Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235342e302f32342d3234203d3e20323633393430.roa
File: 3133382e3138352e3235342e302f32342d3234203d3e20323633393430.roa (raw, json)
Hash identifier: 1RNXWZSIleRBkeEvpa73VNxJYaF/o86Npnrj3Tv4fIU=
Subject key identifier: 5B:15:93:8C:47:38:91:86:AF:EB:A2:E0:38:28:DC:B4:F1:F8:F0:70
Certificate issuer: /CN=1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0
Certificate serial: 04706A02FBB1435B7B43005C70877BBA31867F89
Authority key identifier: 1C:27:36:B7:CF:C9:C7:EA:5B:9C:A9:D4:E0:02:80:39:6A:DF:13:B0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235342e302f32342d3234203d3e20323633393430.roa
Signing time: Wed 09 Apr 2025 14:26:38 +0000
ROA not before: Wed 09 Apr 2025 14:21:38 +0000
ROA not after: Wed 08 Apr 2026 14:26:38 +0000
asID: 263940
IP address blocks: 138.185.254.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:70:6a:02:fb:b1:43:5b:7b:43:00:5c:70:87:7b:ba:31:86:7f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0
Validity
Not Before: Apr 9 14:21:38 2025 GMT
Not After : Apr 8 14:26:38 2026 GMT
Subject: CN=5B15938C47389186AFEBA2E03828DCB4F1F8F070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:eb:87:0f:20:53:db:cd:e8:1f:0f:53:f9:2a:
25:86:f9:40:7e:3b:b9:0c:02:f9:be:9d:7e:58:97:
a8:f6:27:bf:f5:79:d8:a8:20:38:e5:b2:27:65:ff:
26:e6:95:96:7a:4c:5d:52:a6:f5:06:d3:32:82:9c:
04:5d:6d:3e:79:b2:57:aa:e1:5f:c5:47:77:97:1a:
0c:d7:64:bf:c9:f0:87:f2:c8:8e:23:d1:82:47:f7:
f7:6f:36:00:2c:58:d4:48:d4:83:b5:8d:9a:3c:76:
3b:58:2a:71:b1:9f:d4:79:c7:b3:af:9e:cf:d2:19:
b2:9a:ce:2f:93:4e:5e:c8:c6:e2:20:43:98:02:a4:
51:b1:96:70:8e:5e:00:f6:8d:23:52:21:12:ae:eb:
51:ce:d5:5b:bb:0a:09:3e:03:71:29:45:d0:a1:a7:
40:f4:22:5f:92:fd:b0:92:3e:16:97:b0:a9:70:87:
e4:a7:14:e3:b3:71:79:35:b4:d0:67:a5:9b:45:a4:
93:68:3f:34:15:18:1c:91:6e:bf:bf:82:e0:b8:29:
c5:d7:7d:18:a5:c8:ad:20:44:fa:e4:83:26:c1:aa:
29:1a:fb:3c:46:60:0c:6e:d8:56:9d:90:c2:7e:35:
a1:7a:c4:e3:fd:d7:9f:28:42:45:7a:e4:40:8d:24:
63:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:15:93:8C:47:38:91:86:AF:EB:A2:E0:38:28:DC:B4:F1:F8:F0:70
X509v3 Authority Key Identifier:
keyid:1C:27:36:B7:CF:C9:C7:EA:5B:9C:A9:D4:E0:02:80:39:6A:DF:13:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235342e302f32342d3234203d3e20323633393430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.254.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:bc:06:bf:ec:5c:7c:0d:7c:2a:1b:bd:89:2a:1c:5b:9d:3e:
53:ce:22:19:e6:ca:0d:58:09:4b:1f:86:f6:05:8e:66:12:fb:
