Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/3230302e3231392e322e302f32332d3233203d3e20323731303137.roa
File: 3230302e3231392e322e302f32332d3233203d3e20323731303137.roa (raw, json)
Hash identifier: 26RVyS6zeYYuXBgRnX6MsiG72VPGCQU0f98DwkcjN88=
Subject key identifier: 80:1D:1A:3A:B9:0E:F1:30:29:EC:79:D1:AF:CD:45:EA:33:F2:9A:BE
Certificate issuer: /CN=8D1CD5C0B8C5A3A259C71AA293766C8CF670835E
Certificate serial: 2BADF3312FFD7BB0856EC73F0B537AF939C139D7
Authority key identifier: 8D:1C:D5:C0:B8:C5:A3:A2:59:C7:1A:A2:93:76:6C:8C:F6:70:83:5E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/3230302e3231392e322e302f32332d3233203d3e20323731303137.roa
Signing time: Thu 06 Mar 2025 15:37:30 +0000
ROA not before: Thu 06 Mar 2025 15:32:30 +0000
ROA not after: Thu 05 Mar 2026 15:37:30 +0000
asID: 271017
IP address blocks: 200.219.2.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:ad:f3:31:2f:fd:7b:b0:85:6e:c7:3f:0b:53:7a:f9:39:c1:39:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D1CD5C0B8C5A3A259C71AA293766C8CF670835E
Validity
Not Before: Mar 6 15:32:30 2025 GMT
Not After : Mar 5 15:37:30 2026 GMT
Subject: CN=801D1A3AB90EF13029EC79D1AFCD45EA33F29ABE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fc:9a:c9:3f:c1:4c:b5:51:e8:99:d3:1e:14:
1f:c1:97:08:fd:f1:94:9d:d3:9a:8a:cc:6a:c9:dd:
af:3d:94:16:5b:74:65:9e:26:39:88:19:11:7c:8f:
83:d0:52:c6:6f:1f:2e:ee:0b:c9:79:1b:52:88:64:
03:4b:90:62:b4:54:ce:d3:1d:0e:79:1a:b1:8b:0c:
cb:b6:78:aa:2f:f5:88:f4:0b:87:a5:7d:ce:fb:32:
79:8b:c0:15:64:ac:d6:59:61:53:7d:a4:b4:6a:d4:
37:d8:4a:65:05:18:1d:d7:bb:ab:e0:fc:e9:a7:ca:
9d:13:e0:75:31:46:78:0f:96:9c:da:30:f9:48:e1:
9b:8d:57:01:ca:f8:c7:85:8a:95:3a:48:f8:0d:53:
ad:cd:9d:1c:e4:d4:a6:b1:54:41:8d:b1:66:52:6e:
c6:2c:9d:b3:32:26:1b:09:cf:ff:c2:86:d6:1e:2f:
19:28:91:6c:06:4f:da:08:8f:9d:31:6e:93:60:c1:
4f:12:fe:36:ab:3b:57:61:d2:d5:97:67:a7:42:c4:
3e:1b:e1:5e:d9:e8:e5:fd:4f:4c:c9:0a:1c:74:c9:
f8:05:f3:e1:15:57:ce:84:67:38:05:29:ef:a8:3f:
b2:5c:70:20:b3:c5:ac:bb:bc:ef:f0:7b:84:a9:b3:
8b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1D:1A:3A:B9:0E:F1:30:29:EC:79:D1:AF:CD:45:EA:33:F2:9A:BE
X509v3 Authority Key Identifier:
keyid:8D:1C:D5:C0:B8:C5:A3:A2:59:C7:1A:A2:93:76:6C:8C:F6:70:83:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/3230302e3231392e322e302f32332d3233203d3e20323731303137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.219.2.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:fb:6f:20:1f:f0:54:eb:e8:6f:e3:c6:3f:4e:95:1c:22:90:
45:e6:f6:cd:eb:b2:72:63:84:7a:a0:cc:0d:f5:a9:9b:d7:46:
01:62:33:e9:73:ed:a5:db:74:54:5d:ff:9e:4d:fb:cd:e6:1c:
03:ca:5f:43:25:de:42:90:ac:b4:11:af:25:dd:be:c8:88:d3:
ac:16:47:c5:f9:38:6e:e8:00:31:6f:74:56:38:51:0a:d6:0e:
70:49:4a:67:c6:25:18:dd:4e:ca:ed:bd:ec:f1:da:91:9e:ea:
b1:0f:03:05:e0:1c:24:a4:6e:64:6b:86:ea:ed:dd:1f:2a:ca:
7c:4a:de:f7:64:10:1d:60:e8:f6:a9:65:de:8f:9e:f8:2b:4f:
19:bf:7b:f8:55:45:d2:4b:13:b6:51:ea:3b:eb:ef:e4:1a:2c:
b3:3f:91:ce:cd:9b:56:03:c5:77:69:87:93:17:f2:f6:9a:54:
c9:66:92:bb:7a:09:59:c0:a4:f5:05:79:bb:2c:8b:e5:03:86:
46:2f:0f:4a:c1:69:ee:cb:53:11:f4:ca:78:7d:73:89:b3:6a:
0d:1f:fe:6e:d6:9c:2e:2a:22:fe:f4:c9:86:a6:ef:aa:5d:4e:
1e:92:07:2e:d6:d3:0c:89:92:2f:d2:8f:3a:ac:e8:ef:db:8b:
b5:cf:a0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 18 22:24:13 2025 by rpki-client on console.sobornost.net