Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/323830343a3262383a3a2f33322d3438203d3e20313938393439.roa
File: 323830343a3262383a3a2f33322d3438203d3e20313938393439.roa (raw, json)
Hash identifier: GXEJaZBgf9i2TMzcCpIT5aKQeriMWEMnJR8EdUBVTV4=
Subject key identifier: C6:27:FF:A4:A4:AD:C2:80:B8:1A:57:75:47:12:5E:20:B9:7F:10:8F
Certificate issuer: /CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
Certificate serial: 7877C0077CB3AAD40C9A2C24EB6451100924F407
Authority key identifier: 4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/323830343a3262383a3a2f33322d3438203d3e20313938393439.roa
Signing time: Wed 16 Apr 2025 00:29:40 +0000
ROA not before: Wed 16 Apr 2025 00:24:40 +0000
ROA not after: Wed 15 Apr 2026 00:29:40 +0000
asID: 198949
IP address blocks: 2804:2b8::/32 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:77:c0:07:7c:b3:aa:d4:0c:9a:2c:24:eb:64:51:10:09:24:f4:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
Validity
Not Before: Apr 16 00:24:40 2025 GMT
Not After : Apr 15 00:29:40 2026 GMT
Subject: CN=C627FFA4A4ADC280B81A577547125E20B97F108F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:02:f9:f4:3a:b6:e6:df:50:48:b6:1e:55:42:
b9:9d:66:dc:4d:ac:80:a8:f2:71:21:06:44:12:1b:
43:32:5c:56:15:d4:4d:7f:7f:de:04:03:b4:3f:32:
d2:c1:e9:8b:3e:48:5f:3e:14:06:81:ba:9b:f4:85:
e8:70:b9:4b:88:42:05:80:99:c8:d3:92:c1:cf:76:
c9:56:85:d6:74:58:ae:d0:16:39:44:92:98:1a:53:
28:60:c5:3f:2a:9f:23:79:0d:60:1d:4e:35:94:93:
f6:f6:97:1f:6e:58:aa:49:d9:f7:ca:73:37:ce:54:
05:18:55:f7:e0:28:82:74:c5:4c:5e:f4:8b:f1:df:
d5:8c:80:b7:48:03:4d:63:9d:e4:08:b6:19:4a:fa:
b0:6f:61:99:d0:b9:18:46:d9:5c:b3:c6:6d:c9:34:
70:38:a8:db:8b:4a:d9:ea:34:89:9c:25:de:92:5f:
f2:6e:d0:a7:00:51:0a:2b:e4:8e:50:38:eb:26:6e:
40:5e:01:d4:5b:63:7c:d6:76:00:9b:7b:d5:a8:20:
4c:e5:93:a3:7c:da:83:5f:a3:9d:a5:d9:6d:89:c5:
fb:9c:f1:b7:52:5d:39:00:be:11:68:d7:a7:46:a2:
da:73:59:ed:a9:fd:47:b4:4e:ac:4d:6c:11:00:54:
84:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:27:FF:A4:A4:AD:C2:80:B8:1A:57:75:47:12:5E:20:B9:7F:10:8F
X509v3 Authority Key Identifier:
keyid:4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/323830343a3262383a3a2f33322d3438203d3e20313938393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2b8::/32
Signature Algorithm: sha256WithRSAEncryption
17:39:4b:cd:03:20:4c:fe:38:a3:67:ee:9d:50:41:94:d0:dd:
c5:96:30:dd:b9:22:3f:1b:fc:2b:87:85:fc:44:75:6a:3c:7b:
c5:96:0d:fc:14:d0:36:e4:20:04:ca:bb:5a:e3:de:f9:70:b2:
62:2c:aa:a5:7c:ad:ff:a8:d1:7a:9a:92:1b:e8:80:1e:b6:5e:
e3:34:e2:54:3e:0c:2d:70:35:b4:16:ba:af:c2:dd:14:21:85:
01:66:4e:5b:7d:01:ce:ba:e0:e6:70:86:c6:11:e9:02:d7:50:
f3:ef:3b:e1:fc:22:e1:c7:b9:9f:c2:f5:ad:e1:60:48:9c:6f:
fa:32:d7:36:1d:43:33:f6:5a:3d:9e:f1:04:7b:3f:16:b9:4b:
5e:bb:5e:92:61:a0:ee:9f:a8:da:e1:5a:16:2a:e7:f4:02:d5:
fa:76:76:a1:bb:ec:15:aa:f0:50:2e:83:29:47:00:40:b3:70:
b5:97:02:2b:54:3b:7b:8f:f9:b9:3e:55:41:e0:4b:a2:ac:9d:
60:bf:7c:c9:3a:7c:49:f0:2f:18:c7:31:74:2a:6a:02:75:8d:
28:2b:bd:0c:dd:b0:d7:c6:11:38:1d:ba:0b:7f:c3:c2:58:28:
b2:3e:d2:74:d6:fc:41:42:79:56:fc:71:7d:6e:82:cf:54:2c:
8e:e4:9f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 04:18:51 2025 by rpki-client on console.sobornost.net