e5:8b:09:dc:99:44:96:1c:1b:6d:55:
c0:6a:4b:3e:23:3b:85:ea:62:d4:ad:e0:d3:ff:70:
89:5c:ef:e6:74:77:6f:e4:fa:b0:7c:90:f2:70:09:
f7:e8:71:c0:76:f5:f3:c4:8b:67:a2:e5:77:d0:6f:
be:7b:66:2a:34:cf:57:6f:90:11:04:9b:f8:b2:ef:
67:f9:8e:5d:b3:f6:bb:e5:fe:1a:b9:ee:94:7b:a0:
75:cf:20:98:0b:7e:ae:8b:50:b0:3a:d7:4f:4a:25:
61:cd:9a:7d:a7:e5:0a:2a:81:5d:ac:31:b0:a4:8f:
86:b7:83:69:cf:c1:09:3f:a7:dc:e5:54:80:0a:f9:
48:ee:74:37:14:4c:68:dc:9f:9c:2a:cf:c3:19:a4:
9d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F1:8C:8E:63:EC:F4:CA:F9:7D:27:8E:13:36:D9:27:8A:0E:96:EF
X509v3 Authority Key Identifier:
keyid:1C:27:36:B7:CF:C9:C7:EA:5B:9C:A9:D4:E0:02:80:39:6A:DF:13:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235322e302f32342d3234203d3e20323633393430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.252.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:ee:8b:ae:c4:57:16:fe:f6:d2:4c:5c:55:8f:cc:cb:76:2c:
84:87:de:95:f5:3f:d7:00:22:6d:de:db:05:d4:8f:a8:9b:53:
68:22:ac:ab:bf:57:fa:bc:36:3e:82:c5:ee:f1:2d:27:b0:3c:
5b:87:85:88:ba:b4:31:7f:40:2e:68:4e:e3:3a:b5:7f:79:13:
b7:0c:9a:a3:ac:5c:8b:be:62:71:b3:db:14:f3:a2:20:2a:b1:
b5:f2:02:d6:53:6e:45:12:2e:f2:20:ac:9a:bf:0d:b4:0e:6d:
a7:38:27:34:2e:88:8a:48:d5:15:9e:66:3f:d2:09:6c:ce:c4:
51:a5:9e:f6:47:b9:35:86:ac:32:49:19:17:54:62:2c:db:a1:
f2:ad:92:9b:11:62:d2:e4:83:a1:05:ec:45:eb:d8:02:e6:54:
1d:04:8b:43:d3:29:a5:34:f3:a6:37:c7:14:27:88:6d:7c:0a:
72:2f:79:8d:d3:2e:4d:9f:55:61:1a:aa:49:97:5f:1f:7d:5d:
24:66:5d:6e:40:27:51:9e:3e:91:b5:af:56:0a:24:bd:7d:2f:
36:b9:d2:e2:ab:ce:fb:9b:49:a5:87:2c:ca:aa:fa:bf:be:ed:
75:bc:b1:a6:08:bd:4e:58:10:74:97:ac:46:bb:d1:a0:85:52:
70:cd:dc:be
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUOLLdGXDA7yC4kRsiR+VaV7WTCh4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUMyNzM2QjdDRkM5QzdFQTVCOUNBOUQ0RTAwMjgwMzk2
QURGMTNCMDAeFw0yNTA0MDkxNDIxMzhaFw0yNjA0MDgxNDI2MzhaMDMxMTAvBgNV
BAMTKDE5RjE4QzhFNjNFQ0Y0Q0FGOTdEMjc4RTEzMzZEOTI3OEEwRTk2RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkGXbzl0jk1iVTwY9qZsVjWEpq
ULj2W7q4X+OTDnVFWdczaIdEDpUmIQCrcCLGbL8pBVLh0iKZGWJM7vf9ZTfIZxxz
5fGflMcr5h9NyomY9MglLncW0397TPsSj73lLpt02uGJYaK+irnwVUzliwncmUSW
HBttVcBqSz4jO4XqYtSt4NP/cIlc7+Z0d2/k+rB8kPJwCffoccB29fPEi2ei5XfQ
b757Zio0z1dvkBEEm/iy72f5jl2z9rvl/hq57pR7oHXPIJgLfq6LULA6109KJWHN
mn2n5QoqgV2sMbCkj4a3g2nPwQk/p9zlVIAK+UjudDcUTGjcn5wqz8MZpJ0xAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUGfGMjmPs9Mr5fSeOEzbZJ4oOlu8wHwYDVR0j
BBgwFoAUHCc2t8/Jx+pbnKnU4AKAOWrfE7AwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9ZbzhRZVRidUtaMjU5aTVxU1lqZWVVOG9rS0FLVTZMOFpGdTFHNVdMVDFI
LzAvMUMyNzM2QjdDRkM5QzdFQTVCOUNBOUQ0RTAwMjgwMzk2QURGMTNCMC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8xQzI3MzZCN0NGQzlDN0VBNUI5
Q0E5RDRFMDAyODAzOTZBREYxM0IwLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Z
bzhRZVRidUtaMjU5aTVxU1lqZWVVOG9rS0FLVTZMOFpGdTFHNVdMVDFILzAvMzEz
MzM4MmUzMTM4MzUyZTMyMzUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYz
MzM5MzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAIq5/DANBgkqhkiG9w0BAQsFAAOCAQEADe6LrsRX
Fv720kxcVY/My3YshIfelfU/1wAibd7bBdSPqJtTaCKsq79X+rw2PoLF7vEtJ7A8
W4eFiLq0MX9ALmhO4zq1f3kTtwyao6xci75icbPbFPOiICqxtfIC1lNuRRIu8iCs
mr8NtA5tpzgnNC6IikjVFZ5mP9IJbM7EUaWe9ke5NYasMkkZF1RiLNuh8q2SmxFi
0uSDoQXsRevYAuZUHQSLQ9MppTTzpjfHFCeIbXwKci95jdMuTZ9VYRqqSZdfH31d
JGZdbkAnUZ4+kbWvVgokvX0vNrnS4qvO+5tJpYcsyqr6v77tdbyxpgi9TlgQdJes
RrvRoIVScM3cvg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:13:35 2025 by rpki-client on console.sobornost.net