Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/3230302e3231392e302e302f32342d3234203d3e20323731303137.roa
File: 3230302e3231392e302e302f32342d3234203d3e20323731303137.roa (raw, json)
Hash identifier: E+vOY5ByaLjhKnZug+L59IM9Zl1PcS2pD/jZdu56/uQ=
Subject key identifier: 05:EE:CC:FD:73:C8:CE:3A:91:B3:62:FA:6D:DD:0F:88:38:53:91:C2
Certificate issuer: /CN=8D1CD5C0B8C5A3A259C71AA293766C8CF670835E
Certificate serial: 40AF3546DC8D4869E1572E8012DEF0269813D594
Authority key identifier: 8D:1C:D5:C0:B8:C5:A3:A2:59:C7:1A:A2:93:76:6C:8C:F6:70:83:5E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/3230302e3231392e302e302f32342d3234203d3e20323731303137.roa
Signing time: Thu 06 Mar 2025 15:37:30 +0000
ROA not before: Thu 06 Mar 2025 15:32:30 +0000
ROA not after: Thu 05 Mar 2026 15:37:30 +0000
asID: 271017
IP address blocks: 200.219.0.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:af:35:46:dc:8d:48:69:e1:57:2e:80:12:de:f0:26:98:13:d5:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D1CD5C0B8C5A3A259C71AA293766C8CF670835E
Validity
Not Before: Mar 6 15:32:30 2025 GMT
Not After : Mar 5 15:37:30 2026 GMT
Subject: CN=05EECCFD73C8CE3A91B362FA6DDD0F88385391C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:76:48:f4:7a:76:70:2c:cc:4b:9e:85:ee:3b:
e3:82:9e:71:69:52:10:99:82:d5:ec:32:81:fd:71:
61:d2:75:ee:bf:2a:6f:a6:c5:70:49:94:53:30:9f:
f5:b5:b1:e7:f1:c3:bb:7f:e7:14:fa:b6:23:2b:19:
0c:c8:42:d1:c5:09:2f:bc:b4:97:71:37:6b:66:c3:
98:13:b9:04:98:fa:10:2e:0a:92:0f:14:d8:ae:88:
7f:44:c3:d2:92:49:2e:f8:31:67:e7:d2:96:6f:2f:
77:53:13:c5:9f:8a:63:3d:20:7f:f5:b8:2c:b5:e1:
13:f9:34:b2:53:8d:eb:00:3b:1c:08:e5:c1:2e:07:
d0:48:ea:4e:de:a8:f9:fb:44:01:bd:ff:d8:ff:80:
02:28:1e:62:f3:3a:de:f6:90:d1:6a:ba:90:5c:2d:
b3:63:bc:75:1c:a3:00:04:05:b2:46:3e:5e:7c:33:
db:4f:c2:da:6c:7d:76:71:60:d8:84:03:9e:e0:ea:
8b:21:06:fb:ec:f9:1b:9e:1d:fb:f3:4d:63:c9:95:
d9:ef:8d:0a:cc:4d:07:28:d5:66:4a:f6:83:99:82:
b5:7c:0d:1a:41:ab:8f:db:c2:e0:01:db:46:c2:0c:
d4:41:67:66:2e:63:fa:85:85:24:5d:87:ef:3f:69:
da:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EE:CC:FD:73:C8:CE:3A:91:B3:62:FA:6D:DD:0F:88:38:53:91:C2
X509v3 Authority Key Identifier:
keyid:8D:1C:D5:C0:B8:C5:A3:A2:59:C7:1A:A2:93:76:6C:8C:F6:70:83:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/3230302e3231392e302e302f32342d3234203d3e20323731303137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.219.0.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:2d:ce:d6:c1:e5:3e:a7:16:e2:82:70:e9:0f:43:30:12:4c:
38:e8:74:f2:4a:ed:db:74:aa:89:20:22:4d:59:da:e6:00:c5:
e4:a8:02:d3:95:83:7f:6c:a0:e4:f4:1d:d1:fd:35:4c:7a:3a:
1c:0d:e0:8d:fe:bf:cc:c9:86:e9:33:e3:18:a2:35:8a:e6:e6:
86:48:be:61:6b:7a:b0:be:96:2e:0a:48:b3:3a:be:36:b2:b0:
10:6b:00:6c:79:db:80:37:64:29:e4:aa:36:91:b0:7b:32:b3:
02:c9:e1:31:d9:35:aa:04:1f:b1:c7:36:b2:3b:82:72:d7:b4:
46:8c:b1:43:51:75:76:3e:4d:76:99:66:c1:84:73:97:0b:74:
2c:b1:a6:6b:70:1f:94:db:21:e0:e4:97:56:d4:1a:2e:40:17:
55:30:fe:ec:8a:ca:d7:67:42:38:fe:30:96:0c:1c:77:88:df:
c7:96:92:f0:d2:28:13:8b:86:4a:8e:5f:50:ab:5f:51:11:4c:
67:f5:f7:59:08:d0:50:ad:aa:fd:20:88:02:a5:cd:1e:99:c0:
33:e2:7a:3e:8b:0f:44:c7:97:13:16:c4:61:cf:88:50:98:0b:
df:55:6a:d7:6d:ac:88:a6:7e:76:85:1c:76:7f:dc:1c:10:09:
5e:43:67:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 18 22:24:13 2025 by rpki-client on console.sobornost.net