Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/3230302e3231392e312e302f32342d3234203d3e20323731303137.roa
File: 3230302e3231392e312e302f32342d3234203d3e20323731303137.roa (raw, json)
Hash identifier: iJKPsDQ01pnFAi+TbdZ/UpM0Zxk2lVqpjuJ1DPLXXyc=
Subject key identifier: 2F:4F:5E:04:8F:40:AD:3F:F4:56:C8:A1:B2:13:37:8C:F7:7A:99:61
Certificate issuer: /CN=8D1CD5C0B8C5A3A259C71AA293766C8CF670835E
Certificate serial: 11E2C0DDBDF96CADF326518135549DC1EB3CF1D1
Authority key identifier: 8D:1C:D5:C0:B8:C5:A3:A2:59:C7:1A:A2:93:76:6C:8C:F6:70:83:5E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/3230302e3231392e312e302f32342d3234203d3e20323731303137.roa
Signing time: Thu 06 Mar 2025 15:37:31 +0000
ROA not before: Thu 06 Mar 2025 15:32:31 +0000
ROA not after: Thu 05 Mar 2026 15:37:31 +0000
asID: 271017
IP address blocks: 200.219.1.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:e2:c0:dd:bd:f9:6c:ad:f3:26:51:81:35:54:9d:c1:eb:3c:f1:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D1CD5C0B8C5A3A259C71AA293766C8CF670835E
Validity
Not Before: Mar 6 15:32:31 2025 GMT
Not After : Mar 5 15:37:31 2026 GMT
Subject: CN=2F4F5E048F40AD3FF456C8A1B213378CF77A9961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:82:a6:d4:e8:7f:d9:02:74:90:cd:18:1e:6a:
cf:f7:87:86:55:dc:70:3f:77:b0:3e:e3:bf:31:9c:
35:db:5a:97:4c:50:d8:bf:27:86:f9:c4:d4:cf:08:
2a:ae:e3:94:81:e6:ee:86:db:fe:f2:1d:b4:b4:c1:
08:89:66:47:00:ba:ed:2e:86:04:c2:0c:51:72:9d:
8d:c6:10:2d:51:cb:8c:a7:a8:e2:59:3d:53:9c:b0:
8f:6f:84:12:0b:92:86:1c:30:78:f8:64:a8:21:17:
3c:c2:ac:6f:a8:7a:51:b6:c6:71:36:91:8b:e1:ad:
f6:a1:a6:97:b3:51:72:68:c7:2f:40:2c:cd:06:8c:
96:5a:a9:6a:d8:fe:60:ae:10:f1:88:8f:85:e5:98:
76:88:07:9b:d9:6d:77:af:87:9d:c6:30:14:da:d5:
26:0d:1d:83:50:6a:42:0f:12:b9:5a:7e:5a:29:17:
ba:e5:ea:98:79:68:df:9f:34:52:25:03:16:c6:91:
22:e3:23:90:8f:10:63:c7:2b:1e:c5:09:b5:9f:54:
dd:1a:4f:6e:74:a7:7b:39:2e:c0:29:1e:42:71:9f:
c7:c7:2e:4e:d7:bf:6f:c2:94:fc:12:93:49:11:e4:
8c:c6:fd:8a:7c:26:35:16:8a:56:5f:83:41:8d:4c:
ec:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4F:5E:04:8F:40:AD:3F:F4:56:C8:A1:B2:13:37:8C:F7:7A:99:61
X509v3 Authority Key Identifier:
keyid:8D:1C:D5:C0:B8:C5:A3:A2:59:C7:1A:A2:93:76:6C:8C:F6:70:83:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/3230302e3231392e312e302f32342d3234203d3e20323731303137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.219.1.0/24
Signature Algorithm: sha256WithRSAEncryption
83:c4:ac:f7:2a:0d:f2:d7:25:c1:47:aa:b9:55:fd:7d:85:56:
d2:be:35:67:c4:51:d5:f0:9c:c7:2f:b0:ed:88:fc:ef:49:14:
98:1f:38:06:3d:69:cf:63:8e:16:3a:71:d9:27:75:25:e0:3e:
f2:d8:4b:61:6e:b9:41:99:0c:dc:74:14:ee:0d:2e:41:3e:f5:
3d:29:eb:e8:51:23:d5:e6:8c:91:60:3f:f1:d7:ff:68:53:3e:
ff:da:86:3d:1d:55:88:7f:28:85:02:2e:e8:55:55:6c:ff:88:
ba:a2:a4:2b:9b:f1:5f:cd:b8:22:ed:3f:e1:5b:e4:81:44:d9:
bb:66:14:7f:9c:81:aa:93:8e:24:e7:85:de:b8:12:75:fc:fb:
f4:9e:d0:7a:09:4b:de:ef:86:0e:31:0e:b5:82:9f:8d:10:b2:
7d:c8:c2:71:81:0f:aa:0a:93:8e:db:81:58:6b:37:82:be:1f:
03:88:54:11:3a:44:40:f3:2c:51:e6:37:b0:18:77:e4:02:d7:
24:57:0e:79:57:1b:2f:24:7e:3c:00:d9:2f:48:54:d9:c0:3f:
2f:3a:03:02:62:d6:90:16:9f:3a:25:a2:ff:c2:8e:4e:8c:04:
ca:24:be:e1:91:7e:29:a3:53:80:72:5c:5a:10:17:1a:69:21:
87:eb:20:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 18 22:24:13 2025 by rpki-client on console.sobornost.net