45:76:b1:97:c5:dd:8f:61:ae:90:d1:1c:cf:cf:f4:bf:3f:3f:
13:f4:d8:42:6a:cd:14:09:76:9a:eb:f2:8c:6d:ac:a3:05:2b:
56:65:a6:a5:43:38:eb:16:a0:c1:de:fa:cd:08:88:d5:88:ae:
03:64:be:3b:f5:62:22:d5:b6:8d:18:60:1c:f6:da:7b:5c:ff:
d3:a9:65:f5:09:96:b0:6c:ca:1e:9d:ef:d8:c5:46:d2:55:18:
e3:a3:60:ca:ed:62:c0:f7:82:71:5a:50:42:d0:00:08:11:22:
23:27:ee:06:39:cd:04:fd:ab:b2:8f:1f:2a:ab:7b:ec:e2:92:
86:50:5a:5e:d9:a6:27:20:1f:c7:eb:57:80:a0:00:50:58:77:
04:cb:b5:9a:b8:e5:08:02:e0:41:0e:8f:f9:4a:af:cb:e8:69:
1f:94:94:d0:b0:c5:55:5a:78:0f:94:0e:75:fe:7b:a3:43:1f:
aa:e0:38:4a:f0:9b:cf:8b:83:91:cf:22:3c:08:e1:ff:82:ee:
79:bc:8f:af:c7:35:8a:d2:1e:7f:2f:cf:88:42:5a:87:a1:37:
0a:dd:7d:1c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUBHBqAvuxQ1t7QwBccId7ujGGf4kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUMyNzM2QjdDRkM5QzdFQTVCOUNBOUQ0RTAwMjgwMzk2
QURGMTNCMDAeFw0yNTA0MDkxNDIxMzhaFw0yNjA0MDgxNDI2MzhaMDMxMTAvBgNV
BAMTKDVCMTU5MzhDNDczODkxODZBRkVCQTJFMDM4MjhEQ0I0RjFGOEYwNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ64cPIFPbzegfD1P5KiWG+UB+
O7kMAvm+nX5Yl6j2J7/1edioIDjlsidl/ybmlZZ6TF1SpvUG0zKCnARdbT55sleq
4V/FR3eXGgzXZL/J8IfyyI4j0YJH9/dvNgAsWNRI1IO1jZo8djtYKnGxn9R5x7Ov
ns/SGbKazi+TTl7IxuIgQ5gCpFGxlnCOXgD2jSNSIRKu61HO1Vu7Cgk+A3EpRdCh
p0D0Il+S/bCSPhaXsKlwh+SnFOOzcXk1tNBnpZtFpJNoPzQVGByRbr+/guC4KcXX
fRilyK0gRPrkgybBqika+zxGYAxu2FadkMJ+NaF6xOP9158oQkV65ECNJGO7AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUWxWTjEc4kYav66LgOCjctPH48HAwHwYDVR0j
BBgwFoAUHCc2t8/Jx+pbnKnU4AKAOWrfE7AwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9ZbzhRZVRidUtaMjU5aTVxU1lqZWVVOG9rS0FLVTZMOFpGdTFHNVdMVDFI
LzAvMUMyNzM2QjdDRkM5QzdFQTVCOUNBOUQ0RTAwMjgwMzk2QURGMTNCMC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8xQzI3MzZCN0NGQzlDN0VBNUI5
Q0E5RDRFMDAyODAzOTZBREYxM0IwLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Z
bzhRZVRidUtaMjU5aTVxU1lqZWVVOG9rS0FLVTZMOFpGdTFHNVdMVDFILzAvMzEz
MzM4MmUzMTM4MzUyZTMyMzUzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYz
MzM5MzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAIq5/jANBgkqhkiG9w0BAQsFAAOCAQEAuLwGv+xc
fA18Khu9iSocW50+U84iGebKDVgJSx+G9gWOZhL7RXaxl8Xdj2GukNEcz8/0vz8/
E/TYQmrNFAl2muvyjG2sowUrVmWmpUM46xagwd76zQiI1YiuA2S+O/ViItW2jRhg
HPbae1z/06ll9QmWsGzKHp3v2MVG0lUY46Ngyu1iwPeCcVpQQtAACBEiIyfuBjnN
BP2rso8fKqt77OKShlBaXtmmJyAfx+tXgKAAUFh3BMu1mrjlCALgQQ6P+Uqvy+hp
H5SU0LDFVVp4D5QOdf57o0MfquA4SvCbz4uDkc8iPAjh/4LuebyPr8c1itIefy/P
iEJah6E3Ct19HA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:13:35 2025 by rpki-client on console.sobornost.net