Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/3230302e3231392e332e302f32342d3234203d3e20323731303137.roa
File: 3230302e3231392e332e302f32342d3234203d3e20323731303137.roa (raw, json)
Hash identifier: DPl+EvwzRr2+QlwBh7Co+/+7hmIrpDA0yS85eAng5Ic=
Subject key identifier: 10:93:21:0C:F8:5A:F6:25:7A:71:66:5D:82:59:BC:F4:13:D8:56:B2
Certificate issuer: /CN=8D1CD5C0B8C5A3A259C71AA293766C8CF670835E
Certificate serial: 3A8DD500AA2D9E839EAAB98398A64B105A998A79
Authority key identifier: 8D:1C:D5:C0:B8:C5:A3:A2:59:C7:1A:A2:93:76:6C:8C:F6:70:83:5E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/3230302e3231392e332e302f32342d3234203d3e20323731303137.roa
Signing time: Thu 06 Mar 2025 15:37:30 +0000
ROA not before: Thu 06 Mar 2025 15:32:30 +0000
ROA not after: Thu 05 Mar 2026 15:37:30 +0000
asID: 271017
IP address blocks: 200.219.3.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:8d:d5:00:aa:2d:9e:83:9e:aa:b9:83:98:a6:4b:10:5a:99:8a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D1CD5C0B8C5A3A259C71AA293766C8CF670835E
Validity
Not Before: Mar 6 15:32:30 2025 GMT
Not After : Mar 5 15:37:30 2026 GMT
Subject: CN=1093210CF85AF6257A71665D8259BCF413D856B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d8:be:e6:c3:5e:9e:fb:92:33:50:d2:da:5b:
f5:ee:b2:be:39:85:46:45:4e:e4:9a:c4:79:5d:d1:
db:74:ac:3a:90:66:49:58:b6:f6:e9:8c:1a:e9:62:
cd:72:04:37:80:0c:ac:ce:b8:6a:e3:6f:0a:19:cc:
93:9a:db:0f:98:79:22:10:03:85:8a:84:3c:22:72:
bb:fd:fe:5d:24:ba:2e:6e:d9:2e:61:0f:0b:9e:e1:
5b:40:45:26:4c:b9:75:68:04:02:d3:65:77:b6:cc:
3e:00:1a:6e:30:fe:f6:43:c2:76:1f:67:b0:a7:06:
8a:e4:03:f6:8d:55:ac:1a:3a:54:f2:0a:d7:29:0d:
79:e2:6d:4a:c3:6f:fd:f4:11:af:0a:49:3b:14:80:
f3:3e:6b:1e:ae:4b:34:a8:84:8d:7a:38:5c:b2:04:
ef:a6:72:2c:fc:d2:78:8b:ec:3f:fe:d2:27:dd:7c:
c4:7c:0e:1d:70:62:5d:fb:0f:af:80:50:e2:ce:8d:
8f:71:52:3c:1f:1b:17:f5:a7:6b:f5:4d:23:a1:e4:
f3:dc:67:7d:55:7a:50:d4:2f:c0:34:2e:be:7a:35:
9a:6b:fd:2f:eb:23:75:0e:9d:24:aa:72:73:20:82:
67:bd:bb:34:14:75:61:e6:59:bc:f7:34:c1:1f:e2:
02:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:93:21:0C:F8:5A:F6:25:7A:71:66:5D:82:59:BC:F4:13:D8:56:B2
X509v3 Authority Key Identifier:
keyid:8D:1C:D5:C0:B8:C5:A3:A2:59:C7:1A:A2:93:76:6C:8C:F6:70:83:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/3230302e3231392e332e302f32342d3234203d3e20323731303137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.219.3.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:5c:37:60:db:85:5f:b5:f2:35:80:7f:5e:5b:78:83:16:14:
9b:39:fa:2c:35:7d:fc:91:e6:ec:aa:a2:42:84:37:8d:eb:f7:
9c:0c:e6:3b:91:06:49:4e:8e:13:ba:91:e1:2a:c2:0d:ef:bd:
72:bb:3a:52:86:02:44:cb:09:af:72:9b:fb:0e:7f:bd:5e:87:
dc:e0:38:90:49:10:27:33:ad:0c:29:90:01:3d:16:ae:4f:ce:
ca:40:21:d1:84:84:d6:26:5a:c2:69:9a:de:73:93:ec:a3:97:
a3:be:71:e3:f3:f3:5f:ca:0a:ba:0c:06:f5:bf:7f:fb:61:33:
0e:89:17:e6:be:f1:8e:aa:51:74:5f:1a:cd:ae:cc:c8:a1:69:
c4:15:2f:d8:1b:b6:0c:e7:2a:20:8a:f3:8a:8e:d4:e2:80:09:
5a:27:87:b7:5c:a0:98:8c:7c:09:1a:fd:bb:41:30:6a:30:b8:
85:ea:eb:14:5f:ac:0d:70:8c:05:52:e0:2c:aa:d5:28:3d:48:
d7:72:5e:2a:8b:f5:14:fa:a7:5c:fc:32:b2:63:25:c7:32:85:
38:31:29:6a:f2:db:70:19:19:8f:21:32:12:bc:09:42:75:e5:
bf:8e:eb:70:93:b4:57:d9:e7:57:f4:e5:19:6c:ea:0b:0a:b9:
d0:43:dc:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 18 22:24:13 2025 by rpki-client on console.sobornost.net