Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a633030303a3a2f33342d3334203d3e20323633393430.roa
File: 323830343a323831383a633030303a3a2f33342d3334203d3e20323633393430.roa (raw, json)
Hash identifier: hTNxZHq59LSWJgcmL/WEhP3KvaP63AV5a1pmkXRMRNY=
Subject key identifier: 0D:48:A3:D8:57:23:72:FA:C5:E7:33:24:A8:0D:FC:5C:98:CD:3B:9E
Certificate issuer: /CN=1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0
Certificate serial: 3EAA32C61EE802855983616CFD04BF58E4757D9D
Authority key identifier: 1C:27:36:B7:CF:C9:C7:EA:5B:9C:A9:D4:E0:02:80:39:6A:DF:13:B0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a633030303a3a2f33342d3334203d3e20323633393430.roa
Signing time: Wed 09 Apr 2025 14:26:38 +0000
ROA not before: Wed 09 Apr 2025 14:21:38 +0000
ROA not after: Wed 08 Apr 2026 14:26:38 +0000
asID: 263940
IP address blocks: 2804:2818:c000::/34 maxlen: 34
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:aa:32:c6:1e:e8:02:85:59:83:61:6c:fd:04:bf:58:e4:75:7d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0
Validity
Not Before: Apr 9 14:21:38 2025 GMT
Not After : Apr 8 14:26:38 2026 GMT
Subject: CN=0D48A3D8572372FAC5E73324A80DFC5C98CD3B9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5b:ca:f9:5d:7f:24:6a:ca:5b:2f:31:5e:21:
55:86:16:c6:85:97:c4:64:19:51:19:ad:82:d7:e0:
89:df:4f:96:41:19:81:ae:0b:25:a1:d8:d7:ab:14:
17:a1:f5:1b:8c:29:4a:15:6d:17:bf:b1:e6:78:4d:
9d:a7:0e:e8:c3:1b:b9:f3:39:cb:ca:1b:a9:e3:d0:
cf:0a:19:c1:d9:b8:21:a0:c8:b7:e6:3e:a3:8d:5c:
6c:7c:82:9e:44:ed:73:93:3d:56:b0:94:9b:a3:e7:
a6:80:97:62:72:5f:97:56:d4:ea:d8:65:93:ef:1e:
57:ba:a1:f9:1c:46:5e:81:38:d1:8a:25:b9:b8:d4:
94:1a:fa:3b:c6:09:a0:00:81:30:1a:b7:39:94:30:
5e:68:bb:f6:27:3c:db:57:e0:35:66:8a:f0:e1:21:
91:50:6c:aa:fc:49:5a:fd:35:b2:13:7e:1c:9f:4e:
6a:44:87:41:ac:fc:0e:cd:cf:b8:68:98:ce:20:9d:
b8:1a:b3:e6:49:df:f6:b8:bd:17:0b:2f:97:e9:d4:
e5:f6:63:56:dd:33:ca:dc:95:da:b5:4e:ac:5a:04:
dc:80:3f:17:60:56:f5:fc:e5:6f:5a:e0:8f:00:ac:
77:0d:9d:e9:99:77:bc:8b:04:31:f9:bc:43:87:11:
31:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:48:A3:D8:57:23:72:FA:C5:E7:33:24:A8:0D:FC:5C:98:CD:3B:9E
X509v3 Authority Key Identifier:
keyid:1C:27:36:B7:CF:C9:C7:EA:5B:9C:A9:D4:E0:02:80:39:6A:DF:13:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a633030303a3a2f33342d3334203d3e20323633393430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2818:c000::/34
Signature Algorithm: sha256WithRSAEncryption
9f:a8:ce:12:4f:da:3c:f4:c2:14:d6:62:1c:9c:83:81:2e:1b:
84:3b:86:95:ed:e3:a9:9f:05:76:ce:ea:0f:11:f3:9a:6b:1e:
57:0d:c4:b1:a3:6c:e3:ec:6b:56:54:bd:e5:92:2b:a3:e9:b8:
a8:2a:1a:2a:22:6b:45:fe:69:ba:6a:3f:e1:4c:ad:2f:67:66:
77:3b:86:08:82:3f:cd:ee:fd:bd:c8:c0:16:b1:e2:93:6e:06:
fe:ca:21:49:88:e9:e4:c9:3f:19:1d:1a:35:a6:a4:9a:3c:79:
5f:1b:42:7e:80:16:ea:bf:1b:a2:57:d0:f6:d7:6f:86:a9:05:
5a:27:c4:e0:9b:e7:12:56:20:68:94:4b:76:fd:91:49:c2:77:
8a:3f:80:d6:5d:8b:aa:7e:37:38:0f:2c:23:c0:8c:c0:3b:fa:
6a:fc:8f:ce:cc:8b:d3:1e:0d:d6:cf:13:49:e7:18:20:43:e8:
53:c1:ea:c6:15:96:3e:c2:21:18:64:9d:c4:54:2a:c5:29:1d:
f1:d0:ad:fa:0f:f1:5f:83:08:cd:c8:6a:d9:9c:1e:23:d4:4f:
33:15:2b:e6:12:5a:1c:74:fb:b8:17:fe:db:ae:6c:f3:82:cc:
c6:63:cf:f8:08:a3:32:13:e1:ad:b3:c6:b6:cf:5a:81:74:25:
a3:4c:40:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:13:36 2025 by rpki-client on console.sobornost.net