Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/3230302e3231392e302e302f32332d3233203d3e20323731303137.roa
File: 3230302e3231392e302e302f32332d3233203d3e20323731303137.roa (raw, json)
Hash identifier: bQyK3T5vZxA3YzeGAAXZa6xZdrmEREekJyLWpRg5rTc=
Subject key identifier: 48:84:B4:E3:B1:A4:38:E1:75:8B:42:D5:08:4E:B8:65:84:38:40:C6
Certificate issuer: /CN=8D1CD5C0B8C5A3A259C71AA293766C8CF670835E
Certificate serial: 183312EE9236167EB004829EBD08E652907D8C68
Authority key identifier: 8D:1C:D5:C0:B8:C5:A3:A2:59:C7:1A:A2:93:76:6C:8C:F6:70:83:5E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/3230302e3231392e302e302f32332d3233203d3e20323731303137.roa
Signing time: Thu 06 Mar 2025 15:37:31 +0000
ROA not before: Thu 06 Mar 2025 15:32:31 +0000
ROA not after: Thu 05 Mar 2026 15:37:31 +0000
asID: 271017
IP address blocks: 200.219.0.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:33:12:ee:92:36:16:7e:b0:04:82:9e:bd:08:e6:52:90:7d:8c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D1CD5C0B8C5A3A259C71AA293766C8CF670835E
Validity
Not Before: Mar 6 15:32:31 2025 GMT
Not After : Mar 5 15:37:31 2026 GMT
Subject: CN=4884B4E3B1A438E1758B42D5084EB865843840C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ed:9f:31:0d:8c:04:98:ad:7d:be:4d:a5:89:
07:4d:df:ed:71:2c:36:dc:9f:5b:7a:b9:3b:0f:31:
49:64:6c:c8:b8:de:d4:b7:9a:fa:24:10:51:40:d9:
66:ce:23:3a:80:72:cd:4b:52:ed:61:56:50:06:30:
5e:73:67:f2:01:6c:82:b8:e0:30:74:92:7a:90:34:
6d:3d:e7:7c:78:bd:94:7c:59:32:7d:1c:a3:11:c7:
16:8c:01:57:d9:47:98:81:99:d3:b3:41:cb:20:0c:
7b:e8:a2:a7:8d:a0:6c:ea:8a:34:24:a6:4d:b5:a8:
e9:98:e8:a9:f9:d1:42:d0:0d:dc:f4:ee:e1:b9:37:
82:65:f7:ce:6e:92:a1:c1:46:a9:46:16:a9:ef:67:
24:26:c6:ec:31:3f:d1:8a:ef:bc:bc:d0:ff:4e:95:
88:d1:c9:35:62:8d:1b:25:08:2c:0d:8d:9e:b5:f5:
be:36:88:fa:f4:dd:e5:87:59:e1:ef:e6:7c:dd:80:
cb:40:fa:b5:65:8f:16:96:70:2c:6f:08:b5:89:16:
ab:92:72:91:0c:55:d4:77:f2:d6:bb:38:2f:20:45:
b9:29:4a:61:42:07:70:7b:4d:d8:c0:9a:7a:06:64:
4c:44:8a:74:ee:d3:60:7a:5e:24:af:a2:21:61:2e:
18:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:84:B4:E3:B1:A4:38:E1:75:8B:42:D5:08:4E:B8:65:84:38:40:C6
X509v3 Authority Key Identifier:
keyid:8D:1C:D5:C0:B8:C5:A3:A2:59:C7:1A:A2:93:76:6C:8C:F6:70:83:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/3230302e3231392e302e302f32332d3233203d3e20323731303137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.219.0.0/23
Signature Algorithm: sha256WithRSAEncryption
87:0e:ab:b9:cf:b0:40:8c:bb:d0:76:29:e7:4b:9f:a5:84:ae:
17:6a:fc:7b:bf:88:a8:d7:5c:e1:4d:86:dc:e7:b6:dd:55:f5:
96:4d:8d:2c:fc:47:f5:11:01:51:49:d6:6d:1b:e1:f5:c1:bc:
77:d8:90:79:53:9e:22:f0:66:d2:9e:04:e8:7b:66:24:5b:77:
68:13:09:56:7e:f0:45:a4:84:15:11:54:39:fa:46:b4:67:66:
cd:35:97:37:e5:1a:fb:1b:df:f3:de:05:de:21:b0:bf:e9:6e:
aa:db:2f:f2:3a:eb:06:66:93:11:e3:4d:3a:0f:38:1d:1b:bc:
ee:5a:d7:8d:77:cb:b6:20:15:dc:67:12:9c:4a:6a:bb:31:fe:
3c:a5:74:7d:36:ce:ee:4f:77:60:54:6c:f8:6d:73:67:29:2a:
95:08:fe:fd:84:3a:7c:4c:fa:dd:8b:43:85:ca:08:e1:32:98:
8e:91:86:4f:a3:a5:d9:07:07:15:16:dc:ee:6b:1f:d2:e5:04:
7a:6d:b0:c9:1f:62:2d:b4:47:aa:c6:5b:c3:54:10:d7:4c:1a:
9d:e8:32:2f:63:4e:94:ce:8b:1c:9d:b7:67:7c:7c:d5:75:65:
77:08:dd:72:7a:f0:6b:28:32:72:63:d9:43:c5:a4:90:64:e7:
8d:74:36:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 18 22:24:13 2025 by rpki-client on console.sobornost.net