Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/3230302e3231392e322e302f32342d3234203d3e20323731303137.roa
File: 3230302e3231392e322e302f32342d3234203d3e20323731303137.roa (raw, json)
Hash identifier: HrPw8BUStz7olESNpTyU0VRTlF3axkN2H0pGL8fV97U=
Subject key identifier: 97:98:2D:95:06:B5:BC:54:C8:32:47:33:5C:6C:41:40:DF:98:D2:C1
Certificate issuer: /CN=8D1CD5C0B8C5A3A259C71AA293766C8CF670835E
Certificate serial: 0CD3C2E796E17B73EB0226E24D6F5F7658C1A7EE
Authority key identifier: 8D:1C:D5:C0:B8:C5:A3:A2:59:C7:1A:A2:93:76:6C:8C:F6:70:83:5E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/3230302e3231392e322e302f32342d3234203d3e20323731303137.roa
Signing time: Thu 06 Mar 2025 15:37:31 +0000
ROA not before: Thu 06 Mar 2025 15:32:31 +0000
ROA not after: Thu 05 Mar 2026 15:37:31 +0000
asID: 271017
IP address blocks: 200.219.2.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:d3:c2:e7:96:e1:7b:73:eb:02:26:e2:4d:6f:5f:76:58:c1:a7:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D1CD5C0B8C5A3A259C71AA293766C8CF670835E
Validity
Not Before: Mar 6 15:32:31 2025 GMT
Not After : Mar 5 15:37:31 2026 GMT
Subject: CN=97982D9506B5BC54C83247335C6C4140DF98D2C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e7:ac:a2:e2:5c:40:a6:ec:07:4b:68:bc:dd:
e7:c9:a2:df:f6:fe:fb:f5:3f:ad:59:b7:9a:ea:de:
a5:a8:90:e5:78:ed:5e:c0:2c:f7:e9:d7:ec:b2:6b:
5b:b5:bd:87:06:37:de:fb:68:1c:98:a7:cd:89:01:
89:50:30:8b:2f:6f:95:77:47:63:1c:88:2e:0d:56:
62:fe:f0:0c:3b:39:b2:e2:0e:14:4a:89:f3:85:c8:
39:26:55:c4:1f:69:4a:ce:19:bf:0c:b5:dd:ad:e1:
55:ee:26:fa:2d:19:1c:d2:50:30:57:76:83:7c:14:
7c:1c:5f:97:de:74:62:c2:22:10:9c:53:99:43:44:
f0:2f:a2:36:86:c3:8f:82:90:9e:2d:9e:62:44:6e:
b6:bf:ed:ad:36:61:95:cb:0a:98:28:b1:31:57:2f:
b6:6a:f1:dc:7c:68:90:f6:6c:a8:12:03:65:e2:85:
8d:20:57:27:62:7f:42:a0:00:78:12:b8:17:f4:ec:
8d:71:df:7e:50:db:34:48:96:0d:44:3f:a4:e0:77:
f3:4e:f3:3c:64:47:77:ec:70:d0:95:c4:04:94:15:
e9:5e:4c:e7:7b:29:3a:aa:c1:d1:83:d9:01:51:7b:
85:1d:e6:f4:43:c1:3f:82:7d:2b:53:f4:83:ab:02:
56:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:98:2D:95:06:B5:BC:54:C8:32:47:33:5C:6C:41:40:DF:98:D2:C1
X509v3 Authority Key Identifier:
keyid:8D:1C:D5:C0:B8:C5:A3:A2:59:C7:1A:A2:93:76:6C:8C:F6:70:83:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/3230302e3231392e322e302f32342d3234203d3e20323731303137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.219.2.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:19:b8:39:d4:99:1c:9e:e9:1e:5a:03:12:b6:a0:5c:10:3d:
68:16:b1:8b:c3:97:a3:0f:9a:1c:26:39:ca:71:e1:73:95:78:
4a:f1:a0:70:d9:1f:45:26:75:aa:fd:a0:4b:f8:a7:28:3b:e8:
73:24:c2:e2:47:7c:46:4f:4d:01:e4:a2:c6:04:e2:b3:98:47:
d1:17:d8:31:45:06:70:0b:2c:32:29:2b:3d:6b:78:f4:05:6c:
64:fb:ba:d3:8f:4f:5a:bc:94:e3:95:cd:72:db:00:0e:9c:9b:
d9:6f:11:53:c0:fd:b9:b5:82:70:64:2a:ea:d1:d3:19:9e:4c:
ee:b1:a4:94:3e:59:d5:37:5e:85:a6:f0:ef:12:cd:ee:33:ab:
48:64:f0:07:00:8e:0d:e4:9a:78:2f:95:37:9f:3f:13:22:41:
44:c4:c0:84:97:46:a6:63:ea:ee:ad:c6:2e:96:e2:ac:d8:22:
ea:09:63:46:46:0d:b1:3c:b4:9c:43:03:d3:13:6b:c1:3b:d1:
cb:b7:64:58:88:c3:d8:b3:e4:ae:02:91:27:43:bd:c9:26:31:
62:1f:98:ee:e5:2f:0b:37:e8:b8:02:69:64:25:f0:3d:fd:3c:
34:ee:56:70:6a:c9:ff:e5:94:d1:1d:79:eb:24:5d:f5:5d:6f:
bf:75:8c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 18 22:24:13 2025 by rpki-client on console.sobornost.net