Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/3137372e36362e3135332e302f32342d3234203d3e20323632343939.roa
File: 3137372e36362e3135332e302f32342d3234203d3e20323632343939.roa (raw, json)
Hash identifier: 7aOz+w3xh/vQfWkq3CR+i6MPO1ooiQlR1tcsgc8jFHY=
Subject key identifier: 66:DA:45:B9:F2:DD:C2:FB:62:05:53:48:C5:5B:2C:9B:04:6E:39:3F
Certificate issuer: /CN=58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8
Certificate serial: 69D2698EA738BFE1B71FCB9E881E94B66695F9FA
Authority key identifier: 58:A3:26:D8:64:65:3D:AE:8B:EF:3A:C4:1D:8B:9C:B7:0E:BD:D1:C8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/3137372e36362e3135332e302f32342d3234203d3e20323632343939.roa
Signing time: Wed 05 Mar 2025 19:00:00 +0000
ROA not before: Wed 05 Mar 2025 18:55:00 +0000
ROA not after: Wed 04 Mar 2026 19:00:00 +0000
asID: 262499
IP address blocks: 177.66.153.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:d2:69:8e:a7:38:bf:e1:b7:1f:cb:9e:88:1e:94:b6:66:95:f9:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8
Validity
Not Before: Mar 5 18:55:00 2025 GMT
Not After : Mar 4 19:00:00 2026 GMT
Subject: CN=66DA45B9F2DDC2FB62055348C55B2C9B046E393F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6e:f2:34:58:99:b2:3c:79:2e:00:b2:61:de:
5b:ad:a5:77:7f:cb:7d:6a:2e:8e:93:b4:d5:54:5b:
4e:2d:d0:20:a7:01:2b:1d:3e:aa:b1:3f:f4:a2:81:
f9:b0:93:10:34:14:ca:50:26:a6:9d:bc:f2:96:7c:
f0:6a:d8:ab:de:13:5e:0f:e5:d9:7f:2b:e8:2f:b1:
37:56:a5:16:5c:5c:f6:a8:0c:ab:29:38:d9:7a:0b:
f3:25:bb:e4:07:0c:5e:7a:e6:b3:8d:67:85:66:ca:
06:48:a6:ea:5c:6d:44:aa:9a:30:45:00:e6:3b:5a:
84:7d:f4:08:5d:65:40:a7:96:6b:6a:4a:11:c0:b0:
12:bc:3b:ca:1e:56:2d:3b:7c:2d:da:39:47:53:dc:
4c:61:36:7d:56:6e:67:44:04:76:1f:a9:31:98:66:
4f:42:b9:96:51:5d:5d:eb:63:4d:0c:13:c5:88:26:
d6:89:23:a3:5a:64:cb:4b:da:53:af:33:90:ef:9f:
04:75:dd:08:3b:56:f3:82:6d:b3:fc:39:1f:18:74:
71:63:70:08:4a:fc:8d:f3:a9:f5:96:75:48:ba:c6:
c1:65:2d:d4:48:da:d2:54:b7:04:72:9d:e6:c2:5b:
64:b6:cf:0f:3e:5b:48:bc:d6:b3:5a:62:5f:48:6a:
6a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DA:45:B9:F2:DD:C2:FB:62:05:53:48:C5:5B:2C:9B:04:6E:39:3F
X509v3 Authority Key Identifier:
keyid:58:A3:26:D8:64:65:3D:AE:8B:EF:3A:C4:1D:8B:9C:B7:0E:BD:D1:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/3137372e36362e3135332e302f32342d3234203d3e20323632343939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.66.153.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:24:82:66:3b:91:3c:7a:ac:87:48:c0:fd:1e:2f:f3:89:38:
06:62:94:16:a1:df:f3:23:70:5d:c5:d3:52:c1:81:8e:29:31:
45:b8:8a:ff:64:5e:35:ac:3c:94:0c:0b:86:80:56:5d:11:78:
cf:e4:46:b9:fa:2b:c4:ca:21:b1:b3:98:11:26:c5:d9:eb:ce:
82:47:6f:8e:67:fb:b7:09:6d:b6:36:31:d9:a4:64:7f:96:76:
25:51:8d:08:15:b5:29:fb:74:42:81:30:e5:aa:ac:3e:5c:10:
3c:36:85:59:60:29:95:39:c0:d7:0f:44:d1:88:a6:ef:63:b1:
fa:8e:df:e8:4d:60:b5:07:ef:e4:4f:91:64:e7:9f:1b:4e:c0:
08:cf:53:7e:36:7f:b3:b9:6e:9e:e3:94:d7:3f:31:d8:c2:fd:
be:08:22:89:32:fb:40:ff:b5:0d:04:fb:5e:f8:14:b1:e2:ac:
d0:e7:d0:86:31:99:c7:3e:56:d1:fd:a9:7f:16:2f:b7:b2:e4:
26:50:c3:a9:7f:ab:8d:d2:9d:9f:0a:21:1c:d9:58:fc:e0:45:
11:30:64:7d:18:df:8e:a8:a6:e7:7c:0a:e0:7d:9f:1f:a8:18:
4d:2f:b1:9f:c5:3c:fc:12:47:e1:d1:30:ec:05:17:3a:12:b9:
c7:bf:20:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:51:35 2025 by rpki-client