Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a343030303a3a2f33342d3334203d3e20323633393430.roa
File: 323830343a323831383a343030303a3a2f33342d3334203d3e20323633393430.roa (raw, json)
Hash identifier: fGmke1LzhOxRHeLksXMIqVEUvtRkKPDajqSfZc1F4hU=
Subject key identifier: B0:1A:C1:32:25:E0:8B:D0:D0:22:1C:81:5F:A3:34:6F:47:83:7E:3D
Certificate issuer: /CN=1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0
Certificate serial: 643D80AD7F0D3EBAD13AC6830A552FD77E15FF1E
Authority key identifier: 1C:27:36:B7:CF:C9:C7:EA:5B:9C:A9:D4:E0:02:80:39:6A:DF:13:B0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a343030303a3a2f33342d3334203d3e20323633393430.roa
Signing time: Wed 09 Apr 2025 14:26:38 +0000
ROA not before: Wed 09 Apr 2025 14:21:38 +0000
ROA not after: Wed 08 Apr 2026 14:26:38 +0000
asID: 263940
IP address blocks: 2804:2818:4000::/34 maxlen: 34
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:3d:80:ad:7f:0d:3e:ba:d1:3a:c6:83:0a:55:2f:d7:7e:15:ff:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0
Validity
Not Before: Apr 9 14:21:38 2025 GMT
Not After : Apr 8 14:26:38 2026 GMT
Subject: CN=B01AC13225E08BD0D0221C815FA3346F47837E3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:10:2f:c8:87:ca:5f:fd:3b:e3:03:f6:c6:a9:
3e:4e:90:b1:29:bf:aa:fc:71:f7:74:ba:73:10:66:
c1:bf:7e:4c:27:46:36:0e:b7:a1:39:12:bc:1d:b2:
b5:5e:85:d5:bf:cc:e9:f9:eb:d8:c0:5b:92:8d:83:
ac:3d:3f:61:d7:12:12:fd:37:a7:0a:27:c9:a6:18:
43:08:aa:4f:5b:6f:18:52:04:46:1c:08:46:84:d2:
1e:83:fb:46:99:37:bf:b1:b7:69:63:4b:df:a8:e2:
36:4f:26:51:6a:24:93:77:ae:64:84:1b:38:d1:34:
47:55:a4:35:16:a9:98:7d:0c:2e:74:97:e5:52:62:
76:e6:e9:cf:79:ef:b5:68:25:60:be:87:25:36:3f:
bf:e4:b3:db:30:99:0d:9f:5a:fc:ba:56:f5:ec:e5:
89:c3:d2:90:1c:35:67:0b:e1:51:3f:f6:aa:ad:f6:
58:64:63:d1:4d:46:a3:51:a8:8e:40:c5:9e:92:e5:
0d:d4:31:68:7e:1b:d0:97:6d:4f:e2:82:b8:6a:fc:
66:58:f9:75:78:e8:6f:f0:0b:71:a2:d5:11:f7:40:
b6:75:3d:5e:ea:d6:09:b5:e0:9a:54:fd:f2:d7:1f:
1e:b5:77:0f:f3:a3:11:dd:f6:d0:40:bd:3c:a4:5f:
ad:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1A:C1:32:25:E0:8B:D0:D0:22:1C:81:5F:A3:34:6F:47:83:7E:3D
X509v3 Authority Key Identifier:
keyid:1C:27:36:B7:CF:C9:C7:EA:5B:9C:A9:D4:E0:02:80:39:6A:DF:13:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a343030303a3a2f33342d3334203d3e20323633393430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2818:4000::/34
Signature Algorithm: sha256WithRSAEncryption
d9:f9:cb:6e:e1:00:ce:9e:42:0b:d7:b5:34:bf:44:79:7e:b2:
e9:49:5f:7b:7d:b8:79:c3:70:21:ea:84:1f:a2:5f:b7:81:03:
3a:df:ad:e5:48:fb:aa:ff:76:43:8f:52:fb:8e:1c:9c:5b:3a:
1d:71:fe:7e:f7:55:26:1c:ab:58:8d:da:ee:20:cd:e2:6a:e9:
fe:e9:4f:2f:62:54:f5:35:f1:b4:f2:48:79:42:8c:92:d9:b4:
9a:af:07:9a:8d:43:9d:31:1a:46:e6:25:b6:4e:ad:a0:1d:38:
6a:c8:22:03:5d:87:d0:5e:2a:32:4e:b4:f7:bc:5f:fd:ed:14:
c0:97:f9:a3:24:83:82:d6:bc:bc:c5:e5:3c:c2:f4:03:b9:e4:
77:13:91:97:22:7d:a9:3e:5f:ee:a3:fd:8e:0f:f7:31:0a:1f:
fd:fb:6d:6c:1d:8c:14:62:41:96:56:03:c4:e3:46:87:1d:54:
75:4e:fb:e5:e9:79:ec:9c:67:90:62:9f:f9:5e:60:6e:90:d3:
99:43:c2:26:ab:71:69:87:b0:b0:e4:8e:0f:c2:61:23:88:40:
85:57:4f:9f:f7:2b:dc:0f:d4:73:d6:32:9c:de:e0:39:9f:b6:
2a:65:25:94:8d:08:88:ed:34:35:3d:40:50:e3:fa:b9:58:08:
e3:74:1b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:13:36 2025 by rpki-client on console.sobornost.